{"report_id":"64760848-c29a-4b7e-826b-7120f98d3ae4","version":6,"status":"done","tags":[],"date":"2024-09-24T17:28:04Z","url":{"schema":"http","addr":"www.eroticporns.com/porn/upskirt-videos/","fqdn":"www.eroticporns.com","domain":"eroticporns.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"www.eroticporns.com/porn/upskirt-videos/","fqdn":"www.eroticporns.com","domain":"eroticporns.com","tld":"com"},"title":"upskirt videos"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-07T07:59:45Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"ww1.good-trading.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"domain_registered":"2020-06-18","domain_rank":0,"first_seen":"2022-05-06 11:38:15","last_seen":"2024-09-22 07:50:13","alert_count":0,"request_count":3,"received_data":29597,"sent_data":1433,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cfr.news24.media","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"domain_registered":"2021-08-20","domain_rank":0,"first_seen":"2023-08-02 20:11:23","last_seen":"2024-09-23 06:27:45","alert_count":0,"request_count":2,"received_data":21673,"sent_data":935,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xml.thenetwork18.com","ip":{"addr":"174.137.133.17","port":0,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"domain_registered":"2019-06-06","domain_rank":141545,"first_seen":"2019-07-02 23:26:49","last_seen":"2024-09-23 11:48:26","alert_count":0,"request_count":4,"received_data":723,"sent_data":2190,"comment":"","tags":null,"fingerprints":null},{"fqdn":"e6.o.lencr.org","ip":{"addr":"23.36.76.243","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2020-06-29","domain_rank":0,"first_seen":"2024-06-07 08:35:09","last_seen":"2024-09-24 14:08:23","alert_count":0,"request_count":2,"received_data":1459,"sent_data":652,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ctrtraffic.me","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"domain_registered":"2022-05-05","domain_rank":0,"first_seen":"2022-05-05 18:48:09","last_seen":"2024-09-23 11:48:24","alert_count":0,"request_count":8,"received_data":7141,"sent_data":3837,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.bookmsg.com","ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2020-09-15","domain_rank":47495,"first_seen":"2020-11-24 15:56:32","last_seen":"2024-09-24 17:19:05","alert_count":0,"request_count":2,"received_data":2247,"sent_data":1127,"comment":"","tags":null,"fingerprints":null},{"fqdn":"btds.zog.link","ip":{"addr":"109.206.191.198","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2015-01-11","domain_rank":38469,"first_seen":"2019-10-07 23:35:03","last_seen":"2024-09-24 18:29:20","alert_count":0,"request_count":1,"received_data":519,"sent_data":1086,"comment":"","tags":null,"fingerprints":null},{"fqdn":"p.a64x.com","ip":{"addr":"104.21.19.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-07-27","domain_rank":0,"first_seen":"2023-07-27 15:12:45","last_seen":"2024-09-24 11:14:43","alert_count":0,"request_count":1,"received_data":673,"sent_data":1528,"comment":"","tags":null,"fingerprints":null},{"fqdn":"o.pki.goog","ip":{"addr":"216.58.211.3","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2016-06-13","domain_rank":0,"first_seen":"2024-04-24 13:44:57","last_seen":"2024-09-24 14:08:22","alert_count":0,"request_count":2,"received_data":1399,"sent_data":650,"comment":"","tags":null,"fingerprints":null},{"fqdn":"dessedcuression.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2023-05-08","domain_rank":0,"first_seen":"2023-05-14 11:32:57","last_seen":"2024-09-24 07:51:37","alert_count":0,"request_count":1,"received_data":0,"sent_data":597,"comment":"","tags":null,"fingerprints":null},{"fqdn":"de.forerungirdles.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-06-07","domain_rank":0,"first_seen":"2024-07-13 17:24:22","last_seen":"2024-09-23 11:48:28","alert_count":1,"request_count":1,"received_data":0,"sent_data":496,"comment":"","tags":null,"fingerprints":null},{"fqdn":"video.ktkjmp.com","ip":{"addr":"104.18.53.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-08-07","domain_rank":23778,"first_seen":"2020-10-02 10:52:19","last_seen":"2024-09-24 14:22:50","alert_count":0,"request_count":1,"received_data":983,"sent_data":446,"comment":"","tags":null,"fingerprints":null},{"fqdn":"click.mediacpc.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2012-12-25","domain_rank":241895,"first_seen":"2018-01-31 14:09:46","last_seen":"2024-09-23 11:48:27","alert_count":0,"request_count":4,"received_data":0,"sent_data":2191,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xml.rtbfactory.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2017-08-20","domain_rank":141066,"first_seen":"2017-09-07 20:39:42","last_seen":"2024-09-23 11:48:27","alert_count":0,"request_count":6,"received_data":0,"sent_data":3254,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.eroticporns.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-08-04","domain_rank":0,"first_seen":"2018-06-14 02:48:36","last_seen":"2024-09-20 22:12:03","alert_count":0,"request_count":22,"received_data":260543,"sent_data":11741,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn77-vid-mp4.xnxx-cdn.com","ip":{"addr":"195.181.166.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2017-08-25","domain_rank":50592,"first_seen":"2021-09-29 20:07:14","last_seen":"2024-09-12 22:24:56","alert_count":0,"request_count":1,"received_data":3146874,"sent_data":675,"comment":"","tags":null,"fingerprints":null},{"fqdn":"96deb6c755.6dd1167e04.com","ip":{"addr":"94.130.198.6","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2024-08-25","domain_rank":0,"first_seen":"2024-09-24 02:02:53","last_seen":"2024-09-24 11:53:08","alert_count":0,"request_count":4,"received_data":7447,"sent_data":9463,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xml.ctrtraffic.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2012-05-01","domain_rank":0,"first_seen":"2012-12-21 21:40:41","last_seen":"2024-09-23 11:48:27","alert_count":0,"request_count":4,"received_data":0,"sent_data":2169,"comment":"","tags":null,"fingerprints":null},{"fqdn":"imdn.pics","ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2023-09-14","domain_rank":0,"first_seen":"2023-09-14 16:55:44","last_seen":"2024-09-24 18:15:40","alert_count":0,"request_count":9,"received_data":40782,"sent_data":17439,"comment":"","tags":null,"fingerprints":null},{"fqdn":"thenetwork18.net","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"domain_registered":"2022-05-03","domain_rank":0,"first_seen":"2022-05-03 10:45:16","last_seen":"2024-09-23 11:48:25","alert_count":0,"request_count":42,"received_data":38092,"sent_data":21465,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sub.votreimc.com","ip":{"addr":"172.67.222.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2017-04-12","domain_rank":0,"first_seen":"2024-05-12 13:37:47","last_seen":"2024-09-23 11:48:25","alert_count":0,"request_count":25,"received_data":26051,"sent_data":12172,"comment":"","tags":null,"fingerprints":null},{"fqdn":"go.rmhfrtnd.com","ip":{"addr":"172.64.147.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2022-07-05","domain_rank":0,"first_seen":"2023-12-13 14:20:46","last_seen":"2024-09-24 17:14:35","alert_count":0,"request_count":2,"received_data":2834,"sent_data":1407,"comment":"","tags":null,"fingerprints":null},{"fqdn":"gbstlnd.com","ip":{"addr":"173.214.250.52","port":443,"asn":15317,"as":"SERVEREL-AS","country":"United States","country_code":"US"},"domain_registered":"2022-08-26","domain_rank":0,"first_seen":"2022-08-26 14:25:02","last_seen":"2024-09-24 16:18:25","alert_count":0,"request_count":8,"received_data":3586292,"sent_data":4932,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xml.clickmi.net","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-08-22","domain_rank":0,"first_seen":"2022-11-17 01:09:57","last_seen":"2024-09-23 11:48:27","alert_count":0,"request_count":8,"received_data":0,"sent_data":4380,"comment":"","tags":null,"fingerprints":null},{"fqdn":"rtbrenab.com","ip":{"addr":"116.202.60.226","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2023-07-17","domain_rank":0,"first_seen":"2023-07-17 17:41:28","last_seen":"2024-09-24 04:33:59","alert_count":0,"request_count":10,"received_data":43373,"sent_data":41107,"comment":"","tags":null,"fingerprints":null},{"fqdn":"video.rmhfrtnd.com","ip":{"addr":"172.64.147.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2022-07-05","domain_rank":0,"first_seen":"2024-01-23 23:37:15","last_seen":"2024-09-24 04:34:00","alert_count":0,"request_count":1,"received_data":267720,"sent_data":447,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ww-7.good-trading.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"domain_registered":"2020-06-18","domain_rank":0,"first_seen":"2024-06-19 18:15:01","last_seen":"2024-09-24 19:27:39","alert_count":0,"request_count":3,"received_data":29577,"sent_data":1438,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xml.infinity-info.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"1996-04-17","domain_rank":0,"first_seen":"2014-11-09 03:36:21","last_seen":"2024-09-23 11:48:27","alert_count":0,"request_count":10,"received_data":0,"sent_data":5606,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xml.trackifyy.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2023-12-04","domain_rank":0,"first_seen":"2024-05-12 13:37:52","last_seen":"2024-09-23 11:48:26","alert_count":0,"request_count":4,"received_data":0,"sent_data":2196,"comment":"","tags":null,"fingerprints":null},{"fqdn":"r11.o.lencr.org","ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2020-06-29","domain_rank":0,"first_seen":"2024-06-07 07:43:57","last_seen":"2024-09-24 14:07:47","alert_count":0,"request_count":38,"received_data":33726,"sent_data":12426,"comment":"","tags":null,"fingerprints":null},{"fqdn":"c99574de6f.dd4ef151bb.com","ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-08-25","domain_rank":0,"first_seen":"2024-09-21 05:20:36","last_seen":"2024-09-24 08:31:22","alert_count":0,"request_count":5,"received_data":881878,"sent_data":2328,"comment":"","tags":null,"fingerprints":null},{"fqdn":"accounts.google.com","ip":{"addr":"64.233.162.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":81,"first_seen":"2016-03-20 13:44:49","last_seen":"2024-09-24 15:00:25","alert_count":0,"request_count":3,"received_data":8027,"sent_data":1745,"comment":"","tags":null,"fingerprints":null},{"fqdn":"na.rolpenszimocca.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2023-06-26","domain_rank":0,"first_seen":"2024-06-28 10:20:58","last_seen":"2024-09-23 11:48:27","alert_count":2,"request_count":2,"received_data":0,"sent_data":995,"comment":"","tags":null,"fingerprints":null},{"fqdn":"nereserv.com","ip":{"addr":"168.119.25.102","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2020-12-21","domain_rank":40015,"first_seen":"2020-12-21 12:07:56","last_seen":"2024-09-24 17:19:03","alert_count":0,"request_count":3,"received_data":960,"sent_data":1722,"comment":"","tags":null,"fingerprints":null},{"fqdn":"w7.eurosptp.com","ip":{"addr":"213.186.33.19","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"2006-06-30","domain_rank":0,"first_seen":"2020-01-21 13:24:13","last_seen":"2024-09-23 11:48:23","alert_count":0,"request_count":5,"received_data":30152,"sent_data":2739,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cgb.news24.media","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"domain_registered":"2021-08-20","domain_rank":0,"first_seen":"2023-07-20 14:09:07","last_seen":"2024-09-23 11:48:24","alert_count":0,"request_count":2,"received_data":21668,"sent_data":935,"comment":"","tags":null,"fingerprints":null},{"fqdn":"latest-522727.tgel2ebtx.ru","ip":{"addr":"206.54.181.250","port":443,"asn":35415,"as":"Webzilla B.V.","country":"United States","country_code":"US"},"domain_registered":"2023-02-27","domain_rank":0,"first_seen":"2024-06-18 23:07:24","last_seen":"2024-09-23 12:26:23","alert_count":0,"request_count":1,"received_data":759,"sent_data":582,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xml.zaimads.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2020-06-23","domain_rank":311619,"first_seen":"2022-01-11 14:59:46","last_seen":"2024-09-23 11:48:27","alert_count":0,"request_count":2,"received_data":0,"sent_data":1090,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cryingforthemoo.info","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-04-01","domain_rank":0,"first_seen":"2024-07-05 21:12:38","last_seen":"2024-09-23 11:48:30","alert_count":0,"request_count":1,"received_data":0,"sent_data":495,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fp.metricswpsh.com","ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2021-10-29","domain_rank":0,"first_seen":"2022-04-22 13:20:32","last_seen":"2024-09-24 11:00:28","alert_count":0,"request_count":1,"received_data":389,"sent_data":533,"comment":"","tags":null,"fingerprints":null},{"fqdn":"storage.multstorage.com","ip":{"addr":"104.21.30.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-09-22","domain_rank":0,"first_seen":"2023-09-22 14:56:00","last_seen":"2024-09-24 17:30:01","alert_count":0,"request_count":1,"received_data":2599,"sent_data":529,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bts.a11k.com","ip":{"addr":"109.206.163.116","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-06-23","domain_rank":0,"first_seen":"2023-06-29 16:17:08","last_seen":"2024-09-24 07:56:04","alert_count":0,"request_count":3,"received_data":4246,"sent_data":17197,"comment":"","tags":null,"fingerprints":null},{"fqdn":"js.cabnnr.com","ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2021-08-30","domain_rank":37463,"first_seen":"2021-08-30 14:50:21","last_seen":"2024-09-24 17:54:07","alert_count":0,"request_count":1,"received_data":18849,"sent_data":419,"comment":"","tags":null,"fingerprints":null},{"fqdn":"e5.o.lencr.org","ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2020-06-29","domain_rank":0,"first_seen":"2024-06-07 07:39:25","last_seen":"2024-09-24 14:14:16","alert_count":0,"request_count":1,"received_data":729,"sent_data":326,"comment":"","tags":null,"fingerprints":null},{"fqdn":"redirect3.online","ip":{"addr":"104.21.55.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-09-17","domain_rank":0,"first_seen":"2021-09-17 15:12:31","last_seen":"2024-09-23 11:48:25","alert_count":0,"request_count":30,"received_data":28701,"sent_data":14479,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.ad-good.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"domain_registered":"2020-10-27","domain_rank":0,"first_seen":"2023-04-30 05:57:26","last_seen":"2024-09-23 11:48:24","alert_count":0,"request_count":2,"received_data":39712,"sent_data":868,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xml.clixvista.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2017-10-19","domain_rank":103439,"first_seen":"2018-02-07 08:22:53","last_seen":"2024-09-23 11:48:27","alert_count":0,"request_count":8,"received_data":0,"sent_data":4452,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xml.adtube.media","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-08-22","domain_rank":0,"first_seen":"2023-05-20 03:41:48","last_seen":"2024-09-23 11:48:27","alert_count":0,"request_count":10,"received_data":0,"sent_data":5452,"comment":"","tags":null,"fingerprints":null},{"fqdn":"olivedinflats.space","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2020-04-16","domain_rank":0,"first_seen":"2020-07-04 10:01:50","last_seen":"2024-09-22 07:50:17","alert_count":0,"request_count":1,"received_data":0,"sent_data":513,"comment":"","tags":null,"fingerprints":null},{"fqdn":"8159323a9c.d064229052.com","ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-08-25","domain_rank":0,"first_seen":"2024-09-21 05:51:49","last_seen":"2024-09-24 02:02:53","alert_count":0,"request_count":1,"received_data":343,"sent_data":839,"comment":"","tags":null,"fingerprints":null},{"fqdn":"smkezc.com","ip":{"addr":"185.162.85.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-02-05","domain_rank":0,"first_seen":"2024-04-01 18:48:06","last_seen":"2024-09-23 10:38:09","alert_count":8,"request_count":8,"received_data":4283,"sent_data":4566,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ad-good.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"domain_registered":"2020-10-27","domain_rank":0,"first_seen":"2015-06-27 02:53:04","last_seen":"2024-09-23 11:48:25","alert_count":0,"request_count":16,"received_data":14714,"sent_data":7724,"comment":"","tags":null,"fingerprints":null},{"fqdn":"js.capndr.com","ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2021-08-30","domain_rank":316718,"first_seen":"2021-08-30 14:51:01","last_seen":"2024-09-24 02:02:52","alert_count":0,"request_count":1,"received_data":399,"sent_data":408,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xml.flurryad.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2017-06-10","domain_rank":187447,"first_seen":"2018-07-06 18:19:58","last_seen":"2024-09-23 11:48:26","alert_count":0,"request_count":16,"received_data":0,"sent_data":8790,"comment":"","tags":null,"fingerprints":null},{"fqdn":"r10.o.lencr.org","ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2020-06-29","domain_rank":0,"first_seen":"2024-06-06 21:45:11","last_seen":"2024-09-24 14:07:48","alert_count":0,"request_count":30,"received_data":26624,"sent_data":9810,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xml.adxfactory.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2015-12-20","domain_rank":107207,"first_seen":"2016-02-03 12:58:51","last_seen":"2024-09-23 11:48:27","alert_count":0,"request_count":10,"received_data":0,"sent_data":5440,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xml.eximdigital.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2016-09-21","domain_rank":92161,"first_seen":"2016-10-10 14:09:24","last_seen":"2024-09-23 11:48:27","alert_count":0,"request_count":12,"received_data":0,"sent_data":6778,"comment":"","tags":null,"fingerprints":null},{"fqdn":"js.wpshsdk.com","ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2021-06-04","domain_rank":12130,"first_seen":"2021-06-04 15:50:00","last_seen":"2024-09-24 08:03:25","alert_count":0,"request_count":1,"received_data":34678,"sent_data":416,"comment":"","tags":null,"fingerprints":null},{"fqdn":"kaminari.systems","ip":{"addr":"31.220.27.154","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2022-10-31","domain_rank":0,"first_seen":"2022-10-31 14:47:03","last_seen":"2024-09-24 02:57:11","alert_count":0,"request_count":2,"received_data":51590,"sent_data":1121,"comment":"","tags":null,"fingerprints":null},{"fqdn":"in16.zog.link","ip":{"addr":"109.206.175.85","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2015-01-11","domain_rank":76485,"first_seen":"2018-07-31 23:03:54","last_seen":"2024-09-24 08:45:14","alert_count":0,"request_count":2,"received_data":542,"sent_data":4716,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xml.adflyer.media","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-08-22","domain_rank":0,"first_seen":"2022-10-10 09:20:21","last_seen":"2024-09-23 11:48:27","alert_count":0,"request_count":12,"received_data":0,"sent_data":6520,"comment":"","tags":null,"fingerprints":null},{"fqdn":"gpshtb.com","ip":{"addr":"173.214.244.181","port":443,"asn":15317,"as":"SERVEREL-AS","country":"United States","country_code":"US"},"domain_registered":"2022-11-21","domain_rank":0,"first_seen":"2022-11-21 11:51:33","last_seen":"2024-09-24 16:18:27","alert_count":0,"request_count":3,"received_data":1062,"sent_data":1449,"comment":"","tags":null,"fingerprints":null},{"fqdn":"rexpush.club","ip":{"addr":"199.182.164.165","port":443,"asn":15317,"as":"SERVEREL-AS","country":"United States","country_code":"US"},"domain_registered":"2023-05-11","domain_rank":0,"first_seen":"2023-05-11 23:18:32","last_seen":"2024-09-24 01:24:28","alert_count":0,"request_count":3,"received_data":257597,"sent_data":1885,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ykrvt.bestssp.top","ip":{"addr":"172.67.196.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2022-12-30","domain_rank":0,"first_seen":"2023-06-02 01:21:39","last_seen":"2024-09-24 01:24:29","alert_count":0,"request_count":3,"received_data":2053,"sent_data":1530,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cmpuwps.com","ip":{"addr":"94.130.197.239","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2024-05-30","domain_rank":0,"first_seen":"2024-05-31 20:13:09","last_seen":"2024-09-24 10:25:59","alert_count":0,"request_count":1,"received_data":3195,"sent_data":490,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xml.zentrixads.com","ip":{"addr":"173.239.53.20","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"domain_registered":"2023-12-04","domain_rank":0,"first_seen":"2023-12-26 08:47:59","last_seen":"2024-09-23 11:48:26","alert_count":0,"request_count":4,"received_data":611,"sent_data":2200,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xml.adzgame.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2017-10-19","domain_rank":67328,"first_seen":"2017-11-07 22:51:26","last_seen":"2024-09-23 11:48:27","alert_count":0,"request_count":12,"received_data":0,"sent_data":6600,"comment":"","tags":null,"fingerprints":null},{"fqdn":"syndication.realsrv.com","ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2019-02-07","domain_rank":9112,"first_seen":"2019-07-03 23:39:52","last_seen":"2024-09-24 02:42:06","alert_count":0,"request_count":16,"received_data":19116,"sent_data":29124,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xml.xmladsystem.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2015-02-21","domain_rank":819991,"first_seen":"2015-03-24 11:43:08","last_seen":"2024-09-23 11:48:27","alert_count":0,"request_count":2,"received_data":0,"sent_data":1092,"comment":"","tags":null,"fingerprints":null},{"fqdn":"creative.rmhfrtnd.com","ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-07-05","domain_rank":0,"first_seen":"2023-12-13 14:20:47","last_seen":"2024-09-23 23:16:22","alert_count":0,"request_count":2,"received_data":181989,"sent_data":1168,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-09-24","alert":"Sinkholed","trigger":"smkezc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-09-24","alert":"Sinkholed","trigger":"smkezc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-09-24","alert":"Sinkholed","trigger":"smkezc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-09-24","alert":"Sinkholed","trigger":"rolpenszimocca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-09-24","alert":"Sinkholed","trigger":"smkezc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-09-24","alert":"Sinkholed","trigger":"rolpenszimocca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-09-24","alert":"Sinkholed","trigger":"forerungirdles.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-09-24","alert":"Sinkholed","trigger":"smkezc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-09-24","alert":"Sinkholed","trigger":"smkezc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-09-24","alert":"Sinkholed","trigger":"smkezc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-09-24","alert":"Sinkholed","trigger":"smkezc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ww1.good-trading.com/?good-e","fqdn":"ww1.good-trading.com","domain":"good-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"0f58cd0a03b2ea1ab6e0f91f1774c03e","sha1":"4a046faed5205d8810d6083c0c01959ccb0a3a24","sha256":"40a434ac1929c0240153c7a8469ecad4a6111808ab49fdf97c1c4123be81e257","sha512":"a0e72da910839dcb5ca6eda675bb86f8e87cf71b54405753dec5aa54f18f5ac12f50d620729dd7a1797ebc376866b646e9e0545d86b83139f4a35be72861ef20","ssdeep":"","tlshash":"ccc012a9ada1649579a66139d337a104b272411660048f847c0d20248fd36f46d024e1","size":188,"data":"","first_seen":"2023-03-10T17:35:04Z","last_seen":"2024-11-04T19:11:47.961735Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rexpush.club/js/s_17e2ee4ffcf2147dce9e2296dcf79c6c.min.js?tag=3333\u0026attempt=0\u0026rnd=934724856\u0026lnd=adult_video_2\u0026v=2\u0026token=2f1eeeafc1c1aa0ba0685904cfada495\u0026click_id=a2_16209272082399971748_627551_2_0\u0026sub1=a627551\u0026sub2=%24%7Bsub2%7D\u0026sub3=%24%7Bsub3%7D\u0026tb=\u0026t_rdr=","fqdn":"rexpush.club","domain":"rexpush.club","tld":"club"},"ip":{"addr":"199.182.164.165","port":443,"asn":15317,"as":"SERVEREL-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6517147a8a4ee6494da82d8207ba79dc","sha1":"9c45a0b08bb513bec68a4be172fe08e0f12e2ecd","sha256":"d529abfb7d9e59477839080a448ea22060d8c25290f97f7109a9889f48010203","sha512":"53c964234dbd54d70a8f36be4fc6bbd66a33a21b50bddccde462a3a47869c69d7fb02d10b7af96bf41855a9f7587d00e801f96804b502b392e0b7c702368e2e4","ssdeep":"1536:ArrOHqFCyK+hANLTKZbgFxMMkEn1qnxfa42aI9KADNz572mn8I6:TcC1+hACkOZEQx4XJDn2","tlshash":"2b83f8cdfac3b52a439360b9547f3106ba3f7818984d4454f669e5d97cba00a823bf78","size":85570,"data":"","first_seen":"2024-09-28T07:59:48.77073Z","last_seen":"2024-09-28T07:59:48.77073Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.capndr.com/advertising.js","fqdn":"js.capndr.com","domain":"capndr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpshsdk.com/npc/sdk/push.m.js?v=1","fqdn":"js.wpshsdk.com","domain":"wpshsdk.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad88062063be5bf189b3a9e45af77e7a","sha1":"0b17f39ef23bf03e0a1fc95df405d87f58bb11ad","sha256":"7e37ff193f8ff270be63999a72f18ee2dc05833e5dac26a6e7e925c476ea3296","sha512":"71a59c28241d46e3e076ac37cf2181eabc758c71c051c71e2859776843f92f6db83e79b088c38717868d225df944f9225185827ebefd2b27a3443e5352157f53","ssdeep":"768:IjOqKJ77x8U1pXTf2O1gU5W4XXHx2f++fwkS9FDbIv:/5JBDVf2O1giWmiFfwte","tlshash":"cdf21bc97390b2b0469734725c7fa3977337122ab4099904f256ab80786cedfd326e75","size":34291,"data":"","first_seen":"2024-07-23T21:01:05Z","last_seen":"2024-10-04T11:24:49.248368Z","times_seen":676,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imdn.pics/m/p/0/770/770824/P1r9hLS2.html?\u0026campaign_id=236776\u0026utm1=tcb\u0026__GEOIP_COUNTRY_SHORT__=%7B%7B+__GEOIP_COUNTRY_SHORT__+%7D%7D\u0026DOMAIN=3txxx.com\u0026__IP2L_MOBILE__=%7B%7B+__IP2L_MOBILE__+%7D%7D\u0026BROWSER_FAMILY=%5BBROWSER_FAMILY%5D\u0026ad_sub=71860570\u0026__BROWSER_FAMILY__=%7B%7B+__BROWSER_FAMILY__+%7D%7D\u0026CAMPAIGN_ID=236776\u0026PRICING_MODEL=cpm\u0026PRICE=0.0020\u0026OS_TYPE=%5BOS_TYPE%5D\u0026priority=%5BPRIORITY%5D\u0026pricing_model=cpm\u0026utm4=0-10346131-0\u0026click_event_url=https%3A%2F%2Fbts.a11k.com%2Fin%2Ftclick%2F%3Fkatds_ep%3DGdxUfEKfQdIbyN4pPn33PRoSsf_ui7NMJJha3h2v7XoD0wwHf-NY39Vno8vJrRWiDDyKWFBw63rsjOC_L7b3WTNnCkdRvMyRmoFBGYmpllnlxe9SIK6ikFtBFz0TLaYdp_sfUOsDQ_edMPCX2XO8dQaPME0wBiIIGy6HqHF197ib73l7TSmoZ_6F7uqmhHO6BaNvLdxefOvJalx1iglO2WeFXfs_80XtW6ju5Hw92gMutzChMCo4FLnQLza8oFas2RRrDSJNG0jnNt5LmJoaJPA3xra5msxHWUNBId2p-iA56D73PLRJq-MElsZz7X6te_Na3aGAD8mpWz70fh8UdV6klm3tWu-5z73U3g-EFQRMvWWwO0WFtyc5dT5_pYhXcQaPbZyiw9vhmKG8nvJDjKzk3wxpTFHPoGfRs-Y3E-d3NtGFN3Dxj8Dt5-xnUxRw6X1ab1R-n_Mk02dSNN6L1iSyu1RHdIFhU0hu936-O7QE9uxtPTj9JQ-3Rzk1KdW3ZVodbGfPqxWSIkBEvZp_sfdci96gIvrHGKXch98CKFQZMC7mQqPZds5FUXMXhHYQsbO_GhwuJzXn8b54kROnKxhumftUVpq5YluHF3TLcLt37sg7WRmgJfqj3F1C39jUuzQirKvuRZCf6nyIpXlZ7KM_YQFvf3xrTqC1zPJW-_KMNpYQlBzEWUfkSny_U5chT47Fz_m_bcNnpyFwHTKSIVesHYhYab0-46F1xayPWLJFQ7MENRh0wqvM1QToE5xaTaHBU9R65lbfSai5A20mWXqx1ET4h8SMMP57joW9IqB9hB_HNTa4NjDi5MQIwYYjpf-V631pKVK_XM0QZlKV4arCCKw5KlONTdC42wa984FeAGXlNyJnWttPq_CEeSfSvUMbU5FrV1dFGjDQgPr_703ylpPuj7Y7-Rr4XMpxG-HBGgmYiU_E4YBHsA%26bid%3D%24%7BAUCTION_PRICE%7D\u0026MOBILE_BRAND=%5BMOBILE_BRAND%5D\u0026out_name=236776%7C83954%7Ccpm%7C0.0020%7C%24+0.0020\u0026__OS_TYPE__=%7B%7B+__OS_TYPE__+%7D%7D\u0026pricebox_price=0.0010\u0026__OS_FAMILY__=%7B%7B+__OS_FAMILY__+%7D%7D\u0026utm3=249-1353416-46616\u0026id_zone=%5Bidzone%5D\u0026COUNTRY_ISO_CODE=%5BCOUNTRY_ISO_CODE%5D\u0026price=0.0020\u0026click_id=30a4de03-108d-45ef-8397-bdcff162a5e3\u0026OS_FAMILY=%5BOS_FAMILY%5D\u0026utm2=878669509-100\u0026bidding_price=0.0020\u0026site=%7B%7B+site+%7D%7D","fqdn":"imdn.pics","domain":"imdn.pics","tld":"pics"},"ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.good-trading.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"ww1.good-trading.com","domain":"good-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"632112643e58607e22660133e53f65cee0b12251bd07e150409edc99a6e4fe5073fee9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-04T23:45:55.179533Z","times_seen":292521,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtbrenab.com/get/?go=1\u0026data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImIiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MTQ5NiwidHlwZSI6InBvcCIsImlkem9uZSI6bnVsbCwiYWRfdGFncyI6InVwc2tpcnQlMkN2aWRlb3MlMkNwb3JuJTJDcG9ybiUyQ21vdmllcyUyQ2ZyZWUlMkNwb3JuJTJDZnJlZSUyQ3Bvcm4lMkNtb3ZpZXMlMkNzZXglMkNwb3JubyUyQ2ZyZWUlMkNzZXglMkN0dWJlJTJDcG9ybiUyQ3R1YmUlMkN2aWRlb3MlMkNmdWxsJTJDcG9ybiUyQ3h4bnglMkN4bnh4eCUyQ3h4eCUyQ3B1c3N5JTJDdmlkZW9zJTJDdXBza2lydCUyQ3hwb3JuJTJDZmlyc3QlMkNsaXZlJTJDc2V4JTJDcG9ybiUyQ3ZpZGVvcyUyQ2Vyb3RpYyUyQ3Bvcm4lMkNmdWNrJTJDb3IlMkN4eHglMkNwb3JubyUyQ2dvb2QlMkNicmF6emVycyUyQ3NleCwiLCJsYWJlbHMiOiIiLCJhbGxvd2VkX2xhYmVscyI6IiIsInRpdGxlIjoiIiwic3ViaWQiOiIyNjgxNDc5MjIiLCJyZWZyZXNoIjoxLCJ1dG0xIjoiIiwidXRtMiI6IiIsInV0bTQiOiIiLCJzcG90X2lkIjoxNDExMDQyLCJtdWx0aXBsZSI6ZmFsc2UsImlzX2lmcmFtZSI6ZmFsc2UsInJlZmRvbWFpbiI6IiIsInBsIjowLCJzdHJhdGFnZW0iOiIiLCJneXIiOjAsImFjY2VsIjowLCJzc3AiOjM3NTgsImJ0eXBlIjowLCJ2MiI6MCwicmNoYW5nZSI6dHJ1ZX0sImJhbm5lciI6eyJ3IjozMDAsImgiOjI1MH0sIm1ldHJpY3MiOnsidG9waWNzIjpbXX19XSwic2l0ZSI6eyJpZCI6IjE0MTEwNDIiLCJjYXQiOlsiSUFCMjUiXSwicGFnZSI6Imh0dHBzOi8vd3d3LmVyb3RpY3Bvcm5zLmNvbS9wb3JuL3Vwc2tpcnQtdmlkZW9zLyIsImN0aWQiOjF9LCJkZXZpY2UiOnsidyI6MTI4MCwiaCI6MTAyNH0sInVzZXIiOnsiaWQiOiJlNGMyOGExODY0ZTQ5MTRmNWZhYjc5ODNlNDYzZWYyNSIsImZwIjpudWxsLCJmcF9zdHIiOiIiLCJ1YV9kYXRhIjpudWxsfSwiZXh0Ijp7ImR0IjoxNzI3MTk4ODU0MzM5fX0=","fqdn":"rtbrenab.com","domain":"rtbrenab.com","tld":"com"},"ip":{"addr":"116.202.60.226","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"d6ab539c271b531a2b17c41dbf5fcb74","sha1":"b082255db1b05b637f8a7a5f4e6dcff95866e4a4","sha256":"589c3a8aa40a3b9a03199a013a967a8bf038f812e920122a7b95870695e34663","sha512":"5f6be84a59346507259952b033f5c7499130140c813017b604c4ff24f384cd53b776e3981442007c53ecc7576c1802c64252dd5b92c45334dce46e7022d4f3d9","ssdeep":"96:D8AEPWdd85SNNmgEe3DxPWdd85SNNmgEe3uxfWdd85SNNmgEe3uxN:lsgf7Osgf2Ksgf2P","tlshash":"d4a165ce6b4adc1541e0760439a77b150bab6741caca89a1ee330b38dda4f32915bf1d","size":4896,"data":"","first_seen":"2024-09-28T07:59:48.772497Z","last_seen":"2024-09-28T07:59:48.772497Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rexpush.club/js/s_5aabbad4a02ab0a5bd8a6e5c5ce0fcfa.min.js?tag=3333\u0026attempt=0\u0026rnd=678007040\u0026lnd=adult_video_2\u0026v=2\u0026token=2f1eeeafc1c1aa0ba0685904cfada495\u0026click_id=a2_7102076563369971295_627551_2_0\u0026sub1=a627551\u0026sub2=%24%7Bsub2%7D\u0026sub3=%24%7Bsub3%7D\u0026tb=\u0026t_rdr=","fqdn":"rexpush.club","domain":"rexpush.club","tld":"club"},"ip":{"addr":"199.182.164.165","port":443,"asn":15317,"as":"SERVEREL-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"42b442bdd332e16047794d1b4b5f4eb2","sha1":"380267f8b8733cafea800ac5af53a0fe02c6d8e6","sha256":"9405b11c78a0fefdb94a33e86cc7c281fc016ac230432f1bff2f4e19dc36c7fa","sha512":"e633a88bb94bf111594910c591ed075991683272d11c4756682884d59392e2fbf398c97f0f3c3d454cb441a7642e1f3c8427aa9318888e1730ec5bd7714c029e","ssdeep":"1536:ArrOHqFCyK+hANLTKZbgFxMMkEn1qnxfa42aI9KADYX72mn8I6:TcC1+hACkOZEQx4QDn2","tlshash":"5483f8cdfac3b52a439360b9547f3106ba3f7818984d4454f669e5d97cba00a823bf78","size":85498,"data":"","first_seen":"2024-09-28T07:59:48.773517Z","last_seen":"2024-09-28T07:59:48.773517Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.rmhfrtnd.com/widgets/wrapper/index.b54835e4f932e3498192.js","fqdn":"creative.rmhfrtnd.com","domain":"rmhfrtnd.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3e86496f907a161e2a42c08ea8ee178","sha1":"634f9e79cb34a8a85d7d2c85726698de8fdbd236","sha256":"18905ddb719ae00f6a459f5aa94a358e77ec7dd6bcfface18231e614133fcce8","sha512":"fdb1e52919ee6a8234434aa1222f22bb0b6d5426faa3ae4d0e3e6f27fdc8ee54ff5980fa7dda8d847eaf06d49f01f0ba26bdc19344148037e27eec5d2156906f","ssdeep":"1536:8ZKg2xgdk8x0d+DYG77kM7V+ndAhIejgazc0z0/YY7qxcWyr3:+2xgdk8xp77vV+IrjT5CYY2xc/r3","tlshash":"920481cdf6d2f4b103d761a4403f420bf27aa994b05a9190e265e9e56cbc48e9137f3e","size":180347,"data":"","first_seen":"2024-09-13T04:42:11Z","last_seen":"2024-10-27T20:19:52.228623Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.eroticporns.com/porn/upskirt-videos/","fqdn":"www.eroticporns.com","domain":"eroticporns.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"1cad33543c11ff2a74fc8a32b44fec1f","sha1":"35810959e9ec79968bc59db3fc2a04300a4354c1","sha256":"697e7a63ba21ec6631b45723218d6ed20db6992676accf0f0a9d04c18b9f9a43","sha512":"134d0efc36789a566194dcf1515d43da2731b38a3277fccd822a3b4f95fbd69874739af9c8b9720b7046809883ee2892f3baa090ebbf7c87680afacab0f3dadc","ssdeep":"96:i3WJnGsVvxkh0NhBaJzOHp+G1EbCQiQZAJ1tTBn0yXS+tpTQxi:poshxf9H9eWQVAhB08Td","tlshash":"bbd101f6b97b334d979371ea2d161141501098a903adbc98fa64f2d5fcb4cfe192b350","size":6499,"data":"","first_seen":"2024-09-20T21:26:21.065124Z","last_seen":"2024-09-28T07:59:48.775548Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c99574de6f.dd4ef151bb.com/0cc02c68f27fd6c769b3e920a5f9f2c8.js","fqdn":"c99574de6f.dd4ef151bb.com","domain":"dd4ef151bb.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c65eb51180d0c3fd4688efdc0f235d9","sha1":"fe9abda40c1234101b4fe937c7e970a47534cfaa","sha256":"9be39c309e3670ef9b1305c57de59c1ecf4eb7dac11d041e9ae86526b03e9e1c","sha512":"895275d6b124d1642e4455be6374657f5dddd1568c115a1a32dc91e782bb6002e0e5eadd71ee72d0408eff18a59cae0f8dd819cac89bc88520feccc514cb5912","ssdeep":"12288:mkCz69xMy6+/RxvaZ3SEHgi5Kh996SuIimG+u16XJcP98y2owRZJ80sU/bmb0nut:7CzsGgEKh9ImN7XJqwzjs","tlshash":"5ab438222291013db07fc4c5aa662b8e336df207e9134f15f9af6ba583dbd54f625384","size":541263,"data":"","first_seen":"2024-09-11T14:10:51Z","last_seen":"2024-10-21T02:49:33.783735Z","times_seen":244,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w7.eurosptp.com/page.php?fr\u0026countrycode=coutry","fqdn":"w7.eurosptp.com","domain":"eurosptp.com","tld":"com"},"ip":{"addr":"213.186.33.19","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"e1c06d85ae7b8b032bef47e42e4c08f9","sha1":"71853c6197a6a7f222db0f1978c7cb232b87c5ee","sha256":"75a11da44c802486bc6f65640aa48a730f0f684c5c07a42ba3cd1735eb3fb070","sha512":"016ba8c4cfde65af99cb5fa8b8a37e2eb73f481b3ae34991666df2e04feb6c038666ebd1ec2b6f623967756033c702dde5f423f7d47ab6ed1827ff53783731f7","ssdeep":"","tlshash":"c710000000000000000000000000000000300000000000000000003000000000000000","size":2,"data":"","first_seen":"2023-03-07T01:03:30Z","last_seen":"2026-04-04T23:55:33.143033Z","times_seen":39450,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c99574de6f.dd4ef151bb.com/a4e1b43c5d53bd1e8bddee9a1e579f61.js","fqdn":"c99574de6f.dd4ef151bb.com","domain":"dd4ef151bb.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"08cde39d2fc37220422338635e29142c","sha1":"ec81f4f52203910d6c11bc450139acff4c9160f6","sha256":"a356b72ca625887cf44db3f01e3f4c70cd34fc37e489cb5eba5be3baec62f862","sha512":"425233e76e6db08251f4b85f73a40d25b2abcaa118425e6469079a1ddb847ffe208d6b94be2192ba37d66683c7ef6b359d8e855ec9ae2a30ce85608093e6037e","ssdeep":"768:ubIF0bT9RDwd18w/+PqObIuWM4EwVKVHFsJHWIOnfyunQnqr7qBzXdb1sDPQPsLN:L0FNQQqObAN0sJ2IjIyV/d+","tlshash":"74a317cdf2c1b13442f7a5a9902f1905b33e2919f849442cb975dad138bd88e9217fba","size":102919,"data":"","first_seen":"2024-09-06T14:43:30Z","last_seen":"2024-09-28T08:49:18.00554Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.cabnnr.com/banner-admanager/build.m.js","fqdn":"js.cabnnr.com","domain":"cabnnr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ff8d7abb1720c605feb4d17aa9c2d4f","sha1":"b2f965a4f3e28cf28552dd0f48b5a2fd691a3b89","sha256":"b5aefbb2bc976af72365749ff4b6746a3d8193970cd10db36904019e3eeafb93","sha512":"731bf115a916530128f155967ba3936837b96418729a26b931ab4c1406ae8336c2d65567b74a7fce8e0015aaf6385fb7d872dcc41a2c05f999ac0a60d088cad9","ssdeep":"1536:1bObygQ+Tyvaujg8S7+68CUp7KzY2uPbWQzP:9gQ+YH++FPbWQzP","tlshash":"c3433b443651343580fa406fa03f5705b3392907e8075818f9beedeaabbcd89a275f79","size":55285,"data":"","first_seen":"2024-08-19T12:34:19Z","last_seen":"2024-10-04T11:30:22.453295Z","times_seen":389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w7.eurosptp.com/page.php?fr\u0026countrycode=coutry","fqdn":"w7.eurosptp.com","domain":"eurosptp.com","tld":"com"},"ip":{"addr":"213.186.33.19","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"10abdfacfaa8aab336dabe5dcbfb6ccd","sha1":"609cbdbd715a9e5c3c143dd47aca7ba44bd1946d","sha256":"3974bacf69cd5f678efbfadb80d7f519cac542d415e571811116dc780871a4ad","sha512":"53d19f704748e6eac9954d74f6c997d7b09d2bdf2e953cdf64245177ba1aa7c34b0ab0efbcffd7f3658e72bf26993af212b47c0cc3b19e392c510fc9c75749e9","ssdeep":"384:G+whxYirMoOHdzlog3JhUgG7eludi4irgo8bXK1BX:G+whxYIUdzf3bOWreXK1BX","tlshash":"4282fa938e072d488f78635e96fface60e5d5b81309148efd51761ce89edb6688c40ce","size":19114,"data":"","first_seen":"2024-09-22T07:50:50Z","last_seen":"2024-09-28T08:36:59.136646Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rexpush.club/js/s_930720bc3a03c2ff60f06b32d5ec4b5f.min.js?tag=3333\u0026attempt=0\u0026rnd=646027372\u0026lnd=adult_video_3\u0026v=2\u0026token=2f1eeeafc1c1aa0ba0685904cfada495\u0026click_id=a2_3736566435692234949_627551_2_0\u0026sub1=a627551\u0026sub2=%24%7Bsub2%7D\u0026sub3=%24%7Bsub3%7D\u0026tb=\u0026t_rdr=","fqdn":"rexpush.club","domain":"rexpush.club","tld":"club"},"ip":{"addr":"199.182.164.165","port":443,"asn":15317,"as":"SERVEREL-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5dc18d0c4d7bf009d34b37981710dc55","sha1":"690a644d4f6f8e780d9c0e5eb0226afaddb30635","sha256":"7520e51887672e94d6ec13c52e49b1e8363ea5b7a59697beb17f2474e02f805e","sha512":"8ba4a1e581291039245ddadad46de7ba16d6af0be614ec8eec968cf7eedefd718825dddd0a71e43a1119fd8a59318b4fa567f4ba8e84d1a89c9dde081d395018","ssdeep":"1536:ArrOHqFCyK+hANLTKZbgFxMMkEn1qnxfa42aI9KADFQ72mn8I6:TcC1+hACkOZEQx4+Dn2","tlshash":"b683e8cdfac3b52a439360b9547f3106ba3f7818984d4454f669e5d97cba00a823bf78","size":85569,"data":"","first_seen":"2024-09-28T07:59:48.779123Z","last_seen":"2024-09-28T07:59:48.779123Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.good-trading.com/?good-e","fqdn":"ww1.good-trading.com","domain":"good-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"ceb2bae919780988a0bbbe1800d96a9d","sha1":"9e224df9b3ccb17d3e8a73603e27db77ac407803","sha256":"0858a247efdeb7fa63734fe7d2c5c0f5ba1852b3bd4a03832088f0d0bc7d0383","sha512":"9020f7d4a28e6ce08b13d6d957c813f8d1a9c1d8bf663586d4207bedd18937f78e0dc4b60f3eee7c6d32e47ae66a212eabd9a54de8dbac703a3bdfdafa3ccbff","ssdeep":"","tlshash":"df31c0776bfd52b8ad6e104e80f79179167c24373281d932fa5cd1902f21e657909a8c","size":1601,"data":"","first_seen":"2023-03-08T07:08:46Z","last_seen":"2024-11-04T19:11:47.967363Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c99574de6f.dd4ef151bb.com/aa120219a4a8504943209594a109c121.js","fqdn":"c99574de6f.dd4ef151bb.com","domain":"dd4ef151bb.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b4d9e5d8d49c9455989c407f47af99c","sha1":"043640c2556d948c580064955f38240e5cc12315","sha256":"88de2e3b8b1024b8a72e4a06814cfa1b5bdd260357e56ec00febac2fa021447b","sha512":"e9e71851ff682d990b6235e57a0a35463f02d87054e9fe44f96b5680b8f15c08a418989e41671f92a02ebc20c9ce501bf0c2c8968f79f69a21bee643b77ea0d1","ssdeep":"1536:eO4lqELn1iLHPazoEdJQvMrX9GOdNj2824BUUlySieERXKmOjG2zpGECtQUtWF1J:sdLYKUe1qGBR4RNOjG8CtbICzM","tlshash":"8e045bc5b681343407a3a27b80af160af23c29057626446cf5f6ded529bac8e6377f71","size":185677,"data":"","first_seen":"2024-09-17T16:25:03Z","last_seen":"2024-10-21T02:49:33.775007Z","times_seen":240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.eroticporns.com/porn/upskirt-videos/","fqdn":"www.eroticporns.com","domain":"eroticporns.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"1c8263cd8262d69e05ff6c07ad978e43","sha1":"b1c717b464ddf64f89a3761948a4c8f255b0b441","sha256":"c3abe5434c24c52836c7ab03f6fe7e80b6f152e86f3a617d938900fb2a0f97a9","sha512":"02b5b152517b9ca080733fbf4b78ab2288474fc4fa9b4d8299865291d038aa4c951718905e5b4a28cb1a0eec3266c0129b933be2733f0185af2fb1cba9ee4182","ssdeep":"","tlshash":"3ec01267729619300adea5ab1031839c3870c405dd019009292c0f635c20fe2e47daa8","size":179,"data":"","first_seen":"2024-09-20T21:26:21.077389Z","last_seen":"2025-07-12T01:30:33.874238Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w7.eurosptp.com/page.php?fr\u0026countrycode=coutry","fqdn":"w7.eurosptp.com","domain":"eurosptp.com","tld":"com"},"ip":{"addr":"213.186.33.19","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"e8e7ffe3799015334d59dacabc7f84ad","sha1":"5dfd54ca590900792efc5443d8df7bba8296ffb1","sha256":"470e760903aa06609882465e5263959f6355d723ea270bc13b54ca4d12ab8662","sha512":"d0318a8b3acf7366528ec97abd568a2803e27a9b70dabc86d419707b0e93929860435f5cca20eec532e2aa9079a8dae0e51b2d773bb4f7f5ffb190fcb75b26dc","ssdeep":"","tlshash":"80e0552a98e746384cf63a441039da7930f838a4aaa2d026525cc82ccd29fc54c04aec","size":430,"data":"","first_seen":"2023-03-09T07:28:37Z","last_seen":"2026-01-20T21:26:12.101781Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.good-trading.com/?good-e","fqdn":"ww1.good-trading.com","domain":"good-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"3692c84d14232abee7b35860eef3d206","sha1":"3a09a0785e3509471907d885efff280df5c89e80","sha256":"6086cc60ae44eb9adc664575f370f2c11eea4c00b631926811320a4a7bbbf8af","sha512":"66b797543928290f49f0ba27d93985c33ba2fd0b8253db9d79a9c844f59f7ef4cf45cec0cf3837660462981215af5764fb3bc89534815b4b9932edd3ac52be1a","ssdeep":"","tlshash":"05c02b8f71df005c4cf534c0100e5200282030003802c43003588450a074e7b800ebee","size":130,"data":"","first_seen":"2023-03-07T14:37:24Z","last_seen":"2024-11-04T19:11:47.972491Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gbstlnd.com/adult_video_2/3333/2f1eeeafc1c1aa0ba0685904cfada495/?click_id=a2_16209272082399971748_627551_2_0\u0026sub1=a627551\u0026sub2=%24%7Bsub2%7D\u0026sub3=%24%7Bsub3%7D\u0026tb=\u0026fullscreen=1","fqdn":"gbstlnd.com","domain":"gbstlnd.com","tld":"com"},"ip":{"addr":"173.214.250.52","port":443,"asn":15317,"as":"SERVEREL-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7e4cf8be2c5809a3e44cdbe473c2fbac","sha1":"79830d80682ad86dd4e444ef47e2064d166aca90","sha256":"150571f1d641b7b90aca38c31a1c0052e8c5898c759da9fe79f8396deeb403ce","sha512":"78fe1bfc02c8d4566587e1cafaa81f0901b57bc7ca65c28734046cc40f3f01ce530b1059f9051bccdd55e989009443460502c68027163735fd4df20dd9f583de","ssdeep":"","tlshash":"5301dd5322e58179027f04bb2522c27eadf350372bdac801bcaf929d0f05f9a44626f8","size":662,"data":"","first_seen":"2024-09-28T07:59:48.783656Z","last_seen":"2024-09-28T07:59:48.783656Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cgb.news24.media/?d","fqdn":"cgb.news24.media","domain":"news24.media","tld":"media"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w7.eurosptp.com/page.php?fr\u0026countrycode=coutry","fqdn":"w7.eurosptp.com","domain":"eurosptp.com","tld":"com"},"ip":{"addr":"213.186.33.19","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.good-trading.com/?good-e","fqdn":"ww1.good-trading.com","domain":"good-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"789df5bfd44bdbfc950a924532877267","sha1":"91fdd8fdb3d2d48b0a202751e7fc29ed84658319","sha256":"fbd316f070fdf6a74ee74c1bf70f161ad134f29179bd4c8eb659342618669f8c","sha512":"5b20428b09bee91158382fe5364cbcaa940dd5b364e467e5b217b3f96aef3499d3da25793d5e5d6f90ac6009ecb3c7f2a9d3ffbfcedf21395e7c05af902a0e18","ssdeep":"","tlshash":"778004771450454d4500c4d475315744411511d4ccd4c0c3505005504c5505534f110c","size":38,"data":"","first_seen":"2023-03-07T14:37:24Z","last_seen":"2024-11-04T19:11:47.974232Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.good-trading.com/?good-e","fqdn":"ww1.good-trading.com","domain":"good-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"c9b8ba72421e794bca585f8293242a29","sha1":"14258c9988b0a8170bd46f3b1cb80e3a18f44a1f","sha256":"02c51e8cfaf9b805d1e9c5e6b373f76b1a9f286f3d35fc55a8d9403dadafe459","sha512":"fc244f7377908631c5df0e145e6e942203ac701648b9b85c6af6c1ca428f3bf9c294ebb6b00ba22dcf46140945d325e19cdd90599a360795961558176474be46","ssdeep":"","tlshash":"d1e02b299ceb06384cfa7e441079da7934f878a4aaa3d067525cc87dce39fc54c15aec","size":424,"data":"","first_seen":"2023-03-07T14:37:24Z","last_seen":"2026-01-20T21:26:12.10378Z","times_seen":119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.eroticporns.com/porn/upskirt-videos/","fqdn":"www.eroticporns.com","domain":"eroticporns.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"02ba6483ebe534b95c0e385963871352","sha1":"f1f8a4b70ed8bc8a71071e18e825777f66692199","sha256":"b6619b1fea038e2aae5282b5e389a27780ebe7c1b489fb4cb9d26d4c22b5ef45","sha512":"ddc8ba11c5da7941f792d9877a162f4da5096053aa231520ed0ac5e38b1207096377258df23c58b43a1ee5ec502f43a01451a4e5da357813737ed0f9dd7cbe4e","ssdeep":"","tlshash":"c8f02b733d66b83205ca29c2187da9943a305280b041a4357cbec8540e4afc36c772fd","size":510,"data":"","first_seen":"2024-09-28T07:59:48.785784Z","last_seen":"2024-10-20T20:34:29.712252Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.good-trading.com/?good-e","fqdn":"ww1.good-trading.com","domain":"good-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"efce018de3cea0157f3da7511c04fc01","sha1":"14104e89c3af2dd9b08ed3e4006e434e47cb4001","sha256":"39d48661858eca9d6e1290385c7fa095434b0663fa790fe2a48baf9701a0edb0","sha512":"270dd7be7b4645c860b408d9a2ac72109153af99bb10e8681efdeed45f10fd8fc01eafd47626ba5c16fb9ca2e3be3f357d1ac970f4278fa260cb66f5b6fad442","ssdeep":"","tlshash":"78b092cb1001964922e218439f63374d24b340fb8c00908001526a20325c30f9a6eacb","size":111,"data":"","first_seen":"2024-05-17T09:36:36Z","last_seen":"2024-10-11T09:19:31.076415Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"latest-522727.tgel2ebtx.ru/click?node=292\u0026winPrice=0.015\u0026winCurrency=USD\u0026id=1727198820000-5395","fqdn":"latest-522727.tgel2ebtx.ru","domain":"tgel2ebtx.ru","tld":"ru"},"ip":{"addr":"206.54.181.250","port":443,"asn":35415,"as":"Webzilla B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtbrenab.com/get/?go=1\u0026data=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","fqdn":"rtbrenab.com","domain":"rtbrenab.com","tld":"com"},"ip":{"addr":"116.202.60.226","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"14b2ce390667dffc0b0b543950279717","sha1":"279779aaa91c38c1ec01f55ef2eda1f50f87c5d3","sha256":"e3bbcb5f30a6390381ce8f742c7d3a6f5f0fb955b86b973d443aa13361d72ac1","sha512":"cf4e3c43a9baa707ba2482f68dad345e4f752aa9a16b7641f7c419fdf075bd5ebcb9d69f67840bc6b55a27fa5b78fa2fae512c8fc4f8b7932a735beb7190cdd4","ssdeep":"96:D8AExWdug5SNNmgEa3D1lWdug5SNNmgEa3u11Wdug5SNNmgEa3u1N:LBgffEBgfi4Bgfiz","tlshash":"f4a1b8c96b5edc5441e076043dab7b050ba676418bca89a0dd330b38ddb8f36915bf4d","size":4896,"data":"","first_seen":"2024-09-28T07:59:48.787823Z","last_seen":"2024-09-28T07:59:48.787823Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c99574de6f.dd4ef151bb.com/2707e112eeeb72e6bd247f526060d1a5.js","fqdn":"c99574de6f.dd4ef151bb.com","domain":"dd4ef151bb.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8ee48ae560531ef3c26da66123ed822","sha1":"9720647f9d9457120f58580c346b99adb0c5eefa","sha256":"9a7d138e1b3dbe87ad59f5f554c03dca365ff6ff7d92d5df4053dbbfe8288d03","sha512":"30ca4b68aded6384b4bb3b6b8b1856cbd101c63b5693e252080f86edf2f489c0f85a1c71b65a83dda4a7302aaa4dd262bb242a2a2983a1d9d988c71c2936e578","ssdeep":"1536:jmYYfOFIildn9U2ciYXYJxl5hA9v5Jn7QOSguChXWTS8cxQXEJCyUEE:SYYmi2XY0xlA9vDnTl2","tlshash":"f9b34bddb3c7b07443e76164943f1206b73a2a16b80c8414f6a6eac1787cdda9227f79","size":117308,"data":"","first_seen":"2024-09-24T19:28:14Z","last_seen":"2024-09-28T07:59:48.561396Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtbrenab.com/get/?go=1\u0026data=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","fqdn":"rtbrenab.com","domain":"rtbrenab.com","tld":"com"},"ip":{"addr":"116.202.60.226","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"97a4902c40b6b84f4db0e9be4374c067","sha1":"25f59d853a35bc75e4dfb974d688ac59dca68699","sha256":"8f1ebecd5afbf9a192e4e3dff31c0abae61649655a03246514a77f59aa8de804","sha512":"3719fd1b9027e98dd03bd3858019d098c78cbe02ecdb0f50f72e05198481436857b4fe6a8319bc9df3f730f8c774bb60fffe74311496e4eb0c87733f589f7c35","ssdeep":"96:D8AEFWdce5SNNmgEU3DwPWdce5SNNmgEU3uwfWdce5SNNmgEU3uwN:jlgfNtlgfQ/lgfQi","tlshash":"99a1b7c9ab4bdc1081e0720439a77b560b666a41cbc999b1dd330f38dda4f36916bf0d","size":4896,"data":"","first_seen":"2024-09-28T07:59:48.789909Z","last_seen":"2024-09-28T07:59:48.789909Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gbstlnd.com/adult_video_2/3333/2f1eeeafc1c1aa0ba0685904cfada495/?click_id=a2_7102076563369971295_627551_2_0\u0026sub1=a627551\u0026sub2=%24%7Bsub2%7D\u0026sub3=%24%7Bsub3%7D\u0026tb=\u0026fullscreen=1","fqdn":"gbstlnd.com","domain":"gbstlnd.com","tld":"com"},"ip":{"addr":"173.214.250.52","port":443,"asn":15317,"as":"SERVEREL-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8849da3efa917a9f0c2fac6502451de3","sha1":"8e77b10dfd87f817030e54a92dc3bddc4e194ad4","sha256":"992ba3e48ee578f6a80e0bd5cd6a44b25401820a22a02f6c2eecef6fc95d9886","sha512":"bad8a3e887e1ef9746ab656f6e1879d1e8a537207a8d454ac050681260b64deb43a1e21d71a7761d623b23ce8d969a821fe8930725f8ce47dca075938c5d9465","ssdeep":"","tlshash":"9401dd5372e64175427b047e6522c26e7df350272fdac446b8be828a0f14f9684226f8","size":661,"data":"","first_seen":"2024-09-28T07:59:48.791453Z","last_seen":"2024-09-28T07:59:48.791453Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.multstorage.com/log/count.html","fqdn":"storage.multstorage.com","domain":"multstorage.com","tld":"com"},"ip":{"addr":"104.21.30.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f697a0f2411e463adbc1211493fe5a6","sha1":"93c154152bda427938543b8efbd8d3b594abbac7","sha256":"08a5735f5232b651af89f552e8d0fb7b21d6605fba48f335318699d80d12703e","sha512":"4dc32d6712d024f1a2f8b2dd33749a075f13f69a2f7af664c3b5d61e31a74e81eeee3b8e1cd6f893fe0a324adef1772e340df95e338de0e47afe5c0d19e9fd10","ssdeep":"","tlshash":"b001640ef6406c6c886188be396a3d2228b1a015547a6da17425e9827b808ee8163bc2","size":718,"data":"","first_seen":"2023-09-18T17:19:52Z","last_seen":"2025-03-01T23:33:09.846843Z","times_seen":12563,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.eroticporns.com/porn/upskirt-videos/","fqdn":"www.eroticporns.com","domain":"eroticporns.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"5c9f928bf8d087408110e43357830831","sha1":"8b88d46c8414a47989aa0efbe44e5d31f3ae0947","sha256":"10d1307bcb154e02ec4fac800060d5f3105564467bec05ff5f87355e03eca3c2","sha512":"12a9eaa068b404feb4ed22ecf7a717ee2881fab90f0727cede7a5f24cf4987b5a7ea4c331a091c15647631ddacf0e3596d1f408d509ed7ecb465fc5c5e4c3d4d","ssdeep":"","tlshash":"3b01fe72bc500cb625887c3bbb2e52452d60a9871c04ebccf617c0c40db8c6408259eb","size":689,"data":"","first_seen":"2024-09-20T21:26:21.082654Z","last_seen":"2024-10-20T20:34:29.722496Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtbrenab.com/get/?go=1\u0026data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImIiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5NSwic3BhY2VpZCI6MTQ5NSwidHlwZSI6InBvcCIsImlkem9uZSI6bnVsbCwiYWRfdGFncyI6InVwc2tpcnQlMkN2aWRlb3MlMkNwb3JuJTJDcG9ybiUyQ21vdmllcyUyQ2ZyZWUlMkNwb3JuJTJDZnJlZSUyQ3Bvcm4lMkNtb3ZpZXMlMkNzZXglMkNwb3JubyUyQ2ZyZWUlMkNzZXglMkN0dWJlJTJDcG9ybiUyQ3R1YmUlMkN2aWRlb3MlMkNmdWxsJTJDcG9ybiUyQ3h4bnglMkN4bnh4eCUyQ3h4eCUyQ3B1c3N5JTJDdmlkZW9zJTJDdXBza2lydCUyQ3hwb3JuJTJDZmlyc3QlMkNsaXZlJTJDc2V4JTJDcG9ybiUyQ3ZpZGVvcyUyQ2Vyb3RpYyUyQ3Bvcm4lMkNmdWNrJTJDb3IlMkN4eHglMkNwb3JubyUyQ2dvb2QlMkNicmF6emVycyUyQ3NleCwiLCJsYWJlbHMiOiIiLCJhbGxvd2VkX2xhYmVscyI6IiIsInRpdGxlIjoiIiwic3ViaWQiOiI5NDk4ODk4ODciLCJyZWZyZXNoIjoxLCJ1dG0xIjoiIiwidXRtMiI6IiIsInV0bTQiOiIiLCJzcG90X2lkIjoxNDExMDQ1LCJtdWx0aXBsZSI6ZmFsc2UsImlzX2lmcmFtZSI6ZmFsc2UsInJlZmRvbWFpbiI6IiIsInBsIjoyNzAsInN0cmF0YWdlbSI6IiIsImd5ciI6MCwiYWNjZWwiOjAsInNzcCI6Mzc1OCwiYnR5cGUiOjAsInYyIjowLCJyY2hhbmdlIjp0cnVlfSwiYmFubmVyIjp7InciOjMwMCwiaCI6MTAwfSwibWV0cmljcyI6eyJ0b3BpY3MiOltdfX1dLCJzaXRlIjp7ImlkIjoiMTQxMTA0NSIsImNhdCI6WyJJQUIyNSJdLCJwYWdlIjoiaHR0cHM6Ly93d3cuZXJvdGljcG9ybnMuY29tL3Bvcm4vdXBza2lydC12aWRlb3MvIiwiY3RpZCI6MX0sImRldmljZSI6eyJ3IjoxMjgwLCJoIjoxMDI0fSwidXNlciI6eyJpZCI6ImU0YzI4YTE4NjRlNDkxNGY1ZmFiNzk4M2U0NjNlZjI1IiwiZnAiOm51bGwsImZwX3N0ciI6IiIsInVhX2RhdGEiOm51bGx9LCJleHQiOnsiZHQiOjE3MjcxOTg4NTQzNTR9fQ==","fqdn":"rtbrenab.com","domain":"rtbrenab.com","tld":"com"},"ip":{"addr":"116.202.60.226","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gbstlnd.com/adult_video_3/3333/2f1eeeafc1c1aa0ba0685904cfada495/?click_id=a2_3736566435692234949_627551_2_0\u0026sub1=a627551\u0026sub2=%24%7Bsub2%7D\u0026sub3=%24%7Bsub3%7D\u0026tb=\u0026fullscreen=1","fqdn":"gbstlnd.com","domain":"gbstlnd.com","tld":"com"},"ip":{"addr":"173.214.250.52","port":443,"asn":15317,"as":"SERVEREL-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4eff984c560f517d5e744dfe589bbd0b","sha1":"9e545ce78f157a3bed748c0f8e0acf14a55125ec","sha256":"e67f267f56e39e152002df627b844bf0f8a2e5f39a5831207d9b860a14fdbb27","sha512":"53fb56380a224e68d6e7d251db7475c155a7716cf790a379edd6c2f90f34aa400df5471b1dd8c1e20557cd211c51a9f3174470dd80aa0037e9edb34011c7a6ac","ssdeep":"","tlshash":"a301d35322d54175027f047b5562c13e7df390271bedc405f86e92990f40f8645526f4","size":661,"data":"","first_seen":"2024-09-28T07:59:48.802958Z","last_seen":"2024-09-28T07:59:48.802958Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":[{"md5":"03530e297999daa82c89de52914c9381","sha1":"ad65b2e8320a4c1ee7006f98e1ff9f18c9936c5d","sha256":"e319dc923744fc09e2c88772810f57ce4566a7b83603bce17a22bee3fc8928d0","sha512":"b0fe40c07c03268b21a29097a265e5ab49fcc47152e2d9efd0e689a1f1a68052138087488bd021720617a82afba7ac0af855ac7f46c61053d07100c7f092cafe","ssdeep":"192:l329/4N474dFdLoYHz8Sr1QY5B49MPz4XO0NBpfN19UlKQC07vg:l3a/4N474b9z8Sr1pzz4e0jjMlRnTg","tlshash":"f752b86f6729a1a5de7333b99736a91cf97630333182c524b42c92901f32b55e815eec","size":14139,"data":"","first_seen":"2024-09-22T07:50:51Z","last_seen":"2024-09-28T08:36:59.255378Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"32b192e027c33228c5d04dbc07c16c6d","sha1":"11fe06af2ee581111bcbb2503324c211cb0e6474","sha256":"0882bc507f33e780cb8a3ae7bbf927b0c084164b574d0b63a687db8e09d8a692","sha512":"dc2a573b030ec515e2cde5e01f997e6e820b3f44019ae7954d55e6ccd8e548962d652d94f6217403dbf0563fc236b21d8293fb472ac093c7d806196144f1df76","ssdeep":"","tlshash":"47f0dd9a77340b94ac375187e332c9a9daf014123d61a03af5dcf044abb252064862d4","size":607,"data":"","first_seen":"2024-09-28T07:59:48.816218Z","last_seen":"2024-09-28T07:59:48.816218Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"write":[{"md5":"24104e103c0341834f5714becbabf159","sha1":"f881bd84f99490dc254172088360776b4bcf6a2c","sha256":"d01fe059f48569f33c4733445fa07d77ce2eab8921792d6c621162868032b0c0","sha512":"74d4db1414772ca834730eda988db9ea4d73d23a1c5b39db009de1167a3aff27c1f9524cc9946578f1712fd566b09ce669b31ddc966c6e32feb56b2ddf0c12fe","ssdeep":"","tlshash":"3a21fb736c660cc80058497bd4c30c9b2461750fb6d3a2316bf4cab741247b8bac276f","size":1315,"data":"","first_seen":"2024-09-28T07:59:48.818714Z","last_seen":"2024-09-28T07:59:48.818714Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"85b21154e2183d7693ab864a0ba77248","sha1":"3a03d80f2b1f037deccb7bf026305c286d882092","sha256":"1024af3c11567b5d5a6123dde9408cce2f034b07dc6c33c9b5af019cac8bb470","sha512":"c540510b6f8ba9e303c2ed47bec0d59ead301fdfa86e13024a9f155f098430a2dd73fb85c48776aa4664753ff6e2e9f4f85b90ec320e6d90d3208f138ec0b8bb","ssdeep":"","tlshash":"3721c883e3d928684db3000f56744a80b541221db2b19765ee2db08258f97c94bc3b1f","size":1315,"data":"","first_seen":"2024-09-28T07:59:48.820624Z","last_seen":"2024-09-28T07:59:48.820624Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:31.462013701Z","timestamp":1727198851462,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"856F85441E043130F88668BE6CF68110187856F17999BDDC4332437D383C79B6\"\r\nLast-Modified: Mon, 23 Sep 2024 09:19:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=6672\r\nExpires: Tue, 24 Sep 2024 19:18:43 GMT\r\nDate: Tue, 24 Sep 2024 17:27:31 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"72e206e9b89445fb2fb4031a6abe6169","sha1":"a18bebfb86a71685bd817c15e348cfb5ea438c72","sha256":"856f85441e043130f88668be6cf68110187856f17999bddc4332437d383c79b6","sha512":"daa9bdbd4724ed07e1bcf8d82a936f0b6f6a998ffe2c704353017fb3c87611bf8795afbccc233b0e09dcbd4908be8dfaf8556c9e88a0dac161a7a3d8a9bb639e","ssdeep":"","tlshash":"cdf07e912225b648e3e602022a50c428ed2838fc381058c0b2e8d7f09f28bb461e6018","first_seen":"2024-09-23T14:36:45Z","last_seen":"2024-09-28T08:17:26.962886Z","times_seen":30040,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:31.493504594Z","timestamp":1727198851493,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"4209062AA50A6C3396D23003127F86806950EF8C9D33117C74ED26D0876B60B6\"\r\nLast-Modified: Sun, 22 Sep 2024 12:20:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=6615\r\nExpires: Tue, 24 Sep 2024 19:17:46 GMT\r\nDate: Tue, 24 Sep 2024 17:27:31 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"a756e3de6f1bc9f4fd807c7ac4ab13c0","sha1":"72c189c05a79d4baf34e880c851183cf764cd5cc","sha256":"4209062aa50a6c3396d23003127f86806950ef8c9d33117c74ed26d0876b60b6","sha512":"545e1a6ac284d3a2dce3ed1e3334880645c4d56b57fd92f073b5c24167ba85a7f55f438ec4075d8df197f0bc646241ce7a1d6f6ac008e7ed86f9a6f352ed52ea","ssdeep":"","tlshash":"80f0c0e523f9bc12b658051639d0c3001e143cad6d1405ef35524bd2ad11fd9538065c","first_seen":"2024-09-22T15:56:41Z","last_seen":"2024-09-28T08:32:45.767488Z","times_seen":16698,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:31.757046401Z","timestamp":1727198851757,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"459C520D157B5A0D350AA018BCEB8A07161E35087A0CD431876B451109B87AE4\"\r\nLast-Modified: Tue, 24 Sep 2024 07:57:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=9640\r\nExpires: Tue, 24 Sep 2024 20:08:11 GMT\r\nDate: Tue, 24 Sep 2024 17:27:31 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"874481afd439056c1f339e0ce1818d81","sha1":"850e2206a8657d3170fe3546930a8a5226871f29","sha256":"459c520d157b5a0d350aa018bceb8a07161e35087a0cd431876b451109b87ae4","sha512":"fd4ee20a6f144b960d32f5ed9ac16f8ac01c7ce48e0dd0a04e6c3e21ddd90c7fa0e488f6f182138f2ed96d13cc9e39041c3e3cd0b5a041c4d4483755dc1e023f","ssdeep":"","tlshash":"a9f005430cf1fc406bb95dd179a4dd569d302bbd26110396d5f500d955117a89b5808d","first_seen":"2024-09-24T18:38:04Z","last_seen":"2024-09-28T08:00:30.352334Z","times_seen":2121,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:32.038131224Z","timestamp":1727198852038,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"90018672243626598FF5FA69AF3797ACEEF22E0489F136AB3AD45CEBD5586955\"\r\nLast-Modified: Tue, 24 Sep 2024 14:15:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=15329\r\nExpires: Tue, 24 Sep 2024 21:43:01 GMT\r\nDate: Tue, 24 Sep 2024 17:27:32 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"1fa65d575b930e22f3697eb667c52953","sha1":"2c8b7e55ed49edecaad895df40fce2dd1d112d7e","sha256":"90018672243626598ff5fa69af3797aceef22e0489f136ab3ad45cebd5586955","sha512":"5d1794e7aeff9ec1a527d510d96b5a633835a730095f0919618220d44eb9f32bc5937cd5b4a3ba4a67e65d6588191d412c32732e6d746dba47c263d01d5d7013","ssdeep":"","tlshash":"08f00e72119ef601b7b7060268dac801aca1effe380078d210e042e72c257cc6fd4acd","first_seen":"2024-09-24T17:44:48Z","last_seen":"2024-09-28T08:01:01.594792Z","times_seen":3354,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.eroticporns.com/static/iconlogo.webp","fqdn":"www.eroticporns.com","domain":"eroticporns.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:32.466Z","timestamp":1727198852466,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eroticporns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Aug 2024 16:44:19 GMT","end":"Sat, 02 Nov 2024 16:44:18 GMT"},"fingerprint":{"sha1":"C4:5B:D2:8F:70:A7:B7:31:BB:EC:DB:B4:B6:6D:9F:F1:73:FE:0C:3E","sha256":"BA:64:F6:DD:64:84:84:ED:5A:E9:A8:50:0F:D4:DE:A5:9C:B1:50:27:E0:B3:C0:53:2A:6B:1F:F3:71:3C:A1:82"}}},"request":{"raw":"GET /static/iconlogo.webp HTTP/1.1\r\nHost: www.eroticporns.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/porn/upskirt-videos/\r\nCookie: PHPSESSID=r9e4h1c9jt47akapojj56ul45l\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 902\r\nlast-modified: Thu, 05 Sep 2024 09:59:00 GMT\r\netag: \"66d980e4-386\"\r\nx-powered-by: PleskLin\r\ncf-cache-status: HIT\r\nage: 2275\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=y0khz85CI8eo%2BGHR6xbfLCekeVeVTNWHa9cfb9WSspGR7h3QbzxrrH8lgQ%2Bm5W%2FCBNZmNjLCO9Fm4fp2oV4srDTo8rRRI2G6Ig%2B5bb%2FGvdvDa7fueYmPvaQ48nXrDZphxBxRC%2FAr\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8c847c5bffa0365a-FRA\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":902,"size_decoded":902,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6956445f1e71c62ae9aa43ae310d6d6f","sha1":"8d96fa48f123dc9165fba506c4ce9f658dd71d40","sha256":"1a68bd6a8dbdec124b0856eecf5479ea5be8bd158626d2620d9e4a5ea6fd674f","sha512":"4ac494d15a3db6c4aad37d8fe9f3a6b82393aeb242a364b88d7996935cc6480061705a5131466e465cb841f91878e362aea4c2e2ad91351ab9838dc215375b9e","ssdeep":"","tlshash":"8d11b7585caf211b2221f1c645f7971ea8164931549b753332c0d9a214fba13ec75b87","first_seen":"2024-09-20T21:26:20.88918Z","last_seen":"2024-10-20T20:34:29.578834Z","times_seen":3,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.eroticporns.com/static/icon.webp","fqdn":"www.eroticporns.com","domain":"eroticporns.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:32.476Z","timestamp":1727198852476,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eroticporns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Aug 2024 16:44:19 GMT","end":"Sat, 02 Nov 2024 16:44:18 GMT"},"fingerprint":{"sha1":"C4:5B:D2:8F:70:A7:B7:31:BB:EC:DB:B4:B6:6D:9F:F1:73:FE:0C:3E","sha256":"BA:64:F6:DD:64:84:84:ED:5A:E9:A8:50:0F:D4:DE:A5:9C:B1:50:27:E0:B3:C0:53:2A:6B:1F:F3:71:3C:A1:82"}}},"request":{"raw":"GET /static/icon.webp HTTP/1.1\r\nHost: www.eroticporns.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/porn/upskirt-videos/\r\nCookie: PHPSESSID=r9e4h1c9jt47akapojj56ul45l\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 324\r\nlast-modified: Mon, 02 Sep 2024 13:32:01 GMT\r\netag: \"66d5be51-144\"\r\nx-powered-by: PleskLin\r\ncf-cache-status: HIT\r\nage: 2275\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Ky05O3Ve3ewOU13KLQHxUAbxwFvArLjLdmvBoc%2BevSoG%2F7QdiwrRp8a9gni5D7a6nSpXLmpLKhK4X6DGw4DG3979872B%2FqlRlUJj4%2FdFKXiMGwEnQhhutF8KjPSP8YJMksQzr134\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8c847c5bffad365a-FRA\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":324,"size_decoded":324,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2c9be7e97bcd592c87a67bb4b8032bd6","sha1":"26efde5e2afa2cb168548babb6439b5049d9ae5b","sha256":"30c438ba6cc71b13d2729ccb52b2d739edac1292ef82822252102dc816743631","sha512":"6e4884376bf2bfa04b48e30c6d59dcf576fafb98f8025457b5fe47474029473caef8bc25cac1d94b2ea959154c1684081b2201a43625ae56234645a2b5342dc4","ssdeep":"","tlshash":"9fe07dddb5e6254099c5aef621381066ce9678d0276e2d0260d563521552c833c6913f","first_seen":"2024-09-20T21:26:20.89372Z","last_seen":"2024-10-20T20:34:29.587782Z","times_seen":3,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.eroticporns.com/thumb/11729/upskirt-jerk.webp","fqdn":"www.eroticporns.com","domain":"eroticporns.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:32.470Z","timestamp":1727198852470,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eroticporns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Aug 2024 16:44:19 GMT","end":"Sat, 02 Nov 2024 16:44:18 GMT"},"fingerprint":{"sha1":"C4:5B:D2:8F:70:A7:B7:31:BB:EC:DB:B4:B6:6D:9F:F1:73:FE:0C:3E","sha256":"BA:64:F6:DD:64:84:84:ED:5A:E9:A8:50:0F:D4:DE:A5:9C:B1:50:27:E0:B3:C0:53:2A:6B:1F:F3:71:3C:A1:82"}}},"request":{"raw":"GET /thumb/11729/upskirt-jerk.webp HTTP/1.1\r\nHost: www.eroticporns.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/porn/upskirt-videos/\r\nCookie: PHPSESSID=r9e4h1c9jt47akapojj56ul45l\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8598\r\nlast-modified: Fri, 06 Sep 2024 11:30:08 GMT\r\netag: \"66dae7c0-2196\"\r\nx-powered-by: PleskLin\r\ncf-cache-status: HIT\r\nage: 6520\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3Rnj345JmYYTnGrsqTz7Z07eNWDeDdrBFziDAQhvuIPiDVIJHVFZYlcbawAFJYHcmAT77pv1Pa1i04sz%2B84N9M94i%2BJhM4TeJGlvp4VbDpBDjzjj4iayfBMUmfPAq%2Fn7Gokshzt1\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8c847c5bffa7365a-FRA\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8598,"size_decoded":8598,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 352x198, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"04fcab8ea07e210458a9b72324a439ea","sha1":"f47ee5e00e716521b7fe8e328d0a99bc17153423","sha256":"e6212095d5843dff4d89f15a4a2a761e50be4de30d829513ed1db28a091c3084","sha512":"7e950cf80d677de9f17d5b9a40cacabbe3a41320e28b5cc9a1b7a9d7dc193ea6e9120213709eb38daa2223dc0d6d36546c0de9ba23038efc9c437f97bfe1e1ea","ssdeep":"192:ZO5qneEwxBP9VJ/14CL8rCkEokc37D09rGK27e:IsneEw/1VJ/14CL8jpDDfK2q","tlshash":"7102ae0f00464aada36f39fbc770867c706a2e81b49afad736e27192590822a5b24581","first_seen":"2024-09-28T07:59:48.493781Z","last_seen":"2024-09-28T07:59:48.493781Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.eroticporns.com/thumb/41/virgin-sexs-videos.webp","fqdn":"www.eroticporns.com","domain":"eroticporns.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:32.629Z","timestamp":1727198852629,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eroticporns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Aug 2024 16:44:19 GMT","end":"Sat, 02 Nov 2024 16:44:18 GMT"},"fingerprint":{"sha1":"C4:5B:D2:8F:70:A7:B7:31:BB:EC:DB:B4:B6:6D:9F:F1:73:FE:0C:3E","sha256":"BA:64:F6:DD:64:84:84:ED:5A:E9:A8:50:0F:D4:DE:A5:9C:B1:50:27:E0:B3:C0:53:2A:6B:1F:F3:71:3C:A1:82"}}},"request":{"raw":"GET /thumb/41/virgin-sexs-videos.webp HTTP/1.1\r\nHost: www.eroticporns.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/porn/upskirt-videos/\r\nCookie: PHPSESSID=r9e4h1c9jt47akapojj56ul45l\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5408\r\nlast-modified: Sun, 04 Aug 2024 23:55:03 GMT\r\netag: \"66b014d7-1520\"\r\nx-powered-by: PleskLin\r\ncf-cache-status: HIT\r\nage: 6519\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=J1j8fwXpKncoSn9U7o7uUd8TpoRytBS2eNVJOdrkSonaNV6u2nx37tHlgPRIgEbV4qBqVEWlqLMugynuvX48okAanjxKU0hVXMFrAZpVC%2BjAUP%2Fi155Ruynu5Z0KtB6zrcvt%2BGI3\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8c847c5ce92b365a-FRA\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5408,"size_decoded":5408,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 352x198, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"be45d0805eb7df59c12133a5068bc251","sha1":"cc1c4c8e72514dfca25850dbcda72b0b61ec1d6f","sha256":"dbbe348517dc8846fc517a1dfaceb3d547de96adf6cd7ad7d9baf5222f9388cf","sha512":"e8b61f6ad15385bcd784dbb5356eb8a9863f1bbdcbcc92afaab469c5ca1fcec0ef1b3047ff99a15568f50b846e3296ca9aa6226316736d66e1c82809f9587fce","ssdeep":"96:FxQQXVzo+XPs0UfOC63g0HVW7Fvt/9i8nzgXi42Yp43l+oUAwPYBimAPnG7:FxXXu+XPLU2TTSdt/l/xQ/k","tlshash":"9eb1aeba941480c1417a089fc914202e97fd52a1beb7e348ece6e0ebf00061b45f37ae","first_seen":"2024-09-28T07:59:48.497513Z","last_seen":"2024-09-28T07:59:48.497513Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.eroticporns.com/thumb/48/mom-new-porn-videos.webp","fqdn":"www.eroticporns.com","domain":"eroticporns.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:32.632Z","timestamp":1727198852632,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eroticporns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Aug 2024 16:44:19 GMT","end":"Sat, 02 Nov 2024 16:44:18 GMT"},"fingerprint":{"sha1":"C4:5B:D2:8F:70:A7:B7:31:BB:EC:DB:B4:B6:6D:9F:F1:73:FE:0C:3E","sha256":"BA:64:F6:DD:64:84:84:ED:5A:E9:A8:50:0F:D4:DE:A5:9C:B1:50:27:E0:B3:C0:53:2A:6B:1F:F3:71:3C:A1:82"}}},"request":{"raw":"GET /thumb/48/mom-new-porn-videos.webp HTTP/1.1\r\nHost: www.eroticporns.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/porn/upskirt-videos/\r\nCookie: PHPSESSID=r9e4h1c9jt47akapojj56ul45l\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8026\r\nlast-modified: Mon, 05 Aug 2024 00:02:05 GMT\r\netag: \"66b0167d-1f5a\"\r\nx-powered-by: PleskLin\r\ncf-cache-status: HIT\r\nage: 4220\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=o8RE1phP7VwVBzVDR4Lwa3mT3NgikREEus%2F3MGp06GwWfehdIuuGH3hqSKvfmDGLxftGHhYYRJaNjrAR%2BSywHhACxroyR%2FnPFStco3gQgyWZGMO0tBVH%2B1XTo6VvuyzUVR%2Bc3GHR\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8c847c5ce930365a-FRA\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8026,"size_decoded":8026,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 352x198, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"de28129eef7b6256e101545798e520d0","sha1":"c98cb057d1c2413b49df65da9b1c12d927fdff99","sha256":"7e45ca24409f5694c41de4ad8a3aa038720284a2122d71c8b77bbdca431b80e1","sha512":"31c5440eb3753af45ec550755e2793427958da2de30c5f1807ab916d380e74542b6ee967be8d7aa083b7887eefe627f89a817b6e944292ad08b42dda7ee051f9","ssdeep":"192:e6S+ES+HlCJCd9I/d+hOQetjGZVjyQK0RMlbzF7e9y:sk+FeqqsTNiQK0RMdg9y","tlshash":"f6f1bface2ad681fc56bb4f5e1a198fd9ce5a40ca35c53893041f18fbdd90911469e13","first_seen":"2024-09-28T07:59:48.502798Z","last_seen":"2024-09-28T07:59:48.502798Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.eroticporns.com/thumb/50/videos-famosos-pornos.webp","fqdn":"www.eroticporns.com","domain":"eroticporns.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:32.636Z","timestamp":1727198852636,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eroticporns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Aug 2024 16:44:19 GMT","end":"Sat, 02 Nov 2024 16:44:18 GMT"},"fingerprint":{"sha1":"C4:5B:D2:8F:70:A7:B7:31:BB:EC:DB:B4:B6:6D:9F:F1:73:FE:0C:3E","sha256":"BA:64:F6:DD:64:84:84:ED:5A:E9:A8:50:0F:D4:DE:A5:9C:B1:50:27:E0:B3:C0:53:2A:6B:1F:F3:71:3C:A1:82"}}},"request":{"raw":"GET /thumb/50/videos-famosos-pornos.webp HTTP/1.1\r\nHost: www.eroticporns.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/porn/upskirt-videos/\r\nCookie: PHPSESSID=r9e4h1c9jt47akapojj56ul45l\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4788\r\nlast-modified: Mon, 05 Aug 2024 00:04:03 GMT\r\netag: \"66b016f3-12b4\"\r\nx-powered-by: PleskLin\r\ncf-cache-status: HIT\r\nage: 6519\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2C%2F32u6y0qkDYU%2FNkLX6qUnZczC%2FwaXzGdCvk9hs6CE1TQqf19rQg%2FkU6q1LAsloWLZtIFGZXgmVTVbOYVCiuEJAs%2BZORz5M523Ky2qGtYj6yC35B5Zwmnq6YqoVwdoJ7Yst%2BKAR\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8c847c5ce931365a-FRA\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4788,"size_decoded":4788,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 352x198, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"630b496e44cf08cdcd5afaedb2cf643d","sha1":"1dce2f9d1bdb4baa7ede99a7700601d5a4cf3ae3","sha256":"321edfbaf8a0c8834a37a3cd453c76be38e70af7cf5494a2fe761d1fe4bfcd71","sha512":"3f10ed3c5d026ed984e2bf68c33d6c4044156ea19647afe9f1b744c18ac07b833625e4a89f170539fdc500b06f989656cb3df95dbb984be3064ecba4a8f48ad0","ssdeep":"96:ZvEOX8H9hdWFjFtUXGi2QjcOGlQ+qde7MMx74W3q0CBg24whoO7HJ:Zv7XSeFjxTQMQza7jBCBb4wR7HJ","tlshash":"2ca18ec81bc7232892ff91bf37c8cd26be17095f162aa8d6dc994520db8974448f8750","first_seen":"2024-09-28T07:59:48.505943Z","last_seen":"2024-09-28T07:59:48.505943Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.eroticporns.com/thumb/73/videos-pornografia-lesbianas.webp","fqdn":"www.eroticporns.com","domain":"eroticporns.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:32.638Z","timestamp":1727198852638,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eroticporns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Aug 2024 16:44:19 GMT","end":"Sat, 02 Nov 2024 16:44:18 GMT"},"fingerprint":{"sha1":"C4:5B:D2:8F:70:A7:B7:31:BB:EC:DB:B4:B6:6D:9F:F1:73:FE:0C:3E","sha256":"BA:64:F6:DD:64:84:84:ED:5A:E9:A8:50:0F:D4:DE:A5:9C:B1:50:27:E0:B3:C0:53:2A:6B:1F:F3:71:3C:A1:82"}}},"request":{"raw":"GET /thumb/73/videos-pornografia-lesbianas.webp HTTP/1.1\r\nHost: www.eroticporns.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/porn/upskirt-videos/\r\nCookie: PHPSESSID=r9e4h1c9jt47akapojj56ul45l\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4136\r\nlast-modified: Mon, 05 Aug 2024 00:28:03 GMT\r\netag: \"66b01c93-1028\"\r\nx-powered-by: PleskLin\r\ncf-cache-status: HIT\r\nage: 6519\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1H4hWsxyKohF2LnK%2FLAqXAhyaIOhg2fZbAt7QztX0aNSovjOh%2B4omjnhAZ57bVqwmpK9%2B7fD0D3p%2F0LE%2FliecJZ8Dg09OrBikDQnzGGzyJwCbQgeKGOkVX1m2Pv9fjW9NyZCWwrr\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8c847c5ce935365a-FRA\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4136,"size_decoded":4136,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 352x198, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"48732cfb534156affbcc4975da353920","sha1":"bd3ee93b77964e9ef78e59d027110dbbff0e1700","sha256":"0baddff47a7a647bef5de6d4a976ff32f81fa020f40dbda8d081ac05e47751c6","sha512":"84b7077e31db6d1b9b398982edb2183665434065e64e4af8b711ecf63012bd1e47d5856e80231e52b9e2d3bf7e3924b18da5483adc86d112c52c40bd3055c55d","ssdeep":"96:nVwQqTSMBZjbZIeNum64/VYn7FIe3ZNAVIPx8Umy:TqTS2j9hN2iYn7nJaFUf","tlshash":"19819e2a97503c74e6ad2de8cc18879bb3424561389dd780c7e8070a35c58ba19fe94f","first_seen":"2024-09-28T07:59:48.50962Z","last_seen":"2024-09-28T07:59:48.50962Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.eroticporns.com/thumb/86/videos-pornogr%C3%A1ficos-j%C3%B3venes.webp","fqdn":"www.eroticporns.com","domain":"eroticporns.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:32.645Z","timestamp":1727198852645,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eroticporns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Aug 2024 16:44:19 GMT","end":"Sat, 02 Nov 2024 16:44:18 GMT"},"fingerprint":{"sha1":"C4:5B:D2:8F:70:A7:B7:31:BB:EC:DB:B4:B6:6D:9F:F1:73:FE:0C:3E","sha256":"BA:64:F6:DD:64:84:84:ED:5A:E9:A8:50:0F:D4:DE:A5:9C:B1:50:27:E0:B3:C0:53:2A:6B:1F:F3:71:3C:A1:82"}}},"request":{"raw":"GET /thumb/86/videos-pornogr%C3%A1ficos-j%C3%B3venes.webp HTTP/1.1\r\nHost: www.eroticporns.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/porn/upskirt-videos/\r\nCookie: PHPSESSID=r9e4h1c9jt47akapojj56ul45l\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5782\r\nlast-modified: Mon, 05 Aug 2024 00:41:03 GMT\r\netag: \"66b01f9f-1696\"\r\nx-powered-by: PleskLin\r\ncf-cache-status: HIT\r\nage: 276\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=MYciyZv5UF8kpZJHV%2BjFEhVAC1GAG%2B8KPPZsU86rwG8s8KCi9VNEQhiYfhIX8zRrJkgV09k%2Bj3qy1z3EHWvQYHXALq%2F4wPX9paqyAa8CpDTz9kAamJJIG5Bd9cP60KmLNYUtYo%2B%2B\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8c847c5cf949365a-FRA\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5782,"size_decoded":5782,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 352x198, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f7b91d2838888c6ee2c23f97e1044c98","sha1":"5df0db7d54955d807a46b88e9877aab6b23a49e2","sha256":"80dfe167afd8b8b0277033773d66179581448f38a697d1339de9ec0116d6ea23","sha512":"fb00af48824a884201c9f7b5e52f2dd289715b6687c4b1fb5db1f3917e968f9663925f1b3c7c11e1092fb073566ebca7e959ee5f2bffe2e3d6081d3b933063c8","ssdeep":"96:sxSBoAi+a53yc6bmMSbQ6AU3DSZEPtUtd3Zpj/Gdm2o//7NuexWnd2HwpSdiH8P:2cvX+PGFEA9ZXd3OMr//73ud1SV","tlshash":"37c17d07c9c1ca480acfc67f1d50594f68958ae96dd3d6e9090bfe36ea839e93521382","first_seen":"2024-09-28T07:59:48.514996Z","last_seen":"2024-09-28T07:59:48.514996Z","times_seen":1,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.eroticporns.com/thumb/90/videos-sexuales-duros.webp","fqdn":"www.eroticporns.com","domain":"eroticporns.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:32.649Z","timestamp":1727198852649,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eroticporns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Aug 2024 16:44:19 GMT","end":"Sat, 02 Nov 2024 16:44:18 GMT"},"fingerprint":{"sha1":"C4:5B:D2:8F:70:A7:B7:31:BB:EC:DB:B4:B6:6D:9F:F1:73:FE:0C:3E","sha256":"BA:64:F6:DD:64:84:84:ED:5A:E9:A8:50:0F:D4:DE:A5:9C:B1:50:27:E0:B3:C0:53:2A:6B:1F:F3:71:3C:A1:82"}}},"request":{"raw":"GET /thumb/90/videos-sexuales-duros.webp HTTP/1.1\r\nHost: www.eroticporns.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/porn/upskirt-videos/\r\nCookie: PHPSESSID=r9e4h1c9jt47akapojj56ul45l\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9172\r\nlast-modified: Mon, 05 Aug 2024 00:45:03 GMT\r\netag: \"66b0208f-23d4\"\r\nx-powered-by: PleskLin\r\ncf-cache-status: HIT\r\nage: 6515\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=JNP6K0h1zZWmaWWI%2B%2BVH7E3siWY6GbSIzCwEbqJyrnW2M5E%2FEzXlZLiy0fYq5GBnkjpf7HVzmob4xE0Fw%2BlF4Jue6pg4nUiIXAXisavHEIMMMx4Y2UFpVvWnZnXciutS5VEtI46E\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8c847c5d0962365a-FRA\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9172,"size_decoded":9172,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 352x198, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"78355e32a7e9b24ffa6db8f00cee66c6","sha1":"ccd66b02317326812fb96dd0086ddc6326487f40","sha256":"5233cec8890bdfe2fe710395abb0e4cc8d67b07c487923b6c1d306488502929c","sha512":"05c9d5f34298612bacbb6ef13102f6bde9a2b07bd0da2b36571bd3a5c1ef90e28b60cc44b75b1c793a3877d1a2d37e123b184495d4f28259dc95aa9bacddac99","ssdeep":"192:rwCdqbuczATGUmDYZu+j/z7+AmiOryx3eP33Reufd4YVosLz:rwCd4nzANFjqype3wuN3","tlshash":"6d129f584bd36cc858ac6d8bc3c3aa57eccdb73a5a37c672501d199f457fa097c8082a","first_seen":"2024-09-28T07:59:48.519721Z","last_seen":"2024-09-28T07:59:48.519721Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.eroticporns.com/thumb/89/videos-pornograficos-de-animes.webp","fqdn":"www.eroticporns.com","domain":"eroticporns.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:32.647Z","timestamp":1727198852647,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eroticporns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Aug 2024 16:44:19 GMT","end":"Sat, 02 Nov 2024 16:44:18 GMT"},"fingerprint":{"sha1":"C4:5B:D2:8F:70:A7:B7:31:BB:EC:DB:B4:B6:6D:9F:F1:73:FE:0C:3E","sha256":"BA:64:F6:DD:64:84:84:ED:5A:E9:A8:50:0F:D4:DE:A5:9C:B1:50:27:E0:B3:C0:53:2A:6B:1F:F3:71:3C:A1:82"}}},"request":{"raw":"GET /thumb/89/videos-pornograficos-de-animes.webp HTTP/1.1\r\nHost: www.eroticporns.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/porn/upskirt-videos/\r\nCookie: PHPSESSID=r9e4h1c9jt47akapojj56ul45l\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5782\r\nlast-modified: Mon, 05 Aug 2024 00:44:04 GMT\r\netag: \"66b02054-1696\"\r\nx-powered-by: PleskLin\r\ncf-cache-status: HIT\r\nage: 275\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=WV19Lxdaj%2BMhR5T7mkhipoaA5ykCnqYn1yHJJjq36ajhQShovPUxwEFvaoJtK4i47dzlagmOV1sR98Qrkul22wrpj2YJnQ17MiyIkfAMvq4qLqYvtW4pB6bn%2FMl2lvMU9cyjzJCm\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8c847c5d0957365a-FRA\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5782,"size_decoded":5782,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 352x198, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f7b91d2838888c6ee2c23f97e1044c98","sha1":"5df0db7d54955d807a46b88e9877aab6b23a49e2","sha256":"80dfe167afd8b8b0277033773d66179581448f38a697d1339de9ec0116d6ea23","sha512":"fb00af48824a884201c9f7b5e52f2dd289715b6687c4b1fb5db1f3917e968f9663925f1b3c7c11e1092fb073566ebca7e959ee5f2bffe2e3d6081d3b933063c8","ssdeep":"96:sxSBoAi+a53yc6bmMSbQ6AU3DSZEPtUtd3Zpj/Gdm2o//7NuexWnd2HwpSdiH8P:2cvX+PGFEA9ZXd3OMr//73ud1SV","tlshash":"37c17d07c9c1ca480acfc67f1d50594f68958ae96dd3d6e9090bfe36ea839e93521382","first_seen":"2024-09-28T07:59:48.514996Z","last_seen":"2024-09-28T07:59:48.514996Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.eroticporns.com/thumb/108/mom-and-son-porn-videos.webp","fqdn":"www.eroticporns.com","domain":"eroticporns.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:32.654Z","timestamp":1727198852654,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eroticporns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Aug 2024 16:44:19 GMT","end":"Sat, 02 Nov 2024 16:44:18 GMT"},"fingerprint":{"sha1":"C4:5B:D2:8F:70:A7:B7:31:BB:EC:DB:B4:B6:6D:9F:F1:73:FE:0C:3E","sha256":"BA:64:F6:DD:64:84:84:ED:5A:E9:A8:50:0F:D4:DE:A5:9C:B1:50:27:E0:B3:C0:53:2A:6B:1F:F3:71:3C:A1:82"}}},"request":{"raw":"GET /thumb/108/mom-and-son-porn-videos.webp HTTP/1.1\r\nHost: www.eroticporns.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/porn/upskirt-videos/\r\nCookie: PHPSESSID=r9e4h1c9jt47akapojj56ul45l\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9242\r\nlast-modified: Mon, 05 Aug 2024 01:07:03 GMT\r\netag: \"66b025b7-241a\"\r\nx-powered-by: PleskLin\r\ncf-cache-status: HIT\r\nage: 3140\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Q7CbPXKVNo7IiHCT2JqBkX%2F9mS1kJjRI%2F6%2B4OzzERlrZY7WSAyc2VQ24XIIKpymKBxGadmJ9%2FSASbmcUv5dEP5ar%2FCdcJZm%2BJuR0KNXduLByzpunvSyfoGD5wXgEVEganAlGP3un\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8c847c5d1978365a-FRA\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9242,"size_decoded":9242,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 352x198, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1ee2c32fc446f2ecfd49b5a86903c994","sha1":"0d0a11b18148a3c2539a613d831f2b7661e33cc7","sha256":"54ae03fe9e438adb9392f32ae8f1f318ffcdd7d716ba5a94ac4fe0d22a9d15b7","sha512":"79e295182b70df1e7c5bef27258f69b64ef7b1228ff66a868114827385d0fc8921648f839cb4d964d860f6fea2532d0267c201f4df951f3eb37c4fb94e369b23","ssdeep":"192:CQIj07dabTFdIG2vcFf+wwPIHGJqJVAKGicn8k56axHQmu:CQIjYaHTJqLRwHGJLF5NtQmu","tlshash":"f412bf2f26d97769424f2d8bbce3eaca2c2e750cae1237e03c4170e11ea15ce06c8755","first_seen":"2024-09-28T07:59:48.524848Z","last_seen":"2024-09-28T07:59:48.524848Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.eroticporns.com/thumb/138/videos-de-prono-en-espa%C3%B1ol.webp","fqdn":"www.eroticporns.com","domain":"eroticporns.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:32.655Z","timestamp":1727198852655,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eroticporns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Aug 2024 16:44:19 GMT","end":"Sat, 02 Nov 2024 16:44:18 GMT"},"fingerprint":{"sha1":"C4:5B:D2:8F:70:A7:B7:31:BB:EC:DB:B4:B6:6D:9F:F1:73:FE:0C:3E","sha256":"BA:64:F6:DD:64:84:84:ED:5A:E9:A8:50:0F:D4:DE:A5:9C:B1:50:27:E0:B3:C0:53:2A:6B:1F:F3:71:3C:A1:82"}}},"request":{"raw":"GET /thumb/138/videos-de-prono-en-espa%C3%B1ol.webp HTTP/1.1\r\nHost: www.eroticporns.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/porn/upskirt-videos/\r\nCookie: PHPSESSID=r9e4h1c9jt47akapojj56ul45l\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7462\r\nlast-modified: Mon, 05 Aug 2024 01:39:04 GMT\r\netag: \"66b02d38-1d26\"\r\nx-powered-by: PleskLin\r\ncf-cache-status: HIT\r\nage: 1169\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BvgwS3YMOhLQCrQUI%2BgIy%2FQvWqBpVSRSS6%2B6rp2%2Bkc5qW%2Bw4FOAxLv6zwFovfLmSSR4vhjrVWLIPozPhOZwbJJwm4bXeTGXNTW194dUFN5QCbiNHl0gADcnpcSaEPJtQtfJ9ITQr\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8c847c5d1980365a-FRA\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7462,"size_decoded":7462,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 352x198, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d9ec6958018dee493c6dde756b43839c","sha1":"10233ee39a81557190a167d9803b358852d23f27","sha256":"9fadb70418c0e8ecaacbfcdd17156a3eea8e1a8dbc029c562c45107a9109d1e8","sha512":"98e4d74eb5379f1caf0aa90d536f4c28fe2f1fb4fb1b99439fb8156fc5ce4c698045eb4268c0a748ff049a6c64a9071842af327b34fbcbe96dae0f1512b6dc49","ssdeep":"192:2BnD9WkGDI/535IZ/0xr433yCPNhZCvnwfb5k:2BDMRDO5pIg433hP/aGba","tlshash":"48f1a0ef943b40a2f2fba983768530710cbf62697af11d41579b12c07b5dc74e816d40","first_seen":"2024-09-28T07:59:48.530246Z","last_seen":"2024-09-28T07:59:48.530246Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.eroticporns.com/thumb/103/videos-pornograficos-de-negras.webp","fqdn":"www.eroticporns.com","domain":"eroticporns.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:32.652Z","timestamp":1727198852652,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eroticporns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Aug 2024 16:44:19 GMT","end":"Sat, 02 Nov 2024 16:44:18 GMT"},"fingerprint":{"sha1":"C4:5B:D2:8F:70:A7:B7:31:BB:EC:DB:B4:B6:6D:9F:F1:73:FE:0C:3E","sha256":"BA:64:F6:DD:64:84:84:ED:5A:E9:A8:50:0F:D4:DE:A5:9C:B1:50:27:E0:B3:C0:53:2A:6B:1F:F3:71:3C:A1:82"}}},"request":{"raw":"GET /thumb/103/videos-pornograficos-de-negras.webp HTTP/1.1\r\nHost: www.eroticporns.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/porn/upskirt-videos/\r\nCookie: PHPSESSID=r9e4h1c9jt47akapojj56ul45l\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5782\r\nlast-modified: Mon, 05 Aug 2024 01:01:03 GMT\r\netag: \"66b0244f-1696\"\r\nx-powered-by: PleskLin\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=c8%2BBlCDsgGytD%2F52HJsUHXzauNXWCyaoU2HbwuFSiJJDVEAq%2FVw9aJKP%2Fob8yeXvAVJTfSUanvn%2F6fot9nOymRNsUZl5itViHmdvphmpZ6aHM76FeTS7al%2B6wBZWziP8jT9Ycs8x\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8c847c5d096e365a-FRA\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5782,"size_decoded":5782,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 352x198, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f7b91d2838888c6ee2c23f97e1044c98","sha1":"5df0db7d54955d807a46b88e9877aab6b23a49e2","sha256":"80dfe167afd8b8b0277033773d66179581448f38a697d1339de9ec0116d6ea23","sha512":"fb00af48824a884201c9f7b5e52f2dd289715b6687c4b1fb5db1f3917e968f9663925f1b3c7c11e1092fb073566ebca7e959ee5f2bffe2e3d6081d3b933063c8","ssdeep":"96:sxSBoAi+a53yc6bmMSbQ6AU3DSZEPtUtd3Zpj/Gdm2o//7NuexWnd2HwpSdiH8P:2cvX+PGFEA9ZXd3OMr//73ud1SV","tlshash":"37c17d07c9c1ca480acfc67f1d50594f68958ae96dd3d6e9090bfe36ea839e93521382","first_seen":"2024-09-28T07:59:48.514996Z","last_seen":"2024-09-28T07:59:48.514996Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.eroticporns.com/static/favicon-16x16.png","fqdn":"www.eroticporns.com","domain":"eroticporns.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:32.801Z","timestamp":1727198852801,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eroticporns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Aug 2024 16:44:19 GMT","end":"Sat, 02 Nov 2024 16:44:18 GMT"},"fingerprint":{"sha1":"C4:5B:D2:8F:70:A7:B7:31:BB:EC:DB:B4:B6:6D:9F:F1:73:FE:0C:3E","sha256":"BA:64:F6:DD:64:84:84:ED:5A:E9:A8:50:0F:D4:DE:A5:9C:B1:50:27:E0:B3:C0:53:2A:6B:1F:F3:71:3C:A1:82"}}},"request":{"raw":"GET /static/favicon-16x16.png HTTP/1.1\r\nHost: www.eroticporns.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/porn/upskirt-videos/\r\nCookie: PHPSESSID=r9e4h1c9jt47akapojj56ul45l\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 675\r\nlast-modified: Fri, 02 Aug 2024 23:23:29 GMT\r\netag: \"66ad6a71-2a3\"\r\nx-powered-by: PleskLin\r\ncf-cache-status: HIT\r\nage: 3915\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XIDDNDgrBgdDZLl3mULeh3mvzfo6DgsSEe32BCPXTmpVxhsxw3lM5l4gCcsYa0HYtspaKSOyTdywK%2FUg5e2Iv97HgknNpIYbQ8LvlBSf8xfb%2FuI28Ec8XYISe1W6Wr8eUfp4MmTp\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8c847c5e1b8e0e24-AMS\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":675,"size_decoded":675,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"aba14e250c2bba4ab090597f45ef9e45","sha1":"2a2e7dc8323582d1a3a59ff25053aa25f5e67dde","sha256":"edf4abe1d43e83557fb9fec13ca15fddc75125290f327b151612e961d38a3804","sha512":"8b7099cc024f90ad4df9ec5a1b37f856b671998ab850f0db5e142058d9ba11d70442018c48dbbe13f63e2c577ad3825a8d9952702873141dd7f979b65614c292","ssdeep":"","tlshash":"af0188ff762e54374c58c27fc04dc9280e50050c8d95353258dc2e61c1e92de10e9915","first_seen":"2024-08-03T21:48:55Z","last_seen":"2024-10-20T20:34:29.688705Z","times_seen":13,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.eroticporns.com/static/apple-touch-icon.png","fqdn":"www.eroticporns.com","domain":"eroticporns.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:32.799Z","timestamp":1727198852799,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eroticporns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Aug 2024 16:44:19 GMT","end":"Sat, 02 Nov 2024 16:44:18 GMT"},"fingerprint":{"sha1":"C4:5B:D2:8F:70:A7:B7:31:BB:EC:DB:B4:B6:6D:9F:F1:73:FE:0C:3E","sha256":"BA:64:F6:DD:64:84:84:ED:5A:E9:A8:50:0F:D4:DE:A5:9C:B1:50:27:E0:B3:C0:53:2A:6B:1F:F3:71:3C:A1:82"}}},"request":{"raw":"GET /static/apple-touch-icon.png HTTP/1.1\r\nHost: www.eroticporns.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/porn/upskirt-videos/\r\nCookie: PHPSESSID=r9e4h1c9jt47akapojj56ul45l\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 13768\r\nlast-modified: Fri, 02 Aug 2024 23:23:48 GMT\r\netag: \"66ad6a84-35c8\"\r\nx-powered-by: PleskLin\r\ncf-cache-status: HIT\r\nage: 4220\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Z38tCHbQCF1XQwDptJeKQ%2F3UAK1sizGKPnUnfIrdlcN8UdHsvqCd7Xo6aDlD%2BCGuOcMlhbT%2F0M10QbyJhE7cgp0sTJHrSsVpLGIRVGcC0FDjCrrjCaY6oJ8qA%2BLtxmkOV55NoLME\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8c847c5e1b880e24-AMS\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13768,"size_decoded":13768,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"a8e355d27e3adf53cc9b5fdaf074498a","sha1":"4f887a7efcedf8f3861ccac28dd654f4d2cb8654","sha256":"9a86719f8e058f9d6e3c7c43344801b0ea21e10d5fbd12e043db94cda6982489","sha512":"32a62c5718400c2f1ae219e2624c96707d8e319719ed911e6047ab7c03427404f1f45fee21173dc553a2f71cb2418d16efb8dada4aa7f2720db43f14df08082a","ssdeep":"384:NshRbIyn6dJ9EChWwIC6peUCYNjEAa3JdXTeRSa:NybIynkJGCQTw1esa","tlshash":"fb52c089a7fb4bc54e4a2d1a65474ae834805adc11f5bcc0db8c91af4be28cd743c6cb","first_seen":"2024-08-03T21:48:55Z","last_seen":"2024-10-20T12:39:43.388237Z","times_seen":11,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn77-vid-mp4.xnxx-cdn.com/VFNPCIm2BuTvk21rF4I6Gw==,1727209652/videos/mp4/1/7/1/xvideos.com_1716dcf926c9c98650690096c741af20-1.mp4?ui=MTA0LjIzOC45LjIzNC0vdmlkZW8tMTBtOXpqM2QvbXlfc3RlcF9jb3VzaW4=","fqdn":"cdn77-vid-mp4.xnxx-cdn.com","domain":"xnxx-cdn.com","tld":"com"},"ip":{"addr":"195.181.166.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:32.894Z","timestamp":1727198852894,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xvideos.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Oct 2023 00:00:00 GMT","end":"Fri, 11 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"C8:79:F3:AC:85:D8:36:AC:8C:F2:30:0D:AF:6E:19:50:37:CC:C6:95","sha256":"05:72:DD:2A:5B:AE:48:AC:CB:4F:16:0F:D8:EA:64:B8:22:0F:8C:0F:56:06:C7:E7:D7:29:02:B5:D8:FF:52:C2"}}},"request":{"raw":"GET /VFNPCIm2BuTvk21rF4I6Gw==,1727209652/videos/mp4/1/7/1/xvideos.com_1716dcf926c9c98650690096c741af20-1.mp4?ui=MTA0LjIzOC45LjIzNC0vdmlkZW8tMTBtOXpqM2QvbXlfc3RlcF9jb3VzaW4= HTTP/1.1\r\nHost: cdn77-vid-mp4.xnxx-cdn.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br, identity\r\nRange: bytes=0-\r\nReferer: https://www.eroticporns.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Tue, 24 Sep 2024 17:27:33 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 24400345\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Fri, 15 Jul 2022 17:41:42 GMT\r\ncache-control: max-age=10368000, public\r\naccess-control-allow-origin: *\r\nx-77-nzt: EwwBw7WmDQH3xCIAAAwBJRPCQAH38M5FAAwBj/Q63QH3e1kMAA\r\nx-77-nzt-ray: b1f3ea1bb629789285f6f2664d341500\r\nx-accel-expires: @1732982993\r\nx-accel-date: 1727189953\r\nx-77-cache: HIT\r\nx-77-age: 5393199\r\nserver: CDN77-Turbo\r\nx-cache: HIT\r\nx-age: 8900\r\ncontent-range: bytes 0-24400344/24400345\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":null,"data":{"size":3146232,"size_decoded":3146232,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"267665ae2ae4d6094017082984c16392","sha1":"f62bb1ba01cdee008ed94fc625f5405ec2e59529","sha256":"703e927236735080f41e8b10b295d8361ab6bed4aee7f7a3f27cb023f28281fa","sha512":"31f375837a251de424e5d290122165357f24aaaf84f6fb1f09b956904487e421b870a376691e045b09f72deca0086372af0ab3de09b272bf346733286c922808","ssdeep":"49152:Q8rLye1aWW6+SBErVDbXP4RlbRkZcY91t5OZulas+ncGGzAuJz:Raew6hWrRLW051XKP/clzh","tlshash":"a9e51257ffa14baeee090371d9c882083860c4d45a149b1bb1dabd17bc976f05fd28e9","first_seen":"2024-09-28T07:59:48.540295Z","last_seen":"2024-09-28T07:59:48.540295Z","times_seen":1,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":104,"dns":75,"connect":8,"send":0,"wait":10,"receive":117,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:34.02346703Z","timestamp":1727198854023,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"832DB75A524DD4DC5F6685D449EBEA912E6D6A46840881400E37C4C66646E0C5\"\r\nLast-Modified: Sun, 22 Sep 2024 15:05:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=18613\r\nExpires: Tue, 24 Sep 2024 22:37:46 GMT\r\nDate: Tue, 24 Sep 2024 17:27:33 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"149df23de38be38ad92b2dcc04918bfa","sha1":"d3a6b464329e43df4d99326ebf64e6bb82d8c4ee","sha256":"832db75a524dd4dc5f6685d449ebea912e6d6a46840881400e37c4c66646e0c5","sha512":"61ccebc5e1430d5221340dbc867d27ba6e7e58d951f31f02c20b04b3eddd1cb462f9471951dc92c130bf1ba10abac67dcc1f09f25cfba84ad9ead2cb325e8111","ssdeep":"","tlshash":"09f0c06c17c65800562609654ceaec363e3c76fc18c025c7904850eaf6227586b0624d","first_seen":"2024-09-23T03:45:43Z","last_seen":"2024-09-28T08:23:28.370698Z","times_seen":3,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c99574de6f.dd4ef151bb.com/2707e112eeeb72e6bd247f526060d1a5.js","fqdn":"c99574de6f.dd4ef151bb.com","domain":"dd4ef151bb.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:33.256Z","timestamp":1727198853256,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c99574de6f.dd4ef151bb.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Sep 2024 02:21:50 GMT","end":"Fri, 20 Dec 2024 02:21:49 GMT"},"fingerprint":{"sha1":"7D:86:0E:F7:5B:A4:C6:6D:AF:2D:39:08:2C:F3:1A:6E:B2:A9:F9:A0","sha256":"54:A2:8A:6F:67:B8:4A:D8:37:E2:26:62:0E:92:F3:A3:0F:D7:24:25:0E:25:BF:E1:80:01:D4:5C:25:0D:09:BB"}}},"request":{"raw":"GET /2707e112eeeb72e6bd247f526060d1a5.js HTTP/1.1\r\nHost: c99574de6f.dd4ef151bb.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.eroticporns.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Tue, 24 Sep 2024 09:25:00 GMT\r\netag: W/\"66f2856c-1ca3c\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 24 Sep 2024 17:32:33 GMT\r\ncache-control: max-age=300\r\nx-proxy-cache: HIT\r\nx-cdn-host-id: ds9225\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37413,"size_decoded":117308,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"e8ee48ae560531ef3c26da66123ed822","sha1":"9720647f9d9457120f58580c346b99adb0c5eefa","sha256":"9a7d138e1b3dbe87ad59f5f554c03dca365ff6ff7d92d5df4053dbbfe8288d03","sha512":"30ca4b68aded6384b4bb3b6b8b1856cbd101c63b5693e252080f86edf2f489c0f85a1c71b65a83dda4a7302aaa4dd262bb242a2a2983a1d9d988c71c2936e578","ssdeep":"1536:jmYYfOFIildn9U2ciYXYJxl5hA9v5Jn7QOSguChXWTS8cxQXEJCyUEE:SYYmi2XY0xlA9vDnTl2","tlshash":"f9b34bddb3c7b07443e76164943f1206b73a2a16b80c8414f6a6eac1787cdda9227f79","first_seen":"2024-09-24T19:28:14Z","last_seen":"2024-09-28T07:59:48.561396Z","times_seen":5,"resource_available":true,"data":null}},"time_used":581,"timings":{"blocked":280,"dns":93,"connect":20,"send":0,"wait":21,"receive":0,"ssl":162},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:34.133610588Z","timestamp":1727198854133,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"C4C3C75C09D25B08B9D911CA0138F3A1319B5E35E06A670B285C1806E6069BD6\"\r\nLast-Modified: Tue, 24 Sep 2024 13:17:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=6834\r\nExpires: Tue, 24 Sep 2024 19:21:28 GMT\r\nDate: Tue, 24 Sep 2024 17:27:34 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"f73ceff12b564e1c2296d475e9ba8906","sha1":"928a54dec8f9924f62e8b6424267120d99b37a06","sha256":"c4c3c75c09d25b08b9d911ca0138f3a1319b5e35e06a670b285c1806e6069bd6","sha512":"77f2f2278812cced817338c7a3b9b25c370f2503b560122b60a7a45269208bef39af6b07d429ba693daaada0dba3fb862c978080af6dbd331de73f374107da7c","ssdeep":"","tlshash":"f1f00e9517792d04477928bb4ad1c5120c26a7ac6d88a9a6ad4613e2ad62bbc300011d","first_seen":"2024-09-24T15:25:04Z","last_seen":"2024-09-28T08:02:15.698465Z","times_seen":2801,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:34.143822478Z","timestamp":1727198854143,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"C4C3C75C09D25B08B9D911CA0138F3A1319B5E35E06A670B285C1806E6069BD6\"\r\nLast-Modified: Tue, 24 Sep 2024 13:17:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=6834\r\nExpires: Tue, 24 Sep 2024 19:21:28 GMT\r\nDate: Tue, 24 Sep 2024 17:27:34 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"f73ceff12b564e1c2296d475e9ba8906","sha1":"928a54dec8f9924f62e8b6424267120d99b37a06","sha256":"c4c3c75c09d25b08b9d911ca0138f3a1319b5e35e06a670b285c1806e6069bd6","sha512":"77f2f2278812cced817338c7a3b9b25c370f2503b560122b60a7a45269208bef39af6b07d429ba693daaada0dba3fb862c978080af6dbd331de73f374107da7c","ssdeep":"","tlshash":"f1f00e9517792d04477928bb4ad1c5120c26a7ac6d88a9a6ad4613e2ad62bbc300011d","first_seen":"2024-09-24T15:25:04Z","last_seen":"2024-09-28T08:02:15.698465Z","times_seen":2801,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c99574de6f.dd4ef151bb.com/0f33232215dc48edc338e749207a0aaf/226063?version_name=b\u0026domain=www.eroticporns.com","fqdn":"c99574de6f.dd4ef151bb.com","domain":"dd4ef151bb.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:33.632Z","timestamp":1727198853632,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c99574de6f.dd4ef151bb.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Sep 2024 02:21:50 GMT","end":"Fri, 20 Dec 2024 02:21:49 GMT"},"fingerprint":{"sha1":"7D:86:0E:F7:5B:A4:C6:6D:AF:2D:39:08:2C:F3:1A:6E:B2:A9:F9:A0","sha256":"54:A2:8A:6F:67:B8:4A:D8:37:E2:26:62:0E:92:F3:A3:0F:D7:24:25:0E:25:BF:E1:80:01:D4:5C:25:0D:09:BB"}}},"request":{"raw":"GET /0f33232215dc48edc338e749207a0aaf/226063?version_name=b\u0026domain=www.eroticporns.com HTTP/1.1\r\nHost: c99574de6f.dd4ef151bb.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.eroticporns.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:33 GMT\r\ncontent-type: application/json\r\nserver: nginx/1.18.0\r\ncache-control: max-age=300\r\nexpires: Tue, 24 Sep 2024 17:32:33 GMT\r\nx-proxy-cache: HIT\r\nx-cdn-host-id: ds9225\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12787,"size_decoded":12787,"mime_type":"application/json","magic":"data","md5":"745a181394cdc6f777fc566b5ee9c5d6","sha1":"e0fdc53e4e0e6da2400be79ee3a4ff6a18d17c5b","sha256":"ecfaffdf0374dd2bb3909b45488905a08f952653d2ce32037531358cd3267564","sha512":"938a6762f4ab52e58f2731509a3f10788fc8db6a273b0fd91540f040a8bd35111847b68b10e67dcf3924e78071fb2b31e951d8af388df7823a85a960fb3a7383","ssdeep":"384:bzfDhsAMzv+DlWsIZHe+YHU8L6hHU8L6EzU8L6THU8L6NWEPycD7pfKkIEBJuR:bzrhsNzv+JWsIZ+5UzpUzKUzTUzNWEPE","tlshash":"e4424ce4af5848ffc0e006dad59d3a0802aa319770d8764df4bc4b6c169ea961b6730b","first_seen":"2024-09-28T07:59:48.564295Z","last_seen":"2024-09-28T07:59:48.564295Z","times_seen":1,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:34.159608985Z","timestamp":1727198854159,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"C4C3C75C09D25B08B9D911CA0138F3A1319B5E35E06A670B285C1806E6069BD6\"\r\nLast-Modified: Tue, 24 Sep 2024 13:17:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=6834\r\nExpires: Tue, 24 Sep 2024 19:21:28 GMT\r\nDate: Tue, 24 Sep 2024 17:27:34 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"f73ceff12b564e1c2296d475e9ba8906","sha1":"928a54dec8f9924f62e8b6424267120d99b37a06","sha256":"c4c3c75c09d25b08b9d911ca0138f3a1319b5e35e06a670b285c1806e6069bd6","sha512":"77f2f2278812cced817338c7a3b9b25c370f2503b560122b60a7a45269208bef39af6b07d429ba693daaada0dba3fb862c978080af6dbd331de73f374107da7c","ssdeep":"","tlshash":"f1f00e9517792d04477928bb4ad1c5120c26a7ac6d88a9a6ad4613e2ad62bbc300011d","first_seen":"2024-09-24T15:25:04Z","last_seen":"2024-09-28T08:02:15.698465Z","times_seen":2801,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.eroticporns.com/thumb/3/indian-school-girls-sex-videos.webp","fqdn":"www.eroticporns.com","domain":"eroticporns.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:32.475Z","timestamp":1727198852475,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eroticporns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Aug 2024 16:44:19 GMT","end":"Sat, 02 Nov 2024 16:44:18 GMT"},"fingerprint":{"sha1":"C4:5B:D2:8F:70:A7:B7:31:BB:EC:DB:B4:B6:6D:9F:F1:73:FE:0C:3E","sha256":"BA:64:F6:DD:64:84:84:ED:5A:E9:A8:50:0F:D4:DE:A5:9C:B1:50:27:E0:B3:C0:53:2A:6B:1F:F3:71:3C:A1:82"}}},"request":{"raw":"GET /thumb/3/indian-school-girls-sex-videos.webp HTTP/1.1\r\nHost: www.eroticporns.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/porn/upskirt-videos/\r\nCookie: PHPSESSID=r9e4h1c9jt47akapojj56ul45l\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:32 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sun, 04 Aug 2024 18:10:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66afc400-52ae\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 6520\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1eDwlPHE5dcIPN9kKctxdkgC6y4d6MNhcgTCa8x6ELyct%2FhIl9AGev5E3F6sqXT2%2FWT0R8JqEbwXdGdp8UKeiPsL8A9fYDMPBrEwDBlQEcdB3Rh3d0DfRb%2FnctlV28O%2BXHAaB13L\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c5bffa9365a-FRA\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32181,"size_decoded":32181,"mime_type":"image/webp","magic":"gzip compressed data, max speed, from Unix","md5":"c0f3de4a2ddd71a9dec6e7d060dfc2f5","sha1":"51b25af4f33efb7ef4b5210c4187428ed6437955","sha256":"1e213244c473b15509c7bc1833d3563483094871a1e63a56933c91b99461bec3","sha512":"00af84ece01006343d5fff6ca45d34bab380db653dafb77111e4519f17be1ddd1354dd8725ae73b7295480b4202ce97f529403ea2f35445515870ba74985bb08","ssdeep":"768:DY/fpUS9pbcKhWLuXk5bkJL2rF+6EFEqkRS0+7M6P1Au:c/hpYKau05bM+hEMI0x6Np","tlshash":"64e2e10a28d9c464bfeb817bdc7aa2350f46c8fc609934c886ff68fd49718b14244d2b","first_seen":"2024-09-28T07:59:48.56862Z","last_seen":"2024-09-28T07:59:48.56862Z","times_seen":1,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.eroticporns.com/video/6028/trio-pornografico.mp4","fqdn":"www.eroticporns.com","domain":"eroticporns.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:32.619Z","timestamp":1727198852619,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eroticporns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Aug 2024 16:44:19 GMT","end":"Sat, 02 Nov 2024 16:44:18 GMT"},"fingerprint":{"sha1":"C4:5B:D2:8F:70:A7:B7:31:BB:EC:DB:B4:B6:6D:9F:F1:73:FE:0C:3E","sha256":"BA:64:F6:DD:64:84:84:ED:5A:E9:A8:50:0F:D4:DE:A5:9C:B1:50:27:E0:B3:C0:53:2A:6B:1F:F3:71:3C:A1:82"}}},"request":{"raw":"GET /video/6028/trio-pornografico.mp4 HTTP/1.1\r\nHost: www.eroticporns.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/porn/upskirt-videos/\r\nCookie: PHPSESSID=r9e4h1c9jt47akapojj56ul45l\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 24 Sep 2024 17:27:32 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://cdn77-vid-mp4.xnxx-cdn.com/VFNPCIm2BuTvk21rF4I6Gw==,1727209652/videos/mp4/1/7/1/xvideos.com_1716dcf926c9c98650690096c741af20-1.mp4?ui=MTA0LjIzOC45LjIzNC0vdmlkZW8tMTBtOXpqM2QvbXlfc3RlcF9jb3VzaW4=\r\nx-powered-by: PHP/8.2.23, PleskLin\r\nvary: Accept-Encoding\r\ncf-cache-status: BYPASS\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7GijU4S%2FiONDF%2BqOBEXTzErmJNCDS5lVZTn0E6N6uZ6l1IIYVy%2FuSUktrMitsckXqbnoSZtWTJR1%2FpwIPlttuMuRA%2BR5jHYbR7IASLSIfQ5EWCSklufSuYh8Ifnp0MkQInJnG7sp\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c5ce91d365a-FRA\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":6060,"size_decoded":6060,"mime_type":"video/mp4","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3","md5":"86f67207c48fccaed10b199d136d5022","sha1":"5ec0c0ad649e42e4d49f18521c92356dadf6e647","sha256":"115f61341bba696a25e0de51af2ddcb78529e8c7ebade84bca5ba28bd3211a4a","sha512":"40976714f7fb26a80f474542c5c8004f3735c01ded26d1b4dd312f090dba344ac67c715eced8ef9c00b9f864048192f5eb744a4fc1ffc055bd039b0c8c48deaa","ssdeep":"96:qEaQR+d2ZqqDnkwqNiGbdDSE6oFappLwGqmx63LMSGGumG6GTVpZbx5zvZoR:qEZBZqqDVqR5SSFazLwGqQ2xGZHxXfvY","tlshash":"a7c19f2e6bce48ecf07541b4a55416a3ed6fd88272b50b460107481bc65f1aca9eb780","first_seen":"2024-09-24T13:45:49Z","last_seen":"2024-09-28T08:03:24.295776Z","times_seen":19,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:34.223681359Z","timestamp":1727198854223,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"9919C6B7A9044FEF12FD95333D3F2F00FCBE2DA969DBBBA293237B425747943E\"\r\nLast-Modified: Mon, 23 Sep 2024 21:04:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=5521\r\nExpires: Tue, 24 Sep 2024 18:59:35 GMT\r\nDate: Tue, 24 Sep 2024 17:27:34 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"df0f9a886816909c63c09262c6d440f2","sha1":"2f6cc517a735c87d781bc5e0282ba2797347be9a","sha256":"9919c6b7a9044fef12fd95333d3f2f00fcbe2da969dbbba293237b425747943e","sha512":"8cc5a6695a121636fca4077536af2de572f87d7fc119113b1184b28b6f9b6ee9bee25cb172315bf78a860a0c3bfc3a58d9a35cac7123454eaae89f340b797aeb","ssdeep":"","tlshash":"17f005b1323cd451db1016778cd4ec3625305dac54b05cdd194c23ab7d5175452d5d0e","first_seen":"2024-09-24T19:28:15Z","last_seen":"2024-09-28T07:59:48.57268Z","times_seen":3,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:34.243513908Z","timestamp":1727198854243,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"7626DC2EDE7B28777BFB10C874BBB52336420740833B73027FC04C0BC81035B9\"\r\nLast-Modified: Mon, 23 Sep 2024 16:01:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=5337\r\nExpires: Tue, 24 Sep 2024 18:56:31 GMT\r\nDate: Tue, 24 Sep 2024 17:27:34 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"305dde2b1c70ce717ebc070063e10c52","sha1":"861709dc36ef0b58ac2a76dfa4845752a798a778","sha256":"7626dc2ede7b28777bfb10c874bbb52336420740833b73027fc04c0bc81035b9","sha512":"c42ca9a0979ef2c7940bd0ec3a5aa8b3a51ef78b08bace8a17bab904761f102b3d7c50be1d1805f6b1d4a4d3e2ec690e03705162a514e40db44deeacdb95a0c1","ssdeep":"","tlshash":"c3f00e5323d5b921cba3a95498a9ca2c383566de30680cd471c893e3bc217ec4299008","first_seen":"2024-09-24T05:57:51Z","last_seen":"2024-09-28T08:08:15.968889Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:34.28681303Z","timestamp":1727198854286,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"B3D4E6D132B6A5828D4900D1E3A24A5D4D958EFEEB91899B197175819AAB4DB4\"\r\nLast-Modified: Mon, 23 Sep 2024 16:02:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=19625\r\nExpires: Tue, 24 Sep 2024 22:54:39 GMT\r\nDate: Tue, 24 Sep 2024 17:27:34 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"b066b2901d3f276aff8990e82f68a35f","sha1":"3359187785c199c167ae57997b28fce289351996","sha256":"b3d4e6d132b6a5828d4900d1e3a24a5d4d958efeeb91899b197175819aab4db4","sha512":"0ea1b824abab3262b1bb27a8056851ac26e6a621c8f9e7982258d1d5fc9b1cefad8a8a9ff6bc32d1a68c415482e9757e617f463fa627f31bfeff5a54ef9c3de3","ssdeep":"","tlshash":"c6f0051607e23945e7970a013cb9e5b05621bdddb45008d5d0e082e1ad21ffaa0cc5cc","first_seen":"2024-09-24T05:57:51Z","last_seen":"2024-09-28T08:08:15.969826Z","times_seen":3,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=226063","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:34.132Z","timestamp":1727198854132,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Aug 2024 04:34:54 GMT","end":"Sat, 16 Nov 2024 04:34:53 GMT"},"fingerprint":{"sha1":"45:52:8C:9D:57:BA:65:CC:D6:E3:BA:47:79:D3:57:FC:CA:CB:04:0B","sha256":"FD:0B:68:7F:CB:A1:2A:C4:BB:1E:D3:23:6B:65:40:17:40:36:2E:99:AB:61:38:E2:79:F5:8B:DF:57:22:CD:B8"}}},"request":{"raw":"OPTIONS /fp?tag_id=226063 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.eroticporns.com/\r\nOrigin: https://www.eroticporns.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.20.1\r\nDate: Tue, 24 Sep 2024 17:27:34 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nAccess-Control-Allow-Origin: https://www.eroticporns.com\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":124,"dns":15,"connect":34,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8159323a9c.d064229052.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiI4MjQ1NDgyOTcwMzA2OTkwMDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMTI3LjEwIiwidGFnX2lkIjoyMjYwNjMsInNjcmVlbl9yZXNvbHV0aW9uIjoiMTI4MHgxMDI0IiwiYWRibG9jayI6MCwidGltZXpvbmVfb2xzb24iOiJVVEMiLCJ1dG1fc291cmNlIjoiIiwidXRtX21lZGl1bSI6IiIsInV0bV9jYW1wYWlnbiI6IiIsInV0bV9jb250ZW50IjoiIiwibW0iOjAsImluaXRfc3RhcnRfbGF0ZW5jeSI6MC40OSwiaXNfdjIiOjAsImlzX3YyX2VtcHR5IjowfQ==","fqdn":"8159323a9c.d064229052.com","domain":"d064229052.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:34.122Z","timestamp":1727198854122,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8159323a9c.d064229052.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Sep 2024 02:52:01 GMT","end":"Fri, 20 Dec 2024 02:52:00 GMT"},"fingerprint":{"sha1":"3C:AD:4C:64:BE:4F:E7:AC:2F:4A:C1:CB:54:52:8A:2F:4F:36:13:E8","sha256":"A6:5E:23:EE:B7:54:15:D3:08:9A:37:FB:06:2D:81:D2:F0:34:E6:15:11:18:93:98:79:CE:E2:8C:DB:E4:5D:1C"}}},"request":{"raw":"GET /in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiI4MjQ1NDgyOTcwMzA2OTkwMDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMTI3LjEwIiwidGFnX2lkIjoyMjYwNjMsInNjcmVlbl9yZXNvbHV0aW9uIjoiMTI4MHgxMDI0IiwiYWRibG9jayI6MCwidGltZXpvbmVfb2xzb24iOiJVVEMiLCJ1dG1fc291cmNlIjoiIiwidXRtX21lZGl1bSI6IiIsInV0bV9jYW1wYWlnbiI6IiIsInV0bV9jb250ZW50IjoiIiwibW0iOjAsImluaXRfc3RhcnRfbGF0ZW5jeSI6MC40OSwiaXNfdjIiOjAsImlzX3YyX2VtcHR5IjowfQ== HTTP/1.1\r\nHost: 8159323a9c.d064229052.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.eroticporns.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:34 GMT\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nx-cdn-host-id: ds9225\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":433,"timings":{"blocked":202,"dns":78,"connect":23,"send":0,"wait":31,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.cabnnr.com/banner-admanager/build.m.js","fqdn":"js.cabnnr.com","domain":"cabnnr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:34.150Z","timestamp":1727198854150,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.cabnnr.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 17 Aug 2024 03:04:01 GMT","end":"Fri, 15 Nov 2024 03:04:00 GMT"},"fingerprint":{"sha1":"B6:41:70:DE:96:07:CC:36:BD:86:D2:10:17:39:D1:F9:96:10:1F:AB","sha256":"50:94:3E:35:FA:10:A0:08:6E:00:8B:56:0F:DD:22:AA:17:37:D4:A2:1F:C0:E3:49:AB:03:C2:FD:3E:90:BF:49"}}},"request":{"raw":"GET /banner-admanager/build.m.js HTTP/1.1\r\nHost: js.cabnnr.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:34 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Mon, 19 Aug 2024 09:00:56 GMT\r\netag: W/\"66c309c8-d7f5\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 24 Sep 2024 17:32:34 GMT\r\ncache-control: max-age=300\r\nx-proxy-cache: HIT\r\nx-cdn-host-id: ds9225\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18464,"size_decoded":18464,"mime_type":"application/javascript; charset=utf-8","magic":"gzip compressed data, from Unix","md5":"7da6b8a4f66da857882abf59cb704acf","sha1":"9e796723b28bc8f0ac41a27963a0461477cd5aa8","sha256":"99f780a3ba4bf66edc5633d9321d43b27469dffadc9c755ac220b63f4a44f9cf","sha512":"7ee1177b80f0c3e77c2a2a0ebdafbe9223518b9a524200ecdbb729fad658bad0dcd2473d24bce2c4c5a5acc4b2695aac1989d87b72bbeda9f68093e635b788fd","ssdeep":"384:UWuO50e7C8OliuoBVBPhn1cZW+VFgJpOlXY9haC:7uO50eWdwTh1Ol0clo5","tlshash":"6a82c0fbf223fefcf5eb1c5842dbb8595641658a7c203e8430c672a55169820344bedd","first_seen":"2024-08-19T12:34:21Z","last_seen":"2024-09-28T07:59:48.580042Z","times_seen":6,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":94,"dns":17,"connect":25,"send":0,"wait":20,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:34.563942242Z","timestamp":1727198854563,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"EF2B51B6428B73B1DA6BD2613038099871B7821B4B938CB85525FD62CB44C844\"\r\nLast-Modified: Mon, 23 Sep 2024 08:42:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=10748\r\nExpires: Tue, 24 Sep 2024 20:26:42 GMT\r\nDate: Tue, 24 Sep 2024 17:27:34 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"42caba756729f28541a30e3d562d6721","sha1":"1b4b7e7db1bc8936affee29d301e4fe052dde9e7","sha256":"ef2b51b6428b73b1da6bd2613038099871b7821b4b938cb85525fd62cb44c844","sha512":"789419790324fe1335584c789405e73ae54918401c0973f746c953f6022448b3a89fcaf91b5def3b8d8d07440ea083fe5bcf18955b47f704bcb81a7a34733440","ssdeep":"","tlshash":"baf00571187875e31f55573cdc96ef720d221b8c345410d7062457f52d217bc0408b4d","first_seen":"2024-09-24T19:28:15Z","last_seen":"2024-09-28T07:59:48.58219Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:34.565002987Z","timestamp":1727198854565,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"EF2B51B6428B73B1DA6BD2613038099871B7821B4B938CB85525FD62CB44C844\"\r\nLast-Modified: Mon, 23 Sep 2024 08:42:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=10748\r\nExpires: Tue, 24 Sep 2024 20:26:42 GMT\r\nDate: Tue, 24 Sep 2024 17:27:34 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"42caba756729f28541a30e3d562d6721","sha1":"1b4b7e7db1bc8936affee29d301e4fe052dde9e7","sha256":"ef2b51b6428b73b1da6bd2613038099871b7821b4b938cb85525fd62cb44c844","sha512":"789419790324fe1335584c789405e73ae54918401c0973f746c953f6022448b3a89fcaf91b5def3b8d8d07440ea083fe5bcf18955b47f704bcb81a7a34733440","ssdeep":"","tlshash":"baf00571187875e31f55573cdc96ef720d221b8c345410d7062457f52d217bc0408b4d","first_seen":"2024-09-24T19:28:15Z","last_seen":"2024-09-28T07:59:48.58219Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:34.565879314Z","timestamp":1727198854565,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"EF2B51B6428B73B1DA6BD2613038099871B7821B4B938CB85525FD62CB44C844\"\r\nLast-Modified: Mon, 23 Sep 2024 08:42:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=10748\r\nExpires: Tue, 24 Sep 2024 20:26:42 GMT\r\nDate: Tue, 24 Sep 2024 17:27:34 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"42caba756729f28541a30e3d562d6721","sha1":"1b4b7e7db1bc8936affee29d301e4fe052dde9e7","sha256":"ef2b51b6428b73b1da6bd2613038099871b7821b4b938cb85525fd62cb44c844","sha512":"789419790324fe1335584c789405e73ae54918401c0973f746c953f6022448b3a89fcaf91b5def3b8d8d07440ea083fe5bcf18955b47f704bcb81a7a34733440","ssdeep":"","tlshash":"baf00571187875e31f55573cdc96ef720d221b8c345410d7062457f52d217bc0408b4d","first_seen":"2024-09-24T19:28:15Z","last_seen":"2024-09-28T07:59:48.58219Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:34.566597541Z","timestamp":1727198854566,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"EF2B51B6428B73B1DA6BD2613038099871B7821B4B938CB85525FD62CB44C844\"\r\nLast-Modified: Mon, 23 Sep 2024 08:42:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=10748\r\nExpires: Tue, 24 Sep 2024 20:26:42 GMT\r\nDate: Tue, 24 Sep 2024 17:27:34 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"42caba756729f28541a30e3d562d6721","sha1":"1b4b7e7db1bc8936affee29d301e4fe052dde9e7","sha256":"ef2b51b6428b73b1da6bd2613038099871b7821b4b938cb85525fd62cb44c844","sha512":"789419790324fe1335584c789405e73ae54918401c0973f746c953f6022448b3a89fcaf91b5def3b8d8d07440ea083fe5bcf18955b47f704bcb81a7a34733440","ssdeep":"","tlshash":"baf00571187875e31f55573cdc96ef720d221b8c345410d7062457f52d217bc0408b4d","first_seen":"2024-09-24T19:28:15Z","last_seen":"2024-09-28T07:59:48.58219Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nereserv.com/in/dip?event_id=c697b2e4-b076-40dd-a0e6-0b449ba07d18\u0026subid=358801270\u0026spot_id=1411041\u0026created_at=2024-09-24\u0026timezone=0\u0026ver=1.154.3","fqdn":"nereserv.com","domain":"nereserv.com","tld":"com"},"ip":{"addr":"168.119.25.102","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:35.063Z","timestamp":1727198855063,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Aug 2024 04:34:54 GMT","end":"Sat, 16 Nov 2024 04:34:53 GMT"},"fingerprint":{"sha1":"45:52:8C:9D:57:BA:65:CC:D6:E3:BA:47:79:D3:57:FC:CA:CB:04:0B","sha256":"FD:0B:68:7F:CB:A1:2A:C4:BB:1E:D3:23:6B:65:40:17:40:36:2E:99:AB:61:38:E2:79:F5:8B:DF:57:22:CD:B8"}}},"request":{"raw":"GET /in/dip?event_id=c697b2e4-b076-40dd-a0e6-0b449ba07d18\u0026subid=358801270\u0026spot_id=1411041\u0026created_at=2024-09-24\u0026timezone=0\u0026ver=1.154.3 HTTP/1.1\r\nHost: nereserv.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.eroticporns.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 24 Sep 2024 17:27:34 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nereserv.com/in/dip?site=native-push\u0026wl=1\u0026event_id=b9396fd0-3574-4252-ad75-085376ec381d\u0026subid=1081949002\u0026sid=479855615\u0026spot_id=1411038\u0026created_at=2024-09-24\u0026timezone=0\u0026ver=8.189.0\u0026is_native=1","fqdn":"nereserv.com","domain":"nereserv.com","tld":"com"},"ip":{"addr":"168.119.25.102","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:34.470Z","timestamp":1727198854470,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Aug 2024 04:34:54 GMT","end":"Sat, 16 Nov 2024 04:34:53 GMT"},"fingerprint":{"sha1":"45:52:8C:9D:57:BA:65:CC:D6:E3:BA:47:79:D3:57:FC:CA:CB:04:0B","sha256":"FD:0B:68:7F:CB:A1:2A:C4:BB:1E:D3:23:6B:65:40:17:40:36:2E:99:AB:61:38:E2:79:F5:8B:DF:57:22:CD:B8"}}},"request":{"raw":"GET /in/dip?site=native-push\u0026wl=1\u0026event_id=b9396fd0-3574-4252-ad75-085376ec381d\u0026subid=1081949002\u0026sid=479855615\u0026spot_id=1411038\u0026created_at=2024-09-24\u0026timezone=0\u0026ver=8.189.0\u0026is_native=1 HTTP/1.1\r\nHost: nereserv.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.eroticporns.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 24 Sep 2024 17:27:34 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":109,"dns":1,"connect":34,"send":0,"wait":34,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"e5.o.lencr.org/","fqdn":"e5.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:34.66973926Z","timestamp":1727198854669,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: e5.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 346\r\nETag: \"6FF1BCC91E6437D9F862B94C9DCF39985E8D5110281BBBEA706F480664C18294\"\r\nLast-Modified: Mon, 23 Sep 2024 03:13:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=3927\r\nExpires: Tue, 24 Sep 2024 18:33:01 GMT\r\nDate: Tue, 24 Sep 2024 17:27:34 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":346,"size_decoded":346,"mime_type":"application/octet-stream","magic":"data","md5":"1bcca9da1c15dd6a252b72ef100e859d","sha1":"24a12d23514eb8db21616f3c45587c4377ff66f3","sha256":"6ff1bcc91e6437d9f862b94c9dcf39985e8d5110281bbbea706f480664c18294","sha512":"bf184525526ffe46081f86e3c2908d4abfca6a2a579f0de41fe2d041bf9b44471bbe85baa9325711949611f9c555573369039bd3fe63d9edbcf690abc1877be4","ssdeep":"","tlshash":"d2e0c0a04b407e9447b5707218e5c80c773218d87a011ad1794593eaa913b38fd4400f","first_seen":"2024-09-28T07:59:48.583625Z","last_seen":"2024-09-28T07:59:48.583625Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"96deb6c755.6dd1167e04.com/in/multy","fqdn":"96deb6c755.6dd1167e04.com","domain":"6dd1167e04.com","tld":"com"},"ip":{"addr":"94.130.198.6","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:34.720Z","timestamp":1727198854720,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"6dd1167e04.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Sep 2024 14:03:38 GMT","end":"Thu, 19 Dec 2024 14:03:37 GMT"},"fingerprint":{"sha1":"8B:B9:AC:EA:0F:FA:A0:EB:9A:C1:6E:E7:B5:20:0A:A8:BE:94:98:A1","sha256":"3C:ED:7F:1D:3F:2B:18:D0:8A:FC:33:BC:FD:93:EB:9B:DC:04:F1:73:65:69:50:1D:20:25:39:88:AC:6C:BA:9D"}}},"request":{"raw":"OPTIONS /in/multy HTTP/1.1\r\nHost: 96deb6c755.6dd1167e04.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.eroticporns.com/\r\nOrigin: https://www.eroticporns.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.20.1\r\ndate: Tue, 24 Sep 2024 17:27:34 GMT\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtbrenab.com/get/?go=1\u0026data=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","fqdn":"rtbrenab.com","domain":"rtbrenab.com","tld":"com"},"ip":{"addr":"116.202.60.226","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:34.460Z","timestamp":1727198854460,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rtbbnr.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Jun 2024 02:03:01 GMT","end":"Sat, 28 Sep 2024 02:03:00 GMT"},"fingerprint":{"sha1":"DC:D1:3A:99:18:53:59:04:68:CF:CA:F4:F7:48:72:8E:28:21:8C:3D","sha256":"F3:70:6D:0B:F3:E6:40:8C:DD:0A:92:A2:BC:ED:F2:A2:6F:9E:03:4A:1E:37:7E:1F:58:9A:F4:DF:81:05:39:60"}}},"request":{"raw":"GET /get/?go=1\u0026data=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 HTTP/1.1\r\nHost: rtbrenab.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 24 Sep 2024 17:27:34 GMT\r\ncontent-type: text/html\r\ncontent-length: 5502\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5502,"size_decoded":12176,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (7003)","md5":"a4ac6aee0887d475697aaca0892c9b9c","sha1":"4ba4fb0a96499a84147c7e5ba608cebc9ad39f85","sha256":"fe63dd62d22992f3e2ade882eafba5166f433c36ca2b4fe90592f114b47b6685","sha512":"3ec2e5a45e16c37c8b66ed8a0d1f7a895072a76029a926ee1b8e5662a6154735c91afd4e4fff82972c4999660a7b2a6d5e488d48b513805c5ba6bfe59d0246e5","ssdeep":"192:DChgaBV8BQ1mHPfEL61gCxoU/KfUJ9lgfNtlgfQ/lgfQ2:eJBCHP061FXoyu3uKur","tlshash":"eb425dc8ab8bdc2581a1b6187ab367111b536e41cbc59761ee330b348898f37945ff0d","first_seen":"2024-09-28T07:59:48.585696Z","last_seen":"2024-09-28T07:59:48.585696Z","times_seen":1,"resource_available":false,"data":null}},"time_used":442,"timings":{"blocked":119,"dns":29,"connect":29,"send":0,"wait":195,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"o.pki.goog/wr2","fqdn":"o.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"216.58.211.3","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:34.828068564Z","timestamp":1727198854828,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /wr2 HTTP/1.1\r\nHost: o.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 83\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Tue, 24 Sep 2024 17:27:34 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 471\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":471,"size_decoded":471,"mime_type":"application/octet-stream","magic":"data","md5":"c1f30456a6590d00ef9943a7d97080dd","sha1":"e54db9976ced217f20ad3e9d7a709c5f51980c7e","sha256":"1de5c77ebccb8d0ef509fa07fdf2b070e23dbd09833e5e83de5a9349eb7d5190","sha512":"56a4c77237d503cbd6646057e8e3489d3bb389de010c401b844bbb59a03bcce8cd22ac49c1c819599ad4fc031ca069d4e1f0209187d2f1a0e2da2b9b03aa0f79","ssdeep":"","tlshash":"f0f0d47a1ada5e61cf310c5070e5995135155d0c141c0185507cc5e2f65d7bd2a1733b","first_seen":"2024-09-23T20:37:29Z","last_seen":"2024-09-28T08:13:43.845105Z","times_seen":87,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"64.233.162.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:34.722Z","timestamp":1727198854722,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Aug 2024 07:15:53 GMT","end":"Mon, 18 Nov 2024 07:15:52 GMT"},"fingerprint":{"sha1":"0B:C3:86:74:01:E6:62:4F:E1:8C:AE:A2:13:50:0B:FC:2A:E4:08:16","sha256":"A6:6C:EF:5C:52:EC:B1:48:CD:3C:F7:E1:21:B9:30:8B:94:1E:C6:44:B5:B3:CD:C5:19:38:28:0F:3E:79:03:27"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:JsvKUkvcgNgLlVkCGUfsPdzLUVbfdg:tpJo_B4vzAR-nbXr; Expires=Thu, 24-Sep-2026 17:27:34 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 24 Sep 2024 17:27:34 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026ifkv=ARpgrqdbWk2lnebuLYHCzOvVyhnF-JHHiDhqbgRf1AmkEq1pHLPnqUMexE9WVjwF680QpC3hSsC0gg\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-opener-policy: unsafe-none\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce--dRn0ayMwG2xyT4MlGP9lg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist\r\ncross-origin-resource-policy: cross-origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":107,"dns":0,"connect":30,"send":0,"wait":39,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026ifkv=ARpgrqdbWk2lnebuLYHCzOvVyhnF-JHHiDhqbgRf1AmkEq1pHLPnqUMexE9WVjwF680QpC3hSsC0gg","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"64.233.162.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:34.875Z","timestamp":1727198854875,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Aug 2024 07:15:53 GMT","end":"Mon, 18 Nov 2024 07:15:52 GMT"},"fingerprint":{"sha1":"0B:C3:86:74:01:E6:62:4F:E1:8C:AE:A2:13:50:0B:FC:2A:E4:08:16","sha256":"A6:6C:EF:5C:52:EC:B1:48:CD:3C:F7:E1:21:B9:30:8B:94:1E:C6:44:B5:B3:CD:C5:19:38:28:0F:3E:79:03:27"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026ifkv=ARpgrqdbWk2lnebuLYHCzOvVyhnF-JHHiDhqbgRf1AmkEq1pHLPnqUMexE9WVjwF680QpC3hSsC0gg HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:O5QONZ_Xj-hOYCaFdkDZ45dz4o6UuQ:kWIfc_E89ITJpQqy;Path=/;Expires=Thu, 24-Sep-2026 17:27:34 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 24 Sep 2024 17:27:34 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=ARpgrqdAMER9BxAYa_IIw0-3G7Kgm0GaQgMhDdMt6rQ0K0gLegqV0tq5v1n7RnwglJynqMXAkg2p1A\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S-770470224%3A1727198854903576\u0026ddm=0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-a61ky-TLrM9Lb7Tw98lTEg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 419\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":419,"size_decoded":558,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (392)","md5":"024a67a658682072d6d6db3006566693","sha1":"289ecdf58bd7e7d9beff7a919e1ea6826a7b1f08","sha256":"f972d28e6b346c4fb0cb5aa9987dbe23a63e9d6ee0000423c07fe5ad0553f360","sha512":"0bc9aa6ec2006267e08d2cdda4db024baa0e0290095a5fb3e5c2241380c9f0eb4db512c8737662bab7a60a7f97b38efea58c240166d71a64091b1d64a7af2177","ssdeep":"","tlshash":"41f0ebeb4d8a00e5a15339f4b41c60cc4474a8583de6b57d61e6930806e481bb1462b6","first_seen":"2024-09-28T07:59:48.590803Z","last_seen":"2024-09-28T07:59:48.590803Z","times_seen":1,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtbrenab.com/banner/in/show/?mid=5367201542977405044\u0026pid=0\u0026site=1411044\u0026sc=NO\u0026usage_type=DCH\u0026subid=347141763\u0026sid=0\u0026cid=12774\u0026price=0\u0026is_cpm=1\u0026cpm=0.0014378333091735833\u0026ecpm=0.0014378333091735833\u0026crid=\u0026crtid=d41d8cd98f00b204e9800998ecf8427e\u0026tcid=0\u0026out_id=\u0026ver=\u0026ver_c=\u0026refdom=3txxx.com\u0026hostname=auc-banner-hz-9\u0026site_id=0\u0026spot_id=1411044\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026expiration_timestamp=0\u0026created_at=0000-00-00\u0026is_native=6\u0026pop_winurl=\u0026ip=91.90.42.154\u0026testab=\u0026px_id=1411044\u0026adblock=0\u0026auction_host=\u0026mm=\u0026yc=\u0026render_type=\u0026campaign_type=\u0026uniq=\u0026exp=0\u0026resp_type=iframeAd\u0026iabcat=IAB25\u0026min_cpm=0.00011591515205782852\u0026placement_type_id=9\u0026skin_test=\u0026verify_hash=\u0026score=1\u0026ml=\u0026tag_ab=b\u0026v2=0\u0026ttl=\u0026space_id=1496\u0026banner_width=300\u0026banner_height=250\u0026accel=0\u0026gyr=0\u0026iabcat=IAB25\u0026url=%2F%2Fbts.a11k.com%2Fin%2Ftishow%2F%3Fkatds_ep%3DJksJgZkrR9laf18T0JQd5cz49OKIyIdJ-BcuWi_EBAVLwCgXDBNm63Di0HPQ5ATWbNF_-ZP7RIBo0PqPUMxt-HyFRUBfh543lwuEBmD8ZWJ0_zquFBTGBEMBDOQmcqz85RArqfHtduEpqPSkyYeddZX08s6rvZyKBGil9tLI0Xi5NLpqU7JoPnADW9wqhYKWAN6rWTgyIiVoxwwS69LqQmROEn_XwOzEMqjSGUPBq1LEL6od-01nLEK1LHhsMtHFZt_WpfxMgMNmvEbYx5B7TQbXVhD7ywcqALfH9FvN0puIkBJbCGscDoMU3xxZ4HdpgvHMhljb4OfvkdLD6KBOkH2vpKVFPR6cDMJjCDC0WO1COSpXz8eCLCOhfPWoxNgZp-Vx4Jhbgj-ZzkTgppbtaYd-RUAHdKTsiOMJxIHcTrnfGSjT0YtQuUL0WsVfKxN2CIemxqc5gfZch324XlnKzPPowYC70LxbeUgvlEXD2VhnGj3qplWFcXEY_b09BPhuSGpKajxJHY1p6mswO3_SZa28W7P9zttSMcVo6eb2xop_5xRNuR6PizrVx54iD1HJqkRjsM7Ml0oX-fwBWo6yZlaqqC4_h1MRvIe2RXAyIm3naubtmxfv9-z5Re4FivVdI7oJbNIfcDk_npjh4vh_PNtVeNw4ceimhxvFMceVkGGbq7RbyRUB2htBUaxdKfss9oDOgfLFudKK0sXkhpYX_6UzZ5t7XYtlafatzrB2tzFvcWL8NOlVSGZedMTykJkvxobaDaUdt79EODKwwD6bfzHghvup8KIZQ7Wgnx_3l-ozqQXxjH9UaR5WV-kZ8ru1BBnSkvV6F74Jb1jwlBHM3tWsFdN6yh8LyTkOpSOYI1jx0PvxjOD8z_qS2JYI2mGgCsgWEJsNA9c3ZzZvP90YxkYDXuY_WUVW8BaxG4-qJfMq8sfEakBxLAYyjOWLhAXOQxwxWEv1RHsRmLnajHvDdHPpJrPKE0OtxK0b-ETIkDROoXJKirktpa7S7bU1uZ5TvoWVFUxs63rvVbfneJ-UBPxjPQopBrYnyn_yOEYsVGpFn078p6pzWXZF0Of-4Q31XemmHvUKCkZht52mHQpLUiv9a5LGScE_0tU68gbNsTM62efOkRCWuaJvZ-_sqZnYlxVLtDOHah9I5UaPlicILhuivTgRN6vC28a5XMvo_L6ocflqIuKQqMXJnDHr7Ag6Fb_6fgCtREnr1XgZETMK00phcGEadzC6DLp6illnE-lhADBa21w2NHm3kUN4vv210GkhnpOlOdElcL55hQVM844Mv4gsvQ17CXUl57nGpjQYrLcL3dnhAbDw-Q5FcyF7YAb_HAEuxM1Ty9V9OqTbeiTpOAEWBMulDfP-Q-IAEwAMPQURzzM5wr6rvpVUO5OQdKRpG0jBODrkX-NDjKqpuQMXdCcDpYeA--jSAY4kSrzEBluPWcUcYZTjykIhAK-fPEVVKtU6x7S0MPUjdEBbzCfOlARRzCywMH6rs3EPLV3GtTRBMZnGJC5HSM2srf9oWg7UOD717HaatAun7SpDQQnQpg4PRYg1ShWrFj6VkgMtLeMUdq02bHwdwyiPI8fIJvpNAQ5NVoKWyc_SYLsrroDR5qReyPDxQqftIFh_OqIYvTw4Nkz5y4c_BrMHfi6BIMPZ3VJJAz4swsK-6fH3KkiDXWvVPHtAiz-oY5IpqAAzMl-KyWmFRstgPOqSucBZ9YcjXQBuUm5yM_HLAIl59WLQPFrSrQtbOMkasTZfZniqJy6eQ9PBsWHup5oTX_qYWFfgBnl705poQmsnAZN-8UO2DlEFGpO4CWCKJebFoT-b9mtn-3KPDQjnUWnLKKTGyZIB_F4oe2FpOBx7xFfgoPuE9TVGmTsKirsfbdUnVq1pDuDxFJ_sH1UPjPF2QtvOp-AEYWd-90TTqRb2C5oIdOMosQeOB4aUHqMz1gqM7sme5JKqJZzlUkQMYqe2ue8ZP55mpIcXh2N4mVTvBg-dp5UQ8Hhx11U81BYAnEKOMH19azVdwG25iO1FlKM8-WCDkj2lRfroMn3t-g8JvzEM_lak4Wtmsoxhx8peeWLpcE7H9zJUq2x2nl2kcj6E3JoX3JYMQ8QTUr9HH3kx-cxKqRqF8gfUC_RH8uZYQqIEOCdjOABaAB8DyawlMRRU6uXz8ri4HTWZP5wLp7KMnzc2C4DjfoOsDjZj-REclh7-wKT4vP2wIlyYaqn_FOdu5Bd-TJTXyPWMbIUn89wghGtYd8mcdmIx3R2FB80Z06qA_DhoI3U8E-85qJYN8xTGahldw-m1FyP-xLHTTinsP3NpvNMw7twLrGQixFIQ9PRoGxsNQs2jR2GzJ-mxq9rSQLh_r1oi4pwm9zQ4rOzeBZlnsiKhw3hApcbWe0SgppChKneHifs5LbMOUPwkQ-f-spcnXsmTruDXFigicRtGKB654j5YuEnv2EErl4F1U5qK0AHrweIf6dopIHwzS8cMJdK6_33C_D5cGZtdmkCGi3pGMcmTxguXaAMuzIneqKFt_E5WSsw7wC_i1XB4sbGPhQHmQYZsg4CdOXECNaaMiobKCgHFrX_LwIsPTZuIWwcBn7zixEeCZE8VpfeTNzQZ7Vhhr6zwlG4Vm2PMqdpxXllgMMSYCZtKNO6c5_6jv3GO73w-o1PJqFHEQhX6ApqghmfHZXIVP9gfw1RBkH4wMtlQfZljz0ss9k__m4QKlKxnCzWaMd25Wj_68RhwPdp62JGoxYavBqsjleZQNbaL7TWnk3DfxMPwP87ikba1Tn3saYrzw5qxHyMUwS5zLR_FdxuakYzJ2Lj1LvOtyUV9KKXtOcVKYI3jks_vo9zz1wFrBNT5olLqmM1Khim10_yH6AIDVo12EemxC8J_qn9Zk5_cZxiReHoAiuZZE-gFeQ_epa2HcMay0hnYXUIHGk2rECsZ8bQD1u5x7gAuN2G71OwdDGWV0G-jMmm85LhoIxlXNd260hlp8Fxqr9TtPXx8K_CDQpwuv7FmO3VLEcCw0YJ2q2fWJkLE41A-Ftf77BiFcXzNmajXTMW2xYVePE8Ku8zMMUAHjC3bnSTeDfP3Dbdrm-uRU1aprrU5_Wq--lNIGY2qcmTZDa2MOvCoWOplc-oMc6I6JUCcownhNIIsTUynTV3Vc0Js5cvNN5ODhYLARuAD3vjYstwXAaXLD2FBm14bqHS_VjWPxF40VzE78vegxlCoYBbfgLD8ehe2Fo1LzSJ_fE5OU4RVPhhDaKp6AF9ra0qc-Bpibv5vru7lR4DW3ki2X0kIwZmtIhB8WGJadpMXRs8w5cfQGjnLcO5E55yFYVAko4xqmuXQZcyqihCFgJsDr2w7s3To6qh3cSAt4enZkXHojmHRQJNy6cbn1GdVAe7egTzRcMu8GXcxyPkKdhGYQ6n8lw-aM2JvWQNVvx2lSRd8176ZKvej4Ku6G2d-CCijxP4w7MvYyY1uYkzf7Fxr6VejDkg_sUACfkflMlIIBbrl0_QvfCgf1GR9yoGwqeUmHljul2NnxxJLwS-Rowqj-KGklRo9uPkNP9j6M8XaCsGYAACxQD65BeQiYLwWL-yyuufAVjmzZ0Ym5qKAUoOGkjXkDGedKiHnlid1in9lacGRYJ7QGfEn_8ndNa_170cAhR5pDvq-47XQZxi_Mvbf6pztWKo899_sGC9r6bWA3GBoRmr6K7bIKqOPdXRWJJU6YPmkJ7pJD6uZURmMg921jBkqWA2mSi3jia-IgnwYPjOufcC-JSZsqeM8qYyZ1E7WicAD4MNFsfvmqmnv4sLCsUu35IvhDQniPEW7pxkug_II3ZgjZ3u5M7OEsZTcv0ReTKEXq4TEu8gbkc9rbLCs5R3_mCZmuEVZWThP53EL4GXzY8HeeiaSM91QqAABHj-vCkMsXLByDd4cwFb8TdXG1al0LvTbhXPt0yAhpW4SF6NRcck7eeyI3vscvZJAz2SGaRhtMR5j48429wae7qsPFC0W49NRJ5vAD2UuP5aESNUfrnPi9It2Qgf8ektwunBY4ULg8-q7C491bDAUI2iKD5PvUkBabjOED2K2I4gZAvAb_Csg-4Y8w2rgeL74uLukduom_m32sM7Fwywt2XN1BAl1c3UkvlSUdlu8cA1Nb0c3pCLFXDMI2sWpg3ocpXJxvKVtNM4dldyK_I3K7BHfLbONmU6IYRChq3dEwRMv1wb-FxQpS08galjl24LTO6YSto5Zwe4lAW8PFDphq4IXGgvEUIGioODtf13YQ8PZpRL9zHrpy0zL-iYPkVAxaKjwSPTLuXGhelbkOgJ3vXvoieQxofDGknHSPgLQEDxy2Wnft8mLtaOcOPT9FoTm5L44kv-9XKfFh0Kh360JJE2JlwGdpnLgIpQfUr-efRcppQ8MjvCVKHqgPVECAUzdfRKC2cQqEX1SU6Y1WholNeG9XTerALARbbdcHXwGc0nR7ks01oycf61KYFgIXv68b8Q1gDXYj24XB2ltbwwWvFWLIvBCq-Is4ZVdHYwbveq2JBzqiBfA_54PVEKtK46BKSfFZjkrdHqtOpl4pXdssIu4r5iYvKsKq5eiIJHONFHiP2ImSlt5jGwibR19eYAyDkz2q9P5ZDW6rP154SSHlLOEPvO6FjQc1NzM0OpIH6WDkyezpktMbPKT4GtqLn1n-xQmQpPHlZrRtR9WMlkN_MBuWd36EobPMasZ7ZM5d1UCMAuSY_hRDUwq_yLydDAwo3rGgzqmHvYKoIHrduvSjzAsUORybJjH0jZZqZ9vcANX3Y9iGqi_a2GEZtPLw8_cDpCwnGDCYbOjSY922aWU4PR02RBxJXKtsnlM0M_xkaVfZZSQELclnpiTvLuW2cg9fuOlVgSPL1al5J2AtbnMgqSdGxneJutEIhOh7O19GY-FUo837l2X-cJYCCpS9Ez6qGl8ZmwTqLiwyQTPLuADoHUvG79SY1_tTaEQrOfrz-1iesGWEr-VuF_sAIY4kpMViI4xeX_GX-vzqmkcWXKG2WfTS0or2e5sAmK6xMWWNU3CMzP7pmOeWZYZIsL8e41MiqL4-iWyaJ5BvpnlB191kzSmWP9PrTHwXIQK6aW1uk34iG88Y5ogMmpjRR29cs6lThIajepLTHZ7XQcmRbM90tQR6t-C_9uhlx7L4QkfrUdy9WdVDC0eA4I2GwZAE_Kv%26bid%3D0.0016666666666666668\u0026pr=\u0026bid_crid=\u0026bid_cid=\u0026is_iframe=0\u0026ad_tags=upskirt%2Cvideos%2Cporn%2Cporn%2Cmovies%2Cfree%2Cporn%2Cfree%2Cporn%2Cmovies%2Csex%2Cporno%2Cfree%2Csex%2Ctube%2Cporn%2Ctube%2Cvideos%2Cfull%2Cporn%2Cxxnx%2Cxnxxx%2Cxxx%2Cpussy%2Cvideos%2Cupskirt%2Cxporn%2Cfirst%2Clive%2Csex%2Cporn%2Cvideos%2Cerotic%2Cporn%2Cfuck%2Cor%2Cxxx%2Cporno%2Cgood%2Cbrazzers%2Csex,\u0026stratagem=\u0026ssp=4042\u0026refresh=1\u0026priority=0\u0026bb=0.0001\u0026label_ids=39\u0026site_id64=1411044\u0026container=ClickadillaTuple\u0026original_bid_usd=0.0014378333091735833\u0026comeback=\u0026topics=\u0026o_d=d3d3LmVyb3RpY3Bvcm5zLmNvbQ==\u0026ectr=7.852606574594855e-05\u0026client_price=0.0017253999710082999\u0026direct_client_price=0\u0026client_payment_model=cpm\u0026ext_campaign_id=236776\u0026auction_time=1727198854\u0026account_id=2022","fqdn":"rtbrenab.com","domain":"rtbrenab.com","tld":"com"},"ip":{"addr":"116.202.60.226","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://rtbrenab.com/get/?go=1\u0026data=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","date":"2024-09-24T17:27:34.884Z","timestamp":1727198854884,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rtbbnr.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Jun 2024 02:03:01 GMT","end":"Sat, 28 Sep 2024 02:03:00 GMT"},"fingerprint":{"sha1":"DC:D1:3A:99:18:53:59:04:68:CF:CA:F4:F7:48:72:8E:28:21:8C:3D","sha256":"F3:70:6D:0B:F3:E6:40:8C:DD:0A:92:A2:BC:ED:F2:A2:6F:9E:03:4A:1E:37:7E:1F:58:9A:F4:DF:81:05:39:60"}}},"request":{"raw":"GET /banner/in/show/?mid=5367201542977405044\u0026pid=0\u0026site=1411044\u0026sc=NO\u0026usage_type=DCH\u0026subid=347141763\u0026sid=0\u0026cid=12774\u0026price=0\u0026is_cpm=1\u0026cpm=0.0014378333091735833\u0026ecpm=0.0014378333091735833\u0026crid=\u0026crtid=d41d8cd98f00b204e9800998ecf8427e\u0026tcid=0\u0026out_id=\u0026ver=\u0026ver_c=\u0026refdom=3txxx.com\u0026hostname=auc-banner-hz-9\u0026site_id=0\u0026spot_id=1411044\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026expiration_timestamp=0\u0026created_at=0000-00-00\u0026is_native=6\u0026pop_winurl=\u0026ip=91.90.42.154\u0026testab=\u0026px_id=1411044\u0026adblock=0\u0026auction_host=\u0026mm=\u0026yc=\u0026render_type=\u0026campaign_type=\u0026uniq=\u0026exp=0\u0026resp_type=iframeAd\u0026iabcat=IAB25\u0026min_cpm=0.00011591515205782852\u0026placement_type_id=9\u0026skin_test=\u0026verify_hash=\u0026score=1\u0026ml=\u0026tag_ab=b\u0026v2=0\u0026ttl=\u0026space_id=1496\u0026banner_width=300\u0026banner_height=250\u0026accel=0\u0026gyr=0\u0026iabcat=IAB25\u0026url=%2F%2Fbts.a11k.com%2Fin%2Ftishow%2F%3Fkatds_ep%3DJksJgZkrR9laf18T0JQd5cz49OKIyIdJ-BcuWi_EBAVLwCgXDBNm63Di0HPQ5ATWbNF_-ZP7RIBo0PqPUMxt-HyFRUBfh543lwuEBmD8ZWJ0_zquFBTGBEMBDOQmcqz85RArqfHtduEpqPSkyYeddZX08s6rvZyKBGil9tLI0Xi5NLpqU7JoPnADW9wqhYKWAN6rWTgyIiVoxwwS69LqQmROEn_XwOzEMqjSGUPBq1LEL6od-01nLEK1LHhsMtHFZt_WpfxMgMNmvEbYx5B7TQbXVhD7ywcqALfH9FvN0puIkBJbCGscDoMU3xxZ4HdpgvHMhljb4OfvkdLD6KBOkH2vpKVFPR6cDMJjCDC0WO1COSpXz8eCLCOhfPWoxNgZp-Vx4Jhbgj-ZzkTgppbtaYd-RUAHdKTsiOMJxIHcTrnfGSjT0YtQuUL0WsVfKxN2CIemxqc5gfZch324XlnKzPPowYC70LxbeUgvlEXD2VhnGj3qplWFcXEY_b09BPhuSGpKajxJHY1p6mswO3_SZa28W7P9zttSMcVo6eb2xop_5xRNuR6PizrVx54iD1HJqkRjsM7Ml0oX-fwBWo6yZlaqqC4_h1MRvIe2RXAyIm3naubtmxfv9-z5Re4FivVdI7oJbNIfcDk_npjh4vh_PNtVeNw4ceimhxvFMceVkGGbq7RbyRUB2htBUaxdKfss9oDOgfLFudKK0sXkhpYX_6UzZ5t7XYtlafatzrB2tzFvcWL8NOlVSGZedMTykJkvxobaDaUdt79EODKwwD6bfzHghvup8KIZQ7Wgnx_3l-ozqQXxjH9UaR5WV-kZ8ru1BBnSkvV6F74Jb1jwlBHM3tWsFdN6yh8LyTkOpSOYI1jx0PvxjOD8z_qS2JYI2mGgCsgWEJsNA9c3ZzZvP90YxkYDXuY_WUVW8BaxG4-qJfMq8sfEakBxLAYyjOWLhAXOQxwxWEv1RHsRmLnajHvDdHPpJrPKE0OtxK0b-ETIkDROoXJKirktpa7S7bU1uZ5TvoWVFUxs63rvVbfneJ-UBPxjPQopBrYnyn_yOEYsVGpFn078p6pzWXZF0Of-4Q31XemmHvUKCkZht52mHQpLUiv9a5LGScE_0tU68gbNsTM62efOkRCWuaJvZ-_sqZnYlxVLtDOHah9I5UaPlicILhuivTgRN6vC28a5XMvo_L6ocflqIuKQqMXJnDHr7Ag6Fb_6fgCtREnr1XgZETMK00phcGEadzC6DLp6illnE-lhADBa21w2NHm3kUN4vv210GkhnpOlOdElcL55hQVM844Mv4gsvQ17CXUl57nGpjQYrLcL3dnhAbDw-Q5FcyF7YAb_HAEuxM1Ty9V9OqTbeiTpOAEWBMulDfP-Q-IAEwAMPQURzzM5wr6rvpVUO5OQdKRpG0jBODrkX-NDjKqpuQMXdCcDpYeA--jSAY4kSrzEBluPWcUcYZTjykIhAK-fPEVVKtU6x7S0MPUjdEBbzCfOlARRzCywMH6rs3EPLV3GtTRBMZnGJC5HSM2srf9oWg7UOD717HaatAun7SpDQQnQpg4PRYg1ShWrFj6VkgMtLeMUdq02bHwdwyiPI8fIJvpNAQ5NVoKWyc_SYLsrroDR5qReyPDxQqftIFh_OqIYvTw4Nkz5y4c_BrMHfi6BIMPZ3VJJAz4swsK-6fH3KkiDXWvVPHtAiz-oY5IpqAAzMl-KyWmFRstgPOqSucBZ9YcjXQBuUm5yM_HLAIl59WLQPFrSrQtbOMkasTZfZniqJy6eQ9PBsWHup5oTX_qYWFfgBnl705poQmsnAZN-8UO2DlEFGpO4CWCKJebFoT-b9mtn-3KPDQjnUWnLKKTGyZIB_F4oe2FpOBx7xFfgoPuE9TVGmTsKirsfbdUnVq1pDuDxFJ_sH1UPjPF2QtvOp-AEYWd-90TTqRb2C5oIdOMosQeOB4aUHqMz1gqM7sme5JKqJZzlUkQMYqe2ue8ZP55mpIcXh2N4mVTvBg-dp5UQ8Hhx11U81BYAnEKOMH19azVdwG25iO1FlKM8-WCDkj2lRfroMn3t-g8JvzEM_lak4Wtmsoxhx8peeWLpcE7H9zJUq2x2nl2kcj6E3JoX3JYMQ8QTUr9HH3kx-cxKqRqF8gfUC_RH8uZYQqIEOCdjOABaAB8DyawlMRRU6uXz8ri4HTWZP5wLp7KMnzc2C4DjfoOsDjZj-REclh7-wKT4vP2wIlyYaqn_FOdu5Bd-TJTXyPWMbIUn89wghGtYd8mcdmIx3R2FB80Z06qA_DhoI3U8E-85qJYN8xTGahldw-m1FyP-xLHTTinsP3NpvNMw7twLrGQixFIQ9PRoGxsNQs2jR2GzJ-mxq9rSQLh_r1oi4pwm9zQ4rOzeBZlnsiKhw3hApcbWe0SgppChKneHifs5LbMOUPwkQ-f-spcnXsmTruDXFigicRtGKB654j5YuEnv2EErl4F1U5qK0AHrweIf6dopIHwzS8cMJdK6_33C_D5cGZtdmkCGi3pGMcmTxguXaAMuzIneqKFt_E5WSsw7wC_i1XB4sbGPhQHmQYZsg4CdOXECNaaMiobKCgHFrX_LwIsPTZuIWwcBn7zixEeCZE8VpfeTNzQZ7Vhhr6zwlG4Vm2PMqdpxXllgMMSYCZtKNO6c5_6jv3GO73w-o1PJqFHEQhX6ApqghmfHZXIVP9gfw1RBkH4wMtlQfZljz0ss9k__m4QKlKxnCzWaMd25Wj_68RhwPdp62JGoxYavBqsjleZQNbaL7TWnk3DfxMPwP87ikba1Tn3saYrzw5qxHyMUwS5zLR_FdxuakYzJ2Lj1LvOtyUV9KKXtOcVKYI3jks_vo9zz1wFrBNT5olLqmM1Khim10_yH6AIDVo12EemxC8J_qn9Zk5_cZxiReHoAiuZZE-gFeQ_epa2HcMay0hnYXUIHGk2rECsZ8bQD1u5x7gAuN2G71OwdDGWV0G-jMmm85LhoIxlXNd260hlp8Fxqr9TtPXx8K_CDQpwuv7FmO3VLEcCw0YJ2q2fWJkLE41A-Ftf77BiFcXzNmajXTMW2xYVePE8Ku8zMMUAHjC3bnSTeDfP3Dbdrm-uRU1aprrU5_Wq--lNIGY2qcmTZDa2MOvCoWOplc-oMc6I6JUCcownhNIIsTUynTV3Vc0Js5cvNN5ODhYLARuAD3vjYstwXAaXLD2FBm14bqHS_VjWPxF40VzE78vegxlCoYBbfgLD8ehe2Fo1LzSJ_fE5OU4RVPhhDaKp6AF9ra0qc-Bpibv5vru7lR4DW3ki2X0kIwZmtIhB8WGJadpMXRs8w5cfQGjnLcO5E55yFYVAko4xqmuXQZcyqihCFgJsDr2w7s3To6qh3cSAt4enZkXHojmHRQJNy6cbn1GdVAe7egTzRcMu8GXcxyPkKdhGYQ6n8lw-aM2JvWQNVvx2lSRd8176ZKvej4Ku6G2d-CCijxP4w7MvYyY1uYkzf7Fxr6VejDkg_sUACfkflMlIIBbrl0_QvfCgf1GR9yoGwqeUmHljul2NnxxJLwS-Rowqj-KGklRo9uPkNP9j6M8XaCsGYAACxQD65BeQiYLwWL-yyuufAVjmzZ0Ym5qKAUoOGkjXkDGedKiHnlid1in9lacGRYJ7QGfEn_8ndNa_170cAhR5pDvq-47XQZxi_Mvbf6pztWKo899_sGC9r6bWA3GBoRmr6K7bIKqOPdXRWJJU6YPmkJ7pJD6uZURmMg921jBkqWA2mSi3jia-IgnwYPjOufcC-JSZsqeM8qYyZ1E7WicAD4MNFsfvmqmnv4sLCsUu35IvhDQniPEW7pxkug_II3ZgjZ3u5M7OEsZTcv0ReTKEXq4TEu8gbkc9rbLCs5R3_mCZmuEVZWThP53EL4GXzY8HeeiaSM91QqAABHj-vCkMsXLByDd4cwFb8TdXG1al0LvTbhXPt0yAhpW4SF6NRcck7eeyI3vscvZJAz2SGaRhtMR5j48429wae7qsPFC0W49NRJ5vAD2UuP5aESNUfrnPi9It2Qgf8ektwunBY4ULg8-q7C491bDAUI2iKD5PvUkBabjOED2K2I4gZAvAb_Csg-4Y8w2rgeL74uLukduom_m32sM7Fwywt2XN1BAl1c3UkvlSUdlu8cA1Nb0c3pCLFXDMI2sWpg3ocpXJxvKVtNM4dldyK_I3K7BHfLbONmU6IYRChq3dEwRMv1wb-FxQpS08galjl24LTO6YSto5Zwe4lAW8PFDphq4IXGgvEUIGioODtf13YQ8PZpRL9zHrpy0zL-iYPkVAxaKjwSPTLuXGhelbkOgJ3vXvoieQxofDGknHSPgLQEDxy2Wnft8mLtaOcOPT9FoTm5L44kv-9XKfFh0Kh360JJE2JlwGdpnLgIpQfUr-efRcppQ8MjvCVKHqgPVECAUzdfRKC2cQqEX1SU6Y1WholNeG9XTerALARbbdcHXwGc0nR7ks01oycf61KYFgIXv68b8Q1gDXYj24XB2ltbwwWvFWLIvBCq-Is4ZVdHYwbveq2JBzqiBfA_54PVEKtK46BKSfFZjkrdHqtOpl4pXdssIu4r5iYvKsKq5eiIJHONFHiP2ImSlt5jGwibR19eYAyDkz2q9P5ZDW6rP154SSHlLOEPvO6FjQc1NzM0OpIH6WDkyezpktMbPKT4GtqLn1n-xQmQpPHlZrRtR9WMlkN_MBuWd36EobPMasZ7ZM5d1UCMAuSY_hRDUwq_yLydDAwo3rGgzqmHvYKoIHrduvSjzAsUORybJjH0jZZqZ9vcANX3Y9iGqi_a2GEZtPLw8_cDpCwnGDCYbOjSY922aWU4PR02RBxJXKtsnlM0M_xkaVfZZSQELclnpiTvLuW2cg9fuOlVgSPL1al5J2AtbnMgqSdGxneJutEIhOh7O19GY-FUo837l2X-cJYCCpS9Ez6qGl8ZmwTqLiwyQTPLuADoHUvG79SY1_tTaEQrOfrz-1iesGWEr-VuF_sAIY4kpMViI4xeX_GX-vzqmkcWXKG2WfTS0or2e5sAmK6xMWWNU3CMzP7pmOeWZYZIsL8e41MiqL4-iWyaJ5BvpnlB191kzSmWP9PrTHwXIQK6aW1uk34iG88Y5ogMmpjRR29cs6lThIajepLTHZ7XQcmRbM90tQR6t-C_9uhlx7L4QkfrUdy9WdVDC0eA4I2GwZAE_Kv%26bid%3D0.0016666666666666668\u0026pr=\u0026bid_crid=\u0026bid_cid=\u0026is_iframe=0\u0026ad_tags=upskirt%2Cvideos%2Cporn%2Cporn%2Cmovies%2Cfree%2Cporn%2Cfree%2Cporn%2Cmovies%2Csex%2Cporno%2Cfree%2Csex%2Ctube%2Cporn%2Ctube%2Cvideos%2Cfull%2Cporn%2Cxxnx%2Cxnxxx%2Cxxx%2Cpussy%2Cvideos%2Cupskirt%2Cxporn%2Cfirst%2Clive%2Csex%2Cporn%2Cvideos%2Cerotic%2Cporn%2Cfuck%2Cor%2Cxxx%2Cporno%2Cgood%2Cbrazzers%2Csex,\u0026stratagem=\u0026ssp=4042\u0026refresh=1\u0026priority=0\u0026bb=0.0001\u0026label_ids=39\u0026site_id64=1411044\u0026container=ClickadillaTuple\u0026original_bid_usd=0.0014378333091735833\u0026comeback=\u0026topics=\u0026o_d=d3d3LmVyb3RpY3Bvcm5zLmNvbQ==\u0026ectr=7.852606574594855e-05\u0026client_price=0.0017253999710082999\u0026direct_client_price=0\u0026client_payment_model=cpm\u0026ext_campaign_id=236776\u0026auction_time=1727198854\u0026account_id=2022 HTTP/1.1\r\nHost: rtbrenab.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rtbrenab.com/get/?go=1\u0026data=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\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.18.0\r\ndate: Tue, 24 Sep 2024 17:27:34 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nlocation: //bts.a11k.com/in/tishow/?katds_ep=JksJgZkrR9laf18T0JQd5cz49OKIyIdJ-BcuWi_EBAVLwCgXDBNm63Di0HPQ5ATWbNF_-ZP7RIBo0PqPUMxt-HyFRUBfh543lwuEBmD8ZWJ0_zquFBTGBEMBDOQmcqz85RArqfHtduEpqPSkyYeddZX08s6rvZyKBGil9tLI0Xi5NLpqU7JoPnADW9wqhYKWAN6rWTgyIiVoxwwS69LqQmROEn_XwOzEMqjSGUPBq1LEL6od-01nLEK1LHhsMtHFZt_WpfxMgMNmvEbYx5B7TQbXVhD7ywcqALfH9FvN0puIkBJbCGscDoMU3xxZ4HdpgvHMhljb4OfvkdLD6KBOkH2vpKVFPR6cDMJjCDC0WO1COSpXz8eCLCOhfPWoxNgZp-Vx4Jhbgj-ZzkTgppbtaYd-RUAHdKTsiOMJxIHcTrnfGSjT0YtQuUL0WsVfKxN2CIemxqc5gfZch324XlnKzPPowYC70LxbeUgvlEXD2VhnGj3qplWFcXEY_b09BPhuSGpKajxJHY1p6mswO3_SZa28W7P9zttSMcVo6eb2xop_5xRNuR6PizrVx54iD1HJqkRjsM7Ml0oX-fwBWo6yZlaqqC4_h1MRvIe2RXAyIm3naubtmxfv9-z5Re4FivVdI7oJbNIfcDk_npjh4vh_PNtVeNw4ceimhxvFMceVkGGbq7RbyRUB2htBUaxdKfss9oDOgfLFudKK0sXkhpYX_6UzZ5t7XYtlafatzrB2tzFvcWL8NOlVSGZedMTykJkvxobaDaUdt79EODKwwD6bfzHghvup8KIZQ7Wgnx_3l-ozqQXxjH9UaR5WV-kZ8ru1BBnSkvV6F74Jb1jwlBHM3tWsFdN6yh8LyTkOpSOYI1jx0PvxjOD8z_qS2JYI2mGgCsgWEJsNA9c3ZzZvP90YxkYDXuY_WUVW8BaxG4-qJfMq8sfEakBxLAYyjOWLhAXOQxwxWEv1RHsRmLnajHvDdHPpJrPKE0OtxK0b-ETIkDROoXJKirktpa7S7bU1uZ5TvoWVFUxs63rvVbfneJ-UBPxjPQopBrYnyn_yOEYsVGpFn078p6pzWXZF0Of-4Q31XemmHvUKCkZht52mHQpLUiv9a5LGScE_0tU68gbNsTM62efOkRCWuaJvZ-_sqZnYlxVLtDOHah9I5UaPlicILhuivTgRN6vC28a5XMvo_L6ocflqIuKQqMXJnDHr7Ag6Fb_6fgCtREnr1XgZETMK00phcGEadzC6DLp6illnE-lhADBa21w2NHm3kUN4vv210GkhnpOlOdElcL55hQVM844Mv4gsvQ17CXUl57nGpjQYrLcL3dnhAbDw-Q5FcyF7YAb_HAEuxM1Ty9V9OqTbeiTpOAEWBMulDfP-Q-IAEwAMPQURzzM5wr6rvpVUO5OQdKRpG0jBODrkX-NDjKqpuQMXdCcDpYeA--jSAY4kSrzEBluPWcUcYZTjykIhAK-fPEVVKtU6x7S0MPUjdEBbzCfOlARRzCywMH6rs3EPLV3GtTRBMZnGJC5HSM2srf9oWg7UOD717HaatAun7SpDQQnQpg4PRYg1ShWrFj6VkgMtLeMUdq02bHwdwyiPI8fIJvpNAQ5NVoKWyc_SYLsrroDR5qReyPDxQqftIFh_OqIYvTw4Nkz5y4c_BrMHfi6BIMPZ3VJJAz4swsK-6fH3KkiDXWvVPHtAiz-oY5IpqAAzMl-KyWmFRstgPOqSucBZ9YcjXQBuUm5yM_HLAIl59WLQPFrSrQtbOMkasTZfZniqJy6eQ9PBsWHup5oTX_qYWFfgBnl705poQmsnAZN-8UO2DlEFGpO4CWCKJebFoT-b9mtn-3KPDQjnUWnLKKTGyZIB_F4oe2FpOBx7xFfgoPuE9TVGmTsKirsfbdUnVq1pDuDxFJ_sH1UPjPF2QtvOp-AEYWd-90TTqRb2C5oIdOMosQeOB4aUHqMz1gqM7sme5JKqJZzlUkQMYqe2ue8ZP55mpIcXh2N4mVTvBg-dp5UQ8Hhx11U81BYAnEKOMH19azVdwG25iO1FlKM8-WCDkj2lRfroMn3t-g8JvzEM_lak4Wtmsoxhx8peeWLpcE7H9zJUq2x2nl2kcj6E3JoX3JYMQ8QTUr9HH3kx-cxKqRqF8gfUC_RH8uZYQqIEOCdjOABaAB8DyawlMRRU6uXz8ri4HTWZP5wLp7KMnzc2C4DjfoOsDjZj-REclh7-wKT4vP2wIlyYaqn_FOdu5Bd-TJTXyPWMbIUn89wghGtYd8mcdmIx3R2FB80Z06qA_DhoI3U8E-85qJYN8xTGahldw-m1FyP-xLHTTinsP3NpvNMw7twLrGQixFIQ9PRoGxsNQs2jR2GzJ-mxq9rSQLh_r1oi4pwm9zQ4rOzeBZlnsiKhw3hApcbWe0SgppChKneHifs5LbMOUPwkQ-f-spcnXsmTruDXFigicRtGKB654j5YuEnv2EErl4F1U5qK0AHrweIf6dopIHwzS8cMJdK6_33C_D5cGZtdmkCGi3pGMcmTxguXaAMuzIneqKFt_E5WSsw7wC_i1XB4sbGPhQHmQYZsg4CdOXECNaaMiobKCgHFrX_LwIsPTZuIWwcBn7zixEeCZE8VpfeTNzQZ7Vhhr6zwlG4Vm2PMqdpxXllgMMSYCZtKNO6c5_6jv3GO73w-o1PJqFHEQhX6ApqghmfHZXIVP9gfw1RBkH4wMtlQfZljz0ss9k__m4QKlKxnCzWaMd25Wj_68RhwPdp62JGoxYavBqsjleZQNbaL7TWnk3DfxMPwP87ikba1Tn3saYrzw5qxHyMUwS5zLR_FdxuakYzJ2Lj1LvOtyUV9KKXtOcVKYI3jks_vo9zz1wFrBNT5olLqmM1Khim10_yH6AIDVo12EemxC8J_qn9Zk5_cZxiReHoAiuZZE-gFeQ_epa2HcMay0hnYXUIHGk2rECsZ8bQD1u5x7gAuN2G71OwdDGWV0G-jMmm85LhoIxlXNd260hlp8Fxqr9TtPXx8K_CDQpwuv7FmO3VLEcCw0YJ2q2fWJkLE41A-Ftf77BiFcXzNmajXTMW2xYVePE8Ku8zMMUAHjC3bnSTeDfP3Dbdrm-uRU1aprrU5_Wq--lNIGY2qcmTZDa2MOvCoWOplc-oMc6I6JUCcownhNIIsTUynTV3Vc0Js5cvNN5ODhYLARuAD3vjYstwXAaXLD2FBm14bqHS_VjWPxF40VzE78vegxlCoYBbfgLD8ehe2Fo1LzSJ_fE5OU4RVPhhDaKp6AF9ra0qc-Bpibv5vru7lR4DW3ki2X0kIwZmtIhB8WGJadpMXRs8w5cfQGjnLcO5E55yFYVAko4xqmuXQZcyqihCFgJsDr2w7s3To6qh3cSAt4enZkXHojmHRQJNy6cbn1GdVAe7egTzRcMu8GXcxyPkKdhGYQ6n8lw-aM2JvWQNVvx2lSRd8176ZKvej4Ku6G2d-CCijxP4w7MvYyY1uYkzf7Fxr6VejDkg_sUACfkflMlIIBbrl0_QvfCgf1GR9yoGwqeUmHljul2NnxxJLwS-Rowqj-KGklRo9uPkNP9j6M8XaCsGYAACxQD65BeQiYLwWL-yyuufAVjmzZ0Ym5qKAUoOGkjXkDGedKiHnlid1in9lacGRYJ7QGfEn_8ndNa_170cAhR5pDvq-47XQZxi_Mvbf6pztWKo899_sGC9r6bWA3GBoRmr6K7bIKqOPdXRWJJU6YPmkJ7pJD6uZURmMg921jBkqWA2mSi3jia-IgnwYPjOufcC-JSZsqeM8qYyZ1E7WicAD4MNFsfvmqmnv4sLCsUu35IvhDQniPEW7pxkug_II3ZgjZ3u5M7OEsZTcv0ReTKEXq4TEu8gbkc9rbLCs5R3_mCZmuEVZWThP53EL4GXzY8HeeiaSM91QqAABHj-vCkMsXLByDd4cwFb8TdXG1al0LvTbhXPt0yAhpW4SF6NRcck7eeyI3vscvZJAz2SGaRhtMR5j48429wae7qsPFC0W49NRJ5vAD2UuP5aESNUfrnPi9It2Qgf8ektwunBY4ULg8-q7C491bDAUI2iKD5PvUkBabjOED2K2I4gZAvAb_Csg-4Y8w2rgeL74uLukduom_m32sM7Fwywt2XN1BAl1c3UkvlSUdlu8cA1Nb0c3pCLFXDMI2sWpg3ocpXJxvKVtNM4dldyK_I3K7BHfLbONmU6IYRChq3dEwRMv1wb-FxQpS08galjl24LTO6YSto5Zwe4lAW8PFDphq4IXGgvEUIGioODtf13YQ8PZpRL9zHrpy0zL-iYPkVAxaKjwSPTLuXGhelbkOgJ3vXvoieQxofDGknHSPgLQEDxy2Wnft8mLtaOcOPT9FoTm5L44kv-9XKfFh0Kh360JJE2JlwGdpnLgIpQfUr-efRcppQ8MjvCVKHqgPVECAUzdfRKC2cQqEX1SU6Y1WholNeG9XTerALARbbdcHXwGc0nR7ks01oycf61KYFgIXv68b8Q1gDXYj24XB2ltbwwWvFWLIvBCq-Is4ZVdHYwbveq2JBzqiBfA_54PVEKtK46BKSfFZjkrdHqtOpl4pXdssIu4r5iYvKsKq5eiIJHONFHiP2ImSlt5jGwibR19eYAyDkz2q9P5ZDW6rP154SSHlLOEPvO6FjQc1NzM0OpIH6WDkyezpktMbPKT4GtqLn1n-xQmQpPHlZrRtR9WMlkN_MBuWd36EobPMasZ7ZM5d1UCMAuSY_hRDUwq_yLydDAwo3rGgzqmHvYKoIHrduvSjzAsUORybJjH0jZZqZ9vcANX3Y9iGqi_a2GEZtPLw8_cDpCwnGDCYbOjSY922aWU4PR02RBxJXKtsnlM0M_xkaVfZZSQELclnpiTvLuW2cg9fuOlVgSPL1al5J2AtbnMgqSdGxneJutEIhOh7O19GY-FUo837l2X-cJYCCpS9Ez6qGl8ZmwTqLiwyQTPLuADoHUvG79SY1_tTaEQrOfrz-1iesGWEr-VuF_sAIY4kpMViI4xeX_GX-vzqmkcWXKG2WfTS0or2e5sAmK6xMWWNU3CMzP7pmOeWZYZIsL8e41MiqL4-iWyaJ5BvpnlB191kzSmWP9PrTHwXIQK6aW1uk34iG88Y5ogMmpjRR29cs6lThIajepLTHZ7XQcmRbM90tQR6t-C_9uhlx7L4QkfrUdy9WdVDC0eA4I2GwZAE_Kv\u0026bid=0.0016666666666666668\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtbrenab.com/get/?go=1\u0026data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImIiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MTQ5NiwidHlwZSI6InBvcCIsImlkem9uZSI6bnVsbCwiYWRfdGFncyI6InVwc2tpcnQlMkN2aWRlb3MlMkNwb3JuJTJDcG9ybiUyQ21vdmllcyUyQ2ZyZWUlMkNwb3JuJTJDZnJlZSUyQ3Bvcm4lMkNtb3ZpZXMlMkNzZXglMkNwb3JubyUyQ2ZyZWUlMkNzZXglMkN0dWJlJTJDcG9ybiUyQ3R1YmUlMkN2aWRlb3MlMkNmdWxsJTJDcG9ybiUyQ3h4bnglMkN4bnh4eCUyQ3h4eCUyQ3B1c3N5JTJDdmlkZW9zJTJDdXBza2lydCUyQ3hwb3JuJTJDZmlyc3QlMkNsaXZlJTJDc2V4JTJDcG9ybiUyQ3ZpZGVvcyUyQ2Vyb3RpYyUyQ3Bvcm4lMkNmdWNrJTJDb3IlMkN4eHglMkNwb3JubyUyQ2dvb2QlMkNicmF6emVycyUyQ3NleCwiLCJsYWJlbHMiOiIiLCJhbGxvd2VkX2xhYmVscyI6IiIsInRpdGxlIjoiIiwic3ViaWQiOiI5NzM2MTcxNDUiLCJyZWZyZXNoIjoxLCJ1dG0xIjoiIiwidXRtMiI6IiIsInV0bTQiOiIiLCJzcG90X2lkIjoxNDExMDQ2LCJtdWx0aXBsZSI6ZmFsc2UsImlzX2lmcmFtZSI6ZmFsc2UsInJlZmRvbWFpbiI6IiIsInBsIjoyNjksInN0cmF0YWdlbSI6IiIsImd5ciI6MCwiYWNjZWwiOjAsInNzcCI6Mzc1OCwiYnR5cGUiOjAsInYyIjowLCJyY2hhbmdlIjp0cnVlfSwiYmFubmVyIjp7InciOjMwMCwiaCI6MjUwfSwibWV0cmljcyI6eyJ0b3BpY3MiOltdfX1dLCJzaXRlIjp7ImlkIjoiMTQxMTA0NiIsImNhdCI6WyJJQUIyNSJdLCJwYWdlIjoiaHR0cHM6Ly93d3cuZXJvdGljcG9ybnMuY29tL3Bvcm4vdXBza2lydC12aWRlb3MvIiwiY3RpZCI6MX0sImRldmljZSI6eyJ3IjoxMjgwLCJoIjoxMDI0fSwidXNlciI6eyJpZCI6ImU0YzI4YTE4NjRlNDkxNGY1ZmFiNzk4M2U0NjNlZjI1IiwiZnAiOm51bGwsImZwX3N0ciI6IiIsInVhX2RhdGEiOm51bGx9LCJleHQiOnsiZHQiOjE3MjcxOTg4NTQzNjB9fQ==","fqdn":"rtbrenab.com","domain":"rtbrenab.com","tld":"com"},"ip":{"addr":"116.202.60.226","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:34.465Z","timestamp":1727198854465,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rtbbnr.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Jun 2024 02:03:01 GMT","end":"Sat, 28 Sep 2024 02:03:00 GMT"},"fingerprint":{"sha1":"DC:D1:3A:99:18:53:59:04:68:CF:CA:F4:F7:48:72:8E:28:21:8C:3D","sha256":"F3:70:6D:0B:F3:E6:40:8C:DD:0A:92:A2:BC:ED:F2:A2:6F:9E:03:4A:1E:37:7E:1F:58:9A:F4:DF:81:05:39:60"}}},"request":{"raw":"GET /get/?go=1\u0026data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImIiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MTQ5NiwidHlwZSI6InBvcCIsImlkem9uZSI6bnVsbCwiYWRfdGFncyI6InVwc2tpcnQlMkN2aWRlb3MlMkNwb3JuJTJDcG9ybiUyQ21vdmllcyUyQ2ZyZWUlMkNwb3JuJTJDZnJlZSUyQ3Bvcm4lMkNtb3ZpZXMlMkNzZXglMkNwb3JubyUyQ2ZyZWUlMkNzZXglMkN0dWJlJTJDcG9ybiUyQ3R1YmUlMkN2aWRlb3MlMkNmdWxsJTJDcG9ybiUyQ3h4bnglMkN4bnh4eCUyQ3h4eCUyQ3B1c3N5JTJDdmlkZW9zJTJDdXBza2lydCUyQ3hwb3JuJTJDZmlyc3QlMkNsaXZlJTJDc2V4JTJDcG9ybiUyQ3ZpZGVvcyUyQ2Vyb3RpYyUyQ3Bvcm4lMkNmdWNrJTJDb3IlMkN4eHglMkNwb3JubyUyQ2dvb2QlMkNicmF6emVycyUyQ3NleCwiLCJsYWJlbHMiOiIiLCJhbGxvd2VkX2xhYmVscyI6IiIsInRpdGxlIjoiIiwic3ViaWQiOiI5NzM2MTcxNDUiLCJyZWZyZXNoIjoxLCJ1dG0xIjoiIiwidXRtMiI6IiIsInV0bTQiOiIiLCJzcG90X2lkIjoxNDExMDQ2LCJtdWx0aXBsZSI6ZmFsc2UsImlzX2lmcmFtZSI6ZmFsc2UsInJlZmRvbWFpbiI6IiIsInBsIjoyNjksInN0cmF0YWdlbSI6IiIsImd5ciI6MCwiYWNjZWwiOjAsInNzcCI6Mzc1OCwiYnR5cGUiOjAsInYyIjowLCJyY2hhbmdlIjp0cnVlfSwiYmFubmVyIjp7InciOjMwMCwiaCI6MjUwfSwibWV0cmljcyI6eyJ0b3BpY3MiOltdfX1dLCJzaXRlIjp7ImlkIjoiMTQxMTA0NiIsImNhdCI6WyJJQUIyNSJdLCJwYWdlIjoiaHR0cHM6Ly93d3cuZXJvdGljcG9ybnMuY29tL3Bvcm4vdXBza2lydC12aWRlb3MvIiwiY3RpZCI6MX0sImRldmljZSI6eyJ3IjoxMjgwLCJoIjoxMDI0fSwidXNlciI6eyJpZCI6ImU0YzI4YTE4NjRlNDkxNGY1ZmFiNzk4M2U0NjNlZjI1IiwiZnAiOm51bGwsImZwX3N0ciI6IiIsInVhX2RhdGEiOm51bGx9LCJleHQiOnsiZHQiOjE3MjcxOTg4NTQzNjB9fQ== HTTP/1.1\r\nHost: rtbrenab.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 24 Sep 2024 17:27:34 GMT\r\ncontent-type: text/html\r\ncontent-length: 5501\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5501,"size_decoded":12176,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (7003)","md5":"4eaafebfb294e1d1c6b309b7a59ff4a1","sha1":"43682649bfaedb60fd65b664a5295fd1766a4f8b","sha256":"451a28360c85d6b38bd19a544cbbc1577e45e90c5f032008ea078103d9103473","sha512":"2a81bc8dc36163063cf8dc25cad9e6a60296263f82bd0e40ec0bbf05ad3b275e79828f1ffeb05beceaabecffa2a740e7c9e2e71b14e74b7664e3731670ac39df","ssdeep":"192:DYpgS50QGdnW0ucTm0mkDM7ojZoZmgaUJNBgffEBgfi4Bgfiz:UTR38cmbGC8CTCo","tlshash":"e1425ec9ab5edc1441a06604396b3a050b5efa41cbc589a1eeb30b38eda4b37514fb4d","first_seen":"2024-09-28T07:59:48.593101Z","last_seen":"2024-09-28T07:59:48.593101Z","times_seen":1,"resource_available":false,"data":null}},"time_used":603,"timings":{"blocked":118,"dns":30,"connect":30,"send":0,"wait":353,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.multstorage.com/log/count.html","fqdn":"storage.multstorage.com","domain":"multstorage.com","tld":"com"},"ip":{"addr":"104.21.30.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:34.117Z","timestamp":1727198854117,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"multstorage.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Sep 2024 06:26:54 GMT","end":"Mon, 09 Dec 2024 06:26:53 GMT"},"fingerprint":{"sha1":"EC:97:20:D2:72:15:19:01:A7:06:81:2C:AE:88:84:94:6B:32:72:AD","sha256":"E0:40:6C:72:F2:01:4A:8A:7E:2F:CD:89:99:22:34:66:EB:B5:CE:8A:4E:68:97:8C:2A:5D:34:84:BE:B3:3A:18"}}},"request":{"raw":"GET /log/count.html HTTP/1.1\r\nHost: storage.multstorage.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:34 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 18 Sep 2023 14:39:06 GMT\r\nvary: Accept-Encoding\r\nx-request-id: 0b791bc2e409b2c0e182668f0f35e710\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LVR5T2Em9fRfkjsBNN5FxbkY4tVt4%2F8jBO3XxRLb7sDgozrI8utbYfj%2BWCz%2B60j9pGN1AmbF2grpMwJPo%2FpL2T6leuYi4QjW%2FUL3jiL2RAb2%2FevDOGphUBfgXB52eYwxLwwirA%2BNtHScvA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c66cb9862ba-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1940,"size_decoded":882,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (700)","md5":"b728ca9cd183d1b7c3f72116b19b22a3","sha1":"c1fd73f6b02cf00b8bc60b09cc99495e8494b739","sha256":"8a7b1ca4bbf273b32ea865d4785a1944d1b2b133678d9b5fe7ee0406f6fd64b2","sha512":"ce52c8caa65b221d0e8a26b7bfe60d20ac628bc8c4d479c72f904fefd587b87a136d24b32c17e6a87082338e606249463a3c6d8d03e28c50ea81e1c1a408cf48","ssdeep":"","tlshash":"c0119c4eb5002c5c4410826a38aa3e2575a56068802fad6064a6f9c23fd0dcec2d3fc2","first_seen":"2023-09-18T17:42:36Z","last_seen":"2025-11-06T10:55:58.203354Z","times_seen":11635,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":85,"dns":29,"connect":17,"send":0,"wait":42,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtbrenab.com/get/?go=1\u0026data=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","fqdn":"rtbrenab.com","domain":"rtbrenab.com","tld":"com"},"ip":{"addr":"116.202.60.226","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:34.459Z","timestamp":1727198854459,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rtbbnr.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Jun 2024 02:03:01 GMT","end":"Sat, 28 Sep 2024 02:03:00 GMT"},"fingerprint":{"sha1":"DC:D1:3A:99:18:53:59:04:68:CF:CA:F4:F7:48:72:8E:28:21:8C:3D","sha256":"F3:70:6D:0B:F3:E6:40:8C:DD:0A:92:A2:BC:ED:F2:A2:6F:9E:03:4A:1E:37:7E:1F:58:9A:F4:DF:81:05:39:60"}}},"request":{"raw":"GET /get/?go=1\u0026data=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 HTTP/1.1\r\nHost: rtbrenab.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 24 Sep 2024 17:27:34 GMT\r\ncontent-type: text/html\r\ncontent-length: 5499\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5499,"size_decoded":12176,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (7003)","md5":"c4e4f51dc1d6eaf9c9e6424bb1124c59","sha1":"80db015902f72722b149c7a14e6988622ff9edfe","sha256":"3938d6d4d5755ceeac27d2d8da6f8f4945f3bb11c3917fd3793dd407793f0387","sha512":"48e9c10db12d2b471438c639248396183d629bbfd5cc8f6fa37c894c7ca033d16c612d8021f43912df3f259c206e667e4e16300128bd573fd0922c8b0022466e","ssdeep":"192:DOwgTTrAkr93/zW8MOmCi7suUJ/sgf7Osgf2Ksgf2H:qhT8kh3LWfdCOhgFyF7FO","tlshash":"c9423c996f4acd5840e0760478e73f0507a76b5287da49a0ee330b38dca8b32525bf1d","first_seen":"2024-09-28T07:59:48.601207Z","last_seen":"2024-09-28T07:59:48.601207Z","times_seen":1,"resource_available":false,"data":null}},"time_used":631,"timings":{"blocked":128,"dns":28,"connect":35,"send":0,"wait":368,"receive":1,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"o.pki.goog/wr2","fqdn":"o.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"216.58.211.3","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:35.004479777Z","timestamp":1727198855004,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /wr2 HTTP/1.1\r\nHost: o.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Tue, 24 Sep 2024 17:27:34 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":472,"mime_type":"application/octet-stream","magic":"data","md5":"2b9bc404e4fa8f1c1178e57ff4cf88a3","sha1":"a428fe067fc9f9325f6312834f946070370e2a65","sha256":"c63a53557d7a29e637be723af5a2d9be916f0198a55db32574467848bbc243a0","sha512":"443d037dde7ed0c59bbd105a98b35a9ab8976f12c4daff658b95b6e923cbe31ef9071c6adcdd900a52f66d1c4be8c2867a34c192fcd756c781a6fbff22440b68","ssdeep":"","tlshash":"2cf0dce523f5f852d9b204991aedffb93d19050c08692a49702b34ed936faee0c00f4a","first_seen":"2024-09-23T18:01:13Z","last_seen":"2024-09-28T08:15:02.598754Z","times_seen":689,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:35.05291903Z","timestamp":1727198855052,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"4312B6AA45BD1EE65E646FBF4B688270C886FFE32EAD02C8D7D3F35C1A33194E\"\r\nLast-Modified: Sun, 22 Sep 2024 15:55:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=10087\r\nExpires: Tue, 24 Sep 2024 20:15:42 GMT\r\nDate: Tue, 24 Sep 2024 17:27:35 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"63ae74913b734dca144783542104b485","sha1":"0b1a41a0320926ff35c0b4c70dd8f74c29499315","sha256":"4312b6aa45bd1ee65e646fbf4b688270c886ffe32ead02c8d7d3f35c1a33194e","sha512":"05055b5839fcb149ce532476309cc07d0ece28219bc9d3c3990571f22dc238a26a19989bf4bd32b727aa1a260e6464091269e4022017d1761a743f9c2e26fbcd","ssdeep":"","tlshash":"03f00ef83bb1ec34cf25142aacd6e1321cf838fc340a29d7a99942f97e2137a0344248","first_seen":"2024-09-23T11:48:57Z","last_seen":"2024-09-28T08:19:05.965115Z","times_seen":6,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"96deb6c755.6dd1167e04.com/in/multy","fqdn":"96deb6c755.6dd1167e04.com","domain":"6dd1167e04.com","tld":"com"},"ip":{"addr":"94.130.198.6","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:34.720Z","timestamp":1727198854720,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"6dd1167e04.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Sep 2024 14:03:38 GMT","end":"Thu, 19 Dec 2024 14:03:37 GMT"},"fingerprint":{"sha1":"8B:B9:AC:EA:0F:FA:A0:EB:9A:C1:6E:E7:B5:20:0A:A8:BE:94:98:A1","sha256":"3C:ED:7F:1D:3F:2B:18:D0:8A:FC:33:BC:FD:93:EB:9B:DC:04:F1:73:65:69:50:1D:20:25:39:88:AC:6C:BA:9D"}}},"request":{"raw":"POST /in/multy HTTP/1.1\r\nHost: 96deb6c755.6dd1167e04.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 2212\r\nOrigin: https://www.eroticporns.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Tue, 24 Sep 2024 17:27:35 GMT\r\ncontent-type: application/json\r\ncontent-length: 6119\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6119,"size_decoded":47504,"mime_type":"application/json","magic":"JSON text data","md5":"dbb8387c04f2ccb0d3c23c2601dfeeaf","sha1":"f470bccb3c1b2c191ac43de948e3515b5a2228bb","sha256":"847cec39cfd44b745f78deb3ec9faf73c7763e3deabbb8088e08d259b35e7ba3","sha512":"31fe77262d138eb8634b75d169e3a5b0a28f19666ebf1c004ca7f37b0f556a29fa56633a1892aff5b9b834e8b627eb202b9e76f31f000a7bef2c9d2216d655ba","ssdeep":"768:uGRV4cjGOkRkalkRkAGOkRk5GOkRkjGOkRkMGgljGOkRkGokFhtTP5c:rWJECJpJLJagAJXoo2","tlshash":"ab236c92619bef2e0dd31715a20bbc786d965a4f5f8600e2bf37c63b4b5eb12205d84c","first_seen":"2024-09-28T07:59:48.609135Z","last_seen":"2024-09-28T07:59:48.609135Z","times_seen":1,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtbrenab.com/banner/in/show/?mid=9000035816014162646\u0026pid=0\u0026site=1411046\u0026sc=NO\u0026usage_type=DCH\u0026subid=973617145\u0026sid=0\u0026cid=12774\u0026price=0\u0026is_cpm=1\u0026cpm=0.0014378333091735833\u0026ecpm=0.0014378333091735833\u0026crid=\u0026crtid=d41d8cd98f00b204e9800998ecf8427e\u0026tcid=0\u0026out_id=\u0026ver=\u0026ver_c=\u0026refdom=3txxx.com\u0026hostname=auc-banner-hz-1\u0026site_id=0\u0026spot_id=1411046\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026expiration_timestamp=0\u0026created_at=0000-00-00\u0026is_native=6\u0026pop_winurl=\u0026ip=91.90.42.154\u0026testab=\u0026px_id=1411046\u0026adblock=0\u0026auction_host=\u0026mm=\u0026yc=\u0026render_type=\u0026campaign_type=\u0026uniq=\u0026exp=0\u0026resp_type=iframeAd\u0026iabcat=IAB25\u0026min_cpm=0.00011591515205782852\u0026placement_type_id=9\u0026skin_test=\u0026verify_hash=\u0026score=1\u0026ml=\u0026tag_ab=b\u0026v2=0\u0026ttl=\u0026space_id=1496\u0026banner_width=300\u0026banner_height=250\u0026accel=0\u0026gyr=0\u0026iabcat=IAB25\u0026url=%2F%2Fbts.a11k.com%2Fin%2Ftishow%2F%3Fkatds_ep%3DS41xl-RvwICfIvwtX1JRXgNWoIS3CUtNgM19jnNAz-ih614imGyq10-TF0WnOAVFdOmLIMyOqa4-s0RkQv9nqoW55_eI1jbUb-pULqO0mTohGaTDMtpzpe2oXpJIeQrRWJxwvEDp6fRT_ATu8eTVy2ADhWD_A6XQY0RXL-9FhoXMNfry3c454Fgyb-L5NGX7DzIa9bcXljw7ZWv7nIz3VQpBzHYUod-4N02cJvF_i1BvQqboE_MHUqsxXIk5j-Qe5pVxtDdXycZzQzh5frmqq5fug4wCzmNWk7Heb47w2LFNwQDd3AiOiVjGTVOV1J3ILfo4gBfZHI9j953q9zs8fQI3fcHJeeWawgKe8a5p4WLs0bxlgXoxPMlfpWBvaiHJbczlizqL55IBcAWjyenxkayJSu1O9kG0A_8fIkxvYY2U0tOcsKM5FL9O6Yt_dwS38Kec-4qqMk1Z69_5idxtPeQApnRT25kkVHtCtp3Yr0YpVhuanYjEIagNByF3WV9Ulw49aGsmXKleo0w9QQAxkBM3Jg5A9QqTNlh8yNlHYvKGnCcBXivZaF8wD0bhyj2dhN7zoYsUrP_7Keg2i0FOdkD8dOIe5Z9zTGgf9dhTOkgMBP1Wpyana8A26dF5-YQvwXPTNHp6IteZbThBVraUUvzxPARmTZFBFTBylUuLSF_n5EuY2xud7G8xfR0ObBcRXNhfMVPJef4RTbHd4e0dydPZVJzxtBvNupB5qnW3i54a4FG-7NJtw8lrLv8umHW9azp6JMQC4RD_01zXuu2VA1dKa11ENJqsqOyPHNKkTzp8fb5Bq6sDsSyg6umQ0lpyf0GoulC4t2woo0wjDjUhzJdeBKcfDUUKes9B2ieilAcwbfz1OvMWUBa4T4mOppKHI1KJex8alYB80mBbu5PoMIVa4f0addFw8VkbzCmyvQo8i5zKvDmsh0cH4alZeKc40Om3YdCMh6rxBmSrG-S6CfIe0FKwdrhG4VmzHFYv1DBmtZ0SPD3RlVw0_fiwEzi07zVO8utP-j6h7Z6CfEIAHRdV2iG6kgP-_KEKmnQpZcn-Gy78b2CIiJkfmSpehNe8qkmiYVXcgDpZ0P_nFa-BLL8e46d_p97GD8F0aQKIza16ib-OD33kyIR9hg0u6M6VbS0znMMBGY0zoxpaDTrmGRlTIT7X2YxyYzBeByIXPW1oVSMfGyxwHfOraqsGV14zERftL11L_mz_ejgiaYVLz5rlsdMBsi5bgpSxhzJauZUJXyL-_xR6SxT5W-cRfxarNrxmUTfu2gaMGpLuiKIJhWOjOytsHQS3UTUSeeHcPG1NrgCpVqrIf-NcM-C-NhXDQNDjdOLw7D3fuoMeSL7ACUOH3o-UBAVXqqx5m6cayhJ7Gr2Aqjih6Nsaorf8Stc50sw6hIHJAgFwf-pHc9hCg-m-RwfHNxJT3YTx0soBatGPaJ3aprZ54r6JeLx7ng_4NQ1bZDnCkv0-RlSsD9RWhSitt5-2finQdmjgFiZu1HD2zxXXMD3tznOyZ4gqgC2oO6angJk_z328-7b9SiGJ8k1AHf8SbeXoX2vI-oI1REo9J-u9U5a-2EFAJIdqp24xkMpKfCnhc-mBPh0fIP1l53O8YyleGZpxhDksxq_J5-JIrDSYoZq2bpCunVL4vXoi2NmSzJRTUo-1OB4VXGPtMqqeXb92mIT6AfqwQAuDkuqwgmJ2b7st2xKEr-tgvJ5dm1UVfCFFaeVNWuGPbO7sS20JpoIUMwT_H80weZEcZhUdtHBef-XZg6cx289ytzxRK2KzHnoRpVwSrkw0kaHbflVDv4Km1FBVrZyC-UGsM0tAnaEb9vb7dNok5RF3DhaZ3JBjWFrSv5e0Du-Tnnlt8uxYX_wVWC8nbyVOvkdeL2xuV6YrxJODkv-ZwZoso3vufZSGfVkpzwmt6vqBERqiN6u1hWn_tT0Ufo-ajwr0EcOW88wkNOcyDq6sg62TdPzKNcTaXdDWsuCF4uHYsb9wvYpnF_-NYrqIC86mn7mzyiYP9KRmTy-lx0yMTaKEP7utEO-Q1EsmnhKduaM8yTcdS-hRkH6-Y7sCEiZA_ZAgR6NwWAEd6LWD19O07WoKqtnayiEfSUp8f8HjTZ1VsaLhQPab1DaVKzL5Q8tzFCAQmGYe58iYfctoXWnV_tk6cC0njBX-DCeb-KiBMDe54-5nmSv84CiURj8Avpysr__dPYSLREpYffn34nz4VllpEl7EEI98uAZ3PkZjkX0LhGmdtkDVGrOMxDrm2f_x_SJsc-p5dju2O1NctVI4nafbaqq4udKjixNkEhtS4tpQfAu8cIA37vNVTPlcTmtf6zqitw9lyt9WmYNRtpy1jj_ltFPdJ36lZOlke6LMjTE97hhTWBoh7Vn8hxnEKgA0s2ebRlwQ_xQUbrktd7v0buHk4bQnfLAw9jAYJz2q1VkPbqM5Ni_3jwPSDE7Ao8Im777gu9PwLSBEP4XJGVx7ucBK9aym_fxrB4EqE9RnIct0kk1Sp5hGWw1vnBKuAYhAByVo6HZzVqc3SEAUdtf8p4BwvxXz-RjyZqy4vVurPtVmO4qc09-ZRFPcm8R28yago-9txV0GojZP9mgDlPZCPmn0-f42CmUCfGuqKDwqj6QuTv0YSdqyBx1ZOwca3eHTlojD59rvb9OshF0DrE9UtBQSBEMmHv1zdUh0G8GB2ujZTY1EhFB6qe3mfO2qhNLXazEkY4bXrzJI6gEo2JzsVyC3QpUT3n8v1NEexgcjXRGwvf4mbCK4Jm4_iy-2eRGhnP5JYlSNDCHLlgGpP102nr9NSsZSa4jb3UKmTPgzFCMFOH-ypN-VL1PJm4Hi3_amuYJypkVF7Liq0Q1k02KijgoMSJVv34ZgcDpemr72k6NxTUhbuYBZ7EJNBahz31632-UC5ZS34C66orfCRgtBai66Q3xLN81NJ94YeBiczBQ3D7-o6sk1cnUOoQVbX_hRCg3s5OY_KXan48784Zi6hL8Z1wXBR5PpR1P8532AGGij9AYWnfaKkm-DX7yFYR7yrK6n8JDtygRczVxk6Bcj4lmJk3zhXPPYvdFmLgIznDP4Yr6yMquePKnlk8aqyj4MuJv74jShbWpHIFPJysGaqKXNI4QzYtgFOprlOhsKSBkF4B3HDJIsIq7F85QMBpcoKm3Y2xVfL5CR8qpGn_FpRwEVhpAjXoxL6ECbb_aNi3HB_S-pC9OCZuSQQAD47jVVsTjvabHDMUGp1wg-pc0rVaO3ZqFd5rhmfZHSB1HdKOh1HhF2rbV9kS2whO5tC7l7R3HsiViG6YTk0KG-qH6gvNY5iyUvTRB1z1frC6SiqnMG356gUzeunz1vsSHDyjAHN9VDZvyMq-82MjWtkJEtO4mcaqDdYGHxr-Fv9yQTEjBONIuA1wwO9Mc6hVBh4FG4lYa9VxlrZARlfhPuNVxEpI6pYWRWCeEvHlDSKFFK7AsR-Ma0M5uvWERRIR-fR8QfHi11sGebm9f3NfA23rvJT26twdN53Nn2Wa-25zhTXj-HqW-v4gbOrWmzokWr-bucvH1x12ZoEjKiCmQJfDuN-c5ZGYoKxcHTt8j0s7WSchaAM87K5CgLC2sniFcDNe6SPPFhIxcEnVLNPhGjRrULjI14I4g1Z8uN30geHHRQ6XBB1c7LBKvpJuCNJyW063kX1-EBH89J2-4moxQRS20M65FsuhbnMbwvLYPMcMesKufXWmX1dSXuaHG9e1kFfKI2SKfsvKghUhM2OZgTMZc46MbV0Yo_4BU4kAm2qWt44S8MvjDF7nVEPnFNw7iMY_VLEDaYLkrGtxnDDlFYEDmsvQbjl4WEM9bX7kQ7cS9DZwKo07OQg9V3dUlV6MJLEGvAFjSl0JGUeUJ0gPSrTGlxdUNGMqaLbK0_PxEnERk4iavoFDWE_LYnQIGdKtM3rjoUqgXcTNAOKGCDj_kiVKgRSVQPf9ZnJVjTvIeJ-C9Ktw4wfKMC-MnNAd9uDOOyc560VV8wLG7QmNaJqxmwj8r9WCy1GoY-l3ush3FV9yv8UsAoCF1qlSm-PMATzWX9uQs6f8L7o5Ps7ipjDoO5p8UA-6ThvNmnaaJYxjlus2KOvcaTx0BQvTRvWSzr3EAU0F2jg6CHFQvqfM10T8h3UnEyn071T9SS_t-WKBYbuGndjOVozHXcc8N6xxd7H8fELG2BRQsPzE9OBCN7BwsFJwHoT6p8iMof7InmQhncStceFMNzg6mByP2mwLEHVhzFgoT2Vda9hzpG9AFMjX9ZfNA-5vPLrEhTIA3rDwuHSFAcJ7xXQy7RSsBXMK3L4jNiti9soa9HC2wgmV1z0FoI0wHKpAJ9tIWiDysg-dLD1M_Mc4w0AuKOgSxC8DfPD9lkbwB7qyIl815Pq4jqFSmPli41jEmXnF-7N5OwGVYoqJgppG5J6ZHHOOPKUTewBdnEWJS9ysGUWmLEJPKbLH-BG45F9YaPTdfE9MTxr6l868kiqSJcvX6NgAoPbr7IxN2rbiabV-EfBFyJCS7E4QnthcHhN6nL7E6Wq41OwXvhGVpPUru0o-oozB63yj1ZPY5FalIwNSccJOCQ5f4DYjgA2wILky3H-5P7IJ8EmhrEcLnO5qY6vycqOf18FGg-HMPaM6xyB8PZUSCvNMLHKIuLRsxDseoh555EW2qHpUlfED48SPHjCGt63EYN5XpV2-dqfZ111egsUSLdyVt8h6HWXV8FyGhKYZRmASXGMM4SMWzEgnYq1M5gfUpC2DRpafx9oi6TY_DsQ2AncEq78dQvCg8BEvuQQE4QLnzmlDuKPRvxvkfmvqZ0obGaQnqYYTMmEA4hYL-B8agWjcnjeTuBL769edFzQwLrjpU6VEly54xaAa1vUf5w_vqvfj7-a31c5Bgq2SH_rIpL5JDc0_arnOjufUag9EcpBrQyFkoTGmXJjvGgRdJ8qOaOFiph6jWUwRqZ5pBzihK7J3180y4213SfIdkprlUF-FOD7cGfv6gM3-xDRj_55AJ0-IddhbDOE73EPmnWgQz9z-zH5QfKQk8-yfeWvptPGcfbMMHoFNhysKE5vnFX2HdopSgQ_tpD-zEru83hDIMJigPAdITYZoa8S4cpHc4FvAaJ91yTJRxurj732oJSgjS7qEz8VdVqHSKriQxkySFBeEayI_DFHmazBj3T8iFb%26bid%3D0.0016666666666666668\u0026pr=\u0026bid_crid=\u0026bid_cid=\u0026is_iframe=0\u0026ad_tags=upskirt%2Cvideos%2Cporn%2Cporn%2Cmovies%2Cfree%2Cporn%2Cfree%2Cporn%2Cmovies%2Csex%2Cporno%2Cfree%2Csex%2Ctube%2Cporn%2Ctube%2Cvideos%2Cfull%2Cporn%2Cxxnx%2Cxnxxx%2Cxxx%2Cpussy%2Cvideos%2Cupskirt%2Cxporn%2Cfirst%2Clive%2Csex%2Cporn%2Cvideos%2Cerotic%2Cporn%2Cfuck%2Cor%2Cxxx%2Cporno%2Cgood%2Cbrazzers%2Csex,\u0026stratagem=\u0026ssp=4042\u0026refresh=1\u0026priority=0\u0026bb=0.0001\u0026label_ids=39\u0026site_id64=1411046\u0026container=ClickadillaTuple\u0026original_bid_usd=0.0014378333091735833\u0026comeback=\u0026topics=\u0026o_d=d3d3LmVyb3RpY3Bvcm5zLmNvbQ==\u0026ectr=0.0007879855381477704\u0026client_price=0.0017253999710082999\u0026direct_client_price=0\u0026client_payment_model=cpm\u0026ext_campaign_id=236776\u0026auction_time=1727198854\u0026account_id=2022","fqdn":"rtbrenab.com","domain":"rtbrenab.com","tld":"com"},"ip":{"addr":"116.202.60.226","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://rtbrenab.com/get/?go=1\u0026data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImIiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MTQ5NiwidHlwZSI6InBvcCIsImlkem9uZSI6bnVsbCwiYWRfdGFncyI6InVwc2tpcnQlMkN2aWRlb3MlMkNwb3JuJTJDcG9ybiUyQ21vdmllcyUyQ2ZyZWUlMkNwb3JuJTJDZnJlZSUyQ3Bvcm4lMkNtb3ZpZXMlMkNzZXglMkNwb3JubyUyQ2ZyZWUlMkNzZXglMkN0dWJlJTJDcG9ybiUyQ3R1YmUlMkN2aWRlb3MlMkNmdWxsJTJDcG9ybiUyQ3h4bnglMkN4bnh4eCUyQ3h4eCUyQ3B1c3N5JTJDdmlkZW9zJTJDdXBza2lydCUyQ3hwb3JuJTJDZmlyc3QlMkNsaXZlJTJDc2V4JTJDcG9ybiUyQ3ZpZGVvcyUyQ2Vyb3RpYyUyQ3Bvcm4lMkNmdWNrJTJDb3IlMkN4eHglMkNwb3JubyUyQ2dvb2QlMkNicmF6emVycyUyQ3NleCwiLCJsYWJlbHMiOiIiLCJhbGxvd2VkX2xhYmVscyI6IiIsInRpdGxlIjoiIiwic3ViaWQiOiI5NzM2MTcxNDUiLCJyZWZyZXNoIjoxLCJ1dG0xIjoiIiwidXRtMiI6IiIsInV0bTQiOiIiLCJzcG90X2lkIjoxNDExMDQ2LCJtdWx0aXBsZSI6ZmFsc2UsImlzX2lmcmFtZSI6ZmFsc2UsInJlZmRvbWFpbiI6IiIsInBsIjoyNjksInN0cmF0YWdlbSI6IiIsImd5ciI6MCwiYWNjZWwiOjAsInNzcCI6Mzc1OCwiYnR5cGUiOjAsInYyIjowLCJyY2hhbmdlIjp0cnVlfSwiYmFubmVyIjp7InciOjMwMCwiaCI6MjUwfSwibWV0cmljcyI6eyJ0b3BpY3MiOltdfX1dLCJzaXRlIjp7ImlkIjoiMTQxMTA0NiIsImNhdCI6WyJJQUIyNSJdLCJwYWdlIjoiaHR0cHM6Ly93d3cuZXJvdGljcG9ybnMuY29tL3Bvcm4vdXBza2lydC12aWRlb3MvIiwiY3RpZCI6MX0sImRldmljZSI6eyJ3IjoxMjgwLCJoIjoxMDI0fSwidXNlciI6eyJpZCI6ImU0YzI4YTE4NjRlNDkxNGY1ZmFiNzk4M2U0NjNlZjI1IiwiZnAiOm51bGwsImZwX3N0ciI6IiIsInVhX2RhdGEiOm51bGx9LCJleHQiOnsiZHQiOjE3MjcxOTg4NTQzNjB9fQ==","date":"2024-09-24T17:27:35.056Z","timestamp":1727198855056,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rtbbnr.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Jun 2024 02:03:01 GMT","end":"Sat, 28 Sep 2024 02:03:00 GMT"},"fingerprint":{"sha1":"DC:D1:3A:99:18:53:59:04:68:CF:CA:F4:F7:48:72:8E:28:21:8C:3D","sha256":"F3:70:6D:0B:F3:E6:40:8C:DD:0A:92:A2:BC:ED:F2:A2:6F:9E:03:4A:1E:37:7E:1F:58:9A:F4:DF:81:05:39:60"}}},"request":{"raw":"GET /banner/in/show/?mid=9000035816014162646\u0026pid=0\u0026site=1411046\u0026sc=NO\u0026usage_type=DCH\u0026subid=973617145\u0026sid=0\u0026cid=12774\u0026price=0\u0026is_cpm=1\u0026cpm=0.0014378333091735833\u0026ecpm=0.0014378333091735833\u0026crid=\u0026crtid=d41d8cd98f00b204e9800998ecf8427e\u0026tcid=0\u0026out_id=\u0026ver=\u0026ver_c=\u0026refdom=3txxx.com\u0026hostname=auc-banner-hz-1\u0026site_id=0\u0026spot_id=1411046\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026expiration_timestamp=0\u0026created_at=0000-00-00\u0026is_native=6\u0026pop_winurl=\u0026ip=91.90.42.154\u0026testab=\u0026px_id=1411046\u0026adblock=0\u0026auction_host=\u0026mm=\u0026yc=\u0026render_type=\u0026campaign_type=\u0026uniq=\u0026exp=0\u0026resp_type=iframeAd\u0026iabcat=IAB25\u0026min_cpm=0.00011591515205782852\u0026placement_type_id=9\u0026skin_test=\u0026verify_hash=\u0026score=1\u0026ml=\u0026tag_ab=b\u0026v2=0\u0026ttl=\u0026space_id=1496\u0026banner_width=300\u0026banner_height=250\u0026accel=0\u0026gyr=0\u0026iabcat=IAB25\u0026url=%2F%2Fbts.a11k.com%2Fin%2Ftishow%2F%3Fkatds_ep%3DS41xl-RvwICfIvwtX1JRXgNWoIS3CUtNgM19jnNAz-ih614imGyq10-TF0WnOAVFdOmLIMyOqa4-s0RkQv9nqoW55_eI1jbUb-pULqO0mTohGaTDMtpzpe2oXpJIeQrRWJxwvEDp6fRT_ATu8eTVy2ADhWD_A6XQY0RXL-9FhoXMNfry3c454Fgyb-L5NGX7DzIa9bcXljw7ZWv7nIz3VQpBzHYUod-4N02cJvF_i1BvQqboE_MHUqsxXIk5j-Qe5pVxtDdXycZzQzh5frmqq5fug4wCzmNWk7Heb47w2LFNwQDd3AiOiVjGTVOV1J3ILfo4gBfZHI9j953q9zs8fQI3fcHJeeWawgKe8a5p4WLs0bxlgXoxPMlfpWBvaiHJbczlizqL55IBcAWjyenxkayJSu1O9kG0A_8fIkxvYY2U0tOcsKM5FL9O6Yt_dwS38Kec-4qqMk1Z69_5idxtPeQApnRT25kkVHtCtp3Yr0YpVhuanYjEIagNByF3WV9Ulw49aGsmXKleo0w9QQAxkBM3Jg5A9QqTNlh8yNlHYvKGnCcBXivZaF8wD0bhyj2dhN7zoYsUrP_7Keg2i0FOdkD8dOIe5Z9zTGgf9dhTOkgMBP1Wpyana8A26dF5-YQvwXPTNHp6IteZbThBVraUUvzxPARmTZFBFTBylUuLSF_n5EuY2xud7G8xfR0ObBcRXNhfMVPJef4RTbHd4e0dydPZVJzxtBvNupB5qnW3i54a4FG-7NJtw8lrLv8umHW9azp6JMQC4RD_01zXuu2VA1dKa11ENJqsqOyPHNKkTzp8fb5Bq6sDsSyg6umQ0lpyf0GoulC4t2woo0wjDjUhzJdeBKcfDUUKes9B2ieilAcwbfz1OvMWUBa4T4mOppKHI1KJex8alYB80mBbu5PoMIVa4f0addFw8VkbzCmyvQo8i5zKvDmsh0cH4alZeKc40Om3YdCMh6rxBmSrG-S6CfIe0FKwdrhG4VmzHFYv1DBmtZ0SPD3RlVw0_fiwEzi07zVO8utP-j6h7Z6CfEIAHRdV2iG6kgP-_KEKmnQpZcn-Gy78b2CIiJkfmSpehNe8qkmiYVXcgDpZ0P_nFa-BLL8e46d_p97GD8F0aQKIza16ib-OD33kyIR9hg0u6M6VbS0znMMBGY0zoxpaDTrmGRlTIT7X2YxyYzBeByIXPW1oVSMfGyxwHfOraqsGV14zERftL11L_mz_ejgiaYVLz5rlsdMBsi5bgpSxhzJauZUJXyL-_xR6SxT5W-cRfxarNrxmUTfu2gaMGpLuiKIJhWOjOytsHQS3UTUSeeHcPG1NrgCpVqrIf-NcM-C-NhXDQNDjdOLw7D3fuoMeSL7ACUOH3o-UBAVXqqx5m6cayhJ7Gr2Aqjih6Nsaorf8Stc50sw6hIHJAgFwf-pHc9hCg-m-RwfHNxJT3YTx0soBatGPaJ3aprZ54r6JeLx7ng_4NQ1bZDnCkv0-RlSsD9RWhSitt5-2finQdmjgFiZu1HD2zxXXMD3tznOyZ4gqgC2oO6angJk_z328-7b9SiGJ8k1AHf8SbeXoX2vI-oI1REo9J-u9U5a-2EFAJIdqp24xkMpKfCnhc-mBPh0fIP1l53O8YyleGZpxhDksxq_J5-JIrDSYoZq2bpCunVL4vXoi2NmSzJRTUo-1OB4VXGPtMqqeXb92mIT6AfqwQAuDkuqwgmJ2b7st2xKEr-tgvJ5dm1UVfCFFaeVNWuGPbO7sS20JpoIUMwT_H80weZEcZhUdtHBef-XZg6cx289ytzxRK2KzHnoRpVwSrkw0kaHbflVDv4Km1FBVrZyC-UGsM0tAnaEb9vb7dNok5RF3DhaZ3JBjWFrSv5e0Du-Tnnlt8uxYX_wVWC8nbyVOvkdeL2xuV6YrxJODkv-ZwZoso3vufZSGfVkpzwmt6vqBERqiN6u1hWn_tT0Ufo-ajwr0EcOW88wkNOcyDq6sg62TdPzKNcTaXdDWsuCF4uHYsb9wvYpnF_-NYrqIC86mn7mzyiYP9KRmTy-lx0yMTaKEP7utEO-Q1EsmnhKduaM8yTcdS-hRkH6-Y7sCEiZA_ZAgR6NwWAEd6LWD19O07WoKqtnayiEfSUp8f8HjTZ1VsaLhQPab1DaVKzL5Q8tzFCAQmGYe58iYfctoXWnV_tk6cC0njBX-DCeb-KiBMDe54-5nmSv84CiURj8Avpysr__dPYSLREpYffn34nz4VllpEl7EEI98uAZ3PkZjkX0LhGmdtkDVGrOMxDrm2f_x_SJsc-p5dju2O1NctVI4nafbaqq4udKjixNkEhtS4tpQfAu8cIA37vNVTPlcTmtf6zqitw9lyt9WmYNRtpy1jj_ltFPdJ36lZOlke6LMjTE97hhTWBoh7Vn8hxnEKgA0s2ebRlwQ_xQUbrktd7v0buHk4bQnfLAw9jAYJz2q1VkPbqM5Ni_3jwPSDE7Ao8Im777gu9PwLSBEP4XJGVx7ucBK9aym_fxrB4EqE9RnIct0kk1Sp5hGWw1vnBKuAYhAByVo6HZzVqc3SEAUdtf8p4BwvxXz-RjyZqy4vVurPtVmO4qc09-ZRFPcm8R28yago-9txV0GojZP9mgDlPZCPmn0-f42CmUCfGuqKDwqj6QuTv0YSdqyBx1ZOwca3eHTlojD59rvb9OshF0DrE9UtBQSBEMmHv1zdUh0G8GB2ujZTY1EhFB6qe3mfO2qhNLXazEkY4bXrzJI6gEo2JzsVyC3QpUT3n8v1NEexgcjXRGwvf4mbCK4Jm4_iy-2eRGhnP5JYlSNDCHLlgGpP102nr9NSsZSa4jb3UKmTPgzFCMFOH-ypN-VL1PJm4Hi3_amuYJypkVF7Liq0Q1k02KijgoMSJVv34ZgcDpemr72k6NxTUhbuYBZ7EJNBahz31632-UC5ZS34C66orfCRgtBai66Q3xLN81NJ94YeBiczBQ3D7-o6sk1cnUOoQVbX_hRCg3s5OY_KXan48784Zi6hL8Z1wXBR5PpR1P8532AGGij9AYWnfaKkm-DX7yFYR7yrK6n8JDtygRczVxk6Bcj4lmJk3zhXPPYvdFmLgIznDP4Yr6yMquePKnlk8aqyj4MuJv74jShbWpHIFPJysGaqKXNI4QzYtgFOprlOhsKSBkF4B3HDJIsIq7F85QMBpcoKm3Y2xVfL5CR8qpGn_FpRwEVhpAjXoxL6ECbb_aNi3HB_S-pC9OCZuSQQAD47jVVsTjvabHDMUGp1wg-pc0rVaO3ZqFd5rhmfZHSB1HdKOh1HhF2rbV9kS2whO5tC7l7R3HsiViG6YTk0KG-qH6gvNY5iyUvTRB1z1frC6SiqnMG356gUzeunz1vsSHDyjAHN9VDZvyMq-82MjWtkJEtO4mcaqDdYGHxr-Fv9yQTEjBONIuA1wwO9Mc6hVBh4FG4lYa9VxlrZARlfhPuNVxEpI6pYWRWCeEvHlDSKFFK7AsR-Ma0M5uvWERRIR-fR8QfHi11sGebm9f3NfA23rvJT26twdN53Nn2Wa-25zhTXj-HqW-v4gbOrWmzokWr-bucvH1x12ZoEjKiCmQJfDuN-c5ZGYoKxcHTt8j0s7WSchaAM87K5CgLC2sniFcDNe6SPPFhIxcEnVLNPhGjRrULjI14I4g1Z8uN30geHHRQ6XBB1c7LBKvpJuCNJyW063kX1-EBH89J2-4moxQRS20M65FsuhbnMbwvLYPMcMesKufXWmX1dSXuaHG9e1kFfKI2SKfsvKghUhM2OZgTMZc46MbV0Yo_4BU4kAm2qWt44S8MvjDF7nVEPnFNw7iMY_VLEDaYLkrGtxnDDlFYEDmsvQbjl4WEM9bX7kQ7cS9DZwKo07OQg9V3dUlV6MJLEGvAFjSl0JGUeUJ0gPSrTGlxdUNGMqaLbK0_PxEnERk4iavoFDWE_LYnQIGdKtM3rjoUqgXcTNAOKGCDj_kiVKgRSVQPf9ZnJVjTvIeJ-C9Ktw4wfKMC-MnNAd9uDOOyc560VV8wLG7QmNaJqxmwj8r9WCy1GoY-l3ush3FV9yv8UsAoCF1qlSm-PMATzWX9uQs6f8L7o5Ps7ipjDoO5p8UA-6ThvNmnaaJYxjlus2KOvcaTx0BQvTRvWSzr3EAU0F2jg6CHFQvqfM10T8h3UnEyn071T9SS_t-WKBYbuGndjOVozHXcc8N6xxd7H8fELG2BRQsPzE9OBCN7BwsFJwHoT6p8iMof7InmQhncStceFMNzg6mByP2mwLEHVhzFgoT2Vda9hzpG9AFMjX9ZfNA-5vPLrEhTIA3rDwuHSFAcJ7xXQy7RSsBXMK3L4jNiti9soa9HC2wgmV1z0FoI0wHKpAJ9tIWiDysg-dLD1M_Mc4w0AuKOgSxC8DfPD9lkbwB7qyIl815Pq4jqFSmPli41jEmXnF-7N5OwGVYoqJgppG5J6ZHHOOPKUTewBdnEWJS9ysGUWmLEJPKbLH-BG45F9YaPTdfE9MTxr6l868kiqSJcvX6NgAoPbr7IxN2rbiabV-EfBFyJCS7E4QnthcHhN6nL7E6Wq41OwXvhGVpPUru0o-oozB63yj1ZPY5FalIwNSccJOCQ5f4DYjgA2wILky3H-5P7IJ8EmhrEcLnO5qY6vycqOf18FGg-HMPaM6xyB8PZUSCvNMLHKIuLRsxDseoh555EW2qHpUlfED48SPHjCGt63EYN5XpV2-dqfZ111egsUSLdyVt8h6HWXV8FyGhKYZRmASXGMM4SMWzEgnYq1M5gfUpC2DRpafx9oi6TY_DsQ2AncEq78dQvCg8BEvuQQE4QLnzmlDuKPRvxvkfmvqZ0obGaQnqYYTMmEA4hYL-B8agWjcnjeTuBL769edFzQwLrjpU6VEly54xaAa1vUf5w_vqvfj7-a31c5Bgq2SH_rIpL5JDc0_arnOjufUag9EcpBrQyFkoTGmXJjvGgRdJ8qOaOFiph6jWUwRqZ5pBzihK7J3180y4213SfIdkprlUF-FOD7cGfv6gM3-xDRj_55AJ0-IddhbDOE73EPmnWgQz9z-zH5QfKQk8-yfeWvptPGcfbMMHoFNhysKE5vnFX2HdopSgQ_tpD-zEru83hDIMJigPAdITYZoa8S4cpHc4FvAaJ91yTJRxurj732oJSgjS7qEz8VdVqHSKriQxkySFBeEayI_DFHmazBj3T8iFb%26bid%3D0.0016666666666666668\u0026pr=\u0026bid_crid=\u0026bid_cid=\u0026is_iframe=0\u0026ad_tags=upskirt%2Cvideos%2Cporn%2Cporn%2Cmovies%2Cfree%2Cporn%2Cfree%2Cporn%2Cmovies%2Csex%2Cporno%2Cfree%2Csex%2Ctube%2Cporn%2Ctube%2Cvideos%2Cfull%2Cporn%2Cxxnx%2Cxnxxx%2Cxxx%2Cpussy%2Cvideos%2Cupskirt%2Cxporn%2Cfirst%2Clive%2Csex%2Cporn%2Cvideos%2Cerotic%2Cporn%2Cfuck%2Cor%2Cxxx%2Cporno%2Cgood%2Cbrazzers%2Csex,\u0026stratagem=\u0026ssp=4042\u0026refresh=1\u0026priority=0\u0026bb=0.0001\u0026label_ids=39\u0026site_id64=1411046\u0026container=ClickadillaTuple\u0026original_bid_usd=0.0014378333091735833\u0026comeback=\u0026topics=\u0026o_d=d3d3LmVyb3RpY3Bvcm5zLmNvbQ==\u0026ectr=0.0007879855381477704\u0026client_price=0.0017253999710082999\u0026direct_client_price=0\u0026client_payment_model=cpm\u0026ext_campaign_id=236776\u0026auction_time=1727198854\u0026account_id=2022 HTTP/1.1\r\nHost: rtbrenab.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rtbrenab.com/get/?go=1\u0026data=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\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.18.0\r\ndate: Tue, 24 Sep 2024 17:27:35 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nlocation: //bts.a11k.com/in/tishow/?katds_ep=S41xl-RvwICfIvwtX1JRXgNWoIS3CUtNgM19jnNAz-ih614imGyq10-TF0WnOAVFdOmLIMyOqa4-s0RkQv9nqoW55_eI1jbUb-pULqO0mTohGaTDMtpzpe2oXpJIeQrRWJxwvEDp6fRT_ATu8eTVy2ADhWD_A6XQY0RXL-9FhoXMNfry3c454Fgyb-L5NGX7DzIa9bcXljw7ZWv7nIz3VQpBzHYUod-4N02cJvF_i1BvQqboE_MHUqsxXIk5j-Qe5pVxtDdXycZzQzh5frmqq5fug4wCzmNWk7Heb47w2LFNwQDd3AiOiVjGTVOV1J3ILfo4gBfZHI9j953q9zs8fQI3fcHJeeWawgKe8a5p4WLs0bxlgXoxPMlfpWBvaiHJbczlizqL55IBcAWjyenxkayJSu1O9kG0A_8fIkxvYY2U0tOcsKM5FL9O6Yt_dwS38Kec-4qqMk1Z69_5idxtPeQApnRT25kkVHtCtp3Yr0YpVhuanYjEIagNByF3WV9Ulw49aGsmXKleo0w9QQAxkBM3Jg5A9QqTNlh8yNlHYvKGnCcBXivZaF8wD0bhyj2dhN7zoYsUrP_7Keg2i0FOdkD8dOIe5Z9zTGgf9dhTOkgMBP1Wpyana8A26dF5-YQvwXPTNHp6IteZbThBVraUUvzxPARmTZFBFTBylUuLSF_n5EuY2xud7G8xfR0ObBcRXNhfMVPJef4RTbHd4e0dydPZVJzxtBvNupB5qnW3i54a4FG-7NJtw8lrLv8umHW9azp6JMQC4RD_01zXuu2VA1dKa11ENJqsqOyPHNKkTzp8fb5Bq6sDsSyg6umQ0lpyf0GoulC4t2woo0wjDjUhzJdeBKcfDUUKes9B2ieilAcwbfz1OvMWUBa4T4mOppKHI1KJex8alYB80mBbu5PoMIVa4f0addFw8VkbzCmyvQo8i5zKvDmsh0cH4alZeKc40Om3YdCMh6rxBmSrG-S6CfIe0FKwdrhG4VmzHFYv1DBmtZ0SPD3RlVw0_fiwEzi07zVO8utP-j6h7Z6CfEIAHRdV2iG6kgP-_KEKmnQpZcn-Gy78b2CIiJkfmSpehNe8qkmiYVXcgDpZ0P_nFa-BLL8e46d_p97GD8F0aQKIza16ib-OD33kyIR9hg0u6M6VbS0znMMBGY0zoxpaDTrmGRlTIT7X2YxyYzBeByIXPW1oVSMfGyxwHfOraqsGV14zERftL11L_mz_ejgiaYVLz5rlsdMBsi5bgpSxhzJauZUJXyL-_xR6SxT5W-cRfxarNrxmUTfu2gaMGpLuiKIJhWOjOytsHQS3UTUSeeHcPG1NrgCpVqrIf-NcM-C-NhXDQNDjdOLw7D3fuoMeSL7ACUOH3o-UBAVXqqx5m6cayhJ7Gr2Aqjih6Nsaorf8Stc50sw6hIHJAgFwf-pHc9hCg-m-RwfHNxJT3YTx0soBatGPaJ3aprZ54r6JeLx7ng_4NQ1bZDnCkv0-RlSsD9RWhSitt5-2finQdmjgFiZu1HD2zxXXMD3tznOyZ4gqgC2oO6angJk_z328-7b9SiGJ8k1AHf8SbeXoX2vI-oI1REo9J-u9U5a-2EFAJIdqp24xkMpKfCnhc-mBPh0fIP1l53O8YyleGZpxhDksxq_J5-JIrDSYoZq2bpCunVL4vXoi2NmSzJRTUo-1OB4VXGPtMqqeXb92mIT6AfqwQAuDkuqwgmJ2b7st2xKEr-tgvJ5dm1UVfCFFaeVNWuGPbO7sS20JpoIUMwT_H80weZEcZhUdtHBef-XZg6cx289ytzxRK2KzHnoRpVwSrkw0kaHbflVDv4Km1FBVrZyC-UGsM0tAnaEb9vb7dNok5RF3DhaZ3JBjWFrSv5e0Du-Tnnlt8uxYX_wVWC8nbyVOvkdeL2xuV6YrxJODkv-ZwZoso3vufZSGfVkpzwmt6vqBERqiN6u1hWn_tT0Ufo-ajwr0EcOW88wkNOcyDq6sg62TdPzKNcTaXdDWsuCF4uHYsb9wvYpnF_-NYrqIC86mn7mzyiYP9KRmTy-lx0yMTaKEP7utEO-Q1EsmnhKduaM8yTcdS-hRkH6-Y7sCEiZA_ZAgR6NwWAEd6LWD19O07WoKqtnayiEfSUp8f8HjTZ1VsaLhQPab1DaVKzL5Q8tzFCAQmGYe58iYfctoXWnV_tk6cC0njBX-DCeb-KiBMDe54-5nmSv84CiURj8Avpysr__dPYSLREpYffn34nz4VllpEl7EEI98uAZ3PkZjkX0LhGmdtkDVGrOMxDrm2f_x_SJsc-p5dju2O1NctVI4nafbaqq4udKjixNkEhtS4tpQfAu8cIA37vNVTPlcTmtf6zqitw9lyt9WmYNRtpy1jj_ltFPdJ36lZOlke6LMjTE97hhTWBoh7Vn8hxnEKgA0s2ebRlwQ_xQUbrktd7v0buHk4bQnfLAw9jAYJz2q1VkPbqM5Ni_3jwPSDE7Ao8Im777gu9PwLSBEP4XJGVx7ucBK9aym_fxrB4EqE9RnIct0kk1Sp5hGWw1vnBKuAYhAByVo6HZzVqc3SEAUdtf8p4BwvxXz-RjyZqy4vVurPtVmO4qc09-ZRFPcm8R28yago-9txV0GojZP9mgDlPZCPmn0-f42CmUCfGuqKDwqj6QuTv0YSdqyBx1ZOwca3eHTlojD59rvb9OshF0DrE9UtBQSBEMmHv1zdUh0G8GB2ujZTY1EhFB6qe3mfO2qhNLXazEkY4bXrzJI6gEo2JzsVyC3QpUT3n8v1NEexgcjXRGwvf4mbCK4Jm4_iy-2eRGhnP5JYlSNDCHLlgGpP102nr9NSsZSa4jb3UKmTPgzFCMFOH-ypN-VL1PJm4Hi3_amuYJypkVF7Liq0Q1k02KijgoMSJVv34ZgcDpemr72k6NxTUhbuYBZ7EJNBahz31632-UC5ZS34C66orfCRgtBai66Q3xLN81NJ94YeBiczBQ3D7-o6sk1cnUOoQVbX_hRCg3s5OY_KXan48784Zi6hL8Z1wXBR5PpR1P8532AGGij9AYWnfaKkm-DX7yFYR7yrK6n8JDtygRczVxk6Bcj4lmJk3zhXPPYvdFmLgIznDP4Yr6yMquePKnlk8aqyj4MuJv74jShbWpHIFPJysGaqKXNI4QzYtgFOprlOhsKSBkF4B3HDJIsIq7F85QMBpcoKm3Y2xVfL5CR8qpGn_FpRwEVhpAjXoxL6ECbb_aNi3HB_S-pC9OCZuSQQAD47jVVsTjvabHDMUGp1wg-pc0rVaO3ZqFd5rhmfZHSB1HdKOh1HhF2rbV9kS2whO5tC7l7R3HsiViG6YTk0KG-qH6gvNY5iyUvTRB1z1frC6SiqnMG356gUzeunz1vsSHDyjAHN9VDZvyMq-82MjWtkJEtO4mcaqDdYGHxr-Fv9yQTEjBONIuA1wwO9Mc6hVBh4FG4lYa9VxlrZARlfhPuNVxEpI6pYWRWCeEvHlDSKFFK7AsR-Ma0M5uvWERRIR-fR8QfHi11sGebm9f3NfA23rvJT26twdN53Nn2Wa-25zhTXj-HqW-v4gbOrWmzokWr-bucvH1x12ZoEjKiCmQJfDuN-c5ZGYoKxcHTt8j0s7WSchaAM87K5CgLC2sniFcDNe6SPPFhIxcEnVLNPhGjRrULjI14I4g1Z8uN30geHHRQ6XBB1c7LBKvpJuCNJyW063kX1-EBH89J2-4moxQRS20M65FsuhbnMbwvLYPMcMesKufXWmX1dSXuaHG9e1kFfKI2SKfsvKghUhM2OZgTMZc46MbV0Yo_4BU4kAm2qWt44S8MvjDF7nVEPnFNw7iMY_VLEDaYLkrGtxnDDlFYEDmsvQbjl4WEM9bX7kQ7cS9DZwKo07OQg9V3dUlV6MJLEGvAFjSl0JGUeUJ0gPSrTGlxdUNGMqaLbK0_PxEnERk4iavoFDWE_LYnQIGdKtM3rjoUqgXcTNAOKGCDj_kiVKgRSVQPf9ZnJVjTvIeJ-C9Ktw4wfKMC-MnNAd9uDOOyc560VV8wLG7QmNaJqxmwj8r9WCy1GoY-l3ush3FV9yv8UsAoCF1qlSm-PMATzWX9uQs6f8L7o5Ps7ipjDoO5p8UA-6ThvNmnaaJYxjlus2KOvcaTx0BQvTRvWSzr3EAU0F2jg6CHFQvqfM10T8h3UnEyn071T9SS_t-WKBYbuGndjOVozHXcc8N6xxd7H8fELG2BRQsPzE9OBCN7BwsFJwHoT6p8iMof7InmQhncStceFMNzg6mByP2mwLEHVhzFgoT2Vda9hzpG9AFMjX9ZfNA-5vPLrEhTIA3rDwuHSFAcJ7xXQy7RSsBXMK3L4jNiti9soa9HC2wgmV1z0FoI0wHKpAJ9tIWiDysg-dLD1M_Mc4w0AuKOgSxC8DfPD9lkbwB7qyIl815Pq4jqFSmPli41jEmXnF-7N5OwGVYoqJgppG5J6ZHHOOPKUTewBdnEWJS9ysGUWmLEJPKbLH-BG45F9YaPTdfE9MTxr6l868kiqSJcvX6NgAoPbr7IxN2rbiabV-EfBFyJCS7E4QnthcHhN6nL7E6Wq41OwXvhGVpPUru0o-oozB63yj1ZPY5FalIwNSccJOCQ5f4DYjgA2wILky3H-5P7IJ8EmhrEcLnO5qY6vycqOf18FGg-HMPaM6xyB8PZUSCvNMLHKIuLRsxDseoh555EW2qHpUlfED48SPHjCGt63EYN5XpV2-dqfZ111egsUSLdyVt8h6HWXV8FyGhKYZRmASXGMM4SMWzEgnYq1M5gfUpC2DRpafx9oi6TY_DsQ2AncEq78dQvCg8BEvuQQE4QLnzmlDuKPRvxvkfmvqZ0obGaQnqYYTMmEA4hYL-B8agWjcnjeTuBL769edFzQwLrjpU6VEly54xaAa1vUf5w_vqvfj7-a31c5Bgq2SH_rIpL5JDc0_arnOjufUag9EcpBrQyFkoTGmXJjvGgRdJ8qOaOFiph6jWUwRqZ5pBzihK7J3180y4213SfIdkprlUF-FOD7cGfv6gM3-xDRj_55AJ0-IddhbDOE73EPmnWgQz9z-zH5QfKQk8-yfeWvptPGcfbMMHoFNhysKE5vnFX2HdopSgQ_tpD-zEru83hDIMJigPAdITYZoa8S4cpHc4FvAaJ91yTJRxurj732oJSgjS7qEz8VdVqHSKriQxkySFBeEayI_DFHmazBj3T8iFb\u0026bid=0.0016666666666666668\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtbrenab.com/banner/in/show/?mid=6851192660588967046\u0026pid=0\u0026site=1411045\u0026sc=NO\u0026usage_type=DCH\u0026subid=949889887\u0026sid=0\u0026cid=0\u0026price=0\u0026is_cpm=0\u0026cpm=0\u0026ecpm=0\u0026crid=\u0026crtid=\u0026tcid=0\u0026out_id=\u0026ver=\u0026ver_c=\u0026refdom=3txxx.com\u0026hostname=auc-banner-hz-16\u0026site_id=0\u0026spot_id=1411045\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026expiration_timestamp=0\u0026created_at=0000-00-00\u0026is_native=0\u0026pop_winurl=\u0026ip=91.90.42.154\u0026testab=\u0026px_id=0\u0026adblock=0\u0026auction_host=\u0026mm=\u0026yc=\u0026render_type=\u0026campaign_type=\u0026uniq=\u0026exp=0\u0026resp_type=default\u0026iabcat=IAB25\u0026min_cpm=0.0001\u0026placement_type_id=267\u0026skin_test=\u0026verify_hash=\u0026score=1\u0026ml=\u0026tag_ab=b\u0026v2=0\u0026ttl=\u0026space_id=1495\u0026banner_width=300\u0026banner_height=100\u0026accel=0\u0026gyr=0\u0026iabcat=IAB25\u0026url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D1411045%26source%3D949889887%26idzone%3D0%26w%3D300%26h%3D100%26mo%3D%26ve%3D%26site_id%3D1411045%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3Dupskirt%252Cvideos%252Cporn%252Cporn%252Cmovies%252Cfree%252Cporn%252Cfree%252Cporn%252Cmovies%252Csex%252Cporno%252Cfree%252Csex%252Ctube%252Cporn%252Ctube%252Cvideos%252Cfull%252Cporn%252Cxxnx%252Cxnxxx%252Cxxx%252Cpussy%252Cvideos%252Cupskirt%252Cxporn%252Cfirst%252Clive%252Csex%252Cporn%252Cvideos%252Cerotic%252Cporn%252Cfuck%252Cor%252Cxxx%252Cporno%252Cgood%252Cbrazzers%252Csex%2C%26spot_id%3D1411045%26p%3Dhttps%253A%252F%252F3txxx.com%252Fvideo%252F10924%252Fsofia-rose-teaches-her-boy-a-lesson-with-her-pussy%252F%26katds_labels%3D%26btype%3D0%26score%3D1%26bf%3D0.0001%26dr%3D3txxx.com\u0026pr=\u0026bid_crid=\u0026bid_cid=\u0026is_iframe=0\u0026ad_tags=upskirt%2Cvideos%2Cporn%2Cporn%2Cmovies%2Cfree%2Cporn%2Cfree%2Cporn%2Cmovies%2Csex%2Cporno%2Cfree%2Csex%2Ctube%2Cporn%2Ctube%2Cvideos%2Cfull%2Cporn%2Cxxnx%2Cxnxxx%2Cxxx%2Cpussy%2Cvideos%2Cupskirt%2Cxporn%2Cfirst%2Clive%2Csex%2Cporn%2Cvideos%2Cerotic%2Cporn%2Cfuck%2Cor%2Cxxx%2Cporno%2Cgood%2Cbrazzers%2Csex,\u0026stratagem=\u0026ssp=4042\u0026refresh=1\u0026priority=0\u0026bb=0.0001\u0026label_ids=\u0026site_id64=0\u0026container=ClickadillaTuple\u0026original_bid_usd=0\u0026comeback=\u0026topics=\u0026o_d=d3d3LmVyb3RpY3Bvcm5zLmNvbQ==\u0026ectr=0\u0026client_price=0\u0026direct_client_price=0\u0026client_payment_model=\u0026ext_campaign_id=\u0026auction_time=1727198854\u0026account_id=0","fqdn":"rtbrenab.com","domain":"rtbrenab.com","tld":"com"},"ip":{"addr":"116.202.60.226","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://rtbrenab.com/get/?go=1\u0026data=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","date":"2024-09-24T17:27:35.058Z","timestamp":1727198855058,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rtbbnr.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Jun 2024 02:03:01 GMT","end":"Sat, 28 Sep 2024 02:03:00 GMT"},"fingerprint":{"sha1":"DC:D1:3A:99:18:53:59:04:68:CF:CA:F4:F7:48:72:8E:28:21:8C:3D","sha256":"F3:70:6D:0B:F3:E6:40:8C:DD:0A:92:A2:BC:ED:F2:A2:6F:9E:03:4A:1E:37:7E:1F:58:9A:F4:DF:81:05:39:60"}}},"request":{"raw":"GET /banner/in/show/?mid=6851192660588967046\u0026pid=0\u0026site=1411045\u0026sc=NO\u0026usage_type=DCH\u0026subid=949889887\u0026sid=0\u0026cid=0\u0026price=0\u0026is_cpm=0\u0026cpm=0\u0026ecpm=0\u0026crid=\u0026crtid=\u0026tcid=0\u0026out_id=\u0026ver=\u0026ver_c=\u0026refdom=3txxx.com\u0026hostname=auc-banner-hz-16\u0026site_id=0\u0026spot_id=1411045\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026expiration_timestamp=0\u0026created_at=0000-00-00\u0026is_native=0\u0026pop_winurl=\u0026ip=91.90.42.154\u0026testab=\u0026px_id=0\u0026adblock=0\u0026auction_host=\u0026mm=\u0026yc=\u0026render_type=\u0026campaign_type=\u0026uniq=\u0026exp=0\u0026resp_type=default\u0026iabcat=IAB25\u0026min_cpm=0.0001\u0026placement_type_id=267\u0026skin_test=\u0026verify_hash=\u0026score=1\u0026ml=\u0026tag_ab=b\u0026v2=0\u0026ttl=\u0026space_id=1495\u0026banner_width=300\u0026banner_height=100\u0026accel=0\u0026gyr=0\u0026iabcat=IAB25\u0026url=https%3A%2F%2Fbtds.zog.link%2Fin%2F912%2F%3Fsid%3D1411045%26source%3D949889887%26idzone%3D0%26w%3D300%26h%3D100%26mo%3D%26ve%3D%26site_id%3D1411045%26utm1%3D%26utm2%3D%26utm3%3D%26utm4%3D%26ad_tags%3Dupskirt%252Cvideos%252Cporn%252Cporn%252Cmovies%252Cfree%252Cporn%252Cfree%252Cporn%252Cmovies%252Csex%252Cporno%252Cfree%252Csex%252Ctube%252Cporn%252Ctube%252Cvideos%252Cfull%252Cporn%252Cxxnx%252Cxnxxx%252Cxxx%252Cpussy%252Cvideos%252Cupskirt%252Cxporn%252Cfirst%252Clive%252Csex%252Cporn%252Cvideos%252Cerotic%252Cporn%252Cfuck%252Cor%252Cxxx%252Cporno%252Cgood%252Cbrazzers%252Csex%2C%26spot_id%3D1411045%26p%3Dhttps%253A%252F%252F3txxx.com%252Fvideo%252F10924%252Fsofia-rose-teaches-her-boy-a-lesson-with-her-pussy%252F%26katds_labels%3D%26btype%3D0%26score%3D1%26bf%3D0.0001%26dr%3D3txxx.com\u0026pr=\u0026bid_crid=\u0026bid_cid=\u0026is_iframe=0\u0026ad_tags=upskirt%2Cvideos%2Cporn%2Cporn%2Cmovies%2Cfree%2Cporn%2Cfree%2Cporn%2Cmovies%2Csex%2Cporno%2Cfree%2Csex%2Ctube%2Cporn%2Ctube%2Cvideos%2Cfull%2Cporn%2Cxxnx%2Cxnxxx%2Cxxx%2Cpussy%2Cvideos%2Cupskirt%2Cxporn%2Cfirst%2Clive%2Csex%2Cporn%2Cvideos%2Cerotic%2Cporn%2Cfuck%2Cor%2Cxxx%2Cporno%2Cgood%2Cbrazzers%2Csex,\u0026stratagem=\u0026ssp=4042\u0026refresh=1\u0026priority=0\u0026bb=0.0001\u0026label_ids=\u0026site_id64=0\u0026container=ClickadillaTuple\u0026original_bid_usd=0\u0026comeback=\u0026topics=\u0026o_d=d3d3LmVyb3RpY3Bvcm5zLmNvbQ==\u0026ectr=0\u0026client_price=0\u0026direct_client_price=0\u0026client_payment_model=\u0026ext_campaign_id=\u0026auction_time=1727198854\u0026account_id=0 HTTP/1.1\r\nHost: rtbrenab.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rtbrenab.com/get/?go=1\u0026data=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\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.18.0\r\ndate: Tue, 24 Sep 2024 17:27:35 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nlocation: https://btds.zog.link/in/912/?sid=1411045\u0026source=949889887\u0026idzone=0\u0026w=300\u0026h=100\u0026mo=\u0026ve=\u0026site_id=1411045\u0026utm1=\u0026utm2=\u0026utm3=\u0026utm4=\u0026ad_tags=upskirt%2Cvideos%2Cporn%2Cporn%2Cmovies%2Cfree%2Cporn%2Cfree%2Cporn%2Cmovies%2Csex%2Cporno%2Cfree%2Csex%2Ctube%2Cporn%2Ctube%2Cvideos%2Cfull%2Cporn%2Cxxnx%2Cxnxxx%2Cxxx%2Cpussy%2Cvideos%2Cupskirt%2Cxporn%2Cfirst%2Clive%2Csex%2Cporn%2Cvideos%2Cerotic%2Cporn%2Cfuck%2Cor%2Cxxx%2Cporno%2Cgood%2Cbrazzers%2Csex,\u0026spot_id=1411045\u0026p=https%3A%2F%2F3txxx.com%2Fvideo%2F10924%2Fsofia-rose-teaches-her-boy-a-lesson-with-her-pussy%2F\u0026katds_labels=\u0026btype=0\u0026score=1\u0026bf=0.0001\u0026dr=3txxx.com\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nereserv.com/in/dip?event_id=c697b2e4-b076-40dd-a0e6-0b449ba07d18\u0026subid=358801270\u0026spot_id=1411041\u0026created_at=2024-09-24\u0026timezone=0\u0026ver=1.154.3","fqdn":"nereserv.com","domain":"nereserv.com","tld":"com"},"ip":{"addr":"168.119.25.102","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:35.063Z","timestamp":1727198855063,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Aug 2024 04:34:54 GMT","end":"Sat, 16 Nov 2024 04:34:53 GMT"},"fingerprint":{"sha1":"45:52:8C:9D:57:BA:65:CC:D6:E3:BA:47:79:D3:57:FC:CA:CB:04:0B","sha256":"FD:0B:68:7F:CB:A1:2A:C4:BB:1E:D3:23:6B:65:40:17:40:36:2E:99:AB:61:38:E2:79:F5:8B:DF:57:22:CD:B8"}}},"request":{"raw":"GET /in/dip?event_id=c697b2e4-b076-40dd-a0e6-0b449ba07d18\u0026subid=358801270\u0026spot_id=1411041\u0026created_at=2024-09-24\u0026timezone=0\u0026ver=1.154.3 HTTP/1.1\r\nHost: nereserv.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.eroticporns.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 24 Sep 2024 17:27:35 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtbrenab.com/banner/in/show/?mid=6131601993338874099\u0026pid=0\u0026site=1411042\u0026sc=NO\u0026usage_type=DCH\u0026subid=268147922\u0026sid=0\u0026cid=12774\u0026price=0\u0026is_cpm=1\u0026cpm=0.0014378333091735833\u0026ecpm=0.0014378333091735833\u0026crid=\u0026crtid=d41d8cd98f00b204e9800998ecf8427e\u0026tcid=0\u0026out_id=\u0026ver=\u0026ver_c=\u0026refdom=3txxx.com\u0026hostname=auc-banner-hz-19\u0026site_id=0\u0026spot_id=1411042\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026expiration_timestamp=0\u0026created_at=0000-00-00\u0026is_native=6\u0026pop_winurl=\u0026ip=91.90.42.154\u0026testab=\u0026px_id=1411042\u0026adblock=0\u0026auction_host=\u0026mm=\u0026yc=\u0026render_type=\u0026campaign_type=\u0026uniq=\u0026exp=0\u0026resp_type=iframeAd\u0026iabcat=IAB25\u0026min_cpm=0.00011591515205782852\u0026placement_type_id=9\u0026skin_test=\u0026verify_hash=\u0026score=1\u0026ml=\u0026tag_ab=b\u0026v2=0\u0026ttl=\u0026space_id=1496\u0026banner_width=300\u0026banner_height=250\u0026accel=0\u0026gyr=0\u0026iabcat=IAB25\u0026url=%2F%2Fbts.a11k.com%2Fin%2Ftishow%2F%3Fkatds_ep%3D_qDgDbX1GnwDyTucAV0owvj1IfHXtgN0xLQn357dx8Xpn69tzirslhnP1CAFipAjZBslVvPcASODnPr4gRUz0NN3jVMcJCR1bYAEvOV40W_Sh8adIbZobWrqh80VGg1EvrdD50G7CiSytczRPPBEzihBQYZc5vC4V1wzQBlSUBZRDcYK_qeFX0r9GFMu232ddkAkETXIsv3BWu5_m6yYyuvfUPioFptRXdqEia2gn9kxrfRetiw9tUnI3qjQU3v6cCEOV66GZMQr7NnZInqYp67_kUrUKtep9EQ38HkAuekDvq_grRcp-1WZ-kREby3iAmXKij-vsD1pM6Uuh_04ustPjVnfBFPm2qcCml6HQTcLJAh9AhpcHo5ywxUIYn3hvx-nZsE2PTpJ_kMt5A-EAcVA-7u-QWuQNcn4A7TvjlorfNjBYiBTA0vmMoqCpiK-O5339LCtCyOcKj8vja63v3trpHVIinIulK3YHj-dmmme4PIn52Ldg81SDg-sgBOcBgF2fM1tOHNiUrfG6j08892QvqvhD3FMFWTWXjuXCxgNLhh_HS4cOe8oSXSAusbW7Ej7jI5W-1UXWbTUbVz5dfx4B5d6CKyYiowO--qtDDwtGGUd_5k6MhOpA471PHZWRqNs-GOQV1NFArMpp3LKBalk1V30__ZmQ_401w-K5KO7b_w15ockrTRyv0mcZuAtWNiWJo6lll1CZtkPQACDIJe3sWc3gof8Jpqu2ABVnh7214RWfKRg4HOp0iHPNkaAT7aUxZAFSXLkkkoWVxCXdeyBjodlnCLGgHEAoJ2QGrialWba4ZeUCUgOmBKKEULy_vr2tg5OUXySdlQ3e1BThkhV9Bt0EdogXIq8-rQg9GEDq326SqWfmwdxmqMQ8JpVExA8Aj68jUHda99ii5IdOGV05ZymUjyPbYDagRLGdHUBzkaR-zDaDgN7VlH8qoeog3xs9c1oyoe9BCu9X_qp3gPzIppHwQs8toaa8v34gr0QlJsTsrxVXbsglbGu22r4ldOQfiB5m_iIl5XqzlGUOKfZ11eq4jOE_cdjW1SrxntngSYLQfFLVUuKmWIgOG0sXBrQfNKKRVFfESlN0PIC8UJS7pfHi5nRzwCaSOdbwohaHiGvTq5L-sVemt-Mqmbto5rRzyYTFTXd1rQBuch_HSz9Mlpc-LPgzi9tXxKcNVGuzC5VCWd0uubxAa5UeTvnnqQsCsSUjsSaXYHRqy0ukCbLwpEpNbbFJ0gXRowBjVvpwDuND9HcVL6feD7enZln0wrsyxj_PB1CGnur7breZ7VKPsQiruVIbvfZAWbFDuPcJZpR7Cb0THGblPP8c1zKyuFSQJdvUHDJW_Ymo_GuPsDtEIoTPHU-xGAgYuzhrkThCQDKMQzq2FRT6CIjRcccmiSPhwvvlhUHvFoPEGYMljf0wygDKi1GieYpufD1VoX_Tb8a7SOjkwlbv6LGhItfEEBRstnVC7Ra4HFiAJ3fVwyZQAzwV_ImhlYBFElI9QaxNQZFueKOK9sl_YslXfODpWhDk-FlgEtMH2Uza9Jy88mY42eRW0yBWVSsEDP8ez5IlGLWQClR7Z1kdohBDn6zou3gDccTyGhSSXFdYVCRcVjts6i_JVwiPG8K_qvcTbwBsrF4ldwt-nZw-rw8a4pUWYwZ3dL3JFRipftdYiMLqkdcooRYepawsxVe6dhmiDuXS32xDYQLeqYvBHdgbigqPM9yFnWrZvGQS9R1l0yDi4_qAVWsT33uXKCPtUfH6NVQrA4bNj4DFQxcJgrVB9BmaO8BVIVwajYir_Is1BbxyT_xZUy4j1Q1IDVIDJFS7c7EDFrhV-XPiuQmsAJQqBrp4luugUyrEc-R1zSwkHV4dKQUcRZwN639vqaSGPWEuhuDukKJTsl579EPECztD36nudysapFBBIT_96_RWZXlibcFPH-YGo9KD8pBlDZVpjdCf-SM1mlhWSz9j1WKc_s5p80q6IcuKYDXCQ98-R71Ae6zNX5_X8_DjhjIfQaBzGR9gD8IGyfRYAEb-Rahtd5DysoCjvIShW2IfAlJG5_SG8Nk98c-SntGqoCeTrj2AcpSStBub77vX9YXs6a3nEq21Zr3NYabJxt2XpSOwM3H6J0gxejQJBYMl1FFx1Bqf34cUjcVBDRSm1AzklZJhGRxrnW9FutjRUInleil-U2xsBZrjFaCKlxsKXBBAS1-i09F7fgCZuYrVN4yYCzDOANTRvFIIW-kCCvhQGa2bPPvt_KEnFpHbHPzaUxjK7PBXDC_aSlQWipZhdIA1Z6Ykq-xST7LxehB0ZcDmALl5Wm49Co8FucsssqU96AZTBtcGn5YSvhY_okSj-VR9CQ7kL6aXqeoOCB1ZzEuMVoFf_I_UWmnjaRwqU1K8vWuQgsNyNUPHnCzl-1GxeSw6fk__3fQ47DroE2r9EZ0SNeIar5WOGO_7lwMwSNa2AvLn7lwGhi4wKiL-CNrPjLJEzd1wgfv08BdOyqxBDRViJBqH8HKoyi58J04m8CSIJsnFRXm1S6KExmdqdQ131yhjhuVImagNQO6_KBdrsWbHnPCAKOz3eN54tyzO0y_ksdi95XTPdFghrTjzhka2APutLYy_-xVxS7koZ3d7hW6VIgiw8I61d0nA6Y4njXCbx9IM3FAPedVIfUy_SaSLQaEJ1O5RLf_qLqz_fkxDZMxdSC8Jzg84sfXkvpGbRKViPMI2lqheKjLGOm_LPIn1V-cXFulRCsE1-60x1jZ0gY1lOvvNAU7TVjQNCOJVbBLUZSPbbpx6ckx7wa_wrhjBTG5dO20hpE9_MmRNwM2BI6N4TxFslQg3rX7vOaJL_ISC3RQ2XV-wcCLawRF-dmMZ5P0HJQhOxUk-dz3EPMAUVstlmT5r86eBFeEknzSLx0xAwi2hZMCD3iVIzu3aM0wYJX14uYaWOxX-ah5RGLBhlgLm3S2Ps6F6r9A0N0eNct-cqdKYKcxDNPjvnG-oezOckFWrZnOfspKYYtXACjRVRQZKSmcdZuqBF1BoQ9MgzAOBPA3JcpQ0qHkcSBpsiqtEYM96lv6YRRTOOa8ck3Ft9MvW2I5B1PpZgLobLObOKOmhnZELzkoOuCXZWAEAaMtzMahF1OyxPwTH7lXK-v5WYSGq2G_p-LjRV5DCoLhpZaBZmVI8mVXRPj6RVMDtVkovrut14Vp1AQlnftntcAYMAlIswZs-6MsXgxxcLOyme8GCZ79EywuAfkB_tDAB4DIxODsRPq5DndCSxQGIdWW8IPJO7bRzAuuq99_i1BbtvaSTwimg78yRSA0pyf5JxbnaWLaXSOuxyXylspUPU4KmVWygD7uYzJmFQK27aQTCiF9Bt8Os1iW1giHcryiKBtS6jwle8GH1YCn62YSQe7gzMrXwOB8zmbjyOKK1HxbJK2a58p9Sp3-RtGHSZr8UnJbg3boXtWBPgnZXixwBbluxRKmAxnqEHUpw9JD9xRqmAsRxFrCnREngBE_A-f1HNY4acYIRf5Pnq5nCBsuuFCusB1P64s9omsTA3QTkWAC353-p8m69f9o6H1oTLT2LdbBDpucRxwymGZ19jSKBHHw0Wt5e_uoOuQxuMtIr-zm7KmXV7GmdBzDno5-uuh-o2UXsTVA8nKGiy6rqVQ-d6b2gGvp4_drl9_xudI0gcwIgz2iimMGlowyryDcwQ71FYhStHn0X5annbhqfQ77XPhVSCBrKdmubiVpZRNoZQD2WRw1f_Igi9w3K56S8qJa12mfUXcQx28Zo70AmOLq-EdiXnZziFoeHZYpyt4MlKM-zOcrQBBXJKlB8fOTnOuof8q3W8R579JyBL-k4tD__n7LCPPNwKg2ezRGW4qtL05e4magUfxbfEaeR5BaoUxH1WT_lHvaLMp2W7vHp6AlY5vtptB868oi6gQ-jP-lkxSHE32WpFe7pmYaBcH2RFHToFEk6wBg7951Q9er3TYIa4yeY1fwVqPG9u-udyOYkm44mYxx6Q39s2vswmrVkBhd_FTMXbcfne9zYbLUj0997sg3PqIF92ujoUS1EIr_voGagsug7NtSRGr3_Qk7mKHyGr7gHJPeJ9tE34oxq9C8Hi-qmyYBmnKB-oQxdWBuXA_LlygJKugx-UgrX64EIOZwYUXjnElXe-NJmRGYPVct-RpcwoMl2tZmmQwJo8UrylskrE1nxqRdD3KZUO4f4mw-1APQuvzNyW55RrSD1t6JhPFfM9z7IdEDdurrEOOJb-uEOhWg0krIwZBneEl2MJ_G0lJZJd7luu0uPqZMBK_0hHgwh3l8kTK3AI07eVldw4NgOWZ8MOT1WaO-Iu0lS-8VchWmSYRmM4IBCtaFWHLmG6eNAu0W3Fnfqanm6yEeBTg7IyteAy7Ts5YNXM2UtPogkreHG4ZUYBgfTCGd3F6y91gfARIijZV8oVKQ2l41-eVhM6pn2foDqonq7C6AHcWF0YHmb2kJ-wgHAuVgk1B_TVaOQZbELRtAuSn5c_K1mLPH3idKt7dC00Ta4koMGN9uJl9DC1o-f1vCeCA0xg0QQ6FQcPGI0Q_8eSDgiuxJeLxBKHddNGuBrOmcuZ5sw0YrT4wXU9hzpIG3f7LetJVqmgUCUknVIgDiOCxIyoKUR-MvUuvCYGcN93LMexeW-q-SkIMe_xPuVl7k7KEUVitdzkYLPYphJ6MsMHu35swTZHARVSsGzyqzb5Pv_b4Kyb0eDcV_TO1d2XltBODqV-y-gndoLwZCwFBCu4jWHRH2izGTAex7wVs5gyw75UARju8fJjLEMAxKNuR6JtPyNrDymGk93pSDdsLwu-VeJQUablVVisapkIny4dR4VI0owzb6xqIpQp0SqSuoBgjMXtTGpJl8yA2-W_rg1ZcZLpsbgdmV01u2IgSedNxc24oxlP4oy1LMW4TEXwfLsOLaUExYAW1Jd5_d4heD4zmZg3MHFx11iMi14tZePKd83UgygnjnVM_RyIbV5hzlwGKpmwpPKS9PJIo-p1rVmKcPWWa-JbpXLuRDfsIodURMt8E5de30HCxEenGF_PV50ca-a4-AbVGxoXeQ9gluWytVch3lmtEhCJ5f-7KCoMxVnhLKy_XITs85pd_IYUui7Bz8RWmU0sO1a9c3B8M2ziVs8HVPvlV8VemnQBwTVzD-NinJ-UWmvLPSCAkRwglyL6fG%26bid%3D0.0016666666666666668\u0026pr=\u0026bid_crid=\u0026bid_cid=\u0026is_iframe=0\u0026ad_tags=upskirt%2Cvideos%2Cporn%2Cporn%2Cmovies%2Cfree%2Cporn%2Cfree%2Cporn%2Cmovies%2Csex%2Cporno%2Cfree%2Csex%2Ctube%2Cporn%2Ctube%2Cvideos%2Cfull%2Cporn%2Cxxnx%2Cxnxxx%2Cxxx%2Cpussy%2Cvideos%2Cupskirt%2Cxporn%2Cfirst%2Clive%2Csex%2Cporn%2Cvideos%2Cerotic%2Cporn%2Cfuck%2Cor%2Cxxx%2Cporno%2Cgood%2Cbrazzers%2Csex,\u0026stratagem=\u0026ssp=4042\u0026refresh=1\u0026priority=0\u0026bb=0.0001\u0026label_ids=39\u0026site_id64=1411042\u0026container=ClickadillaTuple\u0026original_bid_usd=0.0014378333091735833\u0026comeback=\u0026topics=\u0026o_d=d3d3LmVyb3RpY3Bvcm5zLmNvbQ==\u0026ectr=0.004753732726609542\u0026client_price=0.0017253999710082999\u0026direct_client_price=0\u0026client_payment_model=cpm\u0026ext_campaign_id=236776\u0026auction_time=1727198854\u0026account_id=2022","fqdn":"rtbrenab.com","domain":"rtbrenab.com","tld":"com"},"ip":{"addr":"116.202.60.226","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://rtbrenab.com/get/?go=1\u0026data=eyJpbXAiOlt7InNlY3VyZSI6MSwiZXh0Ijp7InRhZ19hYiI6ImIiLCJtdWx0aSI6ZmFsc2UsInVzZXJfa2V5d29yZHMiOiIiLCJpZCI6MTQ5Niwic3BhY2VpZCI6MTQ5NiwidHlwZSI6InBvcCIsImlkem9uZSI6bnVsbCwiYWRfdGFncyI6InVwc2tpcnQlMkN2aWRlb3MlMkNwb3JuJTJDcG9ybiUyQ21vdmllcyUyQ2ZyZWUlMkNwb3JuJTJDZnJlZSUyQ3Bvcm4lMkNtb3ZpZXMlMkNzZXglMkNwb3JubyUyQ2ZyZWUlMkNzZXglMkN0dWJlJTJDcG9ybiUyQ3R1YmUlMkN2aWRlb3MlMkNmdWxsJTJDcG9ybiUyQ3h4bnglMkN4bnh4eCUyQ3h4eCUyQ3B1c3N5JTJDdmlkZW9zJTJDdXBza2lydCUyQ3hwb3JuJTJDZmlyc3QlMkNsaXZlJTJDc2V4JTJDcG9ybiUyQ3ZpZGVvcyUyQ2Vyb3RpYyUyQ3Bvcm4lMkNmdWNrJTJDb3IlMkN4eHglMkNwb3JubyUyQ2dvb2QlMkNicmF6emVycyUyQ3NleCwiLCJsYWJlbHMiOiIiLCJhbGxvd2VkX2xhYmVscyI6IiIsInRpdGxlIjoiIiwic3ViaWQiOiIyNjgxNDc5MjIiLCJyZWZyZXNoIjoxLCJ1dG0xIjoiIiwidXRtMiI6IiIsInV0bTQiOiIiLCJzcG90X2lkIjoxNDExMDQyLCJtdWx0aXBsZSI6ZmFsc2UsImlzX2lmcmFtZSI6ZmFsc2UsInJlZmRvbWFpbiI6IiIsInBsIjowLCJzdHJhdGFnZW0iOiIiLCJneXIiOjAsImFjY2VsIjowLCJzc3AiOjM3NTgsImJ0eXBlIjowLCJ2MiI6MCwicmNoYW5nZSI6dHJ1ZX0sImJhbm5lciI6eyJ3IjozMDAsImgiOjI1MH0sIm1ldHJpY3MiOnsidG9waWNzIjpbXX19XSwic2l0ZSI6eyJpZCI6IjE0MTEwNDIiLCJjYXQiOlsiSUFCMjUiXSwicGFnZSI6Imh0dHBzOi8vd3d3LmVyb3RpY3Bvcm5zLmNvbS9wb3JuL3Vwc2tpcnQtdmlkZW9zLyIsImN0aWQiOjF9LCJkZXZpY2UiOnsidyI6MTI4MCwiaCI6MTAyNH0sInVzZXIiOnsiaWQiOiJlNGMyOGExODY0ZTQ5MTRmNWZhYjc5ODNlNDYzZWYyNSIsImZwIjpudWxsLCJmcF9zdHIiOiIiLCJ1YV9kYXRhIjpudWxsfSwiZXh0Ijp7ImR0IjoxNzI3MTk4ODU0MzM5fX0=","date":"2024-09-24T17:27:35.060Z","timestamp":1727198855060,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rtbbnr.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Jun 2024 02:03:01 GMT","end":"Sat, 28 Sep 2024 02:03:00 GMT"},"fingerprint":{"sha1":"DC:D1:3A:99:18:53:59:04:68:CF:CA:F4:F7:48:72:8E:28:21:8C:3D","sha256":"F3:70:6D:0B:F3:E6:40:8C:DD:0A:92:A2:BC:ED:F2:A2:6F:9E:03:4A:1E:37:7E:1F:58:9A:F4:DF:81:05:39:60"}}},"request":{"raw":"GET /banner/in/show/?mid=6131601993338874099\u0026pid=0\u0026site=1411042\u0026sc=NO\u0026usage_type=DCH\u0026subid=268147922\u0026sid=0\u0026cid=12774\u0026price=0\u0026is_cpm=1\u0026cpm=0.0014378333091735833\u0026ecpm=0.0014378333091735833\u0026crid=\u0026crtid=d41d8cd98f00b204e9800998ecf8427e\u0026tcid=0\u0026out_id=\u0026ver=\u0026ver_c=\u0026refdom=3txxx.com\u0026hostname=auc-banner-hz-19\u0026site_id=0\u0026spot_id=1411042\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026expiration_timestamp=0\u0026created_at=0000-00-00\u0026is_native=6\u0026pop_winurl=\u0026ip=91.90.42.154\u0026testab=\u0026px_id=1411042\u0026adblock=0\u0026auction_host=\u0026mm=\u0026yc=\u0026render_type=\u0026campaign_type=\u0026uniq=\u0026exp=0\u0026resp_type=iframeAd\u0026iabcat=IAB25\u0026min_cpm=0.00011591515205782852\u0026placement_type_id=9\u0026skin_test=\u0026verify_hash=\u0026score=1\u0026ml=\u0026tag_ab=b\u0026v2=0\u0026ttl=\u0026space_id=1496\u0026banner_width=300\u0026banner_height=250\u0026accel=0\u0026gyr=0\u0026iabcat=IAB25\u0026url=%2F%2Fbts.a11k.com%2Fin%2Ftishow%2F%3Fkatds_ep%3D_qDgDbX1GnwDyTucAV0owvj1IfHXtgN0xLQn357dx8Xpn69tzirslhnP1CAFipAjZBslVvPcASODnPr4gRUz0NN3jVMcJCR1bYAEvOV40W_Sh8adIbZobWrqh80VGg1EvrdD50G7CiSytczRPPBEzihBQYZc5vC4V1wzQBlSUBZRDcYK_qeFX0r9GFMu232ddkAkETXIsv3BWu5_m6yYyuvfUPioFptRXdqEia2gn9kxrfRetiw9tUnI3qjQU3v6cCEOV66GZMQr7NnZInqYp67_kUrUKtep9EQ38HkAuekDvq_grRcp-1WZ-kREby3iAmXKij-vsD1pM6Uuh_04ustPjVnfBFPm2qcCml6HQTcLJAh9AhpcHo5ywxUIYn3hvx-nZsE2PTpJ_kMt5A-EAcVA-7u-QWuQNcn4A7TvjlorfNjBYiBTA0vmMoqCpiK-O5339LCtCyOcKj8vja63v3trpHVIinIulK3YHj-dmmme4PIn52Ldg81SDg-sgBOcBgF2fM1tOHNiUrfG6j08892QvqvhD3FMFWTWXjuXCxgNLhh_HS4cOe8oSXSAusbW7Ej7jI5W-1UXWbTUbVz5dfx4B5d6CKyYiowO--qtDDwtGGUd_5k6MhOpA471PHZWRqNs-GOQV1NFArMpp3LKBalk1V30__ZmQ_401w-K5KO7b_w15ockrTRyv0mcZuAtWNiWJo6lll1CZtkPQACDIJe3sWc3gof8Jpqu2ABVnh7214RWfKRg4HOp0iHPNkaAT7aUxZAFSXLkkkoWVxCXdeyBjodlnCLGgHEAoJ2QGrialWba4ZeUCUgOmBKKEULy_vr2tg5OUXySdlQ3e1BThkhV9Bt0EdogXIq8-rQg9GEDq326SqWfmwdxmqMQ8JpVExA8Aj68jUHda99ii5IdOGV05ZymUjyPbYDagRLGdHUBzkaR-zDaDgN7VlH8qoeog3xs9c1oyoe9BCu9X_qp3gPzIppHwQs8toaa8v34gr0QlJsTsrxVXbsglbGu22r4ldOQfiB5m_iIl5XqzlGUOKfZ11eq4jOE_cdjW1SrxntngSYLQfFLVUuKmWIgOG0sXBrQfNKKRVFfESlN0PIC8UJS7pfHi5nRzwCaSOdbwohaHiGvTq5L-sVemt-Mqmbto5rRzyYTFTXd1rQBuch_HSz9Mlpc-LPgzi9tXxKcNVGuzC5VCWd0uubxAa5UeTvnnqQsCsSUjsSaXYHRqy0ukCbLwpEpNbbFJ0gXRowBjVvpwDuND9HcVL6feD7enZln0wrsyxj_PB1CGnur7breZ7VKPsQiruVIbvfZAWbFDuPcJZpR7Cb0THGblPP8c1zKyuFSQJdvUHDJW_Ymo_GuPsDtEIoTPHU-xGAgYuzhrkThCQDKMQzq2FRT6CIjRcccmiSPhwvvlhUHvFoPEGYMljf0wygDKi1GieYpufD1VoX_Tb8a7SOjkwlbv6LGhItfEEBRstnVC7Ra4HFiAJ3fVwyZQAzwV_ImhlYBFElI9QaxNQZFueKOK9sl_YslXfODpWhDk-FlgEtMH2Uza9Jy88mY42eRW0yBWVSsEDP8ez5IlGLWQClR7Z1kdohBDn6zou3gDccTyGhSSXFdYVCRcVjts6i_JVwiPG8K_qvcTbwBsrF4ldwt-nZw-rw8a4pUWYwZ3dL3JFRipftdYiMLqkdcooRYepawsxVe6dhmiDuXS32xDYQLeqYvBHdgbigqPM9yFnWrZvGQS9R1l0yDi4_qAVWsT33uXKCPtUfH6NVQrA4bNj4DFQxcJgrVB9BmaO8BVIVwajYir_Is1BbxyT_xZUy4j1Q1IDVIDJFS7c7EDFrhV-XPiuQmsAJQqBrp4luugUyrEc-R1zSwkHV4dKQUcRZwN639vqaSGPWEuhuDukKJTsl579EPECztD36nudysapFBBIT_96_RWZXlibcFPH-YGo9KD8pBlDZVpjdCf-SM1mlhWSz9j1WKc_s5p80q6IcuKYDXCQ98-R71Ae6zNX5_X8_DjhjIfQaBzGR9gD8IGyfRYAEb-Rahtd5DysoCjvIShW2IfAlJG5_SG8Nk98c-SntGqoCeTrj2AcpSStBub77vX9YXs6a3nEq21Zr3NYabJxt2XpSOwM3H6J0gxejQJBYMl1FFx1Bqf34cUjcVBDRSm1AzklZJhGRxrnW9FutjRUInleil-U2xsBZrjFaCKlxsKXBBAS1-i09F7fgCZuYrVN4yYCzDOANTRvFIIW-kCCvhQGa2bPPvt_KEnFpHbHPzaUxjK7PBXDC_aSlQWipZhdIA1Z6Ykq-xST7LxehB0ZcDmALl5Wm49Co8FucsssqU96AZTBtcGn5YSvhY_okSj-VR9CQ7kL6aXqeoOCB1ZzEuMVoFf_I_UWmnjaRwqU1K8vWuQgsNyNUPHnCzl-1GxeSw6fk__3fQ47DroE2r9EZ0SNeIar5WOGO_7lwMwSNa2AvLn7lwGhi4wKiL-CNrPjLJEzd1wgfv08BdOyqxBDRViJBqH8HKoyi58J04m8CSIJsnFRXm1S6KExmdqdQ131yhjhuVImagNQO6_KBdrsWbHnPCAKOz3eN54tyzO0y_ksdi95XTPdFghrTjzhka2APutLYy_-xVxS7koZ3d7hW6VIgiw8I61d0nA6Y4njXCbx9IM3FAPedVIfUy_SaSLQaEJ1O5RLf_qLqz_fkxDZMxdSC8Jzg84sfXkvpGbRKViPMI2lqheKjLGOm_LPIn1V-cXFulRCsE1-60x1jZ0gY1lOvvNAU7TVjQNCOJVbBLUZSPbbpx6ckx7wa_wrhjBTG5dO20hpE9_MmRNwM2BI6N4TxFslQg3rX7vOaJL_ISC3RQ2XV-wcCLawRF-dmMZ5P0HJQhOxUk-dz3EPMAUVstlmT5r86eBFeEknzSLx0xAwi2hZMCD3iVIzu3aM0wYJX14uYaWOxX-ah5RGLBhlgLm3S2Ps6F6r9A0N0eNct-cqdKYKcxDNPjvnG-oezOckFWrZnOfspKYYtXACjRVRQZKSmcdZuqBF1BoQ9MgzAOBPA3JcpQ0qHkcSBpsiqtEYM96lv6YRRTOOa8ck3Ft9MvW2I5B1PpZgLobLObOKOmhnZELzkoOuCXZWAEAaMtzMahF1OyxPwTH7lXK-v5WYSGq2G_p-LjRV5DCoLhpZaBZmVI8mVXRPj6RVMDtVkovrut14Vp1AQlnftntcAYMAlIswZs-6MsXgxxcLOyme8GCZ79EywuAfkB_tDAB4DIxODsRPq5DndCSxQGIdWW8IPJO7bRzAuuq99_i1BbtvaSTwimg78yRSA0pyf5JxbnaWLaXSOuxyXylspUPU4KmVWygD7uYzJmFQK27aQTCiF9Bt8Os1iW1giHcryiKBtS6jwle8GH1YCn62YSQe7gzMrXwOB8zmbjyOKK1HxbJK2a58p9Sp3-RtGHSZr8UnJbg3boXtWBPgnZXixwBbluxRKmAxnqEHUpw9JD9xRqmAsRxFrCnREngBE_A-f1HNY4acYIRf5Pnq5nCBsuuFCusB1P64s9omsTA3QTkWAC353-p8m69f9o6H1oTLT2LdbBDpucRxwymGZ19jSKBHHw0Wt5e_uoOuQxuMtIr-zm7KmXV7GmdBzDno5-uuh-o2UXsTVA8nKGiy6rqVQ-d6b2gGvp4_drl9_xudI0gcwIgz2iimMGlowyryDcwQ71FYhStHn0X5annbhqfQ77XPhVSCBrKdmubiVpZRNoZQD2WRw1f_Igi9w3K56S8qJa12mfUXcQx28Zo70AmOLq-EdiXnZziFoeHZYpyt4MlKM-zOcrQBBXJKlB8fOTnOuof8q3W8R579JyBL-k4tD__n7LCPPNwKg2ezRGW4qtL05e4magUfxbfEaeR5BaoUxH1WT_lHvaLMp2W7vHp6AlY5vtptB868oi6gQ-jP-lkxSHE32WpFe7pmYaBcH2RFHToFEk6wBg7951Q9er3TYIa4yeY1fwVqPG9u-udyOYkm44mYxx6Q39s2vswmrVkBhd_FTMXbcfne9zYbLUj0997sg3PqIF92ujoUS1EIr_voGagsug7NtSRGr3_Qk7mKHyGr7gHJPeJ9tE34oxq9C8Hi-qmyYBmnKB-oQxdWBuXA_LlygJKugx-UgrX64EIOZwYUXjnElXe-NJmRGYPVct-RpcwoMl2tZmmQwJo8UrylskrE1nxqRdD3KZUO4f4mw-1APQuvzNyW55RrSD1t6JhPFfM9z7IdEDdurrEOOJb-uEOhWg0krIwZBneEl2MJ_G0lJZJd7luu0uPqZMBK_0hHgwh3l8kTK3AI07eVldw4NgOWZ8MOT1WaO-Iu0lS-8VchWmSYRmM4IBCtaFWHLmG6eNAu0W3Fnfqanm6yEeBTg7IyteAy7Ts5YNXM2UtPogkreHG4ZUYBgfTCGd3F6y91gfARIijZV8oVKQ2l41-eVhM6pn2foDqonq7C6AHcWF0YHmb2kJ-wgHAuVgk1B_TVaOQZbELRtAuSn5c_K1mLPH3idKt7dC00Ta4koMGN9uJl9DC1o-f1vCeCA0xg0QQ6FQcPGI0Q_8eSDgiuxJeLxBKHddNGuBrOmcuZ5sw0YrT4wXU9hzpIG3f7LetJVqmgUCUknVIgDiOCxIyoKUR-MvUuvCYGcN93LMexeW-q-SkIMe_xPuVl7k7KEUVitdzkYLPYphJ6MsMHu35swTZHARVSsGzyqzb5Pv_b4Kyb0eDcV_TO1d2XltBODqV-y-gndoLwZCwFBCu4jWHRH2izGTAex7wVs5gyw75UARju8fJjLEMAxKNuR6JtPyNrDymGk93pSDdsLwu-VeJQUablVVisapkIny4dR4VI0owzb6xqIpQp0SqSuoBgjMXtTGpJl8yA2-W_rg1ZcZLpsbgdmV01u2IgSedNxc24oxlP4oy1LMW4TEXwfLsOLaUExYAW1Jd5_d4heD4zmZg3MHFx11iMi14tZePKd83UgygnjnVM_RyIbV5hzlwGKpmwpPKS9PJIo-p1rVmKcPWWa-JbpXLuRDfsIodURMt8E5de30HCxEenGF_PV50ca-a4-AbVGxoXeQ9gluWytVch3lmtEhCJ5f-7KCoMxVnhLKy_XITs85pd_IYUui7Bz8RWmU0sO1a9c3B8M2ziVs8HVPvlV8VemnQBwTVzD-NinJ-UWmvLPSCAkRwglyL6fG%26bid%3D0.0016666666666666668\u0026pr=\u0026bid_crid=\u0026bid_cid=\u0026is_iframe=0\u0026ad_tags=upskirt%2Cvideos%2Cporn%2Cporn%2Cmovies%2Cfree%2Cporn%2Cfree%2Cporn%2Cmovies%2Csex%2Cporno%2Cfree%2Csex%2Ctube%2Cporn%2Ctube%2Cvideos%2Cfull%2Cporn%2Cxxnx%2Cxnxxx%2Cxxx%2Cpussy%2Cvideos%2Cupskirt%2Cxporn%2Cfirst%2Clive%2Csex%2Cporn%2Cvideos%2Cerotic%2Cporn%2Cfuck%2Cor%2Cxxx%2Cporno%2Cgood%2Cbrazzers%2Csex,\u0026stratagem=\u0026ssp=4042\u0026refresh=1\u0026priority=0\u0026bb=0.0001\u0026label_ids=39\u0026site_id64=1411042\u0026container=ClickadillaTuple\u0026original_bid_usd=0.0014378333091735833\u0026comeback=\u0026topics=\u0026o_d=d3d3LmVyb3RpY3Bvcm5zLmNvbQ==\u0026ectr=0.004753732726609542\u0026client_price=0.0017253999710082999\u0026direct_client_price=0\u0026client_payment_model=cpm\u0026ext_campaign_id=236776\u0026auction_time=1727198854\u0026account_id=2022 HTTP/1.1\r\nHost: rtbrenab.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rtbrenab.com/get/?go=1\u0026data=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\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.18.0\r\ndate: Tue, 24 Sep 2024 17:27:35 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nlocation: //bts.a11k.com/in/tishow/?katds_ep=_qDgDbX1GnwDyTucAV0owvj1IfHXtgN0xLQn357dx8Xpn69tzirslhnP1CAFipAjZBslVvPcASODnPr4gRUz0NN3jVMcJCR1bYAEvOV40W_Sh8adIbZobWrqh80VGg1EvrdD50G7CiSytczRPPBEzihBQYZc5vC4V1wzQBlSUBZRDcYK_qeFX0r9GFMu232ddkAkETXIsv3BWu5_m6yYyuvfUPioFptRXdqEia2gn9kxrfRetiw9tUnI3qjQU3v6cCEOV66GZMQr7NnZInqYp67_kUrUKtep9EQ38HkAuekDvq_grRcp-1WZ-kREby3iAmXKij-vsD1pM6Uuh_04ustPjVnfBFPm2qcCml6HQTcLJAh9AhpcHo5ywxUIYn3hvx-nZsE2PTpJ_kMt5A-EAcVA-7u-QWuQNcn4A7TvjlorfNjBYiBTA0vmMoqCpiK-O5339LCtCyOcKj8vja63v3trpHVIinIulK3YHj-dmmme4PIn52Ldg81SDg-sgBOcBgF2fM1tOHNiUrfG6j08892QvqvhD3FMFWTWXjuXCxgNLhh_HS4cOe8oSXSAusbW7Ej7jI5W-1UXWbTUbVz5dfx4B5d6CKyYiowO--qtDDwtGGUd_5k6MhOpA471PHZWRqNs-GOQV1NFArMpp3LKBalk1V30__ZmQ_401w-K5KO7b_w15ockrTRyv0mcZuAtWNiWJo6lll1CZtkPQACDIJe3sWc3gof8Jpqu2ABVnh7214RWfKRg4HOp0iHPNkaAT7aUxZAFSXLkkkoWVxCXdeyBjodlnCLGgHEAoJ2QGrialWba4ZeUCUgOmBKKEULy_vr2tg5OUXySdlQ3e1BThkhV9Bt0EdogXIq8-rQg9GEDq326SqWfmwdxmqMQ8JpVExA8Aj68jUHda99ii5IdOGV05ZymUjyPbYDagRLGdHUBzkaR-zDaDgN7VlH8qoeog3xs9c1oyoe9BCu9X_qp3gPzIppHwQs8toaa8v34gr0QlJsTsrxVXbsglbGu22r4ldOQfiB5m_iIl5XqzlGUOKfZ11eq4jOE_cdjW1SrxntngSYLQfFLVUuKmWIgOG0sXBrQfNKKRVFfESlN0PIC8UJS7pfHi5nRzwCaSOdbwohaHiGvTq5L-sVemt-Mqmbto5rRzyYTFTXd1rQBuch_HSz9Mlpc-LPgzi9tXxKcNVGuzC5VCWd0uubxAa5UeTvnnqQsCsSUjsSaXYHRqy0ukCbLwpEpNbbFJ0gXRowBjVvpwDuND9HcVL6feD7enZln0wrsyxj_PB1CGnur7breZ7VKPsQiruVIbvfZAWbFDuPcJZpR7Cb0THGblPP8c1zKyuFSQJdvUHDJW_Ymo_GuPsDtEIoTPHU-xGAgYuzhrkThCQDKMQzq2FRT6CIjRcccmiSPhwvvlhUHvFoPEGYMljf0wygDKi1GieYpufD1VoX_Tb8a7SOjkwlbv6LGhItfEEBRstnVC7Ra4HFiAJ3fVwyZQAzwV_ImhlYBFElI9QaxNQZFueKOK9sl_YslXfODpWhDk-FlgEtMH2Uza9Jy88mY42eRW0yBWVSsEDP8ez5IlGLWQClR7Z1kdohBDn6zou3gDccTyGhSSXFdYVCRcVjts6i_JVwiPG8K_qvcTbwBsrF4ldwt-nZw-rw8a4pUWYwZ3dL3JFRipftdYiMLqkdcooRYepawsxVe6dhmiDuXS32xDYQLeqYvBHdgbigqPM9yFnWrZvGQS9R1l0yDi4_qAVWsT33uXKCPtUfH6NVQrA4bNj4DFQxcJgrVB9BmaO8BVIVwajYir_Is1BbxyT_xZUy4j1Q1IDVIDJFS7c7EDFrhV-XPiuQmsAJQqBrp4luugUyrEc-R1zSwkHV4dKQUcRZwN639vqaSGPWEuhuDukKJTsl579EPECztD36nudysapFBBIT_96_RWZXlibcFPH-YGo9KD8pBlDZVpjdCf-SM1mlhWSz9j1WKc_s5p80q6IcuKYDXCQ98-R71Ae6zNX5_X8_DjhjIfQaBzGR9gD8IGyfRYAEb-Rahtd5DysoCjvIShW2IfAlJG5_SG8Nk98c-SntGqoCeTrj2AcpSStBub77vX9YXs6a3nEq21Zr3NYabJxt2XpSOwM3H6J0gxejQJBYMl1FFx1Bqf34cUjcVBDRSm1AzklZJhGRxrnW9FutjRUInleil-U2xsBZrjFaCKlxsKXBBAS1-i09F7fgCZuYrVN4yYCzDOANTRvFIIW-kCCvhQGa2bPPvt_KEnFpHbHPzaUxjK7PBXDC_aSlQWipZhdIA1Z6Ykq-xST7LxehB0ZcDmALl5Wm49Co8FucsssqU96AZTBtcGn5YSvhY_okSj-VR9CQ7kL6aXqeoOCB1ZzEuMVoFf_I_UWmnjaRwqU1K8vWuQgsNyNUPHnCzl-1GxeSw6fk__3fQ47DroE2r9EZ0SNeIar5WOGO_7lwMwSNa2AvLn7lwGhi4wKiL-CNrPjLJEzd1wgfv08BdOyqxBDRViJBqH8HKoyi58J04m8CSIJsnFRXm1S6KExmdqdQ131yhjhuVImagNQO6_KBdrsWbHnPCAKOz3eN54tyzO0y_ksdi95XTPdFghrTjzhka2APutLYy_-xVxS7koZ3d7hW6VIgiw8I61d0nA6Y4njXCbx9IM3FAPedVIfUy_SaSLQaEJ1O5RLf_qLqz_fkxDZMxdSC8Jzg84sfXkvpGbRKViPMI2lqheKjLGOm_LPIn1V-cXFulRCsE1-60x1jZ0gY1lOvvNAU7TVjQNCOJVbBLUZSPbbpx6ckx7wa_wrhjBTG5dO20hpE9_MmRNwM2BI6N4TxFslQg3rX7vOaJL_ISC3RQ2XV-wcCLawRF-dmMZ5P0HJQhOxUk-dz3EPMAUVstlmT5r86eBFeEknzSLx0xAwi2hZMCD3iVIzu3aM0wYJX14uYaWOxX-ah5RGLBhlgLm3S2Ps6F6r9A0N0eNct-cqdKYKcxDNPjvnG-oezOckFWrZnOfspKYYtXACjRVRQZKSmcdZuqBF1BoQ9MgzAOBPA3JcpQ0qHkcSBpsiqtEYM96lv6YRRTOOa8ck3Ft9MvW2I5B1PpZgLobLObOKOmhnZELzkoOuCXZWAEAaMtzMahF1OyxPwTH7lXK-v5WYSGq2G_p-LjRV5DCoLhpZaBZmVI8mVXRPj6RVMDtVkovrut14Vp1AQlnftntcAYMAlIswZs-6MsXgxxcLOyme8GCZ79EywuAfkB_tDAB4DIxODsRPq5DndCSxQGIdWW8IPJO7bRzAuuq99_i1BbtvaSTwimg78yRSA0pyf5JxbnaWLaXSOuxyXylspUPU4KmVWygD7uYzJmFQK27aQTCiF9Bt8Os1iW1giHcryiKBtS6jwle8GH1YCn62YSQe7gzMrXwOB8zmbjyOKK1HxbJK2a58p9Sp3-RtGHSZr8UnJbg3boXtWBPgnZXixwBbluxRKmAxnqEHUpw9JD9xRqmAsRxFrCnREngBE_A-f1HNY4acYIRf5Pnq5nCBsuuFCusB1P64s9omsTA3QTkWAC353-p8m69f9o6H1oTLT2LdbBDpucRxwymGZ19jSKBHHw0Wt5e_uoOuQxuMtIr-zm7KmXV7GmdBzDno5-uuh-o2UXsTVA8nKGiy6rqVQ-d6b2gGvp4_drl9_xudI0gcwIgz2iimMGlowyryDcwQ71FYhStHn0X5annbhqfQ77XPhVSCBrKdmubiVpZRNoZQD2WRw1f_Igi9w3K56S8qJa12mfUXcQx28Zo70AmOLq-EdiXnZziFoeHZYpyt4MlKM-zOcrQBBXJKlB8fOTnOuof8q3W8R579JyBL-k4tD__n7LCPPNwKg2ezRGW4qtL05e4magUfxbfEaeR5BaoUxH1WT_lHvaLMp2W7vHp6AlY5vtptB868oi6gQ-jP-lkxSHE32WpFe7pmYaBcH2RFHToFEk6wBg7951Q9er3TYIa4yeY1fwVqPG9u-udyOYkm44mYxx6Q39s2vswmrVkBhd_FTMXbcfne9zYbLUj0997sg3PqIF92ujoUS1EIr_voGagsug7NtSRGr3_Qk7mKHyGr7gHJPeJ9tE34oxq9C8Hi-qmyYBmnKB-oQxdWBuXA_LlygJKugx-UgrX64EIOZwYUXjnElXe-NJmRGYPVct-RpcwoMl2tZmmQwJo8UrylskrE1nxqRdD3KZUO4f4mw-1APQuvzNyW55RrSD1t6JhPFfM9z7IdEDdurrEOOJb-uEOhWg0krIwZBneEl2MJ_G0lJZJd7luu0uPqZMBK_0hHgwh3l8kTK3AI07eVldw4NgOWZ8MOT1WaO-Iu0lS-8VchWmSYRmM4IBCtaFWHLmG6eNAu0W3Fnfqanm6yEeBTg7IyteAy7Ts5YNXM2UtPogkreHG4ZUYBgfTCGd3F6y91gfARIijZV8oVKQ2l41-eVhM6pn2foDqonq7C6AHcWF0YHmb2kJ-wgHAuVgk1B_TVaOQZbELRtAuSn5c_K1mLPH3idKt7dC00Ta4koMGN9uJl9DC1o-f1vCeCA0xg0QQ6FQcPGI0Q_8eSDgiuxJeLxBKHddNGuBrOmcuZ5sw0YrT4wXU9hzpIG3f7LetJVqmgUCUknVIgDiOCxIyoKUR-MvUuvCYGcN93LMexeW-q-SkIMe_xPuVl7k7KEUVitdzkYLPYphJ6MsMHu35swTZHARVSsGzyqzb5Pv_b4Kyb0eDcV_TO1d2XltBODqV-y-gndoLwZCwFBCu4jWHRH2izGTAex7wVs5gyw75UARju8fJjLEMAxKNuR6JtPyNrDymGk93pSDdsLwu-VeJQUablVVisapkIny4dR4VI0owzb6xqIpQp0SqSuoBgjMXtTGpJl8yA2-W_rg1ZcZLpsbgdmV01u2IgSedNxc24oxlP4oy1LMW4TEXwfLsOLaUExYAW1Jd5_d4heD4zmZg3MHFx11iMi14tZePKd83UgygnjnVM_RyIbV5hzlwGKpmwpPKS9PJIo-p1rVmKcPWWa-JbpXLuRDfsIodURMt8E5de30HCxEenGF_PV50ca-a4-AbVGxoXeQ9gluWytVch3lmtEhCJ5f-7KCoMxVnhLKy_XITs85pd_IYUui7Bz8RWmU0sO1a9c3B8M2ziVs8HVPvlV8VemnQBwTVzD-NinJ-UWmvLPSCAkRwglyL6fG\u0026bid=0.0016666666666666668\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"96deb6c755.6dd1167e04.com/in/show/?tag_ab=b\u0026site_id=311411038\u0026adblock=0\u0026testab=0\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=hq\u0026pr=\u0026banner_width=300\u0026banner_height=250\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=0\u0026conditions=all,dch_ip,tz_offset\u0026ssp=3964\u0026page=https%3A%2F%2Fwww.eroticporns.com%2Fporn%2Fupskirt-videos%2F\u0026refdom=www.eroticporns.com\u0026auction_time=1727198854\u0026subid=1081949002\u0026sid=479855615\u0026tcid=0\u0026ver=8.189.0\u0026ver_c=\u0026spot_id=1411038\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2024-09-24\u0026iabcat=IAB25-3\u0026keywords=voyeur,adult\u0026user_fp=17257890721840696475\u0026score=93.24638840742361\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D1081949002%26spot_id%3D1411038%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fwww.eroticporns.com%252Fporn%252Fupskirt-videos%252F%26idzone%3D0%26sid%3D1886\u0026is_cpm=0\u0026resp_type=\u0026crid=\u0026crtid=b0681ff5c1739e7f8bdbb8527f77d810\u0026url=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D1081949002%26spot_id%3D1411038%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fwww.eroticporns.com%252Fporn%252Fupskirt-videos%252F%26idzone%3D0%26sid%3D1886\u0026icons=Gfav2ZIjI1Pq-kOH-lHvoLVDq-hbOY9EU0RcD1tzhYurJwbtNOwpjH98N4R4YsibapULHxHfZxRv8vYsWgLO7wQH8ylLrWdw71Uw_UUcogC-okomFkfHooOvOPxaQ7OeswSIDlM1sAV2F8ZXLuTmO9gGTNNK3TGeX-Je2vwx5O_sUPNUew\u0026ext_cid=0\u0026px_id=1411038\u0026min_cpm=0.013698435193766855\u0026out_id=1\u0026campaign_type=pop-default\u0026aid=0\u0026cid=2957\u0026uniq=\u0026mid=1342430277316506986\u0026skin_id=2\u0026vertical_id=0\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.002284899089278903\u0026cpm=0\u0026verify_hash=503dbf970ba30de2c41377a4739397a1\u0026is_native=4\u0026real_bid=3.7855762039526623e-05\u0026original_bid_usd=0.00022695299999999998\u0026original_bid=0.00022695299999999998\u0026exp=0\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=20,27,108,0,114\u0026need_redirect_show=0\u0026applied_features=prod,main-skins-settings\u0026show_count=1\u0026expiration_timestamp=0\u0026image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FSG%2FSG_083be47dfc3e28c9a68305b76181a5033bc45790.webp\u0026site=native-push-adult\u0026price=0.00022695299999999998\u0026hostname=auc-inpage-hz-4-b\u0026auc_type=1\u0026pop_type=1\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=\u0026pop_cpc=0.00000022695299999999995\u0026ext_campaign_id_str=\u0026is_webview=0\u0026client_price=0\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=\u0026is_in_app=0\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=default-view-b_r-body\u0026mlf=1\u0026mlc=1\u0026st=0.02\u0026cpa=db897792-70f7-48e6-af23-db0106c03e1a\u0026prev_step_diff=640","fqdn":"96deb6c755.6dd1167e04.com","domain":"6dd1167e04.com","tld":"com"},"ip":{"addr":"94.130.198.6","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:35.097Z","timestamp":1727198855097,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"6dd1167e04.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Sep 2024 14:03:38 GMT","end":"Thu, 19 Dec 2024 14:03:37 GMT"},"fingerprint":{"sha1":"8B:B9:AC:EA:0F:FA:A0:EB:9A:C1:6E:E7:B5:20:0A:A8:BE:94:98:A1","sha256":"3C:ED:7F:1D:3F:2B:18:D0:8A:FC:33:BC:FD:93:EB:9B:DC:04:F1:73:65:69:50:1D:20:25:39:88:AC:6C:BA:9D"}}},"request":{"raw":"GET /in/show/?tag_ab=b\u0026site_id=311411038\u0026adblock=0\u0026testab=0\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=hq\u0026pr=\u0026banner_width=300\u0026banner_height=250\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=0\u0026conditions=all,dch_ip,tz_offset\u0026ssp=3964\u0026page=https%3A%2F%2Fwww.eroticporns.com%2Fporn%2Fupskirt-videos%2F\u0026refdom=www.eroticporns.com\u0026auction_time=1727198854\u0026subid=1081949002\u0026sid=479855615\u0026tcid=0\u0026ver=8.189.0\u0026ver_c=\u0026spot_id=1411038\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2024-09-24\u0026iabcat=IAB25-3\u0026keywords=voyeur,adult\u0026user_fp=17257890721840696475\u0026score=93.24638840742361\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D1081949002%26spot_id%3D1411038%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fwww.eroticporns.com%252Fporn%252Fupskirt-videos%252F%26idzone%3D0%26sid%3D1886\u0026is_cpm=0\u0026resp_type=\u0026crid=\u0026crtid=b0681ff5c1739e7f8bdbb8527f77d810\u0026url=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D1081949002%26spot_id%3D1411038%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fwww.eroticporns.com%252Fporn%252Fupskirt-videos%252F%26idzone%3D0%26sid%3D1886\u0026icons=Gfav2ZIjI1Pq-kOH-lHvoLVDq-hbOY9EU0RcD1tzhYurJwbtNOwpjH98N4R4YsibapULHxHfZxRv8vYsWgLO7wQH8ylLrWdw71Uw_UUcogC-okomFkfHooOvOPxaQ7OeswSIDlM1sAV2F8ZXLuTmO9gGTNNK3TGeX-Je2vwx5O_sUPNUew\u0026ext_cid=0\u0026px_id=1411038\u0026min_cpm=0.013698435193766855\u0026out_id=1\u0026campaign_type=pop-default\u0026aid=0\u0026cid=2957\u0026uniq=\u0026mid=1342430277316506986\u0026skin_id=2\u0026vertical_id=0\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.002284899089278903\u0026cpm=0\u0026verify_hash=503dbf970ba30de2c41377a4739397a1\u0026is_native=4\u0026real_bid=3.7855762039526623e-05\u0026original_bid_usd=0.00022695299999999998\u0026original_bid=0.00022695299999999998\u0026exp=0\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=20,27,108,0,114\u0026need_redirect_show=0\u0026applied_features=prod,main-skins-settings\u0026show_count=1\u0026expiration_timestamp=0\u0026image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FSG%2FSG_083be47dfc3e28c9a68305b76181a5033bc45790.webp\u0026site=native-push-adult\u0026price=0.00022695299999999998\u0026hostname=auc-inpage-hz-4-b\u0026auc_type=1\u0026pop_type=1\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=\u0026pop_cpc=0.00000022695299999999995\u0026ext_campaign_id_str=\u0026is_webview=0\u0026client_price=0\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=\u0026is_in_app=0\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=default-view-b_r-body\u0026mlf=1\u0026mlc=1\u0026st=0.02\u0026cpa=db897792-70f7-48e6-af23-db0106c03e1a\u0026prev_step_diff=640 HTTP/1.1\r\nHost: 96deb6c755.6dd1167e04.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Tue, 24 Sep 2024 17:27:35 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"96deb6c755.6dd1167e04.com/in/show/?tag_ab=b\u0026site_id=311411038\u0026adblock=0\u0026testab=0\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=hq\u0026pr=\u0026banner_width=300\u0026banner_height=250\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=0\u0026conditions=all,dch_ip,tz_offset\u0026ssp=3964\u0026page=https%3A%2F%2Fwww.eroticporns.com%2Fporn%2Fupskirt-videos%2F\u0026refdom=www.eroticporns.com\u0026auction_time=1727198854\u0026subid=1081949002\u0026sid=479855615\u0026tcid=0\u0026ver=8.189.0\u0026ver_c=\u0026spot_id=1411038\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2024-09-24\u0026iabcat=IAB25-3\u0026keywords=voyeur,adult\u0026user_fp=17257890721840696475\u0026score=93.24638840742361\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D1081949002%26spot_id%3D1411038%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fwww.eroticporns.com%252Fporn%252Fupskirt-videos%252F%26idzone%3D0%26sid%3D1886\u0026is_cpm=1\u0026resp_type=\u0026crid=24406\u0026crtid=788f015ade7a5a02de07cfccea6d71a8\u0026url=https%3A%2F%2Fp.a64x.com%2Fin%2Ftip_clicks%2F%3Fkatds_ep%3DFDKJXXrdmYCqjbvmgz6dS0Jj1Cq5bfuCi7WWleBkRfcyBVtUyeC4HAQXFU5Cao6i9g2lTJJPNhVKFj819SxN2xxcXQVj4RZ_IGKUCDUcFqPkcqM5939GG_IVpQ5acY5rKciNnMMs6nmckS3cVwAmvFDzBB0PVap-8GUMN3Bhiq-Z3ExqFWoTI_mxaaMQYFz8UNoVA9-Jur9D7BARmU8jlC-sBbAFYYMyjn4wtduyNKtDm6n-4R-ORbnBAJ_g8I-43-_z1MvraLzWRxZU8rhKY14jBvcbdIOQO8WlxpUSyoW-EE1UzHM7U6KNuRTRABmFX8icUUhWKg-WOQHzs8dNhtZoij1h0WcvarL1owNSaeupfghBgLELYzIh8SA5kdeZAI_zguuY9-sABf0SDYjgKl_FlxznOOjojznN1fQg6NJ-0wXwZWVADrjwYzOizouQHBzOAD0-DSqeilyFcpUOyrvIqHNLJ6uTCEFkR_1Vakx0mdtWhRyVVxgEJ8-gJge-_GhzVIcApADDl_fWSBHF1XduSmE2DAUCY-L5ahciJ9DmvMkKcNwUjtGPb0PoZVJMm-4L2g2YW0a5k3Lv9qiDveG-5yOcRyIcehB8OZuZWmgMcb92e8OPZrJG0XtRUVHvbwH4McDH-wYwA5eOiIupBFqO27rzUc4BZGUmvT6qT8WnUHCPdfunJZAvCHfDkMBrXgMdVYrxTAnBnbXDiBAhrs02JhXXM2mM6QC5oE_CGOZlnirHUUgkuUJt_6JuwcYBJgn_Cg9IprbNBlXB5BcP670xdrj8Ce2nvSPfTMsFg0jBR0j98clFX4JRK0d7Fd2tnAO3C8v-yD-o1NNPOQTnVKFS9wt-7WibMF2m9_CkqgDwaUafIcFHlcC7hNTl8MHbxVGkNOxH70JusAdc1rCFMrDy9bty-syfbZKJoj8ZRuwEmONBX4OiCv4eVQGhHClT2wbDehcjObH8Wo38vCvxZKWPAQg3DFxY7qnaBjvXFpNMnLiLoR1pTzqZkt7HvD1-OUXfUk1Dq7W-iBENYBwkuEygI6cK-Oq3QeDAVkkysS_UIpQSUIvM971Mq86W_dY3R5ADdAEedzX0u78zCBa0yIOdL8rtuIeL7uf8L-BX6JmJo6xgBlf3hMKxENmqRLiU5GFFWBemWfeq9ZuFwLzbxiQ-we37T7qF3V6PLfJLtxu4HrABEVBo6E82vuBVDNGhLe6sySyuWw5h-d2etmlD%26bid%3D0.04056488549300498\u0026icons=rVMXxv6MR-1j9fSwT1VDOzi3RKnbUwMpbYaAUvmRR-SM3xD9C9Swgk6hI2p7iIVSiPot3ZgnO5uJc-L8RmeJQf9L7Mv2SaI9zn2ei6m7QZRe4hLT_V7eIulDs4Nna53fD3d7uqOaaPSLnSnXWVFxz847ZaNs7DoFUMMfZ3yuYcjUE9o2lblnfBQab_VJS0XSuLnaQGd93UM3wmtjloWFSGt9OtXJLn6IEsvdv9PUD4fftRx41nXmfvxhKwjgmtYZpHVfy_fxcq3LF_rnQyP3fYEBDAKH-6_QaXTJNzO9zyAjQ57VZ54KIAUzjixF7fRhQhGrx3a7OYOej2junNg3svRuv4jRYSqTJ_uYBH3Bli0ZnKukMgyMM1hjbRwXxEhTKhgC5Ke1d-Y6jSvHtCch2NFd8Mkds0TChWxDsrmHcaJrz-PE0Dx3QYNxuvBU8hIqqbCJGgHb2Edj9zHBAEQHOKs5SecrnA7J8KRhKmp_a7LLeoIH7rODct-w6kOuNTazDiK28j_3vcpGd0jctaMNo6P4fSZqPNli9AEz2--k5x7j4v55thPalGmu9-2VfekUlNlGBTNiHVAvm8Sqe27H_FmjDW-oi_mBGcXN6ighuYyOZ3QFIeDh3pyyuDF66EhhtJRGk1WTs7fjGjR5QHtfg_outX7c_kexKd8nEYN9VeA5uipBuTPRC6vYPe5Q1o3LYEpIwn7Z9sQjUv4LjRB2y7hQz3IG7Ba22vDgjyZYBpEzKlszupZvkzfl2Y-S2FH7mQLsMvE-S-QkAS5xUadkDqZKyVQYFafQ3DcFQELlIbDkxXFIKrfMw5wT24V5qJbMDzxzPYVCseWuFaaBaAV9NBWhzg2spb_886a84ibc_ajXEwRrcpt_nw58M3X1Qbr_Kq1IZ48YBUbPUrecPp9CIyRddOG_mht-sjsNUC-lsRIx0D98rW2njGmAlD0rTpQnoXoWdzKtmvsoYW3vJI8_ADxs8nFEjkccdGAGtyPHeid9M9Fdz6uA0HEygOQxxUSMpwbB6pfLbpgaTNqs7Vkkkv2Wtn2vt4Y8AOknJEdkS9EYlfON_0TgDGsEBL5mf5hF7sY3rTgrKaVujixjC_2TxqWYQsJ5qFFM0_slBI02_orCdtR7cWC7QOcrAYuczNu9fhRNYc2ZBP6zv7UuYoJ5vuPl4sDwtmTg1yXAXemopMa_4QnjnwNpnLUJu-UHt46CMKSCSt1Nq5mCjkGcwrnrXbobkJOXeaNaksdi3Maj6yUHCDoC9X0gBYSY9okPtOTWufO3uJcboj3k-RJ_O2MyptaZGO5AW88rcykNmfTEO3JHRw2vCiBalRINzW_Qspb37LLFndrh5RfIHldDnZnw3wC4K5GLkk2NgpaTofXLNmuHkEbUtIPxSOzouetOGDUxGOp4lR_Trs0\u0026ext_cid=299547\u0026px_id=731411038\u0026min_cpm=0.0005974497563010975\u0026out_id=0\u0026campaign_type=hq\u0026aid=127\u0026cid=12694\u0026uniq=ac3453ce09538fe1d037a8c2f8b3ce2529c0ea68600fd53ab01b5ca4bd27fc9e\u0026mid=1342430277316506986\u0026skin_id=2\u0026vertical_id=0\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.25134286068917644\u0026cpm=0.04056488549300498\u0026verify_hash=90d1bd42522d63fbc0d2d23940aebf5e\u0026is_native=1\u0026real_bid=0.03921001835235586\u0026original_bid_usd=0.26002778860541276\u0026original_bid=0.26002778860541276\u0026exp=1440\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=108,98,70,0,4,90,5\u0026need_redirect_show=0\u0026applied_features=prod,main-skins-settings\u0026show_count=1\u0026expiration_timestamp=1727371654\u0026image_url=https%3A%2F%2Fimdn.pics%2Fm%2Fp%2F0%2F883%2F883207%2Fconversions%2F0OErF2ya-in-page-ad-images.jpg\u0026site=native-push-adult\u0026price=0\u0026hostname=auc-inpage-hz-4-b\u0026auc_type=1\u0026pop_type=1\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=\u0026pop_cpc=0\u0026ext_campaign_id_str=299547\u0026is_webview=0\u0026client_price=0.013532400012016341\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=cpc\u0026is_in_app=0\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=default-view-b_r-body\u0026st=0.02\u0026cpa=9ee22aef-3c6b-4558-86d5-e6d19a29f6bd\u0026prev_step_diff=640","fqdn":"96deb6c755.6dd1167e04.com","domain":"6dd1167e04.com","tld":"com"},"ip":{"addr":"94.130.198.6","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:35.121Z","timestamp":1727198855121,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"6dd1167e04.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Sep 2024 14:03:38 GMT","end":"Thu, 19 Dec 2024 14:03:37 GMT"},"fingerprint":{"sha1":"8B:B9:AC:EA:0F:FA:A0:EB:9A:C1:6E:E7:B5:20:0A:A8:BE:94:98:A1","sha256":"3C:ED:7F:1D:3F:2B:18:D0:8A:FC:33:BC:FD:93:EB:9B:DC:04:F1:73:65:69:50:1D:20:25:39:88:AC:6C:BA:9D"}}},"request":{"raw":"GET /in/show/?tag_ab=b\u0026site_id=311411038\u0026adblock=0\u0026testab=0\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=hq\u0026pr=\u0026banner_width=300\u0026banner_height=250\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=0\u0026conditions=all,dch_ip,tz_offset\u0026ssp=3964\u0026page=https%3A%2F%2Fwww.eroticporns.com%2Fporn%2Fupskirt-videos%2F\u0026refdom=www.eroticporns.com\u0026auction_time=1727198854\u0026subid=1081949002\u0026sid=479855615\u0026tcid=0\u0026ver=8.189.0\u0026ver_c=\u0026spot_id=1411038\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2024-09-24\u0026iabcat=IAB25-3\u0026keywords=voyeur,adult\u0026user_fp=17257890721840696475\u0026score=93.24638840742361\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D1081949002%26spot_id%3D1411038%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fwww.eroticporns.com%252Fporn%252Fupskirt-videos%252F%26idzone%3D0%26sid%3D1886\u0026is_cpm=1\u0026resp_type=\u0026crid=24406\u0026crtid=788f015ade7a5a02de07cfccea6d71a8\u0026url=https%3A%2F%2Fp.a64x.com%2Fin%2Ftip_clicks%2F%3Fkatds_ep%3DFDKJXXrdmYCqjbvmgz6dS0Jj1Cq5bfuCi7WWleBkRfcyBVtUyeC4HAQXFU5Cao6i9g2lTJJPNhVKFj819SxN2xxcXQVj4RZ_IGKUCDUcFqPkcqM5939GG_IVpQ5acY5rKciNnMMs6nmckS3cVwAmvFDzBB0PVap-8GUMN3Bhiq-Z3ExqFWoTI_mxaaMQYFz8UNoVA9-Jur9D7BARmU8jlC-sBbAFYYMyjn4wtduyNKtDm6n-4R-ORbnBAJ_g8I-43-_z1MvraLzWRxZU8rhKY14jBvcbdIOQO8WlxpUSyoW-EE1UzHM7U6KNuRTRABmFX8icUUhWKg-WOQHzs8dNhtZoij1h0WcvarL1owNSaeupfghBgLELYzIh8SA5kdeZAI_zguuY9-sABf0SDYjgKl_FlxznOOjojznN1fQg6NJ-0wXwZWVADrjwYzOizouQHBzOAD0-DSqeilyFcpUOyrvIqHNLJ6uTCEFkR_1Vakx0mdtWhRyVVxgEJ8-gJge-_GhzVIcApADDl_fWSBHF1XduSmE2DAUCY-L5ahciJ9DmvMkKcNwUjtGPb0PoZVJMm-4L2g2YW0a5k3Lv9qiDveG-5yOcRyIcehB8OZuZWmgMcb92e8OPZrJG0XtRUVHvbwH4McDH-wYwA5eOiIupBFqO27rzUc4BZGUmvT6qT8WnUHCPdfunJZAvCHfDkMBrXgMdVYrxTAnBnbXDiBAhrs02JhXXM2mM6QC5oE_CGOZlnirHUUgkuUJt_6JuwcYBJgn_Cg9IprbNBlXB5BcP670xdrj8Ce2nvSPfTMsFg0jBR0j98clFX4JRK0d7Fd2tnAO3C8v-yD-o1NNPOQTnVKFS9wt-7WibMF2m9_CkqgDwaUafIcFHlcC7hNTl8MHbxVGkNOxH70JusAdc1rCFMrDy9bty-syfbZKJoj8ZRuwEmONBX4OiCv4eVQGhHClT2wbDehcjObH8Wo38vCvxZKWPAQg3DFxY7qnaBjvXFpNMnLiLoR1pTzqZkt7HvD1-OUXfUk1Dq7W-iBENYBwkuEygI6cK-Oq3QeDAVkkysS_UIpQSUIvM971Mq86W_dY3R5ADdAEedzX0u78zCBa0yIOdL8rtuIeL7uf8L-BX6JmJo6xgBlf3hMKxENmqRLiU5GFFWBemWfeq9ZuFwLzbxiQ-we37T7qF3V6PLfJLtxu4HrABEVBo6E82vuBVDNGhLe6sySyuWw5h-d2etmlD%26bid%3D0.04056488549300498\u0026icons=rVMXxv6MR-1j9fSwT1VDOzi3RKnbUwMpbYaAUvmRR-SM3xD9C9Swgk6hI2p7iIVSiPot3ZgnO5uJc-L8RmeJQf9L7Mv2SaI9zn2ei6m7QZRe4hLT_V7eIulDs4Nna53fD3d7uqOaaPSLnSnXWVFxz847ZaNs7DoFUMMfZ3yuYcjUE9o2lblnfBQab_VJS0XSuLnaQGd93UM3wmtjloWFSGt9OtXJLn6IEsvdv9PUD4fftRx41nXmfvxhKwjgmtYZpHVfy_fxcq3LF_rnQyP3fYEBDAKH-6_QaXTJNzO9zyAjQ57VZ54KIAUzjixF7fRhQhGrx3a7OYOej2junNg3svRuv4jRYSqTJ_uYBH3Bli0ZnKukMgyMM1hjbRwXxEhTKhgC5Ke1d-Y6jSvHtCch2NFd8Mkds0TChWxDsrmHcaJrz-PE0Dx3QYNxuvBU8hIqqbCJGgHb2Edj9zHBAEQHOKs5SecrnA7J8KRhKmp_a7LLeoIH7rODct-w6kOuNTazDiK28j_3vcpGd0jctaMNo6P4fSZqPNli9AEz2--k5x7j4v55thPalGmu9-2VfekUlNlGBTNiHVAvm8Sqe27H_FmjDW-oi_mBGcXN6ighuYyOZ3QFIeDh3pyyuDF66EhhtJRGk1WTs7fjGjR5QHtfg_outX7c_kexKd8nEYN9VeA5uipBuTPRC6vYPe5Q1o3LYEpIwn7Z9sQjUv4LjRB2y7hQz3IG7Ba22vDgjyZYBpEzKlszupZvkzfl2Y-S2FH7mQLsMvE-S-QkAS5xUadkDqZKyVQYFafQ3DcFQELlIbDkxXFIKrfMw5wT24V5qJbMDzxzPYVCseWuFaaBaAV9NBWhzg2spb_886a84ibc_ajXEwRrcpt_nw58M3X1Qbr_Kq1IZ48YBUbPUrecPp9CIyRddOG_mht-sjsNUC-lsRIx0D98rW2njGmAlD0rTpQnoXoWdzKtmvsoYW3vJI8_ADxs8nFEjkccdGAGtyPHeid9M9Fdz6uA0HEygOQxxUSMpwbB6pfLbpgaTNqs7Vkkkv2Wtn2vt4Y8AOknJEdkS9EYlfON_0TgDGsEBL5mf5hF7sY3rTgrKaVujixjC_2TxqWYQsJ5qFFM0_slBI02_orCdtR7cWC7QOcrAYuczNu9fhRNYc2ZBP6zv7UuYoJ5vuPl4sDwtmTg1yXAXemopMa_4QnjnwNpnLUJu-UHt46CMKSCSt1Nq5mCjkGcwrnrXbobkJOXeaNaksdi3Maj6yUHCDoC9X0gBYSY9okPtOTWufO3uJcboj3k-RJ_O2MyptaZGO5AW88rcykNmfTEO3JHRw2vCiBalRINzW_Qspb37LLFndrh5RfIHldDnZnw3wC4K5GLkk2NgpaTofXLNmuHkEbUtIPxSOzouetOGDUxGOp4lR_Trs0\u0026ext_cid=299547\u0026px_id=731411038\u0026min_cpm=0.0005974497563010975\u0026out_id=0\u0026campaign_type=hq\u0026aid=127\u0026cid=12694\u0026uniq=ac3453ce09538fe1d037a8c2f8b3ce2529c0ea68600fd53ab01b5ca4bd27fc9e\u0026mid=1342430277316506986\u0026skin_id=2\u0026vertical_id=0\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.25134286068917644\u0026cpm=0.04056488549300498\u0026verify_hash=90d1bd42522d63fbc0d2d23940aebf5e\u0026is_native=1\u0026real_bid=0.03921001835235586\u0026original_bid_usd=0.26002778860541276\u0026original_bid=0.26002778860541276\u0026exp=1440\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=108,98,70,0,4,90,5\u0026need_redirect_show=0\u0026applied_features=prod,main-skins-settings\u0026show_count=1\u0026expiration_timestamp=1727371654\u0026image_url=https%3A%2F%2Fimdn.pics%2Fm%2Fp%2F0%2F883%2F883207%2Fconversions%2F0OErF2ya-in-page-ad-images.jpg\u0026site=native-push-adult\u0026price=0\u0026hostname=auc-inpage-hz-4-b\u0026auc_type=1\u0026pop_type=1\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=\u0026pop_cpc=0\u0026ext_campaign_id_str=299547\u0026is_webview=0\u0026client_price=0.013532400012016341\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=cpc\u0026is_in_app=0\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=default-view-b_r-body\u0026st=0.02\u0026cpa=9ee22aef-3c6b-4558-86d5-e6d19a29f6bd\u0026prev_step_diff=640 HTTP/1.1\r\nHost: 96deb6c755.6dd1167e04.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Tue, 24 Sep 2024 17:27:35 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:35.173853069Z","timestamp":1727198855173,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"50D7D24A2682C8C6FC3E64F4621CFA6BB8BF47407E3100985FCE5ED08C5FFA44\"\r\nLast-Modified: Tue, 24 Sep 2024 01:25:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=2390\r\nExpires: Tue, 24 Sep 2024 18:07:25 GMT\r\nDate: Tue, 24 Sep 2024 17:27:35 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"7556dac98abe275594847e6ac0b26448","sha1":"0775d0e8e46560546d816926fc599d8f4c434996","sha256":"50d7d24a2682c8c6fc3e64f4621cfa6bb8bf47407e3100985fce5ed08c5ffa44","sha512":"5a250b2dd98c0ecb5459ab35ca634f6e72cd510190a60881cd28ad9486666baa17f7743ac7610a3c2a72cd66012dd36adfc50616cd6ad3a6be831240848e8817","ssdeep":"","tlshash":"9ef0c9401c6ae9704fb9bc0e0cd5847a8d245aaf244254a6cae4a2cd78063dc0a8468c","first_seen":"2024-09-24T19:28:15Z","last_seen":"2024-09-28T07:59:48.611669Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:35.183726923Z","timestamp":1727198855183,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"FBDDF646E0503B7539F97564DD418BFD4A31AF49BE6B9E95941B0D3689A97560\"\r\nLast-Modified: Mon, 23 Sep 2024 22:31:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=3818\r\nExpires: Tue, 24 Sep 2024 18:31:13 GMT\r\nDate: Tue, 24 Sep 2024 17:27:35 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"6e37ec13cff496427233e3c6332886ca","sha1":"243175d4066f5e0b2e20cd6529a8760d6f127ebf","sha256":"fbddf646e0503b7539f97564dd418bfd4a31af49be6b9e95941b0d3689a97560","sha512":"b101f1d18eabad4a8523ba3f40c03d6e07450e6e3ed79635f2c3d512464096a9b2d2a4bb214cf070206bb4b9692dacf79e7de84d23b5c045269f1727a25ca510","ssdeep":"","tlshash":"a8f00e560aa0fcd0ebb8481ae968dd3a3e15bbbe24909dd090d507b16902fac5e00298","first_seen":"2024-09-24T19:28:15Z","last_seen":"2024-09-28T07:59:48.612477Z","times_seen":10,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=ARpgrqdAMER9BxAYa_IIw0-3G7Kgm0GaQgMhDdMt6rQ0K0gLegqV0tq5v1n7RnwglJynqMXAkg2p1A\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S-770470224%3A1727198854903576\u0026ddm=0","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"64.233.162.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:34.928Z","timestamp":1727198854928,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Aug 2024 07:15:53 GMT","end":"Mon, 18 Nov 2024 07:15:52 GMT"},"fingerprint":{"sha1":"0B:C3:86:74:01:E6:62:4F:E1:8C:AE:A2:13:50:0B:FC:2A:E4:08:16","sha256":"A6:6C:EF:5C:52:EC:B1:48:CD:3C:F7:E1:21:B9:30:8B:94:1E:C6:44:B5:B3:CD:C5:19:38:28:0F:3E:79:03:27"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026hl=en\u0026ifkv=ARpgrqdAMER9BxAYa_IIw0-3G7Kgm0GaQgMhDdMt6rQ0K0gLegqV0tq5v1n7RnwglJynqMXAkg2p1A\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026dsh=S-770470224%3A1727198854903576\u0026ddm=0 HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 24 Sep 2024 17:27:34 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: script-src 'nonce-peVJxG-pjzC0r0aMJGA59w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/feedback/js/ghelp/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.UZjPIXDvCpg.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":1321,"size_decoded":1321,"mime_type":"text/html; charset=utf-8","magic":"gzip compressed data, max compression","md5":"9f22536f69f324d4bc87b0a6ee30c336","sha1":"e40ab8e93f8a2075ffa6f8c3a5a3733d502eb017","sha256":"46b6f00e5c87bbfe85199ad39898e59de00469f9873a0645ff34bdb396c21719","sha512":"241300efcb273ef2fdc3ada5912d68d0044a7a113b6317d77ef144ce282a506d6a4ca77257a1600089d968ca1f2bdf01331c6e6b39068cd67b0361a221465878","ssdeep":"","tlshash":"7b21cba986547ce097d8d693d560a91e7f5abf7f3494ceb104d806f51c027ed0f40199","first_seen":"2024-09-28T07:59:48.613Z","last_seen":"2024-09-28T07:59:48.613Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bookmsg.com/creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790_icon.webp?pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=default-view-b_r-body\u0026mlf=1\u0026mlc=1\u0026st=0.02\u0026cpa=214be030-cea8-4cf6-a55c-79ab4b64618b\u0026prev_step_diff=640","fqdn":"static.bookmsg.com","domain":"bookmsg.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:35.081Z","timestamp":1727198855081,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.bookmsg.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Aug 2024 02:02:58 GMT","end":"Fri, 01 Nov 2024 02:02:57 GMT"},"fingerprint":{"sha1":"0A:D1:90:4A:91:48:A7:0D:23:B0:CD:D0:39:94:55:76:8F:49:8F:12","sha256":"42:D3:66:99:BB:02:FE:F4:DA:D2:37:01:FB:23:1A:84:F7:13:D3:EE:46:1F:24:DB:1B:CC:4F:2B:9C:2B:01:C1"}}},"request":{"raw":"GET /creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790_icon.webp?pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=default-view-b_r-body\u0026mlf=1\u0026mlc=1\u0026st=0.02\u0026cpa=214be030-cea8-4cf6-a55c-79ab4b64618b\u0026prev_step_diff=640 HTTP/1.1\r\nHost: static.bookmsg.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 486\r\nserver: nginx/1.24.0\r\nlast-modified: Fri, 08 Dec 2023 10:18:03 GMT\r\netag: \"6572ed5b-1e6\"\r\nexpires: Wed, 24 Sep 2025 17:27:35 GMT\r\ncache-control: max-age=31536000\r\nx-proxy-cache: HIT\r\nx-cdn-host-id: ds5058\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":486,"size_decoded":486,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ceeb4e8840c24621c0e0352b42b38a5b","sha1":"03cbceb0134a39267014595938705e2916580644","sha256":"50cb77ae9715629235f102dd53a68559df1b64416f71179dbb4aa942725790b3","sha512":"80d4128488580567597ba5eb65dbff2dd4a8efc625c64cac6a027a1bb5c229545206669f04a50a252b54f471bee4fdc892e6bfe8347a50dd216bba67bd671a03","ssdeep":"","tlshash":"9bf00544191cd36c2a3c607afd74eb74a4074aa459226017cce447b08956811e856c1c","first_seen":"2024-02-20T18:30:33Z","last_seen":"2026-04-04T23:24:33.75401Z","times_seen":10794,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":103,"dns":52,"connect":19,"send":0,"wait":20,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.bookmsg.com/creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790.webp","fqdn":"static.bookmsg.com","domain":"bookmsg.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:35.082Z","timestamp":1727198855082,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.bookmsg.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Aug 2024 02:02:58 GMT","end":"Fri, 01 Nov 2024 02:02:57 GMT"},"fingerprint":{"sha1":"0A:D1:90:4A:91:48:A7:0D:23:B0:CD:D0:39:94:55:76:8F:49:8F:12","sha256":"42:D3:66:99:BB:02:FE:F4:DA:D2:37:01:FB:23:1A:84:F7:13:D3:EE:46:1F:24:DB:1B:CC:4F:2B:9C:2B:01:C1"}}},"request":{"raw":"GET /creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790.webp HTTP/1.1\r\nHost: static.bookmsg.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1066\r\nserver: nginx/1.24.0\r\nlast-modified: Fri, 08 Dec 2023 10:18:03 GMT\r\netag: \"6572ed5b-42a\"\r\nexpires: Wed, 24 Sep 2025 17:27:35 GMT\r\ncache-control: max-age=31536000\r\nx-proxy-cache: HIT\r\nx-cdn-host-id: ds5058\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1066,"size_decoded":1066,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x240, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2a11e13b2bd67bb9a6cb347d7c73df13","sha1":"b85460a33f9b229f42c08a6a94ae433a4d5c32ab","sha256":"1d0d6b5176d6a48b3042a107f929bbfcefd4a057273ac488bbb7f7affd909b56","sha512":"059dd018bbf13a669d73f07442288f165bc6b305afb0df955773a0efb7454b8204095196231179fab4cb625e189c7c735fe41dc5b67fb8666d584214277186e6","ssdeep":"","tlshash":"7511b56be46c4dfede41f0408dd80256f8324a5c8aaeaf39058bc7da4f584143a6f01a","first_seen":"2024-02-20T18:30:33Z","last_seen":"2026-04-04T23:24:33.777594Z","times_seen":10783,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":111,"dns":50,"connect":19,"send":0,"wait":19,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:35.235249144Z","timestamp":1727198855235,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"D8F7B1EA16136E98824D9E4AC422603829F01C2EB7EF7E494E4A133A4A24AB03\"\r\nLast-Modified: Sun, 22 Sep 2024 15:19:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=5002\r\nExpires: Tue, 24 Sep 2024 18:50:57 GMT\r\nDate: Tue, 24 Sep 2024 17:27:35 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"99420a73ee0b324ceeaae3c2bb839c8c","sha1":"52463e8db3f73fabc558c088b64ff5b0f991b44d","sha256":"d8f7b1ea16136e98824d9e4ac422603829f01c2eb7ef7e494e4a133a4a24ab03","sha512":"a7a93d183161cdf6c525b1d10e76c45db851042f6ad33c822e9c649bf07048f517f7e1b1a0d2e89bf265160d545f8c4a404bdbacd455a38ecc9afbba6b671067","ssdeep":"","tlshash":"9ef054a98b70a0f48f90093759faf2aa0c255ab94d8874c5e80043fe7a353bd230400c","first_seen":"2024-09-23T11:48:56Z","last_seen":"2024-09-28T08:19:05.967239Z","times_seen":6,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:35.236344955Z","timestamp":1727198855236,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"EDC26E5C8587C9D7C04C3CC04CEB8917BC700ADCCD3DC6BB5C6F5F60355C99A6\"\r\nLast-Modified: Mon, 23 Sep 2024 04:42:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=15635\r\nExpires: Tue, 24 Sep 2024 21:48:10 GMT\r\nDate: Tue, 24 Sep 2024 17:27:35 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"ee7e99cbbaa56596f32cdf6f569f615c","sha1":"7f7ef0bee675caa5a053a20d8a6c04d8a23adbfa","sha256":"edc26e5c8587c9d7c04c3cc04ceb8917bc700adccd3dc6bb5c6f5f60355c99a6","sha512":"7320c43bc3a77dfa74ff57c563ba9d3897e6b3ecfcee3546e181c1087d464252116285c6d7d2d545c6673047eae9ad21c1fc0f34d480c9c70f033ab5b58fbf7a","ssdeep":"","tlshash":"e5f00ea2393979426a74245e2ef9d9317e3d6cfc248868d1a5f042f62c00b6d194cb0c","first_seen":"2024-09-23T11:49:08Z","last_seen":"2024-09-28T08:19:07.00912Z","times_seen":4,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cmpuwps.com/get/","fqdn":"cmpuwps.com","domain":"cmpuwps.com","tld":"com"},"ip":{"addr":"94.130.197.239","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:35.064Z","timestamp":1727198855064,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"puwpush.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Sep 2024 02:07:20 GMT","end":"Sat, 30 Nov 2024 02:07:19 GMT"},"fingerprint":{"sha1":"59:42:85:59:22:E5:93:73:5A:80:F6:3C:97:95:2B:D7:C3:FB:E3:75","sha256":"4E:50:0D:F8:DD:15:06:3E:E6:78:A4:26:E3:F4:23:DF:C1:40:EC:3B:4D:DA:2E:76:13:2A:D8:EA:25:BC:2A:09"}}},"request":{"raw":"POST /get/ HTTP/1.1\r\nHost: cmpuwps.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.eroticporns.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1523\r\nOrigin: https://www.eroticporns.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.16.0\r\ndate: Tue, 24 Sep 2024 17:27:35 GMT\r\ncontent-type: application/json\r\ncontent-length: 2840\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2840,"size_decoded":2840,"mime_type":"application/json","magic":"JSON text data","md5":"aa2e78491cdf82282f1fd0fee165af39","sha1":"a633c4daedcd71bfcf616f764207f980c123e4c4","sha256":"9184fa592af6dd879d801ef53cd15eb5cb7ebcfcea248ae6c155dd5ff5007f17","sha512":"2222fa8c56f90274cc7a82177b678dadad88c3e9ed8a9aa64e4a6eb8ef6f0cccafe7e6c0b0ea8ef2937d2a5155421c1d8cf35fc32f6eec2db1c7eb3f9f083d6f","ssdeep":"","tlshash":"0a51434117e3ed7800f1b8643c63b9294da77e411bda48a2dd734b24ae94f350597fac","first_seen":"2024-09-28T07:59:48.620359Z","last_seen":"2024-09-28T07:59:48.620359Z","times_seen":1,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":136,"dns":31,"connect":31,"send":0,"wait":39,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bts.a11k.com/in/tishow/?katds_ep=_qDgDbX1GnwDyTucAV0owvj1IfHXtgN0xLQn357dx8Xpn69tzirslhnP1CAFipAjZBslVvPcASODnPr4gRUz0NN3jVMcJCR1bYAEvOV40W_Sh8adIbZobWrqh80VGg1EvrdD50G7CiSytczRPPBEzihBQYZc5vC4V1wzQBlSUBZRDcYK_qeFX0r9GFMu232ddkAkETXIsv3BWu5_m6yYyuvfUPioFptRXdqEia2gn9kxrfRetiw9tUnI3qjQU3v6cCEOV66GZMQr7NnZInqYp67_kUrUKtep9EQ38HkAuekDvq_grRcp-1WZ-kREby3iAmXKij-vsD1pM6Uuh_04ustPjVnfBFPm2qcCml6HQTcLJAh9AhpcHo5ywxUIYn3hvx-nZsE2PTpJ_kMt5A-EAcVA-7u-QWuQNcn4A7TvjlorfNjBYiBTA0vmMoqCpiK-O5339LCtCyOcKj8vja63v3trpHVIinIulK3YHj-dmmme4PIn52Ldg81SDg-sgBOcBgF2fM1tOHNiUrfG6j08892QvqvhD3FMFWTWXjuXCxgNLhh_HS4cOe8oSXSAusbW7Ej7jI5W-1UXWbTUbVz5dfx4B5d6CKyYiowO--qtDDwtGGUd_5k6MhOpA471PHZWRqNs-GOQV1NFArMpp3LKBalk1V30__ZmQ_401w-K5KO7b_w15ockrTRyv0mcZuAtWNiWJo6lll1CZtkPQACDIJe3sWc3gof8Jpqu2ABVnh7214RWfKRg4HOp0iHPNkaAT7aUxZAFSXLkkkoWVxCXdeyBjodlnCLGgHEAoJ2QGrialWba4ZeUCUgOmBKKEULy_vr2tg5OUXySdlQ3e1BThkhV9Bt0EdogXIq8-rQg9GEDq326SqWfmwdxmqMQ8JpVExA8Aj68jUHda99ii5IdOGV05ZymUjyPbYDagRLGdHUBzkaR-zDaDgN7VlH8qoeog3xs9c1oyoe9BCu9X_qp3gPzIppHwQs8toaa8v34gr0QlJsTsrxVXbsglbGu22r4ldOQfiB5m_iIl5XqzlGUOKfZ11eq4jOE_cdjW1SrxntngSYLQfFLVUuKmWIgOG0sXBrQfNKKRVFfESlN0PIC8UJS7pfHi5nRzwCaSOdbwohaHiGvTq5L-sVemt-Mqmbto5rRzyYTFTXd1rQBuch_HSz9Mlpc-LPgzi9tXxKcNVGuzC5VCWd0uubxAa5UeTvnnqQsCsSUjsSaXYHRqy0ukCbLwpEpNbbFJ0gXRowBjVvpwDuND9HcVL6feD7enZln0wrsyxj_PB1CGnur7breZ7VKPsQiruVIbvfZAWbFDuPcJZpR7Cb0THGblPP8c1zKyuFSQJdvUHDJW_Ymo_GuPsDtEIoTPHU-xGAgYuzhrkThCQDKMQzq2FRT6CIjRcccmiSPhwvvlhUHvFoPEGYMljf0wygDKi1GieYpufD1VoX_Tb8a7SOjkwlbv6LGhItfEEBRstnVC7Ra4HFiAJ3fVwyZQAzwV_ImhlYBFElI9QaxNQZFueKOK9sl_YslXfODpWhDk-FlgEtMH2Uza9Jy88mY42eRW0yBWVSsEDP8ez5IlGLWQClR7Z1kdohBDn6zou3gDccTyGhSSXFdYVCRcVjts6i_JVwiPG8K_qvcTbwBsrF4ldwt-nZw-rw8a4pUWYwZ3dL3JFRipftdYiMLqkdcooRYepawsxVe6dhmiDuXS32xDYQLeqYvBHdgbigqPM9yFnWrZvGQS9R1l0yDi4_qAVWsT33uXKCPtUfH6NVQrA4bNj4DFQxcJgrVB9BmaO8BVIVwajYir_Is1BbxyT_xZUy4j1Q1IDVIDJFS7c7EDFrhV-XPiuQmsAJQqBrp4luugUyrEc-R1zSwkHV4dKQUcRZwN639vqaSGPWEuhuDukKJTsl579EPECztD36nudysapFBBIT_96_RWZXlibcFPH-YGo9KD8pBlDZVpjdCf-SM1mlhWSz9j1WKc_s5p80q6IcuKYDXCQ98-R71Ae6zNX5_X8_DjhjIfQaBzGR9gD8IGyfRYAEb-Rahtd5DysoCjvIShW2IfAlJG5_SG8Nk98c-SntGqoCeTrj2AcpSStBub77vX9YXs6a3nEq21Zr3NYabJxt2XpSOwM3H6J0gxejQJBYMl1FFx1Bqf34cUjcVBDRSm1AzklZJhGRxrnW9FutjRUInleil-U2xsBZrjFaCKlxsKXBBAS1-i09F7fgCZuYrVN4yYCzDOANTRvFIIW-kCCvhQGa2bPPvt_KEnFpHbHPzaUxjK7PBXDC_aSlQWipZhdIA1Z6Ykq-xST7LxehB0ZcDmALl5Wm49Co8FucsssqU96AZTBtcGn5YSvhY_okSj-VR9CQ7kL6aXqeoOCB1ZzEuMVoFf_I_UWmnjaRwqU1K8vWuQgsNyNUPHnCzl-1GxeSw6fk__3fQ47DroE2r9EZ0SNeIar5WOGO_7lwMwSNa2AvLn7lwGhi4wKiL-CNrPjLJEzd1wgfv08BdOyqxBDRViJBqH8HKoyi58J04m8CSIJsnFRXm1S6KExmdqdQ131yhjhuVImagNQO6_KBdrsWbHnPCAKOz3eN54tyzO0y_ksdi95XTPdFghrTjzhka2APutLYy_-xVxS7koZ3d7hW6VIgiw8I61d0nA6Y4njXCbx9IM3FAPedVIfUy_SaSLQaEJ1O5RLf_qLqz_fkxDZMxdSC8Jzg84sfXkvpGbRKViPMI2lqheKjLGOm_LPIn1V-cXFulRCsE1-60x1jZ0gY1lOvvNAU7TVjQNCOJVbBLUZSPbbpx6ckx7wa_wrhjBTG5dO20hpE9_MmRNwM2BI6N4TxFslQg3rX7vOaJL_ISC3RQ2XV-wcCLawRF-dmMZ5P0HJQhOxUk-dz3EPMAUVstlmT5r86eBFeEknzSLx0xAwi2hZMCD3iVIzu3aM0wYJX14uYaWOxX-ah5RGLBhlgLm3S2Ps6F6r9A0N0eNct-cqdKYKcxDNPjvnG-oezOckFWrZnOfspKYYtXACjRVRQZKSmcdZuqBF1BoQ9MgzAOBPA3JcpQ0qHkcSBpsiqtEYM96lv6YRRTOOa8ck3Ft9MvW2I5B1PpZgLobLObOKOmhnZELzkoOuCXZWAEAaMtzMahF1OyxPwTH7lXK-v5WYSGq2G_p-LjRV5DCoLhpZaBZmVI8mVXRPj6RVMDtVkovrut14Vp1AQlnftntcAYMAlIswZs-6MsXgxxcLOyme8GCZ79EywuAfkB_tDAB4DIxODsRPq5DndCSxQGIdWW8IPJO7bRzAuuq99_i1BbtvaSTwimg78yRSA0pyf5JxbnaWLaXSOuxyXylspUPU4KmVWygD7uYzJmFQK27aQTCiF9Bt8Os1iW1giHcryiKBtS6jwle8GH1YCn62YSQe7gzMrXwOB8zmbjyOKK1HxbJK2a58p9Sp3-RtGHSZr8UnJbg3boXtWBPgnZXixwBbluxRKmAxnqEHUpw9JD9xRqmAsRxFrCnREngBE_A-f1HNY4acYIRf5Pnq5nCBsuuFCusB1P64s9omsTA3QTkWAC353-p8m69f9o6H1oTLT2LdbBDpucRxwymGZ19jSKBHHw0Wt5e_uoOuQxuMtIr-zm7KmXV7GmdBzDno5-uuh-o2UXsTVA8nKGiy6rqVQ-d6b2gGvp4_drl9_xudI0gcwIgz2iimMGlowyryDcwQ71FYhStHn0X5annbhqfQ77XPhVSCBrKdmubiVpZRNoZQD2WRw1f_Igi9w3K56S8qJa12mfUXcQx28Zo70AmOLq-EdiXnZziFoeHZYpyt4MlKM-zOcrQBBXJKlB8fOTnOuof8q3W8R579JyBL-k4tD__n7LCPPNwKg2ezRGW4qtL05e4magUfxbfEaeR5BaoUxH1WT_lHvaLMp2W7vHp6AlY5vtptB868oi6gQ-jP-lkxSHE32WpFe7pmYaBcH2RFHToFEk6wBg7951Q9er3TYIa4yeY1fwVqPG9u-udyOYkm44mYxx6Q39s2vswmrVkBhd_FTMXbcfne9zYbLUj0997sg3PqIF92ujoUS1EIr_voGagsug7NtSRGr3_Qk7mKHyGr7gHJPeJ9tE34oxq9C8Hi-qmyYBmnKB-oQxdWBuXA_LlygJKugx-UgrX64EIOZwYUXjnElXe-NJmRGYPVct-RpcwoMl2tZmmQwJo8UrylskrE1nxqRdD3KZUO4f4mw-1APQuvzNyW55RrSD1t6JhPFfM9z7IdEDdurrEOOJb-uEOhWg0krIwZBneEl2MJ_G0lJZJd7luu0uPqZMBK_0hHgwh3l8kTK3AI07eVldw4NgOWZ8MOT1WaO-Iu0lS-8VchWmSYRmM4IBCtaFWHLmG6eNAu0W3Fnfqanm6yEeBTg7IyteAy7Ts5YNXM2UtPogkreHG4ZUYBgfTCGd3F6y91gfARIijZV8oVKQ2l41-eVhM6pn2foDqonq7C6AHcWF0YHmb2kJ-wgHAuVgk1B_TVaOQZbELRtAuSn5c_K1mLPH3idKt7dC00Ta4koMGN9uJl9DC1o-f1vCeCA0xg0QQ6FQcPGI0Q_8eSDgiuxJeLxBKHddNGuBrOmcuZ5sw0YrT4wXU9hzpIG3f7LetJVqmgUCUknVIgDiOCxIyoKUR-MvUuvCYGcN93LMexeW-q-SkIMe_xPuVl7k7KEUVitdzkYLPYphJ6MsMHu35swTZHARVSsGzyqzb5Pv_b4Kyb0eDcV_TO1d2XltBODqV-y-gndoLwZCwFBCu4jWHRH2izGTAex7wVs5gyw75UARju8fJjLEMAxKNuR6JtPyNrDymGk93pSDdsLwu-VeJQUablVVisapkIny4dR4VI0owzb6xqIpQp0SqSuoBgjMXtTGpJl8yA2-W_rg1ZcZLpsbgdmV01u2IgSedNxc24oxlP4oy1LMW4TEXwfLsOLaUExYAW1Jd5_d4heD4zmZg3MHFx11iMi14tZePKd83UgygnjnVM_RyIbV5hzlwGKpmwpPKS9PJIo-p1rVmKcPWWa-JbpXLuRDfsIodURMt8E5de30HCxEenGF_PV50ca-a4-AbVGxoXeQ9gluWytVch3lmtEhCJ5f-7KCoMxVnhLKy_XITs85pd_IYUui7Bz8RWmU0sO1a9c3B8M2ziVs8HVPvlV8VemnQBwTVzD-NinJ-UWmvLPSCAkRwglyL6fG\u0026bid=0.0016666666666666668","fqdn":"bts.a11k.com","domain":"a11k.com","tld":"com"},"ip":{"addr":"109.206.163.116","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://rtbrenab.com/get/?go=1\u0026data=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","date":"2024-09-24T17:27:35.143Z","timestamp":1727198855143,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bts.a11k.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Aug 2024 03:08:25 GMT","end":"Wed, 20 Nov 2024 03:08:24 GMT"},"fingerprint":{"sha1":"43:DC:67:61:69:04:B5:72:2B:9E:A1:F7:5A:47:6E:88:DB:91:B8:19","sha256":"F0:A7:07:BB:1C:C0:7A:05:36:B0:42:39:99:24:17:6E:55:22:2A:A4:F5:7C:28:41:CF:F1:BF:A7:E8:32:A1:9C"}}},"request":{"raw":"GET /in/tishow/?katds_ep=_qDgDbX1GnwDyTucAV0owvj1IfHXtgN0xLQn357dx8Xpn69tzirslhnP1CAFipAjZBslVvPcASODnPr4gRUz0NN3jVMcJCR1bYAEvOV40W_Sh8adIbZobWrqh80VGg1EvrdD50G7CiSytczRPPBEzihBQYZc5vC4V1wzQBlSUBZRDcYK_qeFX0r9GFMu232ddkAkETXIsv3BWu5_m6yYyuvfUPioFptRXdqEia2gn9kxrfRetiw9tUnI3qjQU3v6cCEOV66GZMQr7NnZInqYp67_kUrUKtep9EQ38HkAuekDvq_grRcp-1WZ-kREby3iAmXKij-vsD1pM6Uuh_04ustPjVnfBFPm2qcCml6HQTcLJAh9AhpcHo5ywxUIYn3hvx-nZsE2PTpJ_kMt5A-EAcVA-7u-QWuQNcn4A7TvjlorfNjBYiBTA0vmMoqCpiK-O5339LCtCyOcKj8vja63v3trpHVIinIulK3YHj-dmmme4PIn52Ldg81SDg-sgBOcBgF2fM1tOHNiUrfG6j08892QvqvhD3FMFWTWXjuXCxgNLhh_HS4cOe8oSXSAusbW7Ej7jI5W-1UXWbTUbVz5dfx4B5d6CKyYiowO--qtDDwtGGUd_5k6MhOpA471PHZWRqNs-GOQV1NFArMpp3LKBalk1V30__ZmQ_401w-K5KO7b_w15ockrTRyv0mcZuAtWNiWJo6lll1CZtkPQACDIJe3sWc3gof8Jpqu2ABVnh7214RWfKRg4HOp0iHPNkaAT7aUxZAFSXLkkkoWVxCXdeyBjodlnCLGgHEAoJ2QGrialWba4ZeUCUgOmBKKEULy_vr2tg5OUXySdlQ3e1BThkhV9Bt0EdogXIq8-rQg9GEDq326SqWfmwdxmqMQ8JpVExA8Aj68jUHda99ii5IdOGV05ZymUjyPbYDagRLGdHUBzkaR-zDaDgN7VlH8qoeog3xs9c1oyoe9BCu9X_qp3gPzIppHwQs8toaa8v34gr0QlJsTsrxVXbsglbGu22r4ldOQfiB5m_iIl5XqzlGUOKfZ11eq4jOE_cdjW1SrxntngSYLQfFLVUuKmWIgOG0sXBrQfNKKRVFfESlN0PIC8UJS7pfHi5nRzwCaSOdbwohaHiGvTq5L-sVemt-Mqmbto5rRzyYTFTXd1rQBuch_HSz9Mlpc-LPgzi9tXxKcNVGuzC5VCWd0uubxAa5UeTvnnqQsCsSUjsSaXYHRqy0ukCbLwpEpNbbFJ0gXRowBjVvpwDuND9HcVL6feD7enZln0wrsyxj_PB1CGnur7breZ7VKPsQiruVIbvfZAWbFDuPcJZpR7Cb0THGblPP8c1zKyuFSQJdvUHDJW_Ymo_GuPsDtEIoTPHU-xGAgYuzhrkThCQDKMQzq2FRT6CIjRcccmiSPhwvvlhUHvFoPEGYMljf0wygDKi1GieYpufD1VoX_Tb8a7SOjkwlbv6LGhItfEEBRstnVC7Ra4HFiAJ3fVwyZQAzwV_ImhlYBFElI9QaxNQZFueKOK9sl_YslXfODpWhDk-FlgEtMH2Uza9Jy88mY42eRW0yBWVSsEDP8ez5IlGLWQClR7Z1kdohBDn6zou3gDccTyGhSSXFdYVCRcVjts6i_JVwiPG8K_qvcTbwBsrF4ldwt-nZw-rw8a4pUWYwZ3dL3JFRipftdYiMLqkdcooRYepawsxVe6dhmiDuXS32xDYQLeqYvBHdgbigqPM9yFnWrZvGQS9R1l0yDi4_qAVWsT33uXKCPtUfH6NVQrA4bNj4DFQxcJgrVB9BmaO8BVIVwajYir_Is1BbxyT_xZUy4j1Q1IDVIDJFS7c7EDFrhV-XPiuQmsAJQqBrp4luugUyrEc-R1zSwkHV4dKQUcRZwN639vqaSGPWEuhuDukKJTsl579EPECztD36nudysapFBBIT_96_RWZXlibcFPH-YGo9KD8pBlDZVpjdCf-SM1mlhWSz9j1WKc_s5p80q6IcuKYDXCQ98-R71Ae6zNX5_X8_DjhjIfQaBzGR9gD8IGyfRYAEb-Rahtd5DysoCjvIShW2IfAlJG5_SG8Nk98c-SntGqoCeTrj2AcpSStBub77vX9YXs6a3nEq21Zr3NYabJxt2XpSOwM3H6J0gxejQJBYMl1FFx1Bqf34cUjcVBDRSm1AzklZJhGRxrnW9FutjRUInleil-U2xsBZrjFaCKlxsKXBBAS1-i09F7fgCZuYrVN4yYCzDOANTRvFIIW-kCCvhQGa2bPPvt_KEnFpHbHPzaUxjK7PBXDC_aSlQWipZhdIA1Z6Ykq-xST7LxehB0ZcDmALl5Wm49Co8FucsssqU96AZTBtcGn5YSvhY_okSj-VR9CQ7kL6aXqeoOCB1ZzEuMVoFf_I_UWmnjaRwqU1K8vWuQgsNyNUPHnCzl-1GxeSw6fk__3fQ47DroE2r9EZ0SNeIar5WOGO_7lwMwSNa2AvLn7lwGhi4wKiL-CNrPjLJEzd1wgfv08BdOyqxBDRViJBqH8HKoyi58J04m8CSIJsnFRXm1S6KExmdqdQ131yhjhuVImagNQO6_KBdrsWbHnPCAKOz3eN54tyzO0y_ksdi95XTPdFghrTjzhka2APutLYy_-xVxS7koZ3d7hW6VIgiw8I61d0nA6Y4njXCbx9IM3FAPedVIfUy_SaSLQaEJ1O5RLf_qLqz_fkxDZMxdSC8Jzg84sfXkvpGbRKViPMI2lqheKjLGOm_LPIn1V-cXFulRCsE1-60x1jZ0gY1lOvvNAU7TVjQNCOJVbBLUZSPbbpx6ckx7wa_wrhjBTG5dO20hpE9_MmRNwM2BI6N4TxFslQg3rX7vOaJL_ISC3RQ2XV-wcCLawRF-dmMZ5P0HJQhOxUk-dz3EPMAUVstlmT5r86eBFeEknzSLx0xAwi2hZMCD3iVIzu3aM0wYJX14uYaWOxX-ah5RGLBhlgLm3S2Ps6F6r9A0N0eNct-cqdKYKcxDNPjvnG-oezOckFWrZnOfspKYYtXACjRVRQZKSmcdZuqBF1BoQ9MgzAOBPA3JcpQ0qHkcSBpsiqtEYM96lv6YRRTOOa8ck3Ft9MvW2I5B1PpZgLobLObOKOmhnZELzkoOuCXZWAEAaMtzMahF1OyxPwTH7lXK-v5WYSGq2G_p-LjRV5DCoLhpZaBZmVI8mVXRPj6RVMDtVkovrut14Vp1AQlnftntcAYMAlIswZs-6MsXgxxcLOyme8GCZ79EywuAfkB_tDAB4DIxODsRPq5DndCSxQGIdWW8IPJO7bRzAuuq99_i1BbtvaSTwimg78yRSA0pyf5JxbnaWLaXSOuxyXylspUPU4KmVWygD7uYzJmFQK27aQTCiF9Bt8Os1iW1giHcryiKBtS6jwle8GH1YCn62YSQe7gzMrXwOB8zmbjyOKK1HxbJK2a58p9Sp3-RtGHSZr8UnJbg3boXtWBPgnZXixwBbluxRKmAxnqEHUpw9JD9xRqmAsRxFrCnREngBE_A-f1HNY4acYIRf5Pnq5nCBsuuFCusB1P64s9omsTA3QTkWAC353-p8m69f9o6H1oTLT2LdbBDpucRxwymGZ19jSKBHHw0Wt5e_uoOuQxuMtIr-zm7KmXV7GmdBzDno5-uuh-o2UXsTVA8nKGiy6rqVQ-d6b2gGvp4_drl9_xudI0gcwIgz2iimMGlowyryDcwQ71FYhStHn0X5annbhqfQ77XPhVSCBrKdmubiVpZRNoZQD2WRw1f_Igi9w3K56S8qJa12mfUXcQx28Zo70AmOLq-EdiXnZziFoeHZYpyt4MlKM-zOcrQBBXJKlB8fOTnOuof8q3W8R579JyBL-k4tD__n7LCPPNwKg2ezRGW4qtL05e4magUfxbfEaeR5BaoUxH1WT_lHvaLMp2W7vHp6AlY5vtptB868oi6gQ-jP-lkxSHE32WpFe7pmYaBcH2RFHToFEk6wBg7951Q9er3TYIa4yeY1fwVqPG9u-udyOYkm44mYxx6Q39s2vswmrVkBhd_FTMXbcfne9zYbLUj0997sg3PqIF92ujoUS1EIr_voGagsug7NtSRGr3_Qk7mKHyGr7gHJPeJ9tE34oxq9C8Hi-qmyYBmnKB-oQxdWBuXA_LlygJKugx-UgrX64EIOZwYUXjnElXe-NJmRGYPVct-RpcwoMl2tZmmQwJo8UrylskrE1nxqRdD3KZUO4f4mw-1APQuvzNyW55RrSD1t6JhPFfM9z7IdEDdurrEOOJb-uEOhWg0krIwZBneEl2MJ_G0lJZJd7luu0uPqZMBK_0hHgwh3l8kTK3AI07eVldw4NgOWZ8MOT1WaO-Iu0lS-8VchWmSYRmM4IBCtaFWHLmG6eNAu0W3Fnfqanm6yEeBTg7IyteAy7Ts5YNXM2UtPogkreHG4ZUYBgfTCGd3F6y91gfARIijZV8oVKQ2l41-eVhM6pn2foDqonq7C6AHcWF0YHmb2kJ-wgHAuVgk1B_TVaOQZbELRtAuSn5c_K1mLPH3idKt7dC00Ta4koMGN9uJl9DC1o-f1vCeCA0xg0QQ6FQcPGI0Q_8eSDgiuxJeLxBKHddNGuBrOmcuZ5sw0YrT4wXU9hzpIG3f7LetJVqmgUCUknVIgDiOCxIyoKUR-MvUuvCYGcN93LMexeW-q-SkIMe_xPuVl7k7KEUVitdzkYLPYphJ6MsMHu35swTZHARVSsGzyqzb5Pv_b4Kyb0eDcV_TO1d2XltBODqV-y-gndoLwZCwFBCu4jWHRH2izGTAex7wVs5gyw75UARju8fJjLEMAxKNuR6JtPyNrDymGk93pSDdsLwu-VeJQUablVVisapkIny4dR4VI0owzb6xqIpQp0SqSuoBgjMXtTGpJl8yA2-W_rg1ZcZLpsbgdmV01u2IgSedNxc24oxlP4oy1LMW4TEXwfLsOLaUExYAW1Jd5_d4heD4zmZg3MHFx11iMi14tZePKd83UgygnjnVM_RyIbV5hzlwGKpmwpPKS9PJIo-p1rVmKcPWWa-JbpXLuRDfsIodURMt8E5de30HCxEenGF_PV50ca-a4-AbVGxoXeQ9gluWytVch3lmtEhCJ5f-7KCoMxVnhLKy_XITs85pd_IYUui7Bz8RWmU0sO1a9c3B8M2ziVs8HVPvlV8VemnQBwTVzD-NinJ-UWmvLPSCAkRwglyL6fG\u0026bid=0.0016666666666666668 HTTP/1.1\r\nHost: bts.a11k.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rtbrenab.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.20.1\r\ndate: Tue, 24 Sep 2024 17:27:34 GMT\r\ncontent-length: 0\r\nlocation: https://imdn.pics/m/p/0/770/770824/P1r9hLS2.html?\u0026campaign_id=236776\u0026utm1=tcb\u0026__GEOIP_COUNTRY_SHORT__=%7B%7B+__GEOIP_COUNTRY_SHORT__+%7D%7D\u0026DOMAIN=3txxx.com\u0026__IP2L_MOBILE__=%7B%7B+__IP2L_MOBILE__+%7D%7D\u0026BROWSER_FAMILY=%5BBROWSER_FAMILY%5D\u0026ad_sub=71860570\u0026__BROWSER_FAMILY__=%7B%7B+__BROWSER_FAMILY__+%7D%7D\u0026CAMPAIGN_ID=236776\u0026PRICING_MODEL=cpm\u0026PRICE=0.0020\u0026OS_TYPE=%5BOS_TYPE%5D\u0026priority=%5BPRIORITY%5D\u0026pricing_model=cpm\u0026utm4=0-10346131-0\u0026click_event_url=https%3A%2F%2Fbts.a11k.com%2Fin%2Ftclick%2F%3Fkatds_ep%3DGdxUfEKfQdIbyN4pPn33PRoSsf_ui7NMJJha3h2v7XoD0wwHf-NY39Vno8vJrRWiDDyKWFBw63rsjOC_L7b3WTNnCkdRvMyRmoFBGYmpllnlxe9SIK6ikFtBFz0TLaYdp_sfUOsDQ_edMPCX2XO8dQaPME0wBiIIGy6HqHF197ib73l7TSmoZ_6F7uqmhHO6BaNvLdxefOvJalx1iglO2WeFXfs_80XtW6ju5Hw92gMutzChMCo4FLnQLza8oFas2RRrDSJNG0jnNt5LmJoaJPA3xra5msxHWUNBId2p-iA56D73PLRJq-MElsZz7X6te_Na3aGAD8mpWz70fh8UdV6klm3tWu-5z73U3g-EFQRMvWWwO0WFtyc5dT5_pYhXcQaPbZyiw9vhmKG8nvJDjKzk3wxpTFHPoGfRs-Y3E-d3NtGFN3Dxj8Dt5-xnUxRw6X1ab1R-n_Mk02dSNN6L1iSyu1RHdIFhU0hu936-O7QE9uxtPTj9JQ-3Rzk1KdW3ZVodbGfPqxWSIkBEvZp_sfdci96gIvrHGKXch98CKFQZMC7mQqPZds5FUXMXhHYQsbO_GhwuJzXn8b54kROnKxhumftUVpq5YluHF3TLcLt37sg7WRmgJfqj3F1C39jUuzQirKvuRZCf6nyIpXlZ7KM_YQFvf3xrTqC1zPJW-_KMNpYQlBzEWUfkSny_U5chT47Fz_m_bcNnpyFwHTKSIVesHYhYab0-46F1xayPWLJFQ7MENRh0wqvM1QToE5xaTaHBU9R65lbfSai5A20mWXqx1ET4h8SMMP57joW9IqB9hB_HNTa4NjDi5MQIwYYjpf-V631pKVK_XM0QZlKV4arCCKw5KlONTdC42wa984FeAGXlNyJnWttPq_CEeSfSvUMbU5FrV1dFGjDQgPr_703ylpPuj7Y7-Rr4XMpxG-HBGgmYiU_E4YBHsA%26bid%3D%24%7BAUCTION_PRICE%7D\u0026MOBILE_BRAND=%5BMOBILE_BRAND%5D\u0026out_name=236776%7C83954%7Ccpm%7C0.0020%7C%24+0.0020\u0026__OS_TYPE__=%7B%7B+__OS_TYPE__+%7D%7D\u0026pricebox_price=0.0010\u0026__OS_FAMILY__=%7B%7B+__OS_FAMILY__+%7D%7D\u0026utm3=249-1353416-46616\u0026id_zone=%5Bidzone%5D\u0026COUNTRY_ISO_CODE=%5BCOUNTRY_ISO_CODE%5D\u0026price=0.0020\u0026click_id=30a4de03-108d-45ef-8397-bdcff162a5e3\u0026OS_FAMILY=%5BOS_FAMILY%5D\u0026utm2=878669509-100\u0026bidding_price=0.0020\u0026site=%7B%7B+site+%7D%7D\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nvary: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bts.a11k.com/in/tishow/?katds_ep=S41xl-RvwICfIvwtX1JRXgNWoIS3CUtNgM19jnNAz-ih614imGyq10-TF0WnOAVFdOmLIMyOqa4-s0RkQv9nqoW55_eI1jbUb-pULqO0mTohGaTDMtpzpe2oXpJIeQrRWJxwvEDp6fRT_ATu8eTVy2ADhWD_A6XQY0RXL-9FhoXMNfry3c454Fgyb-L5NGX7DzIa9bcXljw7ZWv7nIz3VQpBzHYUod-4N02cJvF_i1BvQqboE_MHUqsxXIk5j-Qe5pVxtDdXycZzQzh5frmqq5fug4wCzmNWk7Heb47w2LFNwQDd3AiOiVjGTVOV1J3ILfo4gBfZHI9j953q9zs8fQI3fcHJeeWawgKe8a5p4WLs0bxlgXoxPMlfpWBvaiHJbczlizqL55IBcAWjyenxkayJSu1O9kG0A_8fIkxvYY2U0tOcsKM5FL9O6Yt_dwS38Kec-4qqMk1Z69_5idxtPeQApnRT25kkVHtCtp3Yr0YpVhuanYjEIagNByF3WV9Ulw49aGsmXKleo0w9QQAxkBM3Jg5A9QqTNlh8yNlHYvKGnCcBXivZaF8wD0bhyj2dhN7zoYsUrP_7Keg2i0FOdkD8dOIe5Z9zTGgf9dhTOkgMBP1Wpyana8A26dF5-YQvwXPTNHp6IteZbThBVraUUvzxPARmTZFBFTBylUuLSF_n5EuY2xud7G8xfR0ObBcRXNhfMVPJef4RTbHd4e0dydPZVJzxtBvNupB5qnW3i54a4FG-7NJtw8lrLv8umHW9azp6JMQC4RD_01zXuu2VA1dKa11ENJqsqOyPHNKkTzp8fb5Bq6sDsSyg6umQ0lpyf0GoulC4t2woo0wjDjUhzJdeBKcfDUUKes9B2ieilAcwbfz1OvMWUBa4T4mOppKHI1KJex8alYB80mBbu5PoMIVa4f0addFw8VkbzCmyvQo8i5zKvDmsh0cH4alZeKc40Om3YdCMh6rxBmSrG-S6CfIe0FKwdrhG4VmzHFYv1DBmtZ0SPD3RlVw0_fiwEzi07zVO8utP-j6h7Z6CfEIAHRdV2iG6kgP-_KEKmnQpZcn-Gy78b2CIiJkfmSpehNe8qkmiYVXcgDpZ0P_nFa-BLL8e46d_p97GD8F0aQKIza16ib-OD33kyIR9hg0u6M6VbS0znMMBGY0zoxpaDTrmGRlTIT7X2YxyYzBeByIXPW1oVSMfGyxwHfOraqsGV14zERftL11L_mz_ejgiaYVLz5rlsdMBsi5bgpSxhzJauZUJXyL-_xR6SxT5W-cRfxarNrxmUTfu2gaMGpLuiKIJhWOjOytsHQS3UTUSeeHcPG1NrgCpVqrIf-NcM-C-NhXDQNDjdOLw7D3fuoMeSL7ACUOH3o-UBAVXqqx5m6cayhJ7Gr2Aqjih6Nsaorf8Stc50sw6hIHJAgFwf-pHc9hCg-m-RwfHNxJT3YTx0soBatGPaJ3aprZ54r6JeLx7ng_4NQ1bZDnCkv0-RlSsD9RWhSitt5-2finQdmjgFiZu1HD2zxXXMD3tznOyZ4gqgC2oO6angJk_z328-7b9SiGJ8k1AHf8SbeXoX2vI-oI1REo9J-u9U5a-2EFAJIdqp24xkMpKfCnhc-mBPh0fIP1l53O8YyleGZpxhDksxq_J5-JIrDSYoZq2bpCunVL4vXoi2NmSzJRTUo-1OB4VXGPtMqqeXb92mIT6AfqwQAuDkuqwgmJ2b7st2xKEr-tgvJ5dm1UVfCFFaeVNWuGPbO7sS20JpoIUMwT_H80weZEcZhUdtHBef-XZg6cx289ytzxRK2KzHnoRpVwSrkw0kaHbflVDv4Km1FBVrZyC-UGsM0tAnaEb9vb7dNok5RF3DhaZ3JBjWFrSv5e0Du-Tnnlt8uxYX_wVWC8nbyVOvkdeL2xuV6YrxJODkv-ZwZoso3vufZSGfVkpzwmt6vqBERqiN6u1hWn_tT0Ufo-ajwr0EcOW88wkNOcyDq6sg62TdPzKNcTaXdDWsuCF4uHYsb9wvYpnF_-NYrqIC86mn7mzyiYP9KRmTy-lx0yMTaKEP7utEO-Q1EsmnhKduaM8yTcdS-hRkH6-Y7sCEiZA_ZAgR6NwWAEd6LWD19O07WoKqtnayiEfSUp8f8HjTZ1VsaLhQPab1DaVKzL5Q8tzFCAQmGYe58iYfctoXWnV_tk6cC0njBX-DCeb-KiBMDe54-5nmSv84CiURj8Avpysr__dPYSLREpYffn34nz4VllpEl7EEI98uAZ3PkZjkX0LhGmdtkDVGrOMxDrm2f_x_SJsc-p5dju2O1NctVI4nafbaqq4udKjixNkEhtS4tpQfAu8cIA37vNVTPlcTmtf6zqitw9lyt9WmYNRtpy1jj_ltFPdJ36lZOlke6LMjTE97hhTWBoh7Vn8hxnEKgA0s2ebRlwQ_xQUbrktd7v0buHk4bQnfLAw9jAYJz2q1VkPbqM5Ni_3jwPSDE7Ao8Im777gu9PwLSBEP4XJGVx7ucBK9aym_fxrB4EqE9RnIct0kk1Sp5hGWw1vnBKuAYhAByVo6HZzVqc3SEAUdtf8p4BwvxXz-RjyZqy4vVurPtVmO4qc09-ZRFPcm8R28yago-9txV0GojZP9mgDlPZCPmn0-f42CmUCfGuqKDwqj6QuTv0YSdqyBx1ZOwca3eHTlojD59rvb9OshF0DrE9UtBQSBEMmHv1zdUh0G8GB2ujZTY1EhFB6qe3mfO2qhNLXazEkY4bXrzJI6gEo2JzsVyC3QpUT3n8v1NEexgcjXRGwvf4mbCK4Jm4_iy-2eRGhnP5JYlSNDCHLlgGpP102nr9NSsZSa4jb3UKmTPgzFCMFOH-ypN-VL1PJm4Hi3_amuYJypkVF7Liq0Q1k02KijgoMSJVv34ZgcDpemr72k6NxTUhbuYBZ7EJNBahz31632-UC5ZS34C66orfCRgtBai66Q3xLN81NJ94YeBiczBQ3D7-o6sk1cnUOoQVbX_hRCg3s5OY_KXan48784Zi6hL8Z1wXBR5PpR1P8532AGGij9AYWnfaKkm-DX7yFYR7yrK6n8JDtygRczVxk6Bcj4lmJk3zhXPPYvdFmLgIznDP4Yr6yMquePKnlk8aqyj4MuJv74jShbWpHIFPJysGaqKXNI4QzYtgFOprlOhsKSBkF4B3HDJIsIq7F85QMBpcoKm3Y2xVfL5CR8qpGn_FpRwEVhpAjXoxL6ECbb_aNi3HB_S-pC9OCZuSQQAD47jVVsTjvabHDMUGp1wg-pc0rVaO3ZqFd5rhmfZHSB1HdKOh1HhF2rbV9kS2whO5tC7l7R3HsiViG6YTk0KG-qH6gvNY5iyUvTRB1z1frC6SiqnMG356gUzeunz1vsSHDyjAHN9VDZvyMq-82MjWtkJEtO4mcaqDdYGHxr-Fv9yQTEjBONIuA1wwO9Mc6hVBh4FG4lYa9VxlrZARlfhPuNVxEpI6pYWRWCeEvHlDSKFFK7AsR-Ma0M5uvWERRIR-fR8QfHi11sGebm9f3NfA23rvJT26twdN53Nn2Wa-25zhTXj-HqW-v4gbOrWmzokWr-bucvH1x12ZoEjKiCmQJfDuN-c5ZGYoKxcHTt8j0s7WSchaAM87K5CgLC2sniFcDNe6SPPFhIxcEnVLNPhGjRrULjI14I4g1Z8uN30geHHRQ6XBB1c7LBKvpJuCNJyW063kX1-EBH89J2-4moxQRS20M65FsuhbnMbwvLYPMcMesKufXWmX1dSXuaHG9e1kFfKI2SKfsvKghUhM2OZgTMZc46MbV0Yo_4BU4kAm2qWt44S8MvjDF7nVEPnFNw7iMY_VLEDaYLkrGtxnDDlFYEDmsvQbjl4WEM9bX7kQ7cS9DZwKo07OQg9V3dUlV6MJLEGvAFjSl0JGUeUJ0gPSrTGlxdUNGMqaLbK0_PxEnERk4iavoFDWE_LYnQIGdKtM3rjoUqgXcTNAOKGCDj_kiVKgRSVQPf9ZnJVjTvIeJ-C9Ktw4wfKMC-MnNAd9uDOOyc560VV8wLG7QmNaJqxmwj8r9WCy1GoY-l3ush3FV9yv8UsAoCF1qlSm-PMATzWX9uQs6f8L7o5Ps7ipjDoO5p8UA-6ThvNmnaaJYxjlus2KOvcaTx0BQvTRvWSzr3EAU0F2jg6CHFQvqfM10T8h3UnEyn071T9SS_t-WKBYbuGndjOVozHXcc8N6xxd7H8fELG2BRQsPzE9OBCN7BwsFJwHoT6p8iMof7InmQhncStceFMNzg6mByP2mwLEHVhzFgoT2Vda9hzpG9AFMjX9ZfNA-5vPLrEhTIA3rDwuHSFAcJ7xXQy7RSsBXMK3L4jNiti9soa9HC2wgmV1z0FoI0wHKpAJ9tIWiDysg-dLD1M_Mc4w0AuKOgSxC8DfPD9lkbwB7qyIl815Pq4jqFSmPli41jEmXnF-7N5OwGVYoqJgppG5J6ZHHOOPKUTewBdnEWJS9ysGUWmLEJPKbLH-BG45F9YaPTdfE9MTxr6l868kiqSJcvX6NgAoPbr7IxN2rbiabV-EfBFyJCS7E4QnthcHhN6nL7E6Wq41OwXvhGVpPUru0o-oozB63yj1ZPY5FalIwNSccJOCQ5f4DYjgA2wILky3H-5P7IJ8EmhrEcLnO5qY6vycqOf18FGg-HMPaM6xyB8PZUSCvNMLHKIuLRsxDseoh555EW2qHpUlfED48SPHjCGt63EYN5XpV2-dqfZ111egsUSLdyVt8h6HWXV8FyGhKYZRmASXGMM4SMWzEgnYq1M5gfUpC2DRpafx9oi6TY_DsQ2AncEq78dQvCg8BEvuQQE4QLnzmlDuKPRvxvkfmvqZ0obGaQnqYYTMmEA4hYL-B8agWjcnjeTuBL769edFzQwLrjpU6VEly54xaAa1vUf5w_vqvfj7-a31c5Bgq2SH_rIpL5JDc0_arnOjufUag9EcpBrQyFkoTGmXJjvGgRdJ8qOaOFiph6jWUwRqZ5pBzihK7J3180y4213SfIdkprlUF-FOD7cGfv6gM3-xDRj_55AJ0-IddhbDOE73EPmnWgQz9z-zH5QfKQk8-yfeWvptPGcfbMMHoFNhysKE5vnFX2HdopSgQ_tpD-zEru83hDIMJigPAdITYZoa8S4cpHc4FvAaJ91yTJRxurj732oJSgjS7qEz8VdVqHSKriQxkySFBeEayI_DFHmazBj3T8iFb\u0026bid=0.0016666666666666668","fqdn":"bts.a11k.com","domain":"a11k.com","tld":"com"},"ip":{"addr":"109.206.163.116","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://rtbrenab.com/get/?go=1\u0026data=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","date":"2024-09-24T17:27:35.137Z","timestamp":1727198855137,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bts.a11k.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Aug 2024 03:08:25 GMT","end":"Wed, 20 Nov 2024 03:08:24 GMT"},"fingerprint":{"sha1":"43:DC:67:61:69:04:B5:72:2B:9E:A1:F7:5A:47:6E:88:DB:91:B8:19","sha256":"F0:A7:07:BB:1C:C0:7A:05:36:B0:42:39:99:24:17:6E:55:22:2A:A4:F5:7C:28:41:CF:F1:BF:A7:E8:32:A1:9C"}}},"request":{"raw":"GET /in/tishow/?katds_ep=S41xl-RvwICfIvwtX1JRXgNWoIS3CUtNgM19jnNAz-ih614imGyq10-TF0WnOAVFdOmLIMyOqa4-s0RkQv9nqoW55_eI1jbUb-pULqO0mTohGaTDMtpzpe2oXpJIeQrRWJxwvEDp6fRT_ATu8eTVy2ADhWD_A6XQY0RXL-9FhoXMNfry3c454Fgyb-L5NGX7DzIa9bcXljw7ZWv7nIz3VQpBzHYUod-4N02cJvF_i1BvQqboE_MHUqsxXIk5j-Qe5pVxtDdXycZzQzh5frmqq5fug4wCzmNWk7Heb47w2LFNwQDd3AiOiVjGTVOV1J3ILfo4gBfZHI9j953q9zs8fQI3fcHJeeWawgKe8a5p4WLs0bxlgXoxPMlfpWBvaiHJbczlizqL55IBcAWjyenxkayJSu1O9kG0A_8fIkxvYY2U0tOcsKM5FL9O6Yt_dwS38Kec-4qqMk1Z69_5idxtPeQApnRT25kkVHtCtp3Yr0YpVhuanYjEIagNByF3WV9Ulw49aGsmXKleo0w9QQAxkBM3Jg5A9QqTNlh8yNlHYvKGnCcBXivZaF8wD0bhyj2dhN7zoYsUrP_7Keg2i0FOdkD8dOIe5Z9zTGgf9dhTOkgMBP1Wpyana8A26dF5-YQvwXPTNHp6IteZbThBVraUUvzxPARmTZFBFTBylUuLSF_n5EuY2xud7G8xfR0ObBcRXNhfMVPJef4RTbHd4e0dydPZVJzxtBvNupB5qnW3i54a4FG-7NJtw8lrLv8umHW9azp6JMQC4RD_01zXuu2VA1dKa11ENJqsqOyPHNKkTzp8fb5Bq6sDsSyg6umQ0lpyf0GoulC4t2woo0wjDjUhzJdeBKcfDUUKes9B2ieilAcwbfz1OvMWUBa4T4mOppKHI1KJex8alYB80mBbu5PoMIVa4f0addFw8VkbzCmyvQo8i5zKvDmsh0cH4alZeKc40Om3YdCMh6rxBmSrG-S6CfIe0FKwdrhG4VmzHFYv1DBmtZ0SPD3RlVw0_fiwEzi07zVO8utP-j6h7Z6CfEIAHRdV2iG6kgP-_KEKmnQpZcn-Gy78b2CIiJkfmSpehNe8qkmiYVXcgDpZ0P_nFa-BLL8e46d_p97GD8F0aQKIza16ib-OD33kyIR9hg0u6M6VbS0znMMBGY0zoxpaDTrmGRlTIT7X2YxyYzBeByIXPW1oVSMfGyxwHfOraqsGV14zERftL11L_mz_ejgiaYVLz5rlsdMBsi5bgpSxhzJauZUJXyL-_xR6SxT5W-cRfxarNrxmUTfu2gaMGpLuiKIJhWOjOytsHQS3UTUSeeHcPG1NrgCpVqrIf-NcM-C-NhXDQNDjdOLw7D3fuoMeSL7ACUOH3o-UBAVXqqx5m6cayhJ7Gr2Aqjih6Nsaorf8Stc50sw6hIHJAgFwf-pHc9hCg-m-RwfHNxJT3YTx0soBatGPaJ3aprZ54r6JeLx7ng_4NQ1bZDnCkv0-RlSsD9RWhSitt5-2finQdmjgFiZu1HD2zxXXMD3tznOyZ4gqgC2oO6angJk_z328-7b9SiGJ8k1AHf8SbeXoX2vI-oI1REo9J-u9U5a-2EFAJIdqp24xkMpKfCnhc-mBPh0fIP1l53O8YyleGZpxhDksxq_J5-JIrDSYoZq2bpCunVL4vXoi2NmSzJRTUo-1OB4VXGPtMqqeXb92mIT6AfqwQAuDkuqwgmJ2b7st2xKEr-tgvJ5dm1UVfCFFaeVNWuGPbO7sS20JpoIUMwT_H80weZEcZhUdtHBef-XZg6cx289ytzxRK2KzHnoRpVwSrkw0kaHbflVDv4Km1FBVrZyC-UGsM0tAnaEb9vb7dNok5RF3DhaZ3JBjWFrSv5e0Du-Tnnlt8uxYX_wVWC8nbyVOvkdeL2xuV6YrxJODkv-ZwZoso3vufZSGfVkpzwmt6vqBERqiN6u1hWn_tT0Ufo-ajwr0EcOW88wkNOcyDq6sg62TdPzKNcTaXdDWsuCF4uHYsb9wvYpnF_-NYrqIC86mn7mzyiYP9KRmTy-lx0yMTaKEP7utEO-Q1EsmnhKduaM8yTcdS-hRkH6-Y7sCEiZA_ZAgR6NwWAEd6LWD19O07WoKqtnayiEfSUp8f8HjTZ1VsaLhQPab1DaVKzL5Q8tzFCAQmGYe58iYfctoXWnV_tk6cC0njBX-DCeb-KiBMDe54-5nmSv84CiURj8Avpysr__dPYSLREpYffn34nz4VllpEl7EEI98uAZ3PkZjkX0LhGmdtkDVGrOMxDrm2f_x_SJsc-p5dju2O1NctVI4nafbaqq4udKjixNkEhtS4tpQfAu8cIA37vNVTPlcTmtf6zqitw9lyt9WmYNRtpy1jj_ltFPdJ36lZOlke6LMjTE97hhTWBoh7Vn8hxnEKgA0s2ebRlwQ_xQUbrktd7v0buHk4bQnfLAw9jAYJz2q1VkPbqM5Ni_3jwPSDE7Ao8Im777gu9PwLSBEP4XJGVx7ucBK9aym_fxrB4EqE9RnIct0kk1Sp5hGWw1vnBKuAYhAByVo6HZzVqc3SEAUdtf8p4BwvxXz-RjyZqy4vVurPtVmO4qc09-ZRFPcm8R28yago-9txV0GojZP9mgDlPZCPmn0-f42CmUCfGuqKDwqj6QuTv0YSdqyBx1ZOwca3eHTlojD59rvb9OshF0DrE9UtBQSBEMmHv1zdUh0G8GB2ujZTY1EhFB6qe3mfO2qhNLXazEkY4bXrzJI6gEo2JzsVyC3QpUT3n8v1NEexgcjXRGwvf4mbCK4Jm4_iy-2eRGhnP5JYlSNDCHLlgGpP102nr9NSsZSa4jb3UKmTPgzFCMFOH-ypN-VL1PJm4Hi3_amuYJypkVF7Liq0Q1k02KijgoMSJVv34ZgcDpemr72k6NxTUhbuYBZ7EJNBahz31632-UC5ZS34C66orfCRgtBai66Q3xLN81NJ94YeBiczBQ3D7-o6sk1cnUOoQVbX_hRCg3s5OY_KXan48784Zi6hL8Z1wXBR5PpR1P8532AGGij9AYWnfaKkm-DX7yFYR7yrK6n8JDtygRczVxk6Bcj4lmJk3zhXPPYvdFmLgIznDP4Yr6yMquePKnlk8aqyj4MuJv74jShbWpHIFPJysGaqKXNI4QzYtgFOprlOhsKSBkF4B3HDJIsIq7F85QMBpcoKm3Y2xVfL5CR8qpGn_FpRwEVhpAjXoxL6ECbb_aNi3HB_S-pC9OCZuSQQAD47jVVsTjvabHDMUGp1wg-pc0rVaO3ZqFd5rhmfZHSB1HdKOh1HhF2rbV9kS2whO5tC7l7R3HsiViG6YTk0KG-qH6gvNY5iyUvTRB1z1frC6SiqnMG356gUzeunz1vsSHDyjAHN9VDZvyMq-82MjWtkJEtO4mcaqDdYGHxr-Fv9yQTEjBONIuA1wwO9Mc6hVBh4FG4lYa9VxlrZARlfhPuNVxEpI6pYWRWCeEvHlDSKFFK7AsR-Ma0M5uvWERRIR-fR8QfHi11sGebm9f3NfA23rvJT26twdN53Nn2Wa-25zhTXj-HqW-v4gbOrWmzokWr-bucvH1x12ZoEjKiCmQJfDuN-c5ZGYoKxcHTt8j0s7WSchaAM87K5CgLC2sniFcDNe6SPPFhIxcEnVLNPhGjRrULjI14I4g1Z8uN30geHHRQ6XBB1c7LBKvpJuCNJyW063kX1-EBH89J2-4moxQRS20M65FsuhbnMbwvLYPMcMesKufXWmX1dSXuaHG9e1kFfKI2SKfsvKghUhM2OZgTMZc46MbV0Yo_4BU4kAm2qWt44S8MvjDF7nVEPnFNw7iMY_VLEDaYLkrGtxnDDlFYEDmsvQbjl4WEM9bX7kQ7cS9DZwKo07OQg9V3dUlV6MJLEGvAFjSl0JGUeUJ0gPSrTGlxdUNGMqaLbK0_PxEnERk4iavoFDWE_LYnQIGdKtM3rjoUqgXcTNAOKGCDj_kiVKgRSVQPf9ZnJVjTvIeJ-C9Ktw4wfKMC-MnNAd9uDOOyc560VV8wLG7QmNaJqxmwj8r9WCy1GoY-l3ush3FV9yv8UsAoCF1qlSm-PMATzWX9uQs6f8L7o5Ps7ipjDoO5p8UA-6ThvNmnaaJYxjlus2KOvcaTx0BQvTRvWSzr3EAU0F2jg6CHFQvqfM10T8h3UnEyn071T9SS_t-WKBYbuGndjOVozHXcc8N6xxd7H8fELG2BRQsPzE9OBCN7BwsFJwHoT6p8iMof7InmQhncStceFMNzg6mByP2mwLEHVhzFgoT2Vda9hzpG9AFMjX9ZfNA-5vPLrEhTIA3rDwuHSFAcJ7xXQy7RSsBXMK3L4jNiti9soa9HC2wgmV1z0FoI0wHKpAJ9tIWiDysg-dLD1M_Mc4w0AuKOgSxC8DfPD9lkbwB7qyIl815Pq4jqFSmPli41jEmXnF-7N5OwGVYoqJgppG5J6ZHHOOPKUTewBdnEWJS9ysGUWmLEJPKbLH-BG45F9YaPTdfE9MTxr6l868kiqSJcvX6NgAoPbr7IxN2rbiabV-EfBFyJCS7E4QnthcHhN6nL7E6Wq41OwXvhGVpPUru0o-oozB63yj1ZPY5FalIwNSccJOCQ5f4DYjgA2wILky3H-5P7IJ8EmhrEcLnO5qY6vycqOf18FGg-HMPaM6xyB8PZUSCvNMLHKIuLRsxDseoh555EW2qHpUlfED48SPHjCGt63EYN5XpV2-dqfZ111egsUSLdyVt8h6HWXV8FyGhKYZRmASXGMM4SMWzEgnYq1M5gfUpC2DRpafx9oi6TY_DsQ2AncEq78dQvCg8BEvuQQE4QLnzmlDuKPRvxvkfmvqZ0obGaQnqYYTMmEA4hYL-B8agWjcnjeTuBL769edFzQwLrjpU6VEly54xaAa1vUf5w_vqvfj7-a31c5Bgq2SH_rIpL5JDc0_arnOjufUag9EcpBrQyFkoTGmXJjvGgRdJ8qOaOFiph6jWUwRqZ5pBzihK7J3180y4213SfIdkprlUF-FOD7cGfv6gM3-xDRj_55AJ0-IddhbDOE73EPmnWgQz9z-zH5QfKQk8-yfeWvptPGcfbMMHoFNhysKE5vnFX2HdopSgQ_tpD-zEru83hDIMJigPAdITYZoa8S4cpHc4FvAaJ91yTJRxurj732oJSgjS7qEz8VdVqHSKriQxkySFBeEayI_DFHmazBj3T8iFb\u0026bid=0.0016666666666666668 HTTP/1.1\r\nHost: bts.a11k.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rtbrenab.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.20.1\r\ndate: Tue, 24 Sep 2024 17:27:34 GMT\r\ncontent-length: 0\r\nlocation: https://imdn.pics/m/p/0/770/770824/P1r9hLS2.html?\u0026pricebox_price=0.0010\u0026OS_FAMILY=%5BOS_FAMILY%5D\u0026utm4=0-10346131-0\u0026ad_sub=71860570\u0026DOMAIN=3txxx.com\u0026id_zone=%5Bidzone%5D\u0026CAMPAIGN_ID=236776\u0026site=%7B%7B+site+%7D%7D\u0026__OS_FAMILY__=%7B%7B+__OS_FAMILY__+%7D%7D\u0026price=0.0020\u0026utm2=878669509-100\u0026MOBILE_BRAND=%5BMOBILE_BRAND%5D\u0026click_id=065399e7-1b84-4bc2-b47f-4985a71b194d\u0026COUNTRY_ISO_CODE=%5BCOUNTRY_ISO_CODE%5D\u0026BROWSER_FAMILY=%5BBROWSER_FAMILY%5D\u0026__BROWSER_FAMILY__=%7B%7B+__BROWSER_FAMILY__+%7D%7D\u0026priority=%5BPRIORITY%5D\u0026utm3=249-1353416-46616\u0026bidding_price=0.0020\u0026campaign_id=236776\u0026PRICING_MODEL=cpm\u0026__IP2L_MOBILE__=%7B%7B+__IP2L_MOBILE__+%7D%7D\u0026pricing_model=cpm\u0026OS_TYPE=%5BOS_TYPE%5D\u0026__GEOIP_COUNTRY_SHORT__=%7B%7B+__GEOIP_COUNTRY_SHORT__+%7D%7D\u0026out_name=236776%7C83954%7Ccpm%7C0.0020%7C%24+0.0020\u0026PRICE=0.0020\u0026__OS_TYPE__=%7B%7B+__OS_TYPE__+%7D%7D\u0026click_event_url=https%3A%2F%2Fbts.a11k.com%2Fin%2Ftclick%2F%3Fkatds_ep%3Dm29lFp3d0cnQAcd6VVcVIP3A6MGilhjH8HflMKzCXFIyhzKqeA0prc41DLW0Q1L6tmJ38KU5ikjVweoFDFUaps6cX6CLMbmiiOtCY5Xa9YQSSoPYcINkU3hIzecyWirmA_4X2379WVhwyqhwSU6xv-GmiZ9gF40rHwh-J3a3nA-GPAaPO6cEQH8OQpi3t49keatv5jdBat53n9UvDqSaLKUN7Ihrty630xpaue6wdZJGuT7nM_fItWF2SG2r-VGZxfPauKiD4XmSkD5titn25mnYUtTn5DeeT5-YQ_Gidiz1u1Uoz6HDWOiSQsx2smZNQAUxlv13gtab11TAKbn369vLapczQxKhPwKrzdQjOmjwR3cagatJwP2AZEb9W9xt6otbRMKAGKRrvCzOxpQBaPa5Ha_HthLlhTVdDH1LnE8vckpPE7CmIiWQKpz9CnBjDx2W5Rl2ItKfPvAJSCpVSkQPLrxuCz7hgH9pzr3h-BSFqBnZJQywE9qlDf-ct-_oBWBmoTxVyWUBvKMwgKbD8_XMKltb9qhG2a2ULVtYNuPFE8JpUijiid6wb562qJCDv2EDA9awXo_HzLP-wx-RxxHpsG4kgmzL6TryxmpSaall2EcS_RbafR70G8tEUdJS6ViLdJGBBkXEa_zmwRGRGqv7XQfOzwBzBC8leIvL4WmscOcxg544QwBXJ_8YPwXrOmIR3wVUitWwKXODcPrPjzEJyTt29f8ldIexDkkIUYHylr1hTH9uStM_2DHuQfth_t0knnmWNeId3C4S0pIK4yZJXZRLqrnHGbJdtJAx1E-G6sd-ljNpAmPbs_xkAGojjybHOoqvKT50lRZX6vs3mEP4c06X-aeMCP15O05J8_QktIN6d3Fw6mIFZWpl0QecIkDIv0B6toZb3KQTDL7D1Y4BYeyi10BrU1-WSqRUP1Z1VJpdfnACQOtTSw%26bid%3D%24%7BAUCTION_PRICE%7D\u0026utm1=tcb\r\npragma: no-cache\r\nvary: *\r\ncache-control: no-cache, no-store, must-revalidate\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imdn.pics/m/p/0/883/883207/conversions/0OErF2ya-in-page-ad-images.jpg","fqdn":"imdn.pics","domain":"imdn.pics","tld":"pics"},"ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:35.141Z","timestamp":1727198855141,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imdn.pics","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Sep 2024 03:02:53 GMT","end":"Sat, 07 Dec 2024 03:02:52 GMT"},"fingerprint":{"sha1":"2C:74:6D:B1:42:DE:4E:9B:FD:75:DC:69:84:15:B7:21:D9:13:A7:0D","sha256":"B1:3D:47:0F:4C:5D:8D:A2:53:37:C2:0C:BC:78:78:E5:EC:F4:06:CB:FB:A3:78:B5:BF:41:78:2A:2B:AC:C2:68"}}},"request":{"raw":"GET /m/p/0/883/883207/conversions/0OErF2ya-in-page-ad-images.jpg HTTP/1.1\r\nHost: imdn.pics\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:35 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5614\r\nserver: nginx\r\nlast-modified: Tue, 27 Aug 2024 06:56:18 GMT\r\netag: \"66cd7892-15ee\"\r\nx-request-id: ba8e33e3821218f5e3fe021d3d1fac04\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache, no-cache\r\nexpires: 0\r\nx-proxy-cache: MISS, HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5614,"size_decoded":5614,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 20\", baseline, precision 8, 360x240, components 3","md5":"49edcb1387f03075c9f1e3e5e25ff5a7","sha1":"299775f4f77915c558373858740cae04d40ddaf6","sha256":"912b34b348bb51e6ef8520a0410eba101754583caffb323b9c929cb29ba539d6","sha512":"8be856b7254ef0a647167ae2f494d8b0f85580097faeac1c144e0f85325b83812db563f7fef17204602ccd984e6a9bb06d3224929b4109185091f105d686f339","ssdeep":"96:vGE/J14DYI7mAVNcwNovYOxltPZ+EyUIkWLItPRD8gXw2i93J:uJUIrHcwwhxltPfyUI3MPN8Ow2sZ","tlshash":"b7c19fef4b478170bd26a3fb48d1701b26c8e0b53968da8d4312425ac1f7cd88a55d6e","first_seen":"2024-09-19T23:29:47Z","last_seen":"2024-12-29T23:46:54.536001Z","times_seen":286,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":96,"dns":29,"connect":19,"send":0,"wait":20,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btds.zog.link/in/912/?sid=1411045\u0026source=949889887\u0026idzone=0\u0026w=300\u0026h=100\u0026mo=\u0026ve=\u0026site_id=1411045\u0026utm1=\u0026utm2=\u0026utm3=\u0026utm4=\u0026ad_tags=upskirt%2Cvideos%2Cporn%2Cporn%2Cmovies%2Cfree%2Cporn%2Cfree%2Cporn%2Cmovies%2Csex%2Cporno%2Cfree%2Csex%2Ctube%2Cporn%2Ctube%2Cvideos%2Cfull%2Cporn%2Cxxnx%2Cxnxxx%2Cxxx%2Cpussy%2Cvideos%2Cupskirt%2Cxporn%2Cfirst%2Clive%2Csex%2Cporn%2Cvideos%2Cerotic%2Cporn%2Cfuck%2Cor%2Cxxx%2Cporno%2Cgood%2Cbrazzers%2Csex,\u0026spot_id=1411045\u0026p=https%3A%2F%2F3txxx.com%2Fvideo%2F10924%2Fsofia-rose-teaches-her-boy-a-lesson-with-her-pussy%2F\u0026katds_labels=\u0026btype=0\u0026score=1\u0026bf=0.0001\u0026dr=3txxx.com","fqdn":"btds.zog.link","domain":"zog.link","tld":"link"},"ip":{"addr":"109.206.191.198","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://rtbrenab.com/get/?go=1\u0026data=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","date":"2024-09-24T17:27:35.139Z","timestamp":1727198855139,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"btds.zog.link","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Aug 2024 08:20:41 GMT","end":"Wed, 06 Nov 2024 08:20:40 GMT"},"fingerprint":{"sha1":"B4:BB:71:D0:86:76:54:65:B2:76:8A:EB:66:C3:87:54:20:86:13:B8","sha256":"9E:E9:B7:9E:2C:B5:5D:7D:82:BA:0A:0B:44:1B:2B:65:27:73:FF:52:2D:F5:4D:B2:58:41:E8:50:CD:85:88:B1"}}},"request":{"raw":"GET /in/912/?sid=1411045\u0026source=949889887\u0026idzone=0\u0026w=300\u0026h=100\u0026mo=\u0026ve=\u0026site_id=1411045\u0026utm1=\u0026utm2=\u0026utm3=\u0026utm4=\u0026ad_tags=upskirt%2Cvideos%2Cporn%2Cporn%2Cmovies%2Cfree%2Cporn%2Cfree%2Cporn%2Cmovies%2Csex%2Cporno%2Cfree%2Csex%2Ctube%2Cporn%2Ctube%2Cvideos%2Cfull%2Cporn%2Cxxnx%2Cxnxxx%2Cxxx%2Cpussy%2Cvideos%2Cupskirt%2Cxporn%2Cfirst%2Clive%2Csex%2Cporn%2Cvideos%2Cerotic%2Cporn%2Cfuck%2Cor%2Cxxx%2Cporno%2Cgood%2Cbrazzers%2Csex,\u0026spot_id=1411045\u0026p=https%3A%2F%2F3txxx.com%2Fvideo%2F10924%2Fsofia-rose-teaches-her-boy-a-lesson-with-her-pussy%2F\u0026katds_labels=\u0026btype=0\u0026score=1\u0026bf=0.0001\u0026dr=3txxx.com HTTP/1.1\r\nHost: btds.zog.link\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rtbrenab.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.20.1\r\ndate: Tue, 24 Sep 2024 17:27:35 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nlocation: https://kaminari.systems/v1/click?kmnrKey=589074442\u0026sub1=1411045\u0026sub2=banner\u0026u=https%3A%2F%2Fbtds.zog.link%2Fin%2F1624%2F%3Fspot_id%3D299774%26ad_sub%3D949889887%26w%3D300%26h%3D100\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nvary: *\r\nset-cookie: 912.0=1; expires=Wed, 25 Sep 2024 17:27:35 GMT; path=/; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":97,"dns":29,"connect":21,"send":0,"wait":26,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p.a64x.com/in/tip_shows/?katds_ep=sIhONNLMWguC3FAKPXUAkmkEPKitNcHp9OkRJy4q9w4Wpy-uAmySLGOU_-2Q83PzqJMLP8vyMmNC3VPizepzlt7gRbwMCQcxp7FHzHQ-QvkP8AME31B9uVukraeppSKPUegALQFc-qdyuY1nIh1dMjHecbrF5oSDRpHFJop_5YQ1FyA2YJZRVludCZcMJR_cdmYb23WlMXaxElwOr-epEVFyr2N2iy7y6KFsneq0J5ukKfOF9fjFIh-GfrxgFaO1v3unlpdFfPrinMyV7aioFbd3GhjHcWzqNKDitQPv4GCrABbbJWnzmnCRmt6ywhxVPpOdq5sAsOZu2FwGv9rmw7aYENOZiu2mI0-gN1LWhpZUKnbFIsc-E_NwTKmVa7PF0R1yARIK6Q3Mg377PpWveQmdX6VmOgZroQZdhNt5DsTMkN8qYT240WDIFutIBXw0LPooVH4LZ9K2SVm664C82waPgpGa8aqsGbhOuhf_qUGkg_vYGVmNy_RL_-Tzvn9Q0uuDKqHc-kA_Znph6HB5kZXDjaQJEqnPdyHI5UBl_mTye-2sPm_ABagYR2fhmjM2cSkfsSucu3zOXtaBFiVCB--8Pk--n3DztdxE2UZcAkNeiPOTYQjPBu4H7mRnP_5vXfHHDi64A6NtJdEBcLp6cduw0R1viq0zCvZMY3gsgd9vXMt_epIceBNpt6uuzzSIy61Sn726jqOuD1qwl6Hs3veFh4oCKUBqOJe6YwSqHv3Ag8OIJFinu6e61SJy9k7xfLWLOSHvpVQ45ME35uKd9UQUUSyXRJn9_wKiH2rm9Pm7liCNGYYL0x2TtU35k8GB6QMdP50XklVp56RnwgND9pv00b8hbvl3b0KxFHvNFnywE-GkvQ3otbpGNyLcWzFs1prn8az0yojGb-Xwgsee-7wYavIk3P5WcAkjMbS7LJoPG3na61TPOHdModS5Zg\u0026bid=0.04056488549300498\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=default-view-b_r-body\u0026st=0.02\u0026cpa=dc6a6124-cf27-41a6-a020-d8147214c905\u0026prev_step_diff=640","fqdn":"p.a64x.com","domain":"a64x.com","tld":"com"},"ip":{"addr":"104.21.19.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:35.140Z","timestamp":1727198855140,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a64x.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Sep 2024 21:18:44 GMT","end":"Wed, 11 Dec 2024 21:18:43 GMT"},"fingerprint":{"sha1":"57:08:7B:5C:09:50:13:FF:E3:0F:CE:68:9B:39:3A:08:EA:A9:73:E6","sha256":"1B:CC:0C:7F:1A:7E:5A:C8:30:E1:C1:DA:31:0D:49:BE:1B:F6:8E:AF:AF:69:0B:73:61:DF:69:88:C7:83:8D:54"}}},"request":{"raw":"GET /in/tip_shows/?katds_ep=sIhONNLMWguC3FAKPXUAkmkEPKitNcHp9OkRJy4q9w4Wpy-uAmySLGOU_-2Q83PzqJMLP8vyMmNC3VPizepzlt7gRbwMCQcxp7FHzHQ-QvkP8AME31B9uVukraeppSKPUegALQFc-qdyuY1nIh1dMjHecbrF5oSDRpHFJop_5YQ1FyA2YJZRVludCZcMJR_cdmYb23WlMXaxElwOr-epEVFyr2N2iy7y6KFsneq0J5ukKfOF9fjFIh-GfrxgFaO1v3unlpdFfPrinMyV7aioFbd3GhjHcWzqNKDitQPv4GCrABbbJWnzmnCRmt6ywhxVPpOdq5sAsOZu2FwGv9rmw7aYENOZiu2mI0-gN1LWhpZUKnbFIsc-E_NwTKmVa7PF0R1yARIK6Q3Mg377PpWveQmdX6VmOgZroQZdhNt5DsTMkN8qYT240WDIFutIBXw0LPooVH4LZ9K2SVm664C82waPgpGa8aqsGbhOuhf_qUGkg_vYGVmNy_RL_-Tzvn9Q0uuDKqHc-kA_Znph6HB5kZXDjaQJEqnPdyHI5UBl_mTye-2sPm_ABagYR2fhmjM2cSkfsSucu3zOXtaBFiVCB--8Pk--n3DztdxE2UZcAkNeiPOTYQjPBu4H7mRnP_5vXfHHDi64A6NtJdEBcLp6cduw0R1viq0zCvZMY3gsgd9vXMt_epIceBNpt6uuzzSIy61Sn726jqOuD1qwl6Hs3veFh4oCKUBqOJe6YwSqHv3Ag8OIJFinu6e61SJy9k7xfLWLOSHvpVQ45ME35uKd9UQUUSyXRJn9_wKiH2rm9Pm7liCNGYYL0x2TtU35k8GB6QMdP50XklVp56RnwgND9pv00b8hbvl3b0KxFHvNFnywE-GkvQ3otbpGNyLcWzFs1prn8az0yojGb-Xwgsee-7wYavIk3P5WcAkjMbS7LJoPG3na61TPOHdModS5Zg\u0026bid=0.04056488549300498\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=default-view-b_r-body\u0026st=0.02\u0026cpa=dc6a6124-cf27-41a6-a020-d8147214c905\u0026prev_step_diff=640 HTTP/1.1\r\nHost: p.a64x.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 24 Sep 2024 17:27:35 GMT\r\ncontent-type: application/json\r\ncontent-length: 0\r\nlocation: https://imdn.pics/m/p/0/883/883208/conversions/M4Y7kv1Z-in-page-ad-icons.jpg\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=TwSWcZE78n0VRMjQrLjFqLmBkAOhTrTXwjn94zfPHzjEklcElemndIatKHrSUTDMJlJ%2B40D7ue3egDdw1P9AMI2Rs9bqIbJurKUSE5qyd8jzCoSny60yH6f87nUw\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c6d4e946577-AMS\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":95,"dns":43,"connect":20,"send":0,"wait":35,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imdn.pics/m/p/0/883/883208/conversions/M4Y7kv1Z-in-page-ad-icons.jpg","fqdn":"imdn.pics","domain":"imdn.pics","tld":"pics"},"ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:35.301Z","timestamp":1727198855301,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imdn.pics","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Sep 2024 03:02:53 GMT","end":"Sat, 07 Dec 2024 03:02:52 GMT"},"fingerprint":{"sha1":"2C:74:6D:B1:42:DE:4E:9B:FD:75:DC:69:84:15:B7:21:D9:13:A7:0D","sha256":"B1:3D:47:0F:4C:5D:8D:A2:53:37:C2:0C:BC:78:78:E5:EC:F4:06:CB:FB:A3:78:B5:BF:41:78:2A:2B:AC:C2:68"}}},"request":{"raw":"GET /m/p/0/883/883208/conversions/M4Y7kv1Z-in-page-ad-icons.jpg HTTP/1.1\r\nHost: imdn.pics\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:35 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1681\r\nserver: nginx\r\nlast-modified: Tue, 27 Aug 2024 06:56:14 GMT\r\netag: \"66cd788e-691\"\r\nx-request-id: c59dcd8e8ed68008e60741db0eed9407\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache, no-cache\r\nexpires: 0\r\nx-proxy-cache: MISS, HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1681,"size_decoded":1681,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 20\", baseline, precision 8, 100x100, components 3","md5":"6ce48d48d7798585f330c367851312c8","sha1":"27e36324113480d6ad69ea0b6be5230987a3eefc","sha256":"3abd3bcb6f6074a158ed763d91471a96a4204361f534f0465117b82735f7e4ed","sha512":"e6fb5418b3cc38c5a90913b0c09a806e8ef7332757eceabf7d46c161121156a0f943cdc682f14a135fa7275965270189fa1672a8c5913eacb41a10ce0c461363","ssdeep":"","tlshash":"5731e8bfa712c3e0ac1e45aac81421e7039d1dd579201b853fa1a3b29af358c985de85","first_seen":"2024-09-19T23:29:47Z","last_seen":"2024-12-29T23:46:54.538133Z","times_seen":287,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:35.397388637Z","timestamp":1727198855397,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"AF344FB29552712018EE4D2240E039A2A4A16E92A2E06B667ED3D9CAEF408BE6\"\r\nLast-Modified: Mon, 23 Sep 2024 21:12:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=3786\r\nExpires: Tue, 24 Sep 2024 18:30:41 GMT\r\nDate: Tue, 24 Sep 2024 17:27:35 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"acf8686356cfc5b60c76d731b80db898","sha1":"f3cb609783a4b0b3db9828e428a695022fafe80a","sha256":"af344fb29552712018ee4d2240e039a2a4a16e92a2e06b667ed3d9caef408be6","sha512":"47d1d301ee83939f2717691cdf4601a1af2d7f61e712330d4ad403e6ce0095c5d3a3a156f5cd8ddb5e6cb8a325a796531f1b94bd4da7d635fbf6414550b636ad","ssdeep":"","tlshash":"30f0055631a5fc45dbf052112e59f3342f3139e478410cf1644482d17e02bec454d18d","first_seen":"2024-09-28T07:59:48.622865Z","last_seen":"2024-09-28T07:59:48.622865Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtbrenab.com/banner/in/view/?mid=5367201542977405044\u0026pid=0\u0026site=1411044\u0026sc=NO\u0026usage_type=DCH\u0026subid=347141763\u0026sid=0\u0026cid=12774\u0026price=0\u0026is_cpm=1\u0026cpm=0.0014378333091735833\u0026ecpm=0.0014378333091735833\u0026crid=\u0026crtid=d41d8cd98f00b204e9800998ecf8427e\u0026tcid=0\u0026out_id=\u0026ver=\u0026ver_c=\u0026refdom=3txxx.com\u0026hostname=auc-banner-hz-9\u0026site_id=0\u0026spot_id=1411044\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026expiration_timestamp=0\u0026created_at=0000-00-00\u0026is_native=6\u0026burl=\u0026pop_winurl=\u0026ip=91.90.42.154\u0026testab=\u0026px_id=1411044\u0026adblock=0\u0026auction_host=\u0026mm=\u0026yc=\u0026render_type=\u0026campaign_type=\u0026uniq=\u0026exp=0\u0026resp_type=iframeAd\u0026iabcat=IAB25\u0026min_cpm=0.00011591515205782852\u0026placement_type_id=9\u0026skin_test=\u0026verify_hash=\u0026score=1\u0026durl=\u0026ml=\u0026tag_ab=b\u0026original_bid=0.002\u0026user_fp=0\u0026v2=0\u0026ttl=\u0026space_id=1496\u0026banner_width=300\u0026banner_height=250\u0026accel=0\u0026gyr=0\u0026iabcat=IAB25\u0026user_fp=0\u0026url=\u0026pr=\u0026bid_crid=\u0026bid_cid=\u0026is_iframe=0\u0026ad_tags=upskirt%2Cvideos%2Cporn%2Cporn%2Cmovies%2Cfree%2Cporn%2Cfree%2Cporn%2Cmovies%2Csex%2Cporno%2Cfree%2Csex%2Ctube%2Cporn%2Ctube%2Cvideos%2Cfull%2Cporn%2Cxxnx%2Cxnxxx%2Cxxx%2Cpussy%2Cvideos%2Cupskirt%2Cxporn%2Cfirst%2Clive%2Csex%2Cporn%2Cvideos%2Cerotic%2Cporn%2Cfuck%2Cor%2Cxxx%2Cporno%2Cgood%2Cbrazzers%2Csex,\u0026stratagem=\u0026ssp=4042\u0026stime=1727198854\u0026refresh=1\u0026label_ids=39\u0026ip_mismatch=false\u0026site_id64=1411044\u0026container=ClickadillaTuple\u0026original_bid_usd=0.0014378333091735833\u0026topics=\u0026o_d=d3d3LmVyb3RpY3Bvcm5zLmNvbQ==\u0026ectr=7.852606574594855e-05\u0026ext_campaign_id=236776\u0026auction_time=1727198854\u0026account_id=2022","fqdn":"rtbrenab.com","domain":"rtbrenab.com","tld":"com"},"ip":{"addr":"116.202.60.226","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:35.411Z","timestamp":1727198855411,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rtbbnr.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Jun 2024 02:03:01 GMT","end":"Sat, 28 Sep 2024 02:03:00 GMT"},"fingerprint":{"sha1":"DC:D1:3A:99:18:53:59:04:68:CF:CA:F4:F7:48:72:8E:28:21:8C:3D","sha256":"F3:70:6D:0B:F3:E6:40:8C:DD:0A:92:A2:BC:ED:F2:A2:6F:9E:03:4A:1E:37:7E:1F:58:9A:F4:DF:81:05:39:60"}}},"request":{"raw":"GET /banner/in/view/?mid=5367201542977405044\u0026pid=0\u0026site=1411044\u0026sc=NO\u0026usage_type=DCH\u0026subid=347141763\u0026sid=0\u0026cid=12774\u0026price=0\u0026is_cpm=1\u0026cpm=0.0014378333091735833\u0026ecpm=0.0014378333091735833\u0026crid=\u0026crtid=d41d8cd98f00b204e9800998ecf8427e\u0026tcid=0\u0026out_id=\u0026ver=\u0026ver_c=\u0026refdom=3txxx.com\u0026hostname=auc-banner-hz-9\u0026site_id=0\u0026spot_id=1411044\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026expiration_timestamp=0\u0026created_at=0000-00-00\u0026is_native=6\u0026burl=\u0026pop_winurl=\u0026ip=91.90.42.154\u0026testab=\u0026px_id=1411044\u0026adblock=0\u0026auction_host=\u0026mm=\u0026yc=\u0026render_type=\u0026campaign_type=\u0026uniq=\u0026exp=0\u0026resp_type=iframeAd\u0026iabcat=IAB25\u0026min_cpm=0.00011591515205782852\u0026placement_type_id=9\u0026skin_test=\u0026verify_hash=\u0026score=1\u0026durl=\u0026ml=\u0026tag_ab=b\u0026original_bid=0.002\u0026user_fp=0\u0026v2=0\u0026ttl=\u0026space_id=1496\u0026banner_width=300\u0026banner_height=250\u0026accel=0\u0026gyr=0\u0026iabcat=IAB25\u0026user_fp=0\u0026url=\u0026pr=\u0026bid_crid=\u0026bid_cid=\u0026is_iframe=0\u0026ad_tags=upskirt%2Cvideos%2Cporn%2Cporn%2Cmovies%2Cfree%2Cporn%2Cfree%2Cporn%2Cmovies%2Csex%2Cporno%2Cfree%2Csex%2Ctube%2Cporn%2Ctube%2Cvideos%2Cfull%2Cporn%2Cxxnx%2Cxnxxx%2Cxxx%2Cpussy%2Cvideos%2Cupskirt%2Cxporn%2Cfirst%2Clive%2Csex%2Cporn%2Cvideos%2Cerotic%2Cporn%2Cfuck%2Cor%2Cxxx%2Cporno%2Cgood%2Cbrazzers%2Csex,\u0026stratagem=\u0026ssp=4042\u0026stime=1727198854\u0026refresh=1\u0026label_ids=39\u0026ip_mismatch=false\u0026site_id64=1411044\u0026container=ClickadillaTuple\u0026original_bid_usd=0.0014378333091735833\u0026topics=\u0026o_d=d3d3LmVyb3RpY3Bvcm5zLmNvbQ==\u0026ectr=7.852606574594855e-05\u0026ext_campaign_id=236776\u0026auction_time=1727198854\u0026account_id=2022 HTTP/1.1\r\nHost: rtbrenab.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.eroticporns.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 24 Sep 2024 17:27:35 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtbrenab.com/banner/in/view/?mid=6131601993338874099\u0026pid=0\u0026site=1411042\u0026sc=NO\u0026usage_type=DCH\u0026subid=268147922\u0026sid=0\u0026cid=12774\u0026price=0\u0026is_cpm=1\u0026cpm=0.0014378333091735833\u0026ecpm=0.0014378333091735833\u0026crid=\u0026crtid=d41d8cd98f00b204e9800998ecf8427e\u0026tcid=0\u0026out_id=\u0026ver=\u0026ver_c=\u0026refdom=3txxx.com\u0026hostname=auc-banner-hz-19\u0026site_id=0\u0026spot_id=1411042\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026expiration_timestamp=0\u0026created_at=0000-00-00\u0026is_native=6\u0026burl=\u0026pop_winurl=\u0026ip=91.90.42.154\u0026testab=\u0026px_id=1411042\u0026adblock=0\u0026auction_host=\u0026mm=\u0026yc=\u0026render_type=\u0026campaign_type=\u0026uniq=\u0026exp=0\u0026resp_type=iframeAd\u0026iabcat=IAB25\u0026min_cpm=0.00011591515205782852\u0026placement_type_id=9\u0026skin_test=\u0026verify_hash=\u0026score=1\u0026durl=\u0026ml=\u0026tag_ab=b\u0026original_bid=0.002\u0026user_fp=0\u0026v2=0\u0026ttl=\u0026space_id=1496\u0026banner_width=300\u0026banner_height=250\u0026accel=0\u0026gyr=0\u0026iabcat=IAB25\u0026user_fp=0\u0026url=\u0026pr=\u0026bid_crid=\u0026bid_cid=\u0026is_iframe=0\u0026ad_tags=upskirt%2Cvideos%2Cporn%2Cporn%2Cmovies%2Cfree%2Cporn%2Cfree%2Cporn%2Cmovies%2Csex%2Cporno%2Cfree%2Csex%2Ctube%2Cporn%2Ctube%2Cvideos%2Cfull%2Cporn%2Cxxnx%2Cxnxxx%2Cxxx%2Cpussy%2Cvideos%2Cupskirt%2Cxporn%2Cfirst%2Clive%2Csex%2Cporn%2Cvideos%2Cerotic%2Cporn%2Cfuck%2Cor%2Cxxx%2Cporno%2Cgood%2Cbrazzers%2Csex,\u0026stratagem=\u0026ssp=4042\u0026stime=1727198854\u0026refresh=1\u0026label_ids=39\u0026ip_mismatch=false\u0026site_id64=1411042\u0026container=ClickadillaTuple\u0026original_bid_usd=0.0014378333091735833\u0026topics=\u0026o_d=d3d3LmVyb3RpY3Bvcm5zLmNvbQ==\u0026ectr=0.004753732726609542\u0026ext_campaign_id=236776\u0026auction_time=1727198854\u0026account_id=2022","fqdn":"rtbrenab.com","domain":"rtbrenab.com","tld":"com"},"ip":{"addr":"116.202.60.226","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:35.407Z","timestamp":1727198855407,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rtbbnr.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Jun 2024 02:03:01 GMT","end":"Sat, 28 Sep 2024 02:03:00 GMT"},"fingerprint":{"sha1":"DC:D1:3A:99:18:53:59:04:68:CF:CA:F4:F7:48:72:8E:28:21:8C:3D","sha256":"F3:70:6D:0B:F3:E6:40:8C:DD:0A:92:A2:BC:ED:F2:A2:6F:9E:03:4A:1E:37:7E:1F:58:9A:F4:DF:81:05:39:60"}}},"request":{"raw":"GET /banner/in/view/?mid=6131601993338874099\u0026pid=0\u0026site=1411042\u0026sc=NO\u0026usage_type=DCH\u0026subid=268147922\u0026sid=0\u0026cid=12774\u0026price=0\u0026is_cpm=1\u0026cpm=0.0014378333091735833\u0026ecpm=0.0014378333091735833\u0026crid=\u0026crtid=d41d8cd98f00b204e9800998ecf8427e\u0026tcid=0\u0026out_id=\u0026ver=\u0026ver_c=\u0026refdom=3txxx.com\u0026hostname=auc-banner-hz-19\u0026site_id=0\u0026spot_id=1411042\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026expiration_timestamp=0\u0026created_at=0000-00-00\u0026is_native=6\u0026burl=\u0026pop_winurl=\u0026ip=91.90.42.154\u0026testab=\u0026px_id=1411042\u0026adblock=0\u0026auction_host=\u0026mm=\u0026yc=\u0026render_type=\u0026campaign_type=\u0026uniq=\u0026exp=0\u0026resp_type=iframeAd\u0026iabcat=IAB25\u0026min_cpm=0.00011591515205782852\u0026placement_type_id=9\u0026skin_test=\u0026verify_hash=\u0026score=1\u0026durl=\u0026ml=\u0026tag_ab=b\u0026original_bid=0.002\u0026user_fp=0\u0026v2=0\u0026ttl=\u0026space_id=1496\u0026banner_width=300\u0026banner_height=250\u0026accel=0\u0026gyr=0\u0026iabcat=IAB25\u0026user_fp=0\u0026url=\u0026pr=\u0026bid_crid=\u0026bid_cid=\u0026is_iframe=0\u0026ad_tags=upskirt%2Cvideos%2Cporn%2Cporn%2Cmovies%2Cfree%2Cporn%2Cfree%2Cporn%2Cmovies%2Csex%2Cporno%2Cfree%2Csex%2Ctube%2Cporn%2Ctube%2Cvideos%2Cfull%2Cporn%2Cxxnx%2Cxnxxx%2Cxxx%2Cpussy%2Cvideos%2Cupskirt%2Cxporn%2Cfirst%2Clive%2Csex%2Cporn%2Cvideos%2Cerotic%2Cporn%2Cfuck%2Cor%2Cxxx%2Cporno%2Cgood%2Cbrazzers%2Csex,\u0026stratagem=\u0026ssp=4042\u0026stime=1727198854\u0026refresh=1\u0026label_ids=39\u0026ip_mismatch=false\u0026site_id64=1411042\u0026container=ClickadillaTuple\u0026original_bid_usd=0.0014378333091735833\u0026topics=\u0026o_d=d3d3LmVyb3RpY3Bvcm5zLmNvbQ==\u0026ectr=0.004753732726609542\u0026ext_campaign_id=236776\u0026auction_time=1727198854\u0026account_id=2022 HTTP/1.1\r\nHost: rtbrenab.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.eroticporns.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 24 Sep 2024 17:27:35 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaminari.systems/v1/click?kmnrKey=589074442\u0026sub1=1411045\u0026sub2=banner\u0026u=https%3A%2F%2Fbtds.zog.link%2Fin%2F1624%2F%3Fspot_id%3D299774%26ad_sub%3D949889887%26w%3D300%26h%3D100","fqdn":"kaminari.systems","domain":"kaminari.systems","tld":"systems"},"ip":{"addr":"31.220.27.154","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://rtbrenab.com/get/?go=1\u0026data=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","date":"2024-09-24T17:27:35.297Z","timestamp":1727198855297,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kaminari.systems","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Aug 2024 23:08:05 GMT","end":"Sun, 17 Nov 2024 23:08:04 GMT"},"fingerprint":{"sha1":"D6:13:D2:BE:87:F0:C2:D7:40:F6:80:A0:6E:67:7A:2A:B1:55:EE:68","sha256":"2C:25:F7:6A:29:A7:B2:C7:EF:67:6B:CA:68:38:D7:E1:7A:0E:96:43:B1:15:3F:68:4A:72:54:0F:55:AC:3B:5A"}}},"request":{"raw":"GET /v1/click?kmnrKey=589074442\u0026sub1=1411045\u0026sub2=banner\u0026u=https%3A%2F%2Fbtds.zog.link%2Fin%2F1624%2F%3Fspot_id%3D299774%26ad_sub%3D949889887%26w%3D300%26h%3D100 HTTP/1.1\r\nHost: kaminari.systems\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rtbrenab.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.19.10\r\ndate: Tue, 24 Sep 2024 17:27:35 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 50644\r\naccept-ch: Width, Viewport-Width, DPR, Device-Memory, Downlink, RTT, ECT, Save-Data, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version\r\naccess-control-allow-headers: X-Requested-With, Cache-Control, Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50644,"size_decoded":50644,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (30487), with CRLF line terminators","md5":"e239d4450767b24fef32767edb36f630","sha1":"def2e6c66e4da0f4d7c6b92fe77fa7c19a1b63da","sha256":"a4fd9fe02b622a84b54cb2381cc4aad7a802b9672d270c71ea1ec77ff4be9fd3","sha512":"6046d4e8b49ff5d8493594530cba2b906ca559dd5185df6efd3a4486d3688713229fb4023a21de03db392fdd7c2dbaa0ee1963020740cf7e2594fcb77124c60d","ssdeep":"768:qYLCnCAyuPqYcTfAiWNT/mTMZfzQssnSVZxnSqbYneQM7kAmSdHpv1uSh5VtPe:qdPqYMfk/mu2S5nStnN8dHvb5VA","tlshash":"8c33f99d76a2a02591bb516e403f7605f23d1a7ad4049480f56ec8c03fb9f8b6227efd","first_seen":"2024-09-28T07:59:48.624583Z","last_seen":"2024-09-28T07:59:48.624583Z","times_seen":1,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":108,"dns":36,"connect":18,"send":0,"wait":67,"receive":18,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:35.738071264Z","timestamp":1727198855738,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"66CA2956C533A1BA5557AA9ED654D6E0B31D443599BDA8EA20287F0695D678C0\"\r\nLast-Modified: Sun, 22 Sep 2024 19:26:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=7035\r\nExpires: Tue, 24 Sep 2024 19:24:50 GMT\r\nDate: Tue, 24 Sep 2024 17:27:35 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"0b3f6c131cbe8192971e63170a427a2a","sha1":"29c599a47cdbb06f4da171038ea64c08aa0b1e20","sha256":"66ca2956c533a1ba5557aa9ed654d6e0b31d443599bda8ea20287f0695d678c0","sha512":"06d53eae975db110d031d257e5d45d067713b778c73d362b8a3a3fc0fc1f7baa4d2abff4b4ac6025ecfa821848bcee08a5aa2d13858f52c8b650b4ca639ea466","ssdeep":"","tlshash":"3bf054a60eecb405db2c1a6a9d4cd415dd31bc8e30007ae34a5842f23d4efe9cf4414e","first_seen":"2024-09-23T11:48:59Z","last_seen":"2024-09-28T08:19:05.983997Z","times_seen":3,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imdn.pics/scripts/security.mix.js","fqdn":"imdn.pics","domain":"imdn.pics","tld":"pics"},"ip":{"addr":"45.133.44.25","port":0,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:35.739144587Z","timestamp":1727198855739,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imdn.pics","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Sep 2024 03:02:53 GMT","end":"Sat, 07 Dec 2024 03:02:52 GMT"},"fingerprint":{"sha1":"2C:74:6D:B1:42:DE:4E:9B:FD:75:DC:69:84:15:B7:21:D9:13:A7:0D","sha256":"B1:3D:47:0F:4C:5D:8D:A2:53:37:C2:0C:BC:78:78:E5:EC:F4:06:CB:FB:A3:78:B5:BF:41:78:2A:2B:AC:C2:68"}}},"request":{"raw":"GET /scripts/security.mix.js HTTP/1.1\r\nHost: imdn.pics\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://imdn.pics/m/p/0/770/770823/embed/test_1_simple_html5_valid/simple/HTML5_InPage_Clicktags_300x250.html?click_event_url=https%3A%2F%2Fbts.a11k.com%2Fin%2Ftclick%2F%3Fkatds_ep%3DGdxUfEKfQdIbyN4pPn33PRoSsf_ui7NMJJha3h2v7XoD0wwHf-NY39Vno8vJrRWiDDyKWFBw63rsjOC_L7b3WTNnCkdRvMyRmoFBGYmpllnlxe9SIK6ikFtBFz0TLaYdp_sfUOsDQ_edMPCX2XO8dQaPME0wBiIIGy6HqHF197ib73l7TSmoZ_6F7uqmhHO6BaNvLdxefOvJalx1iglO2WeFXfs_80XtW6ju5Hw92gMutzChMCo4FLnQLza8oFas2RRrDSJNG0jnNt5LmJoaJPA3xra5msxHWUNBId2p-iA56D73PLRJq-MElsZz7X6te_Na3aGAD8mpWz70fh8UdV6klm3tWu-5z73U3g-EFQRMvWWwO0WFtyc5dT5_pYhXcQaPbZyiw9vhmKG8nvJDjKzk3wxpTFHPoGfRs-Y3E-d3NtGFN3Dxj8Dt5-xnUxRw6X1ab1R-n_Mk02dSNN6L1iSyu1RHdIFhU0hu936-O7QE9uxtPTj9JQ-3Rzk1KdW3ZVodbGfPqxWSIkBEvZp_sfdci96gIvrHGKXch98CKFQZMC7mQqPZds5FUXMXhHYQsbO_GhwuJzXn8b54kROnKxhumftUVpq5YluHF3TLcLt37sg7WRmgJfqj3F1C39jUuzQirKvuRZCf6nyIpXlZ7KM_YQFvf3xrTqC1zPJW-_KMNpYQlBzEWUfkSny_U5chT47Fz_m_bcNnpyFwHTKSIVesHYhYab0-46F1xayPWLJFQ7MENRh0wqvM1QToE5xaTaHBU9R65lbfSai5A20mWXqx1ET4h8SMMP57joW9IqB9hB_HNTa4NjDi5MQIwYYjpf-V631pKVK_XM0QZlKV4arCCKw5KlONTdC42wa984FeAGXlNyJnWttPq_CEeSfSvUMbU5FrV1dFGjDQgPr_703ylpPuj7Y7-Rr4XMpxG-HBGgmYiU_E4YBHsA%26bid%3D%24%7BAUCTION_PRICE%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 22 Sep 2023 10:01:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"650d6613-8c\"\r\nx-request-id: cb7a371c05ae571923137cf54cf1fcb9\r\ncontent-encoding: gzip\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache, no-cache\r\nexpires: 0\r\nx-proxy-cache: REVALIDATED, HIT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":598,"size_decoded":598,"mime_type":"application/x-gzip","magic":"gzip compressed data, from Unix","md5":"19efe646ef1f299b53a97c5cfa244350","sha1":"fe86652327ba573c4769669caa3408e897e888c2","sha256":"d524f0cf697a4e8e1d1709814df7f4e257fa45aa1e4c4f4fa9121b4a50150dfb","sha512":"64270c1940ce78c3c3cdc8638a2ad96522899754c2d10455b6d47287610c4e5a7eaf626f77790bb15901a621d5f9d569b665d95d14c30d48b3e49e48672fd033","ssdeep":"","tlshash":"3ff041aa0addb411eb1c1a79981ac805dc357c89700079e34a4842f3ba4afe88f8410d","first_seen":"2024-09-28T07:59:48.628034Z","last_seen":"2024-09-28T07:59:48.628034Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"in16.zog.link/in/show/?=undefined\u0026campaign_id=236776\u0026utm1=tcb\u0026__GEOIP_COUNTRY_SHORT__=%7B%7B%2B__GEOIP_COUNTRY_SHORT__%2B%7D%7D\u0026DOMAIN=3txxx.com\u0026__IP2L_MOBILE__=%7B%7B%2B__IP2L_MOBILE__%2B%7D%7D\u0026BROWSER_FAMILY=%5BBROWSER_FAMILY%5D\u0026ad_sub=71860570\u0026__BROWSER_FAMILY__=%7B%7B%2B__BROWSER_FAMILY__%2B%7D%7D\u0026CAMPAIGN_ID=236776\u0026PRICING_MODEL=cpm\u0026PRICE=0.0020\u0026OS_TYPE=%5BOS_TYPE%5D\u0026priority=%5BPRIORITY%5D\u0026pricing_model=cpm\u0026utm4=0-10346131-0\u0026click_event_url=https%3A%2F%2Fbts.a11k.com%2Fin%2Ftclick%2F%3Fkatds_ep%3DGdxUfEKfQdIbyN4pPn33PRoSsf_ui7NMJJha3h2v7XoD0wwHf-NY39Vno8vJrRWiDDyKWFBw63rsjOC_L7b3WTNnCkdRvMyRmoFBGYmpllnlxe9SIK6ikFtBFz0TLaYdp_sfUOsDQ_edMPCX2XO8dQaPME0wBiIIGy6HqHF197ib73l7TSmoZ_6F7uqmhHO6BaNvLdxefOvJalx1iglO2WeFXfs_80XtW6ju5Hw92gMutzChMCo4FLnQLza8oFas2RRrDSJNG0jnNt5LmJoaJPA3xra5msxHWUNBId2p-iA56D73PLRJq-MElsZz7X6te_Na3aGAD8mpWz70fh8UdV6klm3tWu-5z73U3g-EFQRMvWWwO0WFtyc5dT5_pYhXcQaPbZyiw9vhmKG8nvJDjKzk3wxpTFHPoGfRs-Y3E-d3NtGFN3Dxj8Dt5-xnUxRw6X1ab1R-n_Mk02dSNN6L1iSyu1RHdIFhU0hu936-O7QE9uxtPTj9JQ-3Rzk1KdW3ZVodbGfPqxWSIkBEvZp_sfdci96gIvrHGKXch98CKFQZMC7mQqPZds5FUXMXhHYQsbO_GhwuJzXn8b54kROnKxhumftUVpq5YluHF3TLcLt37sg7WRmgJfqj3F1C39jUuzQirKvuRZCf6nyIpXlZ7KM_YQFvf3xrTqC1zPJW-_KMNpYQlBzEWUfkSny_U5chT47Fz_m_bcNnpyFwHTKSIVesHYhYab0-46F1xayPWLJFQ7MENRh0wqvM1QToE5xaTaHBU9R65lbfSai5A20mWXqx1ET4h8SMMP57joW9IqB9hB_HNTa4NjDi5MQIwYYjpf-V631pKVK_XM0QZlKV4arCCKw5KlONTdC42wa984FeAGXlNyJnWttPq_CEeSfSvUMbU5FrV1dFGjDQgPr_703ylpPuj7Y7-Rr4XMpxG-HBGgmYiU_E4YBHsA%26bid%3D%24%7BAUCTION_PRICE%7D\u0026MOBILE_BRAND=%5BMOBILE_BRAND%5D\u0026out_name=236776%7C83954%7Ccpm%7C0.0020%7C%24%2B0.0020\u0026__OS_TYPE__=%7B%7B%2B__OS_TYPE__%2B%7D%7D\u0026pricebox_price=0.0010\u0026__OS_FAMILY__=%7B%7B%2B__OS_FAMILY__%2B%7D%7D\u0026utm3=249-1353416-46616\u0026id_zone=%5Bidzone%5D\u0026COUNTRY_ISO_CODE=%5BCOUNTRY_ISO_CODE%5D\u0026price=0.0020\u0026click_id=30a4de03-108d-45ef-8397-bdcff162a5e3\u0026OS_FAMILY=%5BOS_FAMILY%5D\u0026utm2=878669509-100\u0026bidding_price=0.0020\u0026site=%7B%7B%2Bsite%2B%7D%7D\u0026banner_id=19541\u0026banner_creative_id=49181","fqdn":"in16.zog.link","domain":"zog.link","tld":"link"},"ip":{"addr":"109.206.175.85","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://imdn.pics/m/p/0/770/770824/P1r9hLS2.html?\u0026campaign_id=236776\u0026utm1=tcb\u0026__GEOIP_COUNTRY_SHORT__=%7B%7B+__GEOIP_COUNTRY_SHORT__+%7D%7D\u0026DOMAIN=3txxx.com\u0026__IP2L_MOBILE__=%7B%7B+__IP2L_MOBILE__+%7D%7D\u0026BROWSER_FAMILY=%5BBROWSER_FAMILY%5D\u0026ad_sub=71860570\u0026__BROWSER_FAMILY__=%7B%7B+__BROWSER_FAMILY__+%7D%7D\u0026CAMPAIGN_ID=236776\u0026PRICING_MODEL=cpm\u0026PRICE=0.0020\u0026OS_TYPE=%5BOS_TYPE%5D\u0026priority=%5BPRIORITY%5D\u0026pricing_model=cpm\u0026utm4=0-10346131-0\u0026click_event_url=https%3A%2F%2Fbts.a11k.com%2Fin%2Ftclick%2F%3Fkatds_ep%3DGdxUfEKfQdIbyN4pPn33PRoSsf_ui7NMJJha3h2v7XoD0wwHf-NY39Vno8vJrRWiDDyKWFBw63rsjOC_L7b3WTNnCkdRvMyRmoFBGYmpllnlxe9SIK6ikFtBFz0TLaYdp_sfUOsDQ_edMPCX2XO8dQaPME0wBiIIGy6HqHF197ib73l7TSmoZ_6F7uqmhHO6BaNvLdxefOvJalx1iglO2WeFXfs_80XtW6ju5Hw92gMutzChMCo4FLnQLza8oFas2RRrDSJNG0jnNt5LmJoaJPA3xra5msxHWUNBId2p-iA56D73PLRJq-MElsZz7X6te_Na3aGAD8mpWz70fh8UdV6klm3tWu-5z73U3g-EFQRMvWWwO0WFtyc5dT5_pYhXcQaPbZyiw9vhmKG8nvJDjKzk3wxpTFHPoGfRs-Y3E-d3NtGFN3Dxj8Dt5-xnUxRw6X1ab1R-n_Mk02dSNN6L1iSyu1RHdIFhU0hu936-O7QE9uxtPTj9JQ-3Rzk1KdW3ZVodbGfPqxWSIkBEvZp_sfdci96gIvrHGKXch98CKFQZMC7mQqPZds5FUXMXhHYQsbO_GhwuJzXn8b54kROnKxhumftUVpq5YluHF3TLcLt37sg7WRmgJfqj3F1C39jUuzQirKvuRZCf6nyIpXlZ7KM_YQFvf3xrTqC1zPJW-_KMNpYQlBzEWUfkSny_U5chT47Fz_m_bcNnpyFwHTKSIVesHYhYab0-46F1xayPWLJFQ7MENRh0wqvM1QToE5xaTaHBU9R65lbfSai5A20mWXqx1ET4h8SMMP57joW9IqB9hB_HNTa4NjDi5MQIwYYjpf-V631pKVK_XM0QZlKV4arCCKw5KlONTdC42wa984FeAGXlNyJnWttPq_CEeSfSvUMbU5FrV1dFGjDQgPr_703ylpPuj7Y7-Rr4XMpxG-HBGgmYiU_E4YBHsA%26bid%3D%24%7BAUCTION_PRICE%7D\u0026MOBILE_BRAND=%5BMOBILE_BRAND%5D\u0026out_name=236776%7C83954%7Ccpm%7C0.0020%7C%24+0.0020\u0026__OS_TYPE__=%7B%7B+__OS_TYPE__+%7D%7D\u0026pricebox_price=0.0010\u0026__OS_FAMILY__=%7B%7B+__OS_FAMILY__+%7D%7D\u0026utm3=249-1353416-46616\u0026id_zone=%5Bidzone%5D\u0026COUNTRY_ISO_CODE=%5BCOUNTRY_ISO_CODE%5D\u0026price=0.0020\u0026click_id=30a4de03-108d-45ef-8397-bdcff162a5e3\u0026OS_FAMILY=%5BOS_FAMILY%5D\u0026utm2=878669509-100\u0026bidding_price=0.0020\u0026site=%7B%7B+site+%7D%7D","date":"2024-09-24T17:27:35.590Z","timestamp":1727198855590,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"in16.zog.link","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Aug 2024 02:21:06 GMT","end":"Fri, 08 Nov 2024 02:21:05 GMT"},"fingerprint":{"sha1":"A3:E2:E5:A1:5F:DD:C3:D6:86:26:F6:65:8E:47:83:17:38:67:5D:08","sha256":"BF:E2:E0:59:06:97:DA:52:C1:77:5E:FE:D6:8F:BE:8D:38:B9:2E:56:8F:F1:4A:25:B5:B0:D4:63:B9:6E:F4:CB"}}},"request":{"raw":"GET /in/show/?=undefined\u0026campaign_id=236776\u0026utm1=tcb\u0026__GEOIP_COUNTRY_SHORT__=%7B%7B%2B__GEOIP_COUNTRY_SHORT__%2B%7D%7D\u0026DOMAIN=3txxx.com\u0026__IP2L_MOBILE__=%7B%7B%2B__IP2L_MOBILE__%2B%7D%7D\u0026BROWSER_FAMILY=%5BBROWSER_FAMILY%5D\u0026ad_sub=71860570\u0026__BROWSER_FAMILY__=%7B%7B%2B__BROWSER_FAMILY__%2B%7D%7D\u0026CAMPAIGN_ID=236776\u0026PRICING_MODEL=cpm\u0026PRICE=0.0020\u0026OS_TYPE=%5BOS_TYPE%5D\u0026priority=%5BPRIORITY%5D\u0026pricing_model=cpm\u0026utm4=0-10346131-0\u0026click_event_url=https%3A%2F%2Fbts.a11k.com%2Fin%2Ftclick%2F%3Fkatds_ep%3DGdxUfEKfQdIbyN4pPn33PRoSsf_ui7NMJJha3h2v7XoD0wwHf-NY39Vno8vJrRWiDDyKWFBw63rsjOC_L7b3WTNnCkdRvMyRmoFBGYmpllnlxe9SIK6ikFtBFz0TLaYdp_sfUOsDQ_edMPCX2XO8dQaPME0wBiIIGy6HqHF197ib73l7TSmoZ_6F7uqmhHO6BaNvLdxefOvJalx1iglO2WeFXfs_80XtW6ju5Hw92gMutzChMCo4FLnQLza8oFas2RRrDSJNG0jnNt5LmJoaJPA3xra5msxHWUNBId2p-iA56D73PLRJq-MElsZz7X6te_Na3aGAD8mpWz70fh8UdV6klm3tWu-5z73U3g-EFQRMvWWwO0WFtyc5dT5_pYhXcQaPbZyiw9vhmKG8nvJDjKzk3wxpTFHPoGfRs-Y3E-d3NtGFN3Dxj8Dt5-xnUxRw6X1ab1R-n_Mk02dSNN6L1iSyu1RHdIFhU0hu936-O7QE9uxtPTj9JQ-3Rzk1KdW3ZVodbGfPqxWSIkBEvZp_sfdci96gIvrHGKXch98CKFQZMC7mQqPZds5FUXMXhHYQsbO_GhwuJzXn8b54kROnKxhumftUVpq5YluHF3TLcLt37sg7WRmgJfqj3F1C39jUuzQirKvuRZCf6nyIpXlZ7KM_YQFvf3xrTqC1zPJW-_KMNpYQlBzEWUfkSny_U5chT47Fz_m_bcNnpyFwHTKSIVesHYhYab0-46F1xayPWLJFQ7MENRh0wqvM1QToE5xaTaHBU9R65lbfSai5A20mWXqx1ET4h8SMMP57joW9IqB9hB_HNTa4NjDi5MQIwYYjpf-V631pKVK_XM0QZlKV4arCCKw5KlONTdC42wa984FeAGXlNyJnWttPq_CEeSfSvUMbU5FrV1dFGjDQgPr_703ylpPuj7Y7-Rr4XMpxG-HBGgmYiU_E4YBHsA%26bid%3D%24%7BAUCTION_PRICE%7D\u0026MOBILE_BRAND=%5BMOBILE_BRAND%5D\u0026out_name=236776%7C83954%7Ccpm%7C0.0020%7C%24%2B0.0020\u0026__OS_TYPE__=%7B%7B%2B__OS_TYPE__%2B%7D%7D\u0026pricebox_price=0.0010\u0026__OS_FAMILY__=%7B%7B%2B__OS_FAMILY__%2B%7D%7D\u0026utm3=249-1353416-46616\u0026id_zone=%5Bidzone%5D\u0026COUNTRY_ISO_CODE=%5BCOUNTRY_ISO_CODE%5D\u0026price=0.0020\u0026click_id=30a4de03-108d-45ef-8397-bdcff162a5e3\u0026OS_FAMILY=%5BOS_FAMILY%5D\u0026utm2=878669509-100\u0026bidding_price=0.0020\u0026site=%7B%7B%2Bsite%2B%7D%7D\u0026banner_id=19541\u0026banner_creative_id=49181 HTTP/1.1\r\nHost: in16.zog.link\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://imdn.pics\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://imdn.pics/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Tue, 24 Sep 2024 17:27:35 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":2,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-04T23:42:30.317644Z","times_seen":555071,"resource_available":true,"data":null}},"time_used":389,"timings":{"blocked":161,"dns":38,"connect":33,"send":0,"wait":53,"receive":1,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:35.80791944Z","timestamp":1727198855807,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"371E62FA817FE95E8E66E69E025271DF58C949049839365C5CC6B02A148A937B\"\r\nLast-Modified: Mon, 23 Sep 2024 11:11:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=14533\r\nExpires: Tue, 24 Sep 2024 21:29:48 GMT\r\nDate: Tue, 24 Sep 2024 17:27:35 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"dd6d6b87844c1df293685fb4123b7ded","sha1":"c0b790caa2cdde3a9c810682eff46f1b81aba4f3","sha256":"371e62fa817fe95e8e66e69e025271df58c949049839365c5cc6b02a148a937b","sha512":"6f6451be6bbced6e6c2879a58273f3a88585cfddf5fd64f5ebd9dc51d81ac9104388db645d3520a3334828124c0846c094c8f953af79547b58e655e2376381f8","ssdeep":"","tlshash":"0ff005ae16d5bd05c7f05d1b4871f10d7d355dece4001bf951c046d3b102fd6d590018","first_seen":"2024-09-28T07:59:48.629656Z","last_seen":"2024-09-28T07:59:48.629656Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"in16.zog.link/in/show/?=undefined\u0026pricebox_price=0.0010\u0026OS_FAMILY=%5BOS_FAMILY%5D\u0026utm4=0-10346131-0\u0026ad_sub=71860570\u0026DOMAIN=3txxx.com\u0026id_zone=%5Bidzone%5D\u0026CAMPAIGN_ID=236776\u0026site=%7B%7B%2Bsite%2B%7D%7D\u0026__OS_FAMILY__=%7B%7B%2B__OS_FAMILY__%2B%7D%7D\u0026price=0.0020\u0026utm2=878669509-100\u0026MOBILE_BRAND=%5BMOBILE_BRAND%5D\u0026click_id=065399e7-1b84-4bc2-b47f-4985a71b194d\u0026COUNTRY_ISO_CODE=%5BCOUNTRY_ISO_CODE%5D\u0026BROWSER_FAMILY=%5BBROWSER_FAMILY%5D\u0026__BROWSER_FAMILY__=%7B%7B%2B__BROWSER_FAMILY__%2B%7D%7D\u0026priority=%5BPRIORITY%5D\u0026utm3=249-1353416-46616\u0026bidding_price=0.0020\u0026campaign_id=236776\u0026PRICING_MODEL=cpm\u0026__IP2L_MOBILE__=%7B%7B%2B__IP2L_MOBILE__%2B%7D%7D\u0026pricing_model=cpm\u0026OS_TYPE=%5BOS_TYPE%5D\u0026__GEOIP_COUNTRY_SHORT__=%7B%7B%2B__GEOIP_COUNTRY_SHORT__%2B%7D%7D\u0026out_name=236776%7C83954%7Ccpm%7C0.0020%7C%24%2B0.0020\u0026PRICE=0.0020\u0026__OS_TYPE__=%7B%7B%2B__OS_TYPE__%2B%7D%7D\u0026click_event_url=https%3A%2F%2Fbts.a11k.com%2Fin%2Ftclick%2F%3Fkatds_ep%3Dm29lFp3d0cnQAcd6VVcVIP3A6MGilhjH8HflMKzCXFIyhzKqeA0prc41DLW0Q1L6tmJ38KU5ikjVweoFDFUaps6cX6CLMbmiiOtCY5Xa9YQSSoPYcINkU3hIzecyWirmA_4X2379WVhwyqhwSU6xv-GmiZ9gF40rHwh-J3a3nA-GPAaPO6cEQH8OQpi3t49keatv5jdBat53n9UvDqSaLKUN7Ihrty630xpaue6wdZJGuT7nM_fItWF2SG2r-VGZxfPauKiD4XmSkD5titn25mnYUtTn5DeeT5-YQ_Gidiz1u1Uoz6HDWOiSQsx2smZNQAUxlv13gtab11TAKbn369vLapczQxKhPwKrzdQjOmjwR3cagatJwP2AZEb9W9xt6otbRMKAGKRrvCzOxpQBaPa5Ha_HthLlhTVdDH1LnE8vckpPE7CmIiWQKpz9CnBjDx2W5Rl2ItKfPvAJSCpVSkQPLrxuCz7hgH9pzr3h-BSFqBnZJQywE9qlDf-ct-_oBWBmoTxVyWUBvKMwgKbD8_XMKltb9qhG2a2ULVtYNuPFE8JpUijiid6wb562qJCDv2EDA9awXo_HzLP-wx-RxxHpsG4kgmzL6TryxmpSaall2EcS_RbafR70G8tEUdJS6ViLdJGBBkXEa_zmwRGRGqv7XQfOzwBzBC8leIvL4WmscOcxg544QwBXJ_8YPwXrOmIR3wVUitWwKXODcPrPjzEJyTt29f8ldIexDkkIUYHylr1hTH9uStM_2DHuQfth_t0knnmWNeId3C4S0pIK4yZJXZRLqrnHGbJdtJAx1E-G6sd-ljNpAmPbs_xkAGojjybHOoqvKT50lRZX6vs3mEP4c06X-aeMCP15O05J8_QktIN6d3Fw6mIFZWpl0QecIkDIv0B6toZb3KQTDL7D1Y4BYeyi10BrU1-WSqRUP1Z1VJpdfnACQOtTSw%26bid%3D%24%7BAUCTION_PRICE%7D\u0026utm1=tcb\u0026banner_id=19541\u0026banner_creative_id=49181","fqdn":"in16.zog.link","domain":"zog.link","tld":"link"},"ip":{"addr":"109.206.175.85","port":443,"asn":50245,"as":"Serverel Inc.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://imdn.pics/m/p/0/770/770824/P1r9hLS2.html?\u0026pricebox_price=0.0010\u0026OS_FAMILY=%5BOS_FAMILY%5D\u0026utm4=0-10346131-0\u0026ad_sub=71860570\u0026DOMAIN=3txxx.com\u0026id_zone=%5Bidzone%5D\u0026CAMPAIGN_ID=236776\u0026site=%7B%7B+site+%7D%7D\u0026__OS_FAMILY__=%7B%7B+__OS_FAMILY__+%7D%7D\u0026price=0.0020\u0026utm2=878669509-100\u0026MOBILE_BRAND=%5BMOBILE_BRAND%5D\u0026click_id=065399e7-1b84-4bc2-b47f-4985a71b194d\u0026COUNTRY_ISO_CODE=%5BCOUNTRY_ISO_CODE%5D\u0026BROWSER_FAMILY=%5BBROWSER_FAMILY%5D\u0026__BROWSER_FAMILY__=%7B%7B+__BROWSER_FAMILY__+%7D%7D\u0026priority=%5BPRIORITY%5D\u0026utm3=249-1353416-46616\u0026bidding_price=0.0020\u0026campaign_id=236776\u0026PRICING_MODEL=cpm\u0026__IP2L_MOBILE__=%7B%7B+__IP2L_MOBILE__+%7D%7D\u0026pricing_model=cpm\u0026OS_TYPE=%5BOS_TYPE%5D\u0026__GEOIP_COUNTRY_SHORT__=%7B%7B+__GEOIP_COUNTRY_SHORT__+%7D%7D\u0026out_name=236776%7C83954%7Ccpm%7C0.0020%7C%24+0.0020\u0026PRICE=0.0020\u0026__OS_TYPE__=%7B%7B+__OS_TYPE__+%7D%7D\u0026click_event_url=https%3A%2F%2Fbts.a11k.com%2Fin%2Ftclick%2F%3Fkatds_ep%3Dm29lFp3d0cnQAcd6VVcVIP3A6MGilhjH8HflMKzCXFIyhzKqeA0prc41DLW0Q1L6tmJ38KU5ikjVweoFDFUaps6cX6CLMbmiiOtCY5Xa9YQSSoPYcINkU3hIzecyWirmA_4X2379WVhwyqhwSU6xv-GmiZ9gF40rHwh-J3a3nA-GPAaPO6cEQH8OQpi3t49keatv5jdBat53n9UvDqSaLKUN7Ihrty630xpaue6wdZJGuT7nM_fItWF2SG2r-VGZxfPauKiD4XmSkD5titn25mnYUtTn5DeeT5-YQ_Gidiz1u1Uoz6HDWOiSQsx2smZNQAUxlv13gtab11TAKbn369vLapczQxKhPwKrzdQjOmjwR3cagatJwP2AZEb9W9xt6otbRMKAGKRrvCzOxpQBaPa5Ha_HthLlhTVdDH1LnE8vckpPE7CmIiWQKpz9CnBjDx2W5Rl2ItKfPvAJSCpVSkQPLrxuCz7hgH9pzr3h-BSFqBnZJQywE9qlDf-ct-_oBWBmoTxVyWUBvKMwgKbD8_XMKltb9qhG2a2ULVtYNuPFE8JpUijiid6wb562qJCDv2EDA9awXo_HzLP-wx-RxxHpsG4kgmzL6TryxmpSaall2EcS_RbafR70G8tEUdJS6ViLdJGBBkXEa_zmwRGRGqv7XQfOzwBzBC8leIvL4WmscOcxg544QwBXJ_8YPwXrOmIR3wVUitWwKXODcPrPjzEJyTt29f8ldIexDkkIUYHylr1hTH9uStM_2DHuQfth_t0knnmWNeId3C4S0pIK4yZJXZRLqrnHGbJdtJAx1E-G6sd-ljNpAmPbs_xkAGojjybHOoqvKT50lRZX6vs3mEP4c06X-aeMCP15O05J8_QktIN6d3Fw6mIFZWpl0QecIkDIv0B6toZb3KQTDL7D1Y4BYeyi10BrU1-WSqRUP1Z1VJpdfnACQOtTSw%26bid%3D%24%7BAUCTION_PRICE%7D\u0026utm1=tcb","date":"2024-09-24T17:27:35.588Z","timestamp":1727198855588,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"in16.zog.link","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Aug 2024 02:21:06 GMT","end":"Fri, 08 Nov 2024 02:21:05 GMT"},"fingerprint":{"sha1":"A3:E2:E5:A1:5F:DD:C3:D6:86:26:F6:65:8E:47:83:17:38:67:5D:08","sha256":"BF:E2:E0:59:06:97:DA:52:C1:77:5E:FE:D6:8F:BE:8D:38:B9:2E:56:8F:F1:4A:25:B5:B0:D4:63:B9:6E:F4:CB"}}},"request":{"raw":"GET /in/show/?=undefined\u0026pricebox_price=0.0010\u0026OS_FAMILY=%5BOS_FAMILY%5D\u0026utm4=0-10346131-0\u0026ad_sub=71860570\u0026DOMAIN=3txxx.com\u0026id_zone=%5Bidzone%5D\u0026CAMPAIGN_ID=236776\u0026site=%7B%7B%2Bsite%2B%7D%7D\u0026__OS_FAMILY__=%7B%7B%2B__OS_FAMILY__%2B%7D%7D\u0026price=0.0020\u0026utm2=878669509-100\u0026MOBILE_BRAND=%5BMOBILE_BRAND%5D\u0026click_id=065399e7-1b84-4bc2-b47f-4985a71b194d\u0026COUNTRY_ISO_CODE=%5BCOUNTRY_ISO_CODE%5D\u0026BROWSER_FAMILY=%5BBROWSER_FAMILY%5D\u0026__BROWSER_FAMILY__=%7B%7B%2B__BROWSER_FAMILY__%2B%7D%7D\u0026priority=%5BPRIORITY%5D\u0026utm3=249-1353416-46616\u0026bidding_price=0.0020\u0026campaign_id=236776\u0026PRICING_MODEL=cpm\u0026__IP2L_MOBILE__=%7B%7B%2B__IP2L_MOBILE__%2B%7D%7D\u0026pricing_model=cpm\u0026OS_TYPE=%5BOS_TYPE%5D\u0026__GEOIP_COUNTRY_SHORT__=%7B%7B%2B__GEOIP_COUNTRY_SHORT__%2B%7D%7D\u0026out_name=236776%7C83954%7Ccpm%7C0.0020%7C%24%2B0.0020\u0026PRICE=0.0020\u0026__OS_TYPE__=%7B%7B%2B__OS_TYPE__%2B%7D%7D\u0026click_event_url=https%3A%2F%2Fbts.a11k.com%2Fin%2Ftclick%2F%3Fkatds_ep%3Dm29lFp3d0cnQAcd6VVcVIP3A6MGilhjH8HflMKzCXFIyhzKqeA0prc41DLW0Q1L6tmJ38KU5ikjVweoFDFUaps6cX6CLMbmiiOtCY5Xa9YQSSoPYcINkU3hIzecyWirmA_4X2379WVhwyqhwSU6xv-GmiZ9gF40rHwh-J3a3nA-GPAaPO6cEQH8OQpi3t49keatv5jdBat53n9UvDqSaLKUN7Ihrty630xpaue6wdZJGuT7nM_fItWF2SG2r-VGZxfPauKiD4XmSkD5titn25mnYUtTn5DeeT5-YQ_Gidiz1u1Uoz6HDWOiSQsx2smZNQAUxlv13gtab11TAKbn369vLapczQxKhPwKrzdQjOmjwR3cagatJwP2AZEb9W9xt6otbRMKAGKRrvCzOxpQBaPa5Ha_HthLlhTVdDH1LnE8vckpPE7CmIiWQKpz9CnBjDx2W5Rl2ItKfPvAJSCpVSkQPLrxuCz7hgH9pzr3h-BSFqBnZJQywE9qlDf-ct-_oBWBmoTxVyWUBvKMwgKbD8_XMKltb9qhG2a2ULVtYNuPFE8JpUijiid6wb562qJCDv2EDA9awXo_HzLP-wx-RxxHpsG4kgmzL6TryxmpSaall2EcS_RbafR70G8tEUdJS6ViLdJGBBkXEa_zmwRGRGqv7XQfOzwBzBC8leIvL4WmscOcxg544QwBXJ_8YPwXrOmIR3wVUitWwKXODcPrPjzEJyTt29f8ldIexDkkIUYHylr1hTH9uStM_2DHuQfth_t0knnmWNeId3C4S0pIK4yZJXZRLqrnHGbJdtJAx1E-G6sd-ljNpAmPbs_xkAGojjybHOoqvKT50lRZX6vs3mEP4c06X-aeMCP15O05J8_QktIN6d3Fw6mIFZWpl0QecIkDIv0B6toZb3KQTDL7D1Y4BYeyi10BrU1-WSqRUP1Z1VJpdfnACQOtTSw%26bid%3D%24%7BAUCTION_PRICE%7D\u0026utm1=tcb\u0026banner_id=19541\u0026banner_creative_id=49181 HTTP/1.1\r\nHost: in16.zog.link\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://imdn.pics\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://imdn.pics/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Tue, 24 Sep 2024 17:27:35 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":2,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-04T23:42:30.317644Z","times_seen":555071,"resource_available":true,"data":null}},"time_used":382,"timings":{"blocked":156,"dns":31,"connect":32,"send":0,"wait":67,"receive":0,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:35.833152139Z","timestamp":1727198855833,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"371E62FA817FE95E8E66E69E025271DF58C949049839365C5CC6B02A148A937B\"\r\nLast-Modified: Mon, 23 Sep 2024 11:11:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=14572\r\nExpires: Tue, 24 Sep 2024 21:30:27 GMT\r\nDate: Tue, 24 Sep 2024 17:27:35 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"dd6d6b87844c1df293685fb4123b7ded","sha1":"c0b790caa2cdde3a9c810682eff46f1b81aba4f3","sha256":"371e62fa817fe95e8e66e69e025271df58c949049839365c5cc6b02a148a937b","sha512":"6f6451be6bbced6e6c2879a58273f3a88585cfddf5fd64f5ebd9dc51d81ac9104388db645d3520a3334828124c0846c094c8f953af79547b58e655e2376381f8","ssdeep":"","tlshash":"0ff005ae16d5bd05c7f05d1b4871f10d7d355dece4001bf951c046d3b102fd6d590018","first_seen":"2024-09-28T07:59:48.629656Z","last_seen":"2024-09-28T07:59:48.629656Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w7.eurosptp.com/page.php?fr\u0026countrycode=coutry","fqdn":"w7.eurosptp.com","domain":"eurosptp.com","tld":"com"},"ip":{"addr":"213.186.33.19","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://imdn.pics/m/p/0/770/770824/P1r9hLS2.html?\u0026pricebox_price=0.0010\u0026OS_FAMILY=%5BOS_FAMILY%5D\u0026utm4=0-10346131-0\u0026ad_sub=71860570\u0026DOMAIN=3txxx.com\u0026id_zone=%5Bidzone%5D\u0026CAMPAIGN_ID=236776\u0026site=%7B%7B+site+%7D%7D\u0026__OS_FAMILY__=%7B%7B+__OS_FAMILY__+%7D%7D\u0026price=0.0020\u0026utm2=878669509-100\u0026MOBILE_BRAND=%5BMOBILE_BRAND%5D\u0026click_id=065399e7-1b84-4bc2-b47f-4985a71b194d\u0026COUNTRY_ISO_CODE=%5BCOUNTRY_ISO_CODE%5D\u0026BROWSER_FAMILY=%5BBROWSER_FAMILY%5D\u0026__BROWSER_FAMILY__=%7B%7B+__BROWSER_FAMILY__+%7D%7D\u0026priority=%5BPRIORITY%5D\u0026utm3=249-1353416-46616\u0026bidding_price=0.0020\u0026campaign_id=236776\u0026PRICING_MODEL=cpm\u0026__IP2L_MOBILE__=%7B%7B+__IP2L_MOBILE__+%7D%7D\u0026pricing_model=cpm\u0026OS_TYPE=%5BOS_TYPE%5D\u0026__GEOIP_COUNTRY_SHORT__=%7B%7B+__GEOIP_COUNTRY_SHORT__+%7D%7D\u0026out_name=236776%7C83954%7Ccpm%7C0.0020%7C%24+0.0020\u0026PRICE=0.0020\u0026__OS_TYPE__=%7B%7B+__OS_TYPE__+%7D%7D\u0026click_event_url=https%3A%2F%2Fbts.a11k.com%2Fin%2Ftclick%2F%3Fkatds_ep%3Dm29lFp3d0cnQAcd6VVcVIP3A6MGilhjH8HflMKzCXFIyhzKqeA0prc41DLW0Q1L6tmJ38KU5ikjVweoFDFUaps6cX6CLMbmiiOtCY5Xa9YQSSoPYcINkU3hIzecyWirmA_4X2379WVhwyqhwSU6xv-GmiZ9gF40rHwh-J3a3nA-GPAaPO6cEQH8OQpi3t49keatv5jdBat53n9UvDqSaLKUN7Ihrty630xpaue6wdZJGuT7nM_fItWF2SG2r-VGZxfPauKiD4XmSkD5titn25mnYUtTn5DeeT5-YQ_Gidiz1u1Uoz6HDWOiSQsx2smZNQAUxlv13gtab11TAKbn369vLapczQxKhPwKrzdQjOmjwR3cagatJwP2AZEb9W9xt6otbRMKAGKRrvCzOxpQBaPa5Ha_HthLlhTVdDH1LnE8vckpPE7CmIiWQKpz9CnBjDx2W5Rl2ItKfPvAJSCpVSkQPLrxuCz7hgH9pzr3h-BSFqBnZJQywE9qlDf-ct-_oBWBmoTxVyWUBvKMwgKbD8_XMKltb9qhG2a2ULVtYNuPFE8JpUijiid6wb562qJCDv2EDA9awXo_HzLP-wx-RxxHpsG4kgmzL6TryxmpSaall2EcS_RbafR70G8tEUdJS6ViLdJGBBkXEa_zmwRGRGqv7XQfOzwBzBC8leIvL4WmscOcxg544QwBXJ_8YPwXrOmIR3wVUitWwKXODcPrPjzEJyTt29f8ldIexDkkIUYHylr1hTH9uStM_2DHuQfth_t0knnmWNeId3C4S0pIK4yZJXZRLqrnHGbJdtJAx1E-G6sd-ljNpAmPbs_xkAGojjybHOoqvKT50lRZX6vs3mEP4c06X-aeMCP15O05J8_QktIN6d3Fw6mIFZWpl0QecIkDIv0B6toZb3KQTDL7D1Y4BYeyi10BrU1-WSqRUP1Z1VJpdfnACQOtTSw%26bid%3D%24%7BAUCTION_PRICE%7D\u0026utm1=tcb","date":"2024-09-24T17:27:35.896Z","timestamp":1727198855896,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eurosptp.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Sep 2024 08:50:48 GMT","end":"Thu, 12 Dec 2024 08:50:47 GMT"},"fingerprint":{"sha1":"93:5B:66:32:E3:14:CF:DD:5D:B0:60:7F:E7:31:9D:3E:03:62:82:77","sha256":"A3:04:43:A2:17:41:6F:F4:6F:CF:3F:32:21:0B:C0:46:C7:A7:B6:D7:B0:EB:54:4D:AF:7E:EC:AB:C4:F5:59:29"}}},"request":{"raw":"GET /page.php?fr\u0026countrycode=coutry HTTP/1.1\r\nHost: w7.eurosptp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\nserver: nginx\r\ndate: Tue, 24 Sep 2024 17:27:35 GMT\r\ncontent-type: text/html\r\ncontent-length: 164\r\nlocation: https://w7.eurosptp.com/page.php?__r=1.58586bb9937d1db2db20f399fdaf1add\u0026fr\u0026countrycode=coutry\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":164,"size_decoded":164,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"813f9846b49c0ada805648edf1b2fdbd","sha1":"caa24890460f73e6a72bb49426351e67e83b053d","sha256":"8f03491247cbfa8a2e60e0f7ec62d63b5070659f60383a1c81abeb2b20221be3","sha512":"8cedd2d9e11e7eca0c65b5c3723e234625d7048f9390904def48c382ba6564c0a2437e0e179435558986861f031296d4f83c2bc6876c48a36becb071bde76f50","ssdeep":"","tlshash":"28c04c65b5932d8888e3763914c3e194f1bea565059c961821405bd37acb242abc2353","first_seen":"2023-04-05T14:23:53Z","last_seen":"2025-03-01T11:52:46.822568Z","times_seen":1094,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w7.eurosptp.com/page.php?fr\u0026countrycode=coutry","fqdn":"w7.eurosptp.com","domain":"eurosptp.com","tld":"com"},"ip":{"addr":"213.186.33.19","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://imdn.pics/m/p/0/770/770824/P1r9hLS2.html?\u0026pricebox_price=0.0010\u0026OS_FAMILY=%5BOS_FAMILY%5D\u0026utm4=0-10346131-0\u0026ad_sub=71860570\u0026DOMAIN=3txxx.com\u0026id_zone=%5Bidzone%5D\u0026CAMPAIGN_ID=236776\u0026site=%7B%7B+site+%7D%7D\u0026__OS_FAMILY__=%7B%7B+__OS_FAMILY__+%7D%7D\u0026price=0.0020\u0026utm2=878669509-100\u0026MOBILE_BRAND=%5BMOBILE_BRAND%5D\u0026click_id=065399e7-1b84-4bc2-b47f-4985a71b194d\u0026COUNTRY_ISO_CODE=%5BCOUNTRY_ISO_CODE%5D\u0026BROWSER_FAMILY=%5BBROWSER_FAMILY%5D\u0026__BROWSER_FAMILY__=%7B%7B+__BROWSER_FAMILY__+%7D%7D\u0026priority=%5BPRIORITY%5D\u0026utm3=249-1353416-46616\u0026bidding_price=0.0020\u0026campaign_id=236776\u0026PRICING_MODEL=cpm\u0026__IP2L_MOBILE__=%7B%7B+__IP2L_MOBILE__+%7D%7D\u0026pricing_model=cpm\u0026OS_TYPE=%5BOS_TYPE%5D\u0026__GEOIP_COUNTRY_SHORT__=%7B%7B+__GEOIP_COUNTRY_SHORT__+%7D%7D\u0026out_name=236776%7C83954%7Ccpm%7C0.0020%7C%24+0.0020\u0026PRICE=0.0020\u0026__OS_TYPE__=%7B%7B+__OS_TYPE__+%7D%7D\u0026click_event_url=https%3A%2F%2Fbts.a11k.com%2Fin%2Ftclick%2F%3Fkatds_ep%3Dm29lFp3d0cnQAcd6VVcVIP3A6MGilhjH8HflMKzCXFIyhzKqeA0prc41DLW0Q1L6tmJ38KU5ikjVweoFDFUaps6cX6CLMbmiiOtCY5Xa9YQSSoPYcINkU3hIzecyWirmA_4X2379WVhwyqhwSU6xv-GmiZ9gF40rHwh-J3a3nA-GPAaPO6cEQH8OQpi3t49keatv5jdBat53n9UvDqSaLKUN7Ihrty630xpaue6wdZJGuT7nM_fItWF2SG2r-VGZxfPauKiD4XmSkD5titn25mnYUtTn5DeeT5-YQ_Gidiz1u1Uoz6HDWOiSQsx2smZNQAUxlv13gtab11TAKbn369vLapczQxKhPwKrzdQjOmjwR3cagatJwP2AZEb9W9xt6otbRMKAGKRrvCzOxpQBaPa5Ha_HthLlhTVdDH1LnE8vckpPE7CmIiWQKpz9CnBjDx2W5Rl2ItKfPvAJSCpVSkQPLrxuCz7hgH9pzr3h-BSFqBnZJQywE9qlDf-ct-_oBWBmoTxVyWUBvKMwgKbD8_XMKltb9qhG2a2ULVtYNuPFE8JpUijiid6wb562qJCDv2EDA9awXo_HzLP-wx-RxxHpsG4kgmzL6TryxmpSaall2EcS_RbafR70G8tEUdJS6ViLdJGBBkXEa_zmwRGRGqv7XQfOzwBzBC8leIvL4WmscOcxg544QwBXJ_8YPwXrOmIR3wVUitWwKXODcPrPjzEJyTt29f8ldIexDkkIUYHylr1hTH9uStM_2DHuQfth_t0knnmWNeId3C4S0pIK4yZJXZRLqrnHGbJdtJAx1E-G6sd-ljNpAmPbs_xkAGojjybHOoqvKT50lRZX6vs3mEP4c06X-aeMCP15O05J8_QktIN6d3Fw6mIFZWpl0QecIkDIv0B6toZb3KQTDL7D1Y4BYeyi10BrU1-WSqRUP1Z1VJpdfnACQOtTSw%26bid%3D%24%7BAUCTION_PRICE%7D\u0026utm1=tcb","date":"2024-09-24T17:27:35.896Z","timestamp":1727198855896,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eurosptp.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Sep 2024 08:50:48 GMT","end":"Thu, 12 Dec 2024 08:50:47 GMT"},"fingerprint":{"sha1":"93:5B:66:32:E3:14:CF:DD:5D:B0:60:7F:E7:31:9D:3E:03:62:82:77","sha256":"A3:04:43:A2:17:41:6F:F4:6F:CF:3F:32:21:0B:C0:46:C7:A7:B6:D7:B0:EB:54:4D:AF:7E:EC:AB:C4:F5:59:29"}}},"request":{"raw":"GET /page.php?fr\u0026countrycode=coutry HTTP/1.1\r\nHost: w7.eurosptp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\nserver: nginx\r\ndate: Tue, 24 Sep 2024 17:27:35 GMT\r\ncontent-type: text/html\r\ncontent-length: 164\r\nlocation: https://w7.eurosptp.com/page.php?__r=1.58586bb9937d1db2db20f399fdaf1add\u0026fr\u0026countrycode=coutry\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":164,"size_decoded":164,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"813f9846b49c0ada805648edf1b2fdbd","sha1":"caa24890460f73e6a72bb49426351e67e83b053d","sha256":"8f03491247cbfa8a2e60e0f7ec62d63b5070659f60383a1c81abeb2b20221be3","sha512":"8cedd2d9e11e7eca0c65b5c3723e234625d7048f9390904def48c382ba6564c0a2437e0e179435558986861f031296d4f83c2bc6876c48a36becb071bde76f50","ssdeep":"","tlshash":"28c04c65b5932d8888e3763914c3e194f1bea565059c961821405bd37acb242abc2353","first_seen":"2023-04-05T14:23:53Z","last_seen":"2025-03-01T11:52:46.822568Z","times_seen":1094,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w7.eurosptp.com/page.php?__r=1.58586bb9937d1db2db20f399fdaf1add\u0026fr\u0026countrycode=coutry","fqdn":"w7.eurosptp.com","domain":"eurosptp.com","tld":"com"},"ip":{"addr":"213.186.33.19","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://imdn.pics/m/p/0/770/770824/P1r9hLS2.html?\u0026pricebox_price=0.0010\u0026OS_FAMILY=%5BOS_FAMILY%5D\u0026utm4=0-10346131-0\u0026ad_sub=71860570\u0026DOMAIN=3txxx.com\u0026id_zone=%5Bidzone%5D\u0026CAMPAIGN_ID=236776\u0026site=%7B%7B+site+%7D%7D\u0026__OS_FAMILY__=%7B%7B+__OS_FAMILY__+%7D%7D\u0026price=0.0020\u0026utm2=878669509-100\u0026MOBILE_BRAND=%5BMOBILE_BRAND%5D\u0026click_id=065399e7-1b84-4bc2-b47f-4985a71b194d\u0026COUNTRY_ISO_CODE=%5BCOUNTRY_ISO_CODE%5D\u0026BROWSER_FAMILY=%5BBROWSER_FAMILY%5D\u0026__BROWSER_FAMILY__=%7B%7B+__BROWSER_FAMILY__+%7D%7D\u0026priority=%5BPRIORITY%5D\u0026utm3=249-1353416-46616\u0026bidding_price=0.0020\u0026campaign_id=236776\u0026PRICING_MODEL=cpm\u0026__IP2L_MOBILE__=%7B%7B+__IP2L_MOBILE__+%7D%7D\u0026pricing_model=cpm\u0026OS_TYPE=%5BOS_TYPE%5D\u0026__GEOIP_COUNTRY_SHORT__=%7B%7B+__GEOIP_COUNTRY_SHORT__+%7D%7D\u0026out_name=236776%7C83954%7Ccpm%7C0.0020%7C%24+0.0020\u0026PRICE=0.0020\u0026__OS_TYPE__=%7B%7B+__OS_TYPE__+%7D%7D\u0026click_event_url=https%3A%2F%2Fbts.a11k.com%2Fin%2Ftclick%2F%3Fkatds_ep%3Dm29lFp3d0cnQAcd6VVcVIP3A6MGilhjH8HflMKzCXFIyhzKqeA0prc41DLW0Q1L6tmJ38KU5ikjVweoFDFUaps6cX6CLMbmiiOtCY5Xa9YQSSoPYcINkU3hIzecyWirmA_4X2379WVhwyqhwSU6xv-GmiZ9gF40rHwh-J3a3nA-GPAaPO6cEQH8OQpi3t49keatv5jdBat53n9UvDqSaLKUN7Ihrty630xpaue6wdZJGuT7nM_fItWF2SG2r-VGZxfPauKiD4XmSkD5titn25mnYUtTn5DeeT5-YQ_Gidiz1u1Uoz6HDWOiSQsx2smZNQAUxlv13gtab11TAKbn369vLapczQxKhPwKrzdQjOmjwR3cagatJwP2AZEb9W9xt6otbRMKAGKRrvCzOxpQBaPa5Ha_HthLlhTVdDH1LnE8vckpPE7CmIiWQKpz9CnBjDx2W5Rl2ItKfPvAJSCpVSkQPLrxuCz7hgH9pzr3h-BSFqBnZJQywE9qlDf-ct-_oBWBmoTxVyWUBvKMwgKbD8_XMKltb9qhG2a2ULVtYNuPFE8JpUijiid6wb562qJCDv2EDA9awXo_HzLP-wx-RxxHpsG4kgmzL6TryxmpSaall2EcS_RbafR70G8tEUdJS6ViLdJGBBkXEa_zmwRGRGqv7XQfOzwBzBC8leIvL4WmscOcxg544QwBXJ_8YPwXrOmIR3wVUitWwKXODcPrPjzEJyTt29f8ldIexDkkIUYHylr1hTH9uStM_2DHuQfth_t0knnmWNeId3C4S0pIK4yZJXZRLqrnHGbJdtJAx1E-G6sd-ljNpAmPbs_xkAGojjybHOoqvKT50lRZX6vs3mEP4c06X-aeMCP15O05J8_QktIN6d3Fw6mIFZWpl0QecIkDIv0B6toZb3KQTDL7D1Y4BYeyi10BrU1-WSqRUP1Z1VJpdfnACQOtTSw%26bid%3D%24%7BAUCTION_PRICE%7D\u0026utm1=tcb","date":"2024-09-24T17:27:35.861Z","timestamp":1727198855861,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eurosptp.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Sep 2024 08:50:48 GMT","end":"Thu, 12 Dec 2024 08:50:47 GMT"},"fingerprint":{"sha1":"93:5B:66:32:E3:14:CF:DD:5D:B0:60:7F:E7:31:9D:3E:03:62:82:77","sha256":"A3:04:43:A2:17:41:6F:F4:6F:CF:3F:32:21:0B:C0:46:C7:A7:B6:D7:B0:EB:54:4D:AF:7E:EC:AB:C4:F5:59:29"}}},"request":{"raw":"GET /page.php?__r=1.58586bb9937d1db2db20f399fdaf1add\u0026fr\u0026countrycode=coutry HTTP/1.1\r\nHost: w7.eurosptp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\nserver: nginx\r\ndate: Tue, 24 Sep 2024 17:27:35 GMT\r\ncontent-type: text/html\r\ncontent-length: 164\r\nlocation: https://w7.eurosptp.com/page.php?fr\u0026countrycode=coutry\r\nset-cookie: __r=1.58586bb9937d1db2db20f399fdaf1add; path=/; Max-Age=60; SameSite=None; Secure\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":null,"data":{"size":164,"size_decoded":164,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"813f9846b49c0ada805648edf1b2fdbd","sha1":"caa24890460f73e6a72bb49426351e67e83b053d","sha256":"8f03491247cbfa8a2e60e0f7ec62d63b5070659f60383a1c81abeb2b20221be3","sha512":"8cedd2d9e11e7eca0c65b5c3723e234625d7048f9390904def48c382ba6564c0a2437e0e179435558986861f031296d4f83c2bc6876c48a36becb071bde76f50","ssdeep":"","tlshash":"28c04c65b5932d8888e3763914c3e194f1bea565059c961821405bd37acb242abc2353","first_seen":"2023-04-05T14:23:53Z","last_seen":"2025-03-01T11:52:46.822568Z","times_seen":1094,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kaminari.systems/v2/check","fqdn":"kaminari.systems","domain":"kaminari.systems","tld":"systems"},"ip":{"addr":"31.220.27.154","port":0,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:35.894002735Z","timestamp":1727198855894,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kaminari.systems","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Aug 2024 23:08:05 GMT","end":"Sun, 17 Nov 2024 23:08:04 GMT"},"fingerprint":{"sha1":"D6:13:D2:BE:87:F0:C2:D7:40:F6:80:A0:6E:67:7A:2A:B1:55:EE:68","sha256":"2C:25:F7:6A:29:A7:B2:C7:EF:67:6B:CA:68:38:D7:E1:7A:0E:96:43:B1:15:3F:68:4A:72:54:0F:55:AC:3B:5A"}}},"request":{"raw":"POST /v2/check HTTP/1.1\r\nHost: kaminari.systems\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/json\r\nContent-Length: 2099\r\nOrigin: https://kaminari.systems\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.19.10\r\ndate: Tue, 24 Sep 2024 17:27:35 GMT\r\ncontent-type: application/json\r\ncontent-length: 22\r\naccess-control-allow-headers: X-Requested-With, Cache-Control, Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://kaminari.systems\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":22,"size_decoded":22,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"b0317651b37535dcef617e90ded85c89","sha1":"c693092d7602afd77a46d71da803e88add7b1481","sha256":"30ee8fca64672d6088402c610ac503f99cee1b5e79b51c91f5b3b3d58d1f1577","sha512":"b85361ed8e0c44400507694630a23eec5f57b5eabc416f8b6db46e95e9f76fedb32bb57dd4334c85f418e223fa1f529f9a3c7e8945e5cb62339052efebd557ac","ssdeep":"","tlshash":"0e700082832020c000282aa20880200ac82c00280800088b82208008008a00e3002002","first_seen":"2024-09-01T09:38:37Z","last_seen":"2025-04-08T09:47:38.551513Z","times_seen":127,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w7.eurosptp.com/page.php?__r=1.58586bb9937d1db2db20f399fdaf1add\u0026fr\u0026countrycode=coutry","fqdn":"w7.eurosptp.com","domain":"eurosptp.com","tld":"com"},"ip":{"addr":"213.186.33.19","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://imdn.pics/m/p/0/770/770824/P1r9hLS2.html?\u0026pricebox_price=0.0010\u0026OS_FAMILY=%5BOS_FAMILY%5D\u0026utm4=0-10346131-0\u0026ad_sub=71860570\u0026DOMAIN=3txxx.com\u0026id_zone=%5Bidzone%5D\u0026CAMPAIGN_ID=236776\u0026site=%7B%7B+site+%7D%7D\u0026__OS_FAMILY__=%7B%7B+__OS_FAMILY__+%7D%7D\u0026price=0.0020\u0026utm2=878669509-100\u0026MOBILE_BRAND=%5BMOBILE_BRAND%5D\u0026click_id=065399e7-1b84-4bc2-b47f-4985a71b194d\u0026COUNTRY_ISO_CODE=%5BCOUNTRY_ISO_CODE%5D\u0026BROWSER_FAMILY=%5BBROWSER_FAMILY%5D\u0026__BROWSER_FAMILY__=%7B%7B+__BROWSER_FAMILY__+%7D%7D\u0026priority=%5BPRIORITY%5D\u0026utm3=249-1353416-46616\u0026bidding_price=0.0020\u0026campaign_id=236776\u0026PRICING_MODEL=cpm\u0026__IP2L_MOBILE__=%7B%7B+__IP2L_MOBILE__+%7D%7D\u0026pricing_model=cpm\u0026OS_TYPE=%5BOS_TYPE%5D\u0026__GEOIP_COUNTRY_SHORT__=%7B%7B+__GEOIP_COUNTRY_SHORT__+%7D%7D\u0026out_name=236776%7C83954%7Ccpm%7C0.0020%7C%24+0.0020\u0026PRICE=0.0020\u0026__OS_TYPE__=%7B%7B+__OS_TYPE__+%7D%7D\u0026click_event_url=https%3A%2F%2Fbts.a11k.com%2Fin%2Ftclick%2F%3Fkatds_ep%3Dm29lFp3d0cnQAcd6VVcVIP3A6MGilhjH8HflMKzCXFIyhzKqeA0prc41DLW0Q1L6tmJ38KU5ikjVweoFDFUaps6cX6CLMbmiiOtCY5Xa9YQSSoPYcINkU3hIzecyWirmA_4X2379WVhwyqhwSU6xv-GmiZ9gF40rHwh-J3a3nA-GPAaPO6cEQH8OQpi3t49keatv5jdBat53n9UvDqSaLKUN7Ihrty630xpaue6wdZJGuT7nM_fItWF2SG2r-VGZxfPauKiD4XmSkD5titn25mnYUtTn5DeeT5-YQ_Gidiz1u1Uoz6HDWOiSQsx2smZNQAUxlv13gtab11TAKbn369vLapczQxKhPwKrzdQjOmjwR3cagatJwP2AZEb9W9xt6otbRMKAGKRrvCzOxpQBaPa5Ha_HthLlhTVdDH1LnE8vckpPE7CmIiWQKpz9CnBjDx2W5Rl2ItKfPvAJSCpVSkQPLrxuCz7hgH9pzr3h-BSFqBnZJQywE9qlDf-ct-_oBWBmoTxVyWUBvKMwgKbD8_XMKltb9qhG2a2ULVtYNuPFE8JpUijiid6wb562qJCDv2EDA9awXo_HzLP-wx-RxxHpsG4kgmzL6TryxmpSaall2EcS_RbafR70G8tEUdJS6ViLdJGBBkXEa_zmwRGRGqv7XQfOzwBzBC8leIvL4WmscOcxg544QwBXJ_8YPwXrOmIR3wVUitWwKXODcPrPjzEJyTt29f8ldIexDkkIUYHylr1hTH9uStM_2DHuQfth_t0knnmWNeId3C4S0pIK4yZJXZRLqrnHGbJdtJAx1E-G6sd-ljNpAmPbs_xkAGojjybHOoqvKT50lRZX6vs3mEP4c06X-aeMCP15O05J8_QktIN6d3Fw6mIFZWpl0QecIkDIv0B6toZb3KQTDL7D1Y4BYeyi10BrU1-WSqRUP1Z1VJpdfnACQOtTSw%26bid%3D%24%7BAUCTION_PRICE%7D\u0026utm1=tcb","date":"2024-09-24T17:27:35.861Z","timestamp":1727198855861,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eurosptp.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Sep 2024 08:50:48 GMT","end":"Thu, 12 Dec 2024 08:50:47 GMT"},"fingerprint":{"sha1":"93:5B:66:32:E3:14:CF:DD:5D:B0:60:7F:E7:31:9D:3E:03:62:82:77","sha256":"A3:04:43:A2:17:41:6F:F4:6F:CF:3F:32:21:0B:C0:46:C7:A7:B6:D7:B0:EB:54:4D:AF:7E:EC:AB:C4:F5:59:29"}}},"request":{"raw":"GET /page.php?__r=1.58586bb9937d1db2db20f399fdaf1add\u0026fr\u0026countrycode=coutry HTTP/1.1\r\nHost: w7.eurosptp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __r=1.58586bb9937d1db2db20f399fdaf1add\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\nserver: nginx\r\ndate: Tue, 24 Sep 2024 17:27:35 GMT\r\ncontent-type: text/html\r\ncontent-length: 164\r\nlocation: https://w7.eurosptp.com/page.php?fr\u0026countrycode=coutry\r\nset-cookie: __r=1.58586bb9937d1db2db20f399fdaf1add; path=/; Max-Age=60; SameSite=None; Secure\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":null,"data":{"size":164,"size_decoded":164,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"813f9846b49c0ada805648edf1b2fdbd","sha1":"caa24890460f73e6a72bb49426351e67e83b053d","sha256":"8f03491247cbfa8a2e60e0f7ec62d63b5070659f60383a1c81abeb2b20221be3","sha512":"8cedd2d9e11e7eca0c65b5c3723e234625d7048f9390904def48c382ba6564c0a2437e0e179435558986861f031296d4f83c2bc6876c48a36becb071bde76f50","ssdeep":"","tlshash":"28c04c65b5932d8888e3763914c3e194f1bea565059c961821405bd37acb242abc2353","first_seen":"2023-04-05T14:23:53Z","last_seen":"2025-03-01T11:52:46.822568Z","times_seen":1094,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w7.eurosptp.com/page.php?fr\u0026countrycode=coutry","fqdn":"w7.eurosptp.com","domain":"eurosptp.com","tld":"com"},"ip":{"addr":"213.186.33.19","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://imdn.pics/m/p/0/770/770824/P1r9hLS2.html?\u0026pricebox_price=0.0010\u0026OS_FAMILY=%5BOS_FAMILY%5D\u0026utm4=0-10346131-0\u0026ad_sub=71860570\u0026DOMAIN=3txxx.com\u0026id_zone=%5Bidzone%5D\u0026CAMPAIGN_ID=236776\u0026site=%7B%7B+site+%7D%7D\u0026__OS_FAMILY__=%7B%7B+__OS_FAMILY__+%7D%7D\u0026price=0.0020\u0026utm2=878669509-100\u0026MOBILE_BRAND=%5BMOBILE_BRAND%5D\u0026click_id=065399e7-1b84-4bc2-b47f-4985a71b194d\u0026COUNTRY_ISO_CODE=%5BCOUNTRY_ISO_CODE%5D\u0026BROWSER_FAMILY=%5BBROWSER_FAMILY%5D\u0026__BROWSER_FAMILY__=%7B%7B+__BROWSER_FAMILY__+%7D%7D\u0026priority=%5BPRIORITY%5D\u0026utm3=249-1353416-46616\u0026bidding_price=0.0020\u0026campaign_id=236776\u0026PRICING_MODEL=cpm\u0026__IP2L_MOBILE__=%7B%7B+__IP2L_MOBILE__+%7D%7D\u0026pricing_model=cpm\u0026OS_TYPE=%5BOS_TYPE%5D\u0026__GEOIP_COUNTRY_SHORT__=%7B%7B+__GEOIP_COUNTRY_SHORT__+%7D%7D\u0026out_name=236776%7C83954%7Ccpm%7C0.0020%7C%24+0.0020\u0026PRICE=0.0020\u0026__OS_TYPE__=%7B%7B+__OS_TYPE__+%7D%7D\u0026click_event_url=https%3A%2F%2Fbts.a11k.com%2Fin%2Ftclick%2F%3Fkatds_ep%3Dm29lFp3d0cnQAcd6VVcVIP3A6MGilhjH8HflMKzCXFIyhzKqeA0prc41DLW0Q1L6tmJ38KU5ikjVweoFDFUaps6cX6CLMbmiiOtCY5Xa9YQSSoPYcINkU3hIzecyWirmA_4X2379WVhwyqhwSU6xv-GmiZ9gF40rHwh-J3a3nA-GPAaPO6cEQH8OQpi3t49keatv5jdBat53n9UvDqSaLKUN7Ihrty630xpaue6wdZJGuT7nM_fItWF2SG2r-VGZxfPauKiD4XmSkD5titn25mnYUtTn5DeeT5-YQ_Gidiz1u1Uoz6HDWOiSQsx2smZNQAUxlv13gtab11TAKbn369vLapczQxKhPwKrzdQjOmjwR3cagatJwP2AZEb9W9xt6otbRMKAGKRrvCzOxpQBaPa5Ha_HthLlhTVdDH1LnE8vckpPE7CmIiWQKpz9CnBjDx2W5Rl2ItKfPvAJSCpVSkQPLrxuCz7hgH9pzr3h-BSFqBnZJQywE9qlDf-ct-_oBWBmoTxVyWUBvKMwgKbD8_XMKltb9qhG2a2ULVtYNuPFE8JpUijiid6wb562qJCDv2EDA9awXo_HzLP-wx-RxxHpsG4kgmzL6TryxmpSaall2EcS_RbafR70G8tEUdJS6ViLdJGBBkXEa_zmwRGRGqv7XQfOzwBzBC8leIvL4WmscOcxg544QwBXJ_8YPwXrOmIR3wVUitWwKXODcPrPjzEJyTt29f8ldIexDkkIUYHylr1hTH9uStM_2DHuQfth_t0knnmWNeId3C4S0pIK4yZJXZRLqrnHGbJdtJAx1E-G6sd-ljNpAmPbs_xkAGojjybHOoqvKT50lRZX6vs3mEP4c06X-aeMCP15O05J8_QktIN6d3Fw6mIFZWpl0QecIkDIv0B6toZb3KQTDL7D1Y4BYeyi10BrU1-WSqRUP1Z1VJpdfnACQOtTSw%26bid%3D%24%7BAUCTION_PRICE%7D\u0026utm1=tcb","date":"2024-09-24T17:27:35.896Z","timestamp":1727198855896,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eurosptp.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Sep 2024 08:50:48 GMT","end":"Thu, 12 Dec 2024 08:50:47 GMT"},"fingerprint":{"sha1":"93:5B:66:32:E3:14:CF:DD:5D:B0:60:7F:E7:31:9D:3E:03:62:82:77","sha256":"A3:04:43:A2:17:41:6F:F4:6F:CF:3F:32:21:0B:C0:46:C7:A7:B6:D7:B0:EB:54:4D:AF:7E:EC:AB:C4:F5:59:29"}}},"request":{"raw":"GET /page.php?fr\u0026countrycode=coutry HTTP/1.1\r\nHost: w7.eurosptp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __r=1.58586bb9937d1db2db20f399fdaf1add; visbl=1; visite24=1; visite=24h\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:36 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: Apache\r\nx-powered-by: PHP/7.0\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nexpires: Sun, 01 Jan 2014 00:00:00 GMT\r\npragma: no-cache\r\ncache-control: no-cache, must-revalidate\r\nreferrer-policy: origin\r\nset-cookie: visbl=2; expires=Tue, 24-Sep-2024 17:28:06 GMT; Max-Age=30; path=/; SameSite=None;secure; domain=eurosptp.com\nvisite=24h; expires=Wed, 25-Sep-2024 05:27:36 GMT; Max-Age=43200; path=/; SameSite=None;secure; domain=eurosptp.com\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-robots-tag: noindex\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27707,"size_decoded":27707,"mime_type":"text/html; charset=UTF-8","magic":"gzip compressed data, from Unix","md5":"ccd17627dca1422c869f48aae4da7682","sha1":"59bf6dad669fb6efa9df27cba5736ce90957aa1d","sha256":"fe8fc871e1ffaaff45149ff1d8caa40b3df501da77bdc3796ab76fa83ddf3361","sha512":"b16a2e3d57fd55eddf48738890eb0faf9c2ec3b402e3c38db1804f5421ee938822f5a9ffaa0af1afdd0fa58400c685e0b0dc980733390742efafc5c986ca5a5b","ssdeep":"384:UW38VlG46bzfQVddnrB5VS+TCJ76n3UyHDVTTUgtd9pm2L6Azg0iGO5xwVYHyzdQ:UmMi3oDrPRhn3THDpVT9pmstz5XiHWiD","tlshash":"11c2c0a884b0f61c0e6575235ff9a0b4e067f4c94ac7b75ae384eb86091a4072cad6dd","first_seen":"2024-09-28T07:59:48.633448Z","last_seen":"2024-09-28T07:59:48.633448Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imdn.pics/scripts/events.mix.js","fqdn":"imdn.pics","domain":"imdn.pics","tld":"pics"},"ip":{"addr":"45.133.44.25","port":0,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:36.434020446Z","timestamp":1727198856434,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imdn.pics","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Sep 2024 03:02:53 GMT","end":"Sat, 07 Dec 2024 03:02:52 GMT"},"fingerprint":{"sha1":"2C:74:6D:B1:42:DE:4E:9B:FD:75:DC:69:84:15:B7:21:D9:13:A7:0D","sha256":"B1:3D:47:0F:4C:5D:8D:A2:53:37:C2:0C:BC:78:78:E5:EC:F4:06:CB:FB:A3:78:B5:BF:41:78:2A:2B:AC:C2:68"}}},"request":{"raw":"GET /scripts/events.mix.js HTTP/1.1\r\nHost: imdn.pics\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://imdn.pics/m/p/0/770/770823/embed/test_1_simple_html5_valid/simple/HTML5_InPage_Clicktags_300x250.html?click_event_url=https%3A%2F%2Fbts.a11k.com%2Fin%2Ftclick%2F%3Fkatds_ep%3Dm29lFp3d0cnQAcd6VVcVIP3A6MGilhjH8HflMKzCXFIyhzKqeA0prc41DLW0Q1L6tmJ38KU5ikjVweoFDFUaps6cX6CLMbmiiOtCY5Xa9YQSSoPYcINkU3hIzecyWirmA_4X2379WVhwyqhwSU6xv-GmiZ9gF40rHwh-J3a3nA-GPAaPO6cEQH8OQpi3t49keatv5jdBat53n9UvDqSaLKUN7Ihrty630xpaue6wdZJGuT7nM_fItWF2SG2r-VGZxfPauKiD4XmSkD5titn25mnYUtTn5DeeT5-YQ_Gidiz1u1Uoz6HDWOiSQsx2smZNQAUxlv13gtab11TAKbn369vLapczQxKhPwKrzdQjOmjwR3cagatJwP2AZEb9W9xt6otbRMKAGKRrvCzOxpQBaPa5Ha_HthLlhTVdDH1LnE8vckpPE7CmIiWQKpz9CnBjDx2W5Rl2ItKfPvAJSCpVSkQPLrxuCz7hgH9pzr3h-BSFqBnZJQywE9qlDf-ct-_oBWBmoTxVyWUBvKMwgKbD8_XMKltb9qhG2a2ULVtYNuPFE8JpUijiid6wb562qJCDv2EDA9awXo_HzLP-wx-RxxHpsG4kgmzL6TryxmpSaall2EcS_RbafR70G8tEUdJS6ViLdJGBBkXEa_zmwRGRGqv7XQfOzwBzBC8leIvL4WmscOcxg544QwBXJ_8YPwXrOmIR3wVUitWwKXODcPrPjzEJyTt29f8ldIexDkkIUYHylr1hTH9uStM_2DHuQfth_t0knnmWNeId3C4S0pIK4yZJXZRLqrnHGbJdtJAx1E-G6sd-ljNpAmPbs_xkAGojjybHOoqvKT50lRZX6vs3mEP4c06X-aeMCP15O05J8_QktIN6d3Fw6mIFZWpl0QecIkDIv0B6toZb3KQTDL7D1Y4BYeyi10BrU1-WSqRUP1Z1VJpdfnACQOtTSw%26bid%3D%24%7BAUCTION_PRICE%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 22 Sep 2023 10:01:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"650d6613-14b\"\r\nx-request-id: 540497a67df6d9f5b6bb6ca266b16f2c\r\ncontent-encoding: gzip\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache, no-cache\r\nexpires: 0\r\nx-proxy-cache: REVALIDATED, HIT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":19400,"size_decoded":19400,"mime_type":"application/x-gzip","magic":"gzip compressed data, from Unix","md5":"3bb54ec6831a14c384e5a5c3470432e1","sha1":"3b78e9f8ceddf43ec25f0a90ee6aba75271c11a1","sha256":"0046babbc14f5bfd28c50eb74b3030be5a92785823f494b475459172c9422eba","sha512":"2e8c5867292d003936432e92f5154ac06ba3f3dafdf1cc6183769e044f0853a8f79b98b1b0412fd193b906f57c0cce5e3d6a149d06c983d5e667313fa0f20b39","ssdeep":"384:VdnrB5VS+TCJ76n3UyHDVTTUgtd9pm2L6Azg0iGO5xwVYHyzdID:brPRhn3THDpVT9pmstz5XiHWiD","tlshash":"3a92bfa89434e60c0d6179236fb4a4b0e0abb4c651c7eb1bd385ff99460e8072d6d7dc","first_seen":"2024-09-24T19:28:15Z","last_seen":"2024-10-04T11:19:02.702913Z","times_seen":3,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imdn.pics/scripts/security.mix.js","fqdn":"imdn.pics","domain":"imdn.pics","tld":"pics"},"ip":{"addr":"45.133.44.25","port":0,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:36.45937656Z","timestamp":1727198856459,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imdn.pics","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Sep 2024 03:02:53 GMT","end":"Sat, 07 Dec 2024 03:02:52 GMT"},"fingerprint":{"sha1":"2C:74:6D:B1:42:DE:4E:9B:FD:75:DC:69:84:15:B7:21:D9:13:A7:0D","sha256":"B1:3D:47:0F:4C:5D:8D:A2:53:37:C2:0C:BC:78:78:E5:EC:F4:06:CB:FB:A3:78:B5:BF:41:78:2A:2B:AC:C2:68"}}},"request":{"raw":"GET /scripts/security.mix.js HTTP/1.1\r\nHost: imdn.pics\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://imdn.pics/m/p/0/770/770823/embed/test_1_simple_html5_valid/simple/HTML5_InPage_Clicktags_300x250.html?click_event_url=https%3A%2F%2Fbts.a11k.com%2Fin%2Ftclick%2F%3Fkatds_ep%3Dm29lFp3d0cnQAcd6VVcVIP3A6MGilhjH8HflMKzCXFIyhzKqeA0prc41DLW0Q1L6tmJ38KU5ikjVweoFDFUaps6cX6CLMbmiiOtCY5Xa9YQSSoPYcINkU3hIzecyWirmA_4X2379WVhwyqhwSU6xv-GmiZ9gF40rHwh-J3a3nA-GPAaPO6cEQH8OQpi3t49keatv5jdBat53n9UvDqSaLKUN7Ihrty630xpaue6wdZJGuT7nM_fItWF2SG2r-VGZxfPauKiD4XmSkD5titn25mnYUtTn5DeeT5-YQ_Gidiz1u1Uoz6HDWOiSQsx2smZNQAUxlv13gtab11TAKbn369vLapczQxKhPwKrzdQjOmjwR3cagatJwP2AZEb9W9xt6otbRMKAGKRrvCzOxpQBaPa5Ha_HthLlhTVdDH1LnE8vckpPE7CmIiWQKpz9CnBjDx2W5Rl2ItKfPvAJSCpVSkQPLrxuCz7hgH9pzr3h-BSFqBnZJQywE9qlDf-ct-_oBWBmoTxVyWUBvKMwgKbD8_XMKltb9qhG2a2ULVtYNuPFE8JpUijiid6wb562qJCDv2EDA9awXo_HzLP-wx-RxxHpsG4kgmzL6TryxmpSaall2EcS_RbafR70G8tEUdJS6ViLdJGBBkXEa_zmwRGRGqv7XQfOzwBzBC8leIvL4WmscOcxg544QwBXJ_8YPwXrOmIR3wVUitWwKXODcPrPjzEJyTt29f8ldIexDkkIUYHylr1hTH9uStM_2DHuQfth_t0knnmWNeId3C4S0pIK4yZJXZRLqrnHGbJdtJAx1E-G6sd-ljNpAmPbs_xkAGojjybHOoqvKT50lRZX6vs3mEP4c06X-aeMCP15O05J8_QktIN6d3Fw6mIFZWpl0QecIkDIv0B6toZb3KQTDL7D1Y4BYeyi10BrU1-WSqRUP1Z1VJpdfnACQOtTSw%26bid%3D%24%7BAUCTION_PRICE%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 22 Sep 2023 10:01:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"650d6613-8c\"\r\nx-request-id: cb7a371c05ae571923137cf54cf1fcb9\r\ncontent-encoding: gzip\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache, no-cache\r\nexpires: 0\r\nx-proxy-cache: REVALIDATED, HIT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":3152,"size_decoded":6809,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (1901)","md5":"39adf2be4dae290a99cad8dd2d8a8de9","sha1":"5b96fe9769caf027bb0d14456dc4f729f1c05986","sha256":"98fb759d4847e80b9852b8e971e56a1a69b2f53e9fca7217d65ae7be1d21ae94","sha512":"6518d07f4af9960512d70774444f0ca965b65f3f57bdd1cb7a602cebc2ec3133ca9e81b83b624126d31b20bca5394d796826428810845192c97ea3ce950350c6","ssdeep":"96:LZBaNfVhzfSKVnsuXPYGfbRd0XTy1NfVhzfoLoXEWq063ty1V8+FCx4m8+U2:7aNthTSmntIQNthTAo0sRxkX","tlshash":"01e129b564fa87bd021040b3a3a0a5db9f955f3f20c4dba5f58dc4806f6ac3082937e0","first_seen":"2024-09-28T07:59:48.64002Z","last_seen":"2024-09-28T07:59:48.64002Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndication.realsrv.com/splash.php?idzone=3981938","fqdn":"syndication.realsrv.com","domain":"realsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://w7.eurosptp.com/page.php?fr\u0026countrycode=coutry","date":"2024-09-24T17:27:36.282Z","timestamp":1727198856282,"http_version":"HTTP/1.1","security_state":"secure","security_info":null,"request":{"raw":"GET /splash.php?idzone=3981938 HTTP/1.1\r\nHost: syndication.realsrv.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://w7.eurosptp.com/\r\nOrigin: https://w7.eurosptp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 24 Sep 2024 17:27:36 GMT\r\nContent-Type: text/xml;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Headers: X-CH-VALUES\r\nSet-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%2266f2f6885db770.884098763542862571%22%3B%7D; expires=Thu, 24 Sep 2026 17:27:36 GMT; path=; domain=.realsrv.com; Secure; SameSite=none\nc-tag=%7B%22tag-video%22%3A%22v4%7C%7CNOR%7C3981938%7C104721426%7C0%7C%7C508%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C3163480%7C3151627%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C%7C0%7Cw7.eurosptp.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1727198856%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1%7Cc73031dcd469b894d1246d4180bfb36a%7Cok%22%7D; expires=Wed, 25 Sep 2024 17:27:36 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none\r\nCache-Control: no-store\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: https://w7.eurosptp.com\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3090,"size_decoded":6660,"mime_type":"text/xml; charset=UTF-8","magic":"XML 1.0 document, ASCII text, with very long lines (1901)","md5":"b255107ae7423663b3a9a88e6e4bf82a","sha1":"24abb4a467b786363914ff8966e486db4b049b0e","sha256":"a397d2f05ffffded8ad0e15e935f5fe88ee69337ce3a271c2e4840d82ffa05f7","sha512":"f0411d4cdb38166cb74ea612853d63e25797997af47d9d64b5ed9f11fad450036531cdf028453c913960abce4e37f9295b5d15b9a242ad7b8f4df32911a59e6d","ssdeep":"96:kBaDfVhzfSKVnsuXPYG02XdTXTy1DfVhzfoLoXEWq063ty1DWbobx4KWbor2:MaDthTSmnnZQDthTAo0sRDWbo3WboS","tlshash":"c4d12afd60e983ba132114b7d750b48baf550f6b2684cb96f08e99d25fabd3443d3224","first_seen":"2024-09-28T07:59:48.64307Z","last_seen":"2024-09-28T07:59:48.64307Z","times_seen":1,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":87,"dns":1,"connect":29,"send":0,"wait":68,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"video.ktkjmp.com/adsbygoogle.js","fqdn":"video.ktkjmp.com","domain":"ktkjmp.com","tld":"com"},"ip":{"addr":"104.18.53.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.rmhfrtnd.com/widgets/wrapper?userId=21bef55dbc8f276fe29aaae6f9e950e3b6129b2c6480c95e51858c64ffbb33e4\u0026bb=8ef83ac6.gif","date":"2024-09-24T17:27:36.302Z","timestamp":1727198856302,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"video.ktkjmp.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jul 2024 00:36:10 GMT","end":"Mon, 28 Oct 2024 00:36:09 GMT"},"fingerprint":{"sha1":"03:36:EC:B3:89:CB:32:73:56:51:EA:FE:14:69:67:ED:A3:6F:AB:B6","sha256":"89:CC:2B:B1:19:B6:80:1E:92:10:7C:74:05:B2:44:BC:31:E7:FE:34:9F:0A:A5:F4:55:31:C6:BC:93:DF:2C:5E"}}},"request":{"raw":"GET /adsbygoogle.js HTTP/1.1\r\nHost: video.ktkjmp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.rmhfrtnd.com/\r\nOrigin: https://creative.rmhfrtnd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:36 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 16\r\nx-amz-id-2: /RdWHr+f9/ULc5g1XDKn54eNcv6T6VFcz4U9ZiSWLihQZSQC0Z7RO6SOS2Lj+sVtdllEGgBpypQ=\r\nx-amz-request-id: JHJV7VFA8MKF8VCH\r\nlast-modified: Thu, 10 Mar 2022 13:52:07 GMT\r\netag: \"3d7f7a60216d40dea48e495fef6903c9\"\r\nx-amz-meta-s3cmd-attrs: atime:1646920284/ctime:1646920283/gid:20/gname:staff/md5:3d7f7a60216d40dea48e495fef6903c9/mode:33188/mtime:1646920283/uid:501/uname:mikhailchubar\r\nx-amz-version-id: eIgLIBoMMcsEXtxOH6UDjWyfAquRpkIG\r\naccess-control-allow-origin: https://creative.rmhfrtnd.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with\r\ncf-cache-status: HIT\r\nage: 565\r\nexpires: Tue, 24 Sep 2024 21:27:36 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8c847c75080f0b59-OSL\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16,"size_decoded":16,"mime_type":"application/javascript","magic":"ASCII text","md5":"3d7f7a60216d40dea48e495fef6903c9","sha1":"fecdb5184f55cf012563d78940eb97b10b9cc99b","sha256":"96d83ac9f20fc0b88404f307f135e212642e02d6ea295c96b28aed0d771a224f","sha512":"8e5056a5835b9925597eba1c09197a103477e087cbb74acf40afb00133b9c6b981625d25af2f02cf64931cfb58faf161398b06d793609f6781ce9d1d80f0b26e","ssdeep":"","tlshash":"296000000ccc00333c0030000c0000c3300c0f3000003000300c003f00c0c0c30c003c","first_seen":"2023-04-05T14:13:49Z","last_seen":"2025-01-27T06:20:12.886858Z","times_seen":5473,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":179,"dns":54,"connect":2,"send":0,"wait":15,"receive":1,"ssl":115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndication.realsrv.com/vregister.php?a=vimp\u0026tracking_event=impression\u0026idzone=3981938\u00262f0c2af9d35a1a2cdde21db2fe9eb7be=tsVuZ8uHLpt4edvLpq48_XLv659tdlTlK8E.fnju88N3Tlu49emtqayWunDMos7XA3GxK9Yw85n0466oK3F35qq5WJHM2G7I65JmYI3K6WHXYGtzU0muBthu1ymuCpynPxw5dOXTXA3PYzHBU.5Tn34dOnPprgbqgrcz8d.vnj41wN4zSuZ8_Pjj55.NcDbTFbj01OGfXh41wNtMSTsQPS59ePfx258tcDdrFMDFcE0ufHh078uPTl41wNzVZ8euuBtmma6pynPnrgbbctgacz4a4G2mKaYHKc.GuBuCqfPhrqsZz4a7WI7HM.27gDt6657GY4Kn3KV6WK3M._DXPYzHBU.5Su1ZTS5K1hmCidraYknYgelXasppclawzRPA1uXtPsSvOL1zLz2MxwVPuU58N3nhy6a3L2n2JXnF65l5XK7pqYs.OthtevCdzPnx1uzUyMV564G5XK7pqYs.OtqayWunBeamB6CViPMos7W_XXOveu7NTcxS242u7NTnrgbnpmbsarXaYrcempwz4.Nc9MDUEry8kzbkefjW_XXPVnx11NUuOSr0uVTR2VwTS567KnKV4G8.GuymNd9ip_Nvlz6cejrTrPnp45cGHGvHLs6z44dfHTt54ua4JJ6XKqoJpV6q2K7Ks.OuCSelyqqCaVeCW1iOBtelxiqaXPhrpcdcpcpXqgrcXfmqrlYkczu77nLKZqp659zU0mthtmOZqLPhrgbmddcpz4a4G42JW4JXl52HnM.Gty9xqyuCaVeuCRzPhu4cdcDbbFbDTktblOfLXA20xTTA5SvVNZS05nw1yzVNUwT158NcErUz0sFcy8kzbmfDXW5VWvJM25nw10uPQTSrvOTSsSOLwN58Nc9M1.C9VbFdlWe3jrgbnYprlcpz4a2oK8F3nJpWJHF4G8.fHrx7cu.uVythqyCvBeema_BevCdzPXK5Ww1ZBXgvPTNfgu25U1TBPXBNLnrYbZjmaiXtcpz1wST0uVVQTSrsRxrwS2sRwNr0uMVTS1Z8NdVjPLPhrqsZ558NdTVME9a9eE7meupqmCeteViRzPXU1TBPWva5TnrZpmuqcpXtcpz4a7ac.GuCWtymViPPhrlmXdslbqz4a4G6XKp5paoLXF42MJrK8.GuBuSyOuDGaVzPhrckYgjXgqnz4a6mqYJ6123K2II8.2upqmCete1ymqCaXPjrgbYbtcprgqcpXYbXrwncz5cdcDc9M1.GfDWw2vS5RY5VWvS5VZHXnx1wNyuV3TUxL14TuZ8dcDbTEk7ED0q9eE7mfDXTWyvBLa5LXNTgvA3nrprZXgltclrmpwXlYkcz1xOYL2sR2OL8c.GuJzBe1iOxxflnw1xOYL2sR2OL88.GuJzBe1iOxxfpnw1xOYL2sR2OL9c.GuJzBe1iOxxftnw1xOYL2sR2OL98.GuJzBe1iOxxfxnw1xOYL2sR2OL.c.GuJzBe1iOxxfjwz4a2m5V7KmHnM.vPv51swNr1PsNwSvL2sR2OZ8NdTjU0ra7LlVa9rEdjmfDWxY1XBNKu7HNNTnw1sWNVwTSrtOQR58NcDddLDrsDS9U1lLTmfLWzZTHnrsqcpXaYnnglez12VOUrtMTzwSvLu0uUWOStYZ67bLIG8.Pfl34.fHjr249PPTlx8cO_Xt2d5O9vHjq425y11wSOVVsST58e_Lvx8.PHXtrammigcamlqclrz4w-","fqdn":"syndication.realsrv.com","domain":"realsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://w7.eurosptp.com/page.php?fr\u0026countrycode=coutry","date":"2024-09-24T17:27:36.537Z","timestamp":1727198856537,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"realsrv.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Sep 2024 10:35:05 GMT","end":"Wed, 11 Dec 2024 10:35:04 GMT"},"fingerprint":{"sha1":"95:7B:F0:3D:0B:82:4B:0B:7F:3B:06:68:76:24:A6:18:CE:1F:1C:FA","sha256":"A6:2B:F5:D8:36:FD:0D:0E:D8:34:F7:08:44:11:AC:85:FD:C3:D8:E1:8B:C8:6D:51:C9:1C:6C:44:D8:B3:9F:0D"}}},"request":{"raw":"GET /vregister.php?a=vimp\u0026tracking_event=impression\u0026idzone=3981938\u00262f0c2af9d35a1a2cdde21db2fe9eb7be=tsVuZ8uHLpt4edvLpq48_XLv659tdlTlK8E.fnju88N3Tlu49emtqayWunDMos7XA3GxK9Yw85n0466oK3F35qq5WJHM2G7I65JmYI3K6WHXYGtzU0muBthu1ymuCpynPxw5dOXTXA3PYzHBU.5Tn34dOnPprgbqgrcz8d.vnj41wN4zSuZ8_Pjj55.NcDbTFbj01OGfXh41wNtMSTsQPS59ePfx258tcDdrFMDFcE0ufHh078uPTl41wNzVZ8euuBtmma6pynPnrgbbctgacz4a4G2mKaYHKc.GuBuCqfPhrqsZz4a7WI7HM.27gDt6657GY4Kn3KV6WK3M._DXPYzHBU.5Su1ZTS5K1hmCidraYknYgelXasppclawzRPA1uXtPsSvOL1zLz2MxwVPuU58N3nhy6a3L2n2JXnF65l5XK7pqYs.OthtevCdzPnx1uzUyMV564G5XK7pqYs.OtqayWunBeamB6CViPMos7W_XXOveu7NTcxS242u7NTnrgbnpmbsarXaYrcempwz4.Nc9MDUEry8kzbkefjW_XXPVnx11NUuOSr0uVTR2VwTS567KnKV4G8.GuymNd9ip_Nvlz6cejrTrPnp45cGHGvHLs6z44dfHTt54ua4JJ6XKqoJpV6q2K7Ks.OuCSelyqqCaVeCW1iOBtelxiqaXPhrpcdcpcpXqgrcXfmqrlYkczu77nLKZqp659zU0mthtmOZqLPhrgbmddcpz4a4G42JW4JXl52HnM.Gty9xqyuCaVeuCRzPhu4cdcDbbFbDTktblOfLXA20xTTA5SvVNZS05nw1yzVNUwT158NcErUz0sFcy8kzbmfDXW5VWvJM25nw10uPQTSrvOTSsSOLwN58Nc9M1.C9VbFdlWe3jrgbnYprlcpz4a2oK8F3nJpWJHF4G8.fHrx7cu.uVythqyCvBeema_BevCdzPXK5Ww1ZBXgvPTNfgu25U1TBPXBNLnrYbZjmaiXtcpz1wST0uVVQTSrsRxrwS2sRwNr0uMVTS1Z8NdVjPLPhrqsZ558NdTVME9a9eE7meupqmCeteViRzPXU1TBPWva5TnrZpmuqcpXtcpz4a7ac.GuCWtymViPPhrlmXdslbqz4a4G6XKp5paoLXF42MJrK8.GuBuSyOuDGaVzPhrckYgjXgqnz4a6mqYJ6123K2II8.2upqmCete1ymqCaXPjrgbYbtcprgqcpXYbXrwncz5cdcDc9M1.GfDWw2vS5RY5VWvS5VZHXnx1wNyuV3TUxL14TuZ8dcDbTEk7ED0q9eE7mfDXTWyvBLa5LXNTgvA3nrprZXgltclrmpwXlYkcz1xOYL2sR2OL8c.GuJzBe1iOxxflnw1xOYL2sR2OL88.GuJzBe1iOxxfpnw1xOYL2sR2OL9c.GuJzBe1iOxxftnw1xOYL2sR2OL98.GuJzBe1iOxxfxnw1xOYL2sR2OL.c.GuJzBe1iOxxfjwz4a2m5V7KmHnM.vPv51swNr1PsNwSvL2sR2OZ8NdTjU0ra7LlVa9rEdjmfDWxY1XBNKu7HNNTnw1sWNVwTSrtOQR58NcDddLDrsDS9U1lLTmfLWzZTHnrsqcpXaYnnglez12VOUrtMTzwSvLu0uUWOStYZ67bLIG8.Pfl34.fHjr249PPTlx8cO_Xt2d5O9vHjq425y11wSOVVsST58e_Lvx8.PHXtrammigcamlqclrz4w- HTTP/1.1\r\nHost: syndication.realsrv.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://w7.eurosptp.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 24 Sep 2024 17:27:36 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: \r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20,"size_decoded":20,"mime_type":"text/html; charset=UTF-8","magic":"gzip compressed data, max speed, from Unix","md5":"a4745abc5e7fdb89cc6df3069f3c6e69","sha1":"74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed","sha256":"d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf","sha512":"849461cb54ecde577246aad993d1ecabb879913e353ae322561c7c57605f571e23210fe12bdcef49faa99b5b003611976ff64348f620968271e38bba1c7d7f62","ssdeep":"","tlshash":"ce70000000003c30cc000030000fc000000c30003000c00300000030000300300c003f","first_seen":"2023-04-08T01:36:47Z","last_seen":"2025-03-02T02:51:47.01042Z","times_seen":42040,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":48,"dns":0,"connect":26,"send":0,"wait":39,"receive":1,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"video.rmhfrtnd.com/b/8ef83ac6.gif","fqdn":"video.rmhfrtnd.com","domain":"rmhfrtnd.com","tld":"com"},"ip":{"addr":"172.64.147.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmhfrtnd.com/widgets/wrapper?userId=21bef55dbc8f276fe29aaae6f9e950e3b6129b2c6480c95e51858c64ffbb33e4\u0026bb=8ef83ac6.gif","date":"2024-09-24T17:27:36.585Z","timestamp":1727198856585,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rmhfrtnd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Sep 2024 16:20:49 GMT","end":"Tue, 17 Dec 2024 16:20:48 GMT"},"fingerprint":{"sha1":"8C:6E:DB:60:9F:B6:67:74:EC:FA:2E:5C:F0:02:88:06:E6:E2:EA:F3","sha256":"CF:31:E3:98:44:35:AD:4D:A5:6D:BD:40:46:5F:6D:FC:34:21:B3:65:63:52:A9:9B:50:94:0F:21:89:87:38:CD"}}},"request":{"raw":"GET /b/8ef83ac6.gif HTTP/1.1\r\nHost: video.rmhfrtnd.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmhfrtnd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:36 GMT\r\ncontent-type: image/gif\r\ncontent-length: 266930\r\nx-amz-id-2: yaIat2FU3vngR8SCJh1a4I2Rit14qP5+PqkUTLexdfRdp3Ia/s0Ce8RAC3Rhd701UP6t/L0qB6pU2ig0t4rwTxvyk+jdlqyq\r\nx-amz-request-id: JHJYGTQ59M8H6GJG\r\nlast-modified: Mon, 15 Feb 2021 08:27:14 GMT\r\netag: \"b1ac9d96c4f21ec32fa22f00900d62a2\"\r\nx-amz-meta-s3cmd-attrs: md5:b1ac9d96c4f21ec32fa22f00900d62a2\r\nx-amz-version-id: gUjr25pNXxmV3_nzmHDe36_gP_CSP63S\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with\r\ncf-cache-status: HIT\r\nage: 1883\r\nexpires: Tue, 24 Sep 2024 21:27:36 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8c847c75eac55684-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":266930,"size_decoded":266930,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 100","md5":"b1ac9d96c4f21ec32fa22f00900d62a2","sha1":"faa958b6859f9e1c4973e00c03ec8fc8da521a9e","sha256":"9dbbe711482a110ca78aa5f1eaa664ce7ebc2e2602d3c3123aba20fc12c1f816","sha512":"b6588041cd03b33b753664c5f15517fc2b4a117d72bc9b6258846e26abc973fe5dc3ac1b8764d6f034a492cd185f1246d6a6cb47ca3bbe41f1353f6b895457df","ssdeep":"6144:7x0H/GQghLKXooqTa+N3aufzoNvVAfsXNpFymcUmIAEBO2U:Key5qG+FoGWFyc1VO2U","tlshash":"1a4423fd200dfa84b194381979590de7265872eb2f85627ecad81f6c8c14b72b95c0ee","first_seen":"2024-05-17T23:59:25Z","last_seen":"2025-11-22T12:27:57.941045Z","times_seen":216,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":42,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.rmhfrtnd.com/config?url=https%3A%2F%2Fcreative.rmhfrtnd.com%2Fwidgets%2Fwrapper%3FuserId%3D21bef55dbc8f276fe29aaae6f9e950e3b6129b2c6480c95e51858c64ffbb33e4%26bb%3D8ef83ac6.gif","fqdn":"go.rmhfrtnd.com","domain":"rmhfrtnd.com","tld":"com"},"ip":{"addr":"172.64.147.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://creative.rmhfrtnd.com/widgets/wrapper?userId=21bef55dbc8f276fe29aaae6f9e950e3b6129b2c6480c95e51858c64ffbb33e4\u0026bb=8ef83ac6.gif","date":"2024-09-24T17:27:36.307Z","timestamp":1727198856307,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rmhfrtnd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Sep 2024 16:20:49 GMT","end":"Tue, 17 Dec 2024 16:20:48 GMT"},"fingerprint":{"sha1":"8C:6E:DB:60:9F:B6:67:74:EC:FA:2E:5C:F0:02:88:06:E6:E2:EA:F3","sha256":"CF:31:E3:98:44:35:AD:4D:A5:6D:BD:40:46:5F:6D:FC:34:21:B3:65:63:52:A9:9B:50:94:0F:21:89:87:38:CD"}}},"request":{"raw":"GET /config?url=https%3A%2F%2Fcreative.rmhfrtnd.com%2Fwidgets%2Fwrapper%3FuserId%3D21bef55dbc8f276fe29aaae6f9e950e3b6129b2c6480c95e51858c64ffbb33e4%26bb%3D8ef83ac6.gif HTTP/1.1\r\nHost: go.rmhfrtnd.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://creative.rmhfrtnd.com/\r\nOrigin: https://creative.rmhfrtnd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:36 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: https://creative.rmhfrtnd.com\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 24 Sep 2024 17:23:28 GMT\r\ncf-cache-status: HIT\r\nage: 248\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8c847c7508350b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1866,"size_decoded":6397,"mime_type":"application/json","magic":"JSON text data","md5":"bda6aef518c85b5c56d7231375fcc9fd","sha1":"06f35decc34df911d20cfdfd00836e3671f841a1","sha256":"07955036e8533ee105b9d859aaa167da05454bae2607f94b1dfe17c2337919af","sha512":"82160d4707949a05aa81177351a2686238e264a63924dd3d3fabcc8fd3211ccdf703559b30f6665a917b57151faf4a64dac292f48586f36f30ad79b37eca7f23","ssdeep":"192:uZ6EHxCAfUj7/VASCy468nyayqh13/7VAloqJII1TyQ13/7VAloqJIW:uZRxNf+7/VX/lgneU","tlshash":"21d123ef820ea8f717c44d4ebebda8d8699d80a75e8144ffdc484438426d37212b7b59","first_seen":"2024-09-28T07:59:48.652061Z","last_seen":"2024-09-28T07:59:48.652061Z","times_seen":1,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":180,"dns":50,"connect":1,"send":0,"wait":16,"receive":0,"ssl":118},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.good-trading.com/images/logo.png","fqdn":"ww1.good-trading.com","domain":"good-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:36.782Z","timestamp":1727198856782,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"good-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Aug 2024 23:14:36 GMT","end":"Thu, 07 Nov 2024 23:14:35 GMT"},"fingerprint":{"sha1":"C7:4B:95:73:72:AB:33:39:3C:05:E9:B3:6F:8B:A2:16:7D:68:15:7F","sha256":"7B:C1:76:37:CA:CA:74:63:50:27:D3:B0:32:AF:B7:04:19:71:6F:2B:AC:00:E9:86:E5:3C:B4:62:85:A2:86:26"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: ww1.good-trading.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww1.good-trading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 7752\r\nlast-modified: Sun, 07 May 2023 09:29:44 GMT\r\ncache-control: public, max-age=86400\r\nexpires: Tue, 24 Sep 2024 20:24:36 GMT\r\nx-iplb-request-id: A29ECB98:310C_91EF25A2:0050_66EF2B44_1740E:168B\r\nx-iplb-instance: 52324\r\ncf-cache-status: HIT\r\nage: 75780\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=l1sQMEikAirw58TQneGB7Zp3ictxSTgSy%2F%2BceQegxnFKOUU4UoOCtYSjWOzWMG%2F0pYB2ebLsNFH08%2FWLe2u7dzhq%2Bt2hwcNCZpErSFiC%2BAqbbPP3Ozqn2Zeup%2BJ74oKaGabUWk1Oyw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8c847c76ce167284-HAM\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7752,"size_decoded":7752,"mime_type":"image/png","magic":"PNG image data, 228 x 75, 8-bit/color RGBA, non-interlaced","md5":"9c908bdd523d99b87f5c78a0f967558b","sha1":"fc5553e0bdfaefcbf074920f27f2021fcc660eab","sha256":"9ed55d1c02a973f42b56ee7bea32394cdf62984179b4e2b7b86ab2fdfe9e669f","sha512":"965509d1a4a58fc05612531623fc8173b059b53eba9af2a788fbb1cedaf84f9c1a127b21bd5731e009ca4111d15bb1fc86f2e3f39c583501398e5af41523fd39","ssdeep":"192:doCmOkkfO8uYy8JQTLHDF89+7y3jXnYIRtqrA:dpbltu0J2DOBrbRCA","tlshash":"fdf1c0f628b366d7c06b3b7e923558376c9a00d33267d204595c4ef6673f802b584746","first_seen":"2023-04-07T00:04:56Z","last_seen":"2026-02-09T05:07:30.638685Z","times_seen":140,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cfr.news24.media/ressources/img/css_sprites-min.png","fqdn":"cfr.news24.media","domain":"news24.media","tld":"media"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cfr.news24.media/?d","date":"2024-09-24T17:27:37.000Z","timestamp":1727198857000,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"news24.media","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Aug 2024 23:13:48 GMT","end":"Thu, 07 Nov 2024 23:13:47 GMT"},"fingerprint":{"sha1":"C7:D5:FC:A4:F6:85:4C:62:EB:B9:66:9D:B6:09:11:F2:DC:EA:42:F6","sha256":"01:F4:2C:9E:A7:9D:5B:CE:F6:1B:36:4B:26:4F:58:07:3D:A6:AE:36:F5:07:06:1F:C7:E6:6A:03:BB:92:AA:41"}}},"request":{"raw":"GET /ressources/img/css_sprites-min.png HTTP/1.1\r\nHost: cfr.news24.media\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cfr.news24.media/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 16193\r\nlast-modified: Tue, 18 Jul 2023 17:49:42 GMT\r\ncache-control: max-age=14400\r\nexpires: Tue, 24 Sep 2024 17:41:23 GMT\r\ncf-cache-status: HIT\r\nage: 73\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=AzwL7wFMbQpZXlMd0UsCccCH%2Bg6spJJisPivv8JGRav%2FPQ0mhSojWZ2xYQZYpddCvfKks%2B0JHGn7T%2BGRgz9Nb85SnkVqbT2zbRlKcJxK0EtuwmOV2oXQTCDee67w%2FNp26zU7\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8c847c778b3c6610-AMS\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16193,"size_decoded":16193,"mime_type":"image/png","magic":"PNG image data, 476 x 312, 8-bit colormap, non-interlaced","md5":"774c0bb1ae6f837449ae2114370ac8b4","sha1":"b5810643ccdb9755913180b3b2ef3eb34e30870b","sha256":"52b1db2b49a335d5165d6b05c03234128e9818c0faab6c2da9c9758fbac4ffd1","sha512":"3185e2769c4e44d6e152326f5d4d045e0d0577e6c94594ff0061cffe531511ae4498d6e3652d3ea830a9ced4c412f58bb9675666eb1aed05bf022a7a89ddcf7b","ssdeep":"384:BK98NFUht26OjIwf+9NrSewPAPsHuhmwP8ayHJ62:a8seZIwf+OgsHgP8b","tlshash":"f572d0bcbed0e1b7d3e594b44e91b323444a281909cdce1bc4b4972abbc2946f57a033","first_seen":"2023-07-20T11:40:20Z","last_seen":"2025-03-26T16:24:34.016458Z","times_seen":111,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cgb.news24.media/ressources/img/css_sprites-min.png","fqdn":"cgb.news24.media","domain":"news24.media","tld":"media"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cgb.news24.media/?d","date":"2024-09-24T17:27:37.520Z","timestamp":1727198857520,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"news24.media","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Aug 2024 23:13:48 GMT","end":"Thu, 07 Nov 2024 23:13:47 GMT"},"fingerprint":{"sha1":"C7:D5:FC:A4:F6:85:4C:62:EB:B9:66:9D:B6:09:11:F2:DC:EA:42:F6","sha256":"01:F4:2C:9E:A7:9D:5B:CE:F6:1B:36:4B:26:4F:58:07:3D:A6:AE:36:F5:07:06:1F:C7:E6:6A:03:BB:92:AA:41"}}},"request":{"raw":"GET /ressources/img/css_sprites-min.png HTTP/1.1\r\nHost: cgb.news24.media\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cgb.news24.media/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 16193\r\nlast-modified: Tue, 18 Jul 2023 17:49:42 GMT\r\ncache-control: max-age=14400\r\nexpires: Tue, 24 Sep 2024 17:35:36 GMT\r\ncf-cache-status: HIT\r\nage: 421\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=js38cx%2F6cagX5A93IOaOA8jfomlYtUstdbqdSpDtbxs5quGHM5dKoIJnt8BBOvJByrdFb3%2BwLNh8nY2pQ1VW69r%2FmCnBbebaEu6La2SuD3%2BDsvao8K9u4bCk7n%2Bb3v6tcCIy\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8c847c788d256610-AMS\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16193,"size_decoded":16193,"mime_type":"image/png","magic":"PNG image data, 476 x 312, 8-bit colormap, non-interlaced","md5":"774c0bb1ae6f837449ae2114370ac8b4","sha1":"b5810643ccdb9755913180b3b2ef3eb34e30870b","sha256":"52b1db2b49a335d5165d6b05c03234128e9818c0faab6c2da9c9758fbac4ffd1","sha512":"3185e2769c4e44d6e152326f5d4d045e0d0577e6c94594ff0061cffe531511ae4498d6e3652d3ea830a9ced4c412f58bb9675666eb1aed05bf022a7a89ddcf7b","ssdeep":"384:BK98NFUht26OjIwf+9NrSewPAPsHuhmwP8ayHJ62:a8seZIwf+OgsHgP8b","tlshash":"f572d0bcbed0e1b7d3e594b44e91b323444a281909cdce1bc4b4972abbc2946f57a033","first_seen":"2023-07-20T11:40:20Z","last_seen":"2025-03-26T16:24:34.016458Z","times_seen":111,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.rmhfrtnd.com/abc.gif?e=dXNlcklkPTIxYmVmNTVkYmM4ZjI3NmZlMjlhYWFlNmY5ZTk1MGUzYjYxMjliMmM2NDgwYzk1ZTUxODU4YzY0ZmZiYjMzZTQmYmI9OGVmODNhYzYuZ2lmJm1vZGVsc0NvdW50PTAmcmVmZXJyZXImaT0wJmliPTA%3D\u0026m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A413%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A308%2C%22duration%22%3A21%2C%22transferSize%22%3A62306%7D%5D\u0026mh=756202281","fqdn":"go.rmhfrtnd.com","domain":"rmhfrtnd.com","tld":"com"},"ip":{"addr":"172.64.147.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://creative.rmhfrtnd.com/widgets/wrapper?userId=21bef55dbc8f276fe29aaae6f9e950e3b6129b2c6480c95e51858c64ffbb33e4\u0026bb=8ef83ac6.gif","date":"2024-09-24T17:27:38.498Z","timestamp":1727198858498,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rmhfrtnd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Sep 2024 16:20:49 GMT","end":"Tue, 17 Dec 2024 16:20:48 GMT"},"fingerprint":{"sha1":"8C:6E:DB:60:9F:B6:67:74:EC:FA:2E:5C:F0:02:88:06:E6:E2:EA:F3","sha256":"CF:31:E3:98:44:35:AD:4D:A5:6D:BD:40:46:5F:6D:FC:34:21:B3:65:63:52:A9:9B:50:94:0F:21:89:87:38:CD"}}},"request":{"raw":"GET /abc.gif?e=dXNlcklkPTIxYmVmNTVkYmM4ZjI3NmZlMjlhYWFlNmY5ZTk1MGUzYjYxMjliMmM2NDgwYzk1ZTUxODU4YzY0ZmZiYjMzZTQmYmI9OGVmODNhYzYuZ2lmJm1vZGVsc0NvdW50PTAmcmVmZXJyZXImaT0wJmliPTA%3D\u0026m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A413%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A308%2C%22duration%22%3A21%2C%22transferSize%22%3A62306%7D%5D\u0026mh=756202281 HTTP/1.1\r\nHost: go.rmhfrtnd.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmhfrtnd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: image/gif\r\ncontent-length: 103\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 8c847c7a7a515684-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":103,"size_decoded":103,"mime_type":"image/gif","magic":"data","md5":"8c99886486b9a004383cb4df29011c43","sha1":"d79ca4754481fc59598bc08fcdf354900918bffe","sha256":"bda00b0f6892b1c6991e793b42654ad1807694e2ffabcbc4eb1399379737ef6c","sha512":"1a44f60174aed5a5bb4d0b16b3102bdc52ec0cec8c6e15a5e0628b66c868c13af92151c7164821855a7e62aba53b2d47dcff6517f558cea07e4e6c8f939fd8d0","ssdeep":"","tlshash":"96b0125fc086e1300c58306bc6b72a1742f015002b0aca61e8b26b138e071df7131d80","first_seen":"2023-04-07T00:29:15Z","last_seen":"2026-03-17T12:48:55.542913Z","times_seen":5418,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smkezc.com/cuclc?aid=16209272082399971748\u0026t=1727198857\u0026s=833686","fqdn":"smkezc.com","domain":"smkezc.com","tld":"com"},"ip":{"addr":"185.162.85.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cfr.news24.media/?d","date":"2024-09-24T17:27:40.106Z","timestamp":1727198860106,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"smkezc.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Aug 2024 16:35:06 GMT","end":"Fri, 01 Nov 2024 16:35:05 GMT"},"fingerprint":{"sha1":"37:3D:1E:8C:4A:DF:80:8E:7F:FC:A6:71:84:26:87:61:DA:78:BF:90","sha256":"26:14:35:3F:BD:58:CC:7C:C2:12:09:FD:CB:49:20:F1:72:A4:80:9A:E1:DD:63:86:F2:2A:89:A3:7E:02:94:D2"}}},"request":{"raw":"GET /cuclc?aid=16209272082399971748\u0026t=1727198857\u0026s=833686 HTTP/1.1\r\nHost: smkezc.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cfr.news24.media/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.18.0\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 288\r\nlocation: https://gbstlnd.com/rotator/662/3333/2f1eeeafc1c1aa0ba0685904cfada495/?click_id=a2_16209272082399971748_627551_2_0\u0026sub1=a627551\u0026sub2=${sub2}\u0026sub3=${sub3}\u0026fullscreen=1\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":288,"size_decoded":288,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with no line terminators","md5":"065bab5168472e550190c1ffcb5b46dd","sha1":"c98c62a5625f5fd0b33165196947ad346666f7ce","sha256":"497e2973292788e55faac9275c80508c6658f89d7934cef6369350745709bf7f","sha512":"85617186bedced180e2bceaa4a94718218b03591fe20119101e5a68a02a800f44544f3f53b486982f811aafcec018d083b82aadc61d5d956afc701f62f60679f","ssdeep":"","tlshash":"55d0c2e79418821a3a2020b33caab20c2e92516e29579805219036a54189a6b8d175e5","first_seen":"2024-09-28T07:59:48.657624Z","last_seen":"2024-09-28T07:59:48.657624Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-09-24","alert":"Sinkholed","trigger":"smkezc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"smkezc.com/cuclc?aid=7102076563369971295\u0026t=1727198857\u0026s=833686","fqdn":"smkezc.com","domain":"smkezc.com","tld":"com"},"ip":{"addr":"185.162.85.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cgb.news24.media/?d","date":"2024-09-24T17:27:40.147Z","timestamp":1727198860147,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"smkezc.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Aug 2024 16:35:06 GMT","end":"Fri, 01 Nov 2024 16:35:05 GMT"},"fingerprint":{"sha1":"37:3D:1E:8C:4A:DF:80:8E:7F:FC:A6:71:84:26:87:61:DA:78:BF:90","sha256":"26:14:35:3F:BD:58:CC:7C:C2:12:09:FD:CB:49:20:F1:72:A4:80:9A:E1:DD:63:86:F2:2A:89:A3:7E:02:94:D2"}}},"request":{"raw":"GET /cuclc?aid=7102076563369971295\u0026t=1727198857\u0026s=833686 HTTP/1.1\r\nHost: smkezc.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cgb.news24.media/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.18.0\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 287\r\nlocation: https://gbstlnd.com/rotator/662/3333/2f1eeeafc1c1aa0ba0685904cfada495/?click_id=a2_7102076563369971295_627551_2_0\u0026sub1=a627551\u0026sub2=${sub2}\u0026sub3=${sub3}\u0026fullscreen=1\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":287,"size_decoded":287,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with no line terminators","md5":"761601c99b71340dfb5e058f14199875","sha1":"75f36614d5232f0aba59c45b40c6b8256b06c9a6","sha256":"f4a8e7a25f68257256df1de8074a594867b690759a6a0b3c99bb8b5005ef1e83","sha512":"878c7a8cf6fa082c195864270d657d01c46d88eebbdf4b317ae4395db80ce00642aec263e980c70c23c217d886fc39c1de4a51bbf2826a60f8332de16f6601f1","ssdeep":"","tlshash":"4fd02be7d41d43093a2021b37c6db20c2fd3516f1957980531a036e145cd76bcd1f5e2","first_seen":"2024-09-28T07:59:48.661099Z","last_seen":"2024-09-28T07:59:48.661099Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-09-24","alert":"Sinkholed","trigger":"smkezc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"smkezc.com/cuclc?aid=3736566435692234949\u0026t=1727198857\u0026s=833686","fqdn":"smkezc.com","domain":"smkezc.com","tld":"com"},"ip":{"addr":"185.162.85.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cgb.news24.media/?d","date":"2024-09-24T17:27:40.164Z","timestamp":1727198860164,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"smkezc.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Aug 2024 16:35:06 GMT","end":"Fri, 01 Nov 2024 16:35:05 GMT"},"fingerprint":{"sha1":"37:3D:1E:8C:4A:DF:80:8E:7F:FC:A6:71:84:26:87:61:DA:78:BF:90","sha256":"26:14:35:3F:BD:58:CC:7C:C2:12:09:FD:CB:49:20:F1:72:A4:80:9A:E1:DD:63:86:F2:2A:89:A3:7E:02:94:D2"}}},"request":{"raw":"GET /cuclc?aid=3736566435692234949\u0026t=1727198857\u0026s=833686 HTTP/1.1\r\nHost: smkezc.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cgb.news24.media/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.18.0\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 287\r\nlocation: https://gbstlnd.com/rotator/662/3333/2f1eeeafc1c1aa0ba0685904cfada495/?click_id=a2_3736566435692234949_627551_2_0\u0026sub1=a627551\u0026sub2=${sub2}\u0026sub3=${sub3}\u0026fullscreen=1\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":287,"size_decoded":287,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with no line terminators","md5":"61bbf1e558e10bd9eeeb3e9b8396c2f2","sha1":"ff510684c797d2ebd66bb07c66ef97dd55d4ff13","sha256":"24c56b439caffe3beb8e4ef2970a2275edb83337b15159aab6bf94cad738a43b","sha512":"cf7c95d2b8873184336edc1e72bb0ab15b3c9d4e2ea216cff4f3ae7cc321820b1d45743f941e8d010515caf18c01086da1e3c779d8bceb5afcbc49417c0b4589","ssdeep":"","tlshash":"b0d02bf7941843053a7020b37ca9b20c2ed3915f1a27980522d075e241c9babce5b9e2","first_seen":"2024-09-28T07:59:48.666274Z","last_seen":"2024-09-28T07:59:48.666274Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-09-24","alert":"Sinkholed","trigger":"smkezc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syndication.realsrv.com/splash.php?idzone=3981938","fqdn":"syndication.realsrv.com","domain":"realsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://w7.eurosptp.com/page.php?fr\u0026countrycode=coutry","date":"2024-09-24T17:27:36.282Z","timestamp":1727198856282,"http_version":"HTTP/1.1","security_state":"secure","security_info":null,"request":{"raw":"GET /splash.php?idzone=3981938 HTTP/1.1\r\nHost: syndication.realsrv.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww1.good-trading.com/\r\nOrigin: https://ww1.good-trading.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 24 Sep 2024 17:27:39 GMT\r\nContent-Type: text/xml;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Headers: X-CH-VALUES\r\nSet-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%2266f2f68b45bcd1.103203992392950559%22%3B%7D; expires=Thu, 24 Sep 2026 17:27:39 GMT; path=; domain=.realsrv.com; Secure; SameSite=none\nc-tag=%7B%22tag-video%22%3A%22v4%7C%7CNOR%7C3981938%7C104721432%7C0%7C%7C508%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C3163480%7C3151627%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C%7C0%7Cww1.good-trading.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1727198859%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1%7C9d3107bcfaab88f8f23d5c41f82cba88%7Cok%22%7D; expires=Wed, 25 Sep 2024 17:27:39 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none\r\nCache-Control: no-store\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: https://ww1.good-trading.com\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2716,"size_decoded":6717,"mime_type":"text/xml; charset=UTF-8","magic":"XML 1.0 document, ASCII text, with very long lines (1905)","md5":"9fe5f8e27adc352754eb0f45a52e51f3","sha1":"e9d5c29841853ff94794f4a3877e700b1e196e38","sha256":"517517fa117ed8ab7892a3c58d75847bc82784ceb7b0a7845196a3453140e612","sha512":"fe8acba9e44adea92b7a244fec0d3bc071310ae54e2c3cc10bfa5956500350a22e158c89592a086f85dd1caa8da73a4dc0d874e37b774c1a02f0bf26aed6afa2","ssdeep":"96:kBRqfVhzywxKVnsuXPYGs09MdbXTyWqfVhzyAKVnsuXPYGDZqF1c0qgx4DF1c0qe:MRqthZmnz9MrqthDmnjDsDe","tlshash":"f8d119ba00fac76d420115b7e251b9ce0fd15f3b70d48e6af44d8541af9e86882e33b4","first_seen":"2024-09-28T07:59:48.677087Z","last_seen":"2024-09-28T07:59:48.677087Z","times_seen":1,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":87,"dns":1,"connect":29,"send":0,"wait":68,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww-7.good-trading.com/images/logo.png","fqdn":"ww-7.good-trading.com","domain":"good-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:40.217Z","timestamp":1727198860217,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"good-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Aug 2024 23:14:36 GMT","end":"Thu, 07 Nov 2024 23:14:35 GMT"},"fingerprint":{"sha1":"C7:4B:95:73:72:AB:33:39:3C:05:E9:B3:6F:8B:A2:16:7D:68:15:7F","sha256":"7B:C1:76:37:CA:CA:74:63:50:27:D3:B0:32:AF:B7:04:19:71:6F:2B:AC:00:E9:86:E5:3C:B4:62:85:A2:86:26"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: ww-7.good-trading.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww-7.good-trading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 7752\r\nlast-modified: Sun, 07 May 2023 09:29:44 GMT\r\ncache-control: public, max-age=86400\r\nexpires: Tue, 24 Sep 2024 20:34:09 GMT\r\nx-iplb-request-id: A29ECB59:C100_91EF25A2:0050_66EF2C1A_18D0F:165A\r\nx-iplb-instance: 52295\r\ncf-cache-status: HIT\r\nage: 75210\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ko209CizX15SUzsTiFukg3TlPu5n9aMWlZ78UH4BExZeILcA%2Btrs9PAcq03M7XnZBfhA4o3Nxgzm0v5GEJrdWTzLsfHTeulhxTOc4uEjh589y8p96zfBRzQ%2FgpkNRgQqtmDxdvwQIkQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8c847c868f6f7284-HAM\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7752,"size_decoded":7752,"mime_type":"image/png","magic":"PNG image data, 228 x 75, 8-bit/color RGBA, non-interlaced","md5":"9c908bdd523d99b87f5c78a0f967558b","sha1":"fc5553e0bdfaefcbf074920f27f2021fcc660eab","sha256":"9ed55d1c02a973f42b56ee7bea32394cdf62984179b4e2b7b86ab2fdfe9e669f","sha512":"965509d1a4a58fc05612531623fc8173b059b53eba9af2a788fbb1cedaf84f9c1a127b21bd5731e009ca4111d15bb1fc86f2e3f39c583501398e5af41523fd39","ssdeep":"192:doCmOkkfO8uYy8JQTLHDF89+7y3jXnYIRtqrA:dpbltu0J2DOBrbRCA","tlshash":"fdf1c0f628b366d7c06b3b7e923558376c9a00d33267d204595c4ef6673f802b584746","first_seen":"2023-04-07T00:04:56Z","last_seen":"2026-02-09T05:07:30.638685Z","times_seen":140,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/direct1.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.291Z","timestamp":1727198859291,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /direct1.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:36 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 449826\r\nlast-modified: Thu, 19 Sep 2024 12:30:30 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=OK4Ko3sGTUtBtiJng%2FQ4Og9xR80AJTdAtGYSeOyYiYM44IqzZ6%2FO5r3G9YzxxYjoOIi%2F0d75uDGJZuF8g9YTDj3trf8niLyiF2dTncdaFtfGuf9pTZxIzkrY1%2BQzY3Z4KE4X\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c77bd33726c-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":465,"size_decoded":443,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"b6e093e148cdd04607a7e7eecf4f78cd","sha1":"e36f6770dab6ac4aad7e512b974381b77ec32f02","sha256":"0aaf552174580e748cc99653194079cd07bd942a02425d0e099db18e684c0e4e","sha512":"4bdcd33ed63162c410f430d80acd9fb9fbb5930beea4b17e262a4f1fef995c4229140f113e90ff3d77721fa77b34ed91c78a013e8f73e0bbfe9cc836a7740665","ssdeep":"","tlshash":"4af05ce35b145c139bf004756d90b2449267b0811566e5bcf048c3634485ba5e8163f7","first_seen":"2023-04-09T11:23:16Z","last_seen":"2024-10-11T08:49:55.65097Z","times_seen":16,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndication.realsrv.com/vregister.php?a=vview\u0026tracking_event=progress\u0026progress=00:00:10.000\u0026idzone=3981938\u00262f0c2af9d35a1a2cdde21db2fe9eb7be=tsVuZ8uHLpt4edvLpq48_XLv659tdlTlK8E.fnju88N3Tlu49emtqayWunDMos7XA3GxK9Yw85n0466oK3F35qq5WJHM2G7I65JmYI3K6WHXYGtzU0muBthu1ymuCpynPxw5dOXTXA3PYzHBU.5Tn34dOnPprgbqgrcz8d.vnj41wN4zSuZ8_Pjj55.NcDbTFbj01OGfXh41wNtMSTsQPS59ePfx258tcDdrFMDFcE0ufHh078uPTl41wNzVZ8euuBtmma6pynPnrgbbctgacz4a4G2mKaYHKc.GuBuCqfPhrqsZz4a7WI7HM.27gDt6657GY4Kn3KV6WK3M._DXPYzHBU.5Su1ZTS5K1hmCidraYknYgelXasppclawzRPA1uXtPsSvOL1zLz2MxwVPuU58N3nhy6a3L2n2JXnF65l5XK7pqYs.OthtevCdzPnx1uzUyMV564G5XK7pqYs.OtqayWunBeamB6CViPMos7W_XXOveu7NTcxS242u7NTnrgbnpmbsarXaYrcempwz4.Nc9MDUEry8kzbkefjW_XXPVnx11NUuOSr0uVTR2VwTS567KnKV4G8.GuymNd9ip_Nvlz6cejrTrPnp45cGHGvHLs6z44dfHTt54ua4JJ6XKqoJpV6q2K7Ks.OuCSelyqqCaVeCW1iOBtelxiqaXPhrpcdcpcpXqgrcXfmqrlYkczu77nLKZqp659zU0mthtmOZqLPhrgbmddcpz4a4G42JW4JXl52HnM.Gu2BtyZdy1yWvPW5TTNS1M25nrgbbYrYaclrcpz5a4G2mKaYHKV6prKWnM.GuWapqmCevPhrglamelgrmXkmbcz4a63Kq15Jm3M.Gulx6CaVd5yaViRxeBvPhrnpmvwXqrYrsqz28dcDc7FNcrlOfDW1BXgu85NKxI4vA3nz49ePbl31yuVsNWQV4Lz0zX4L14TuZ65XK2GrIK8F56Zr8F23KmqYJ64Jpc9bDbMczUS9rlOeuCSelyqqCaVdiONeCW1iOBtelxiqaWrPhrqsZ5Z8NdVjPPPhrqapgnrXrwncz11NUwT1rysSOZ66mqYJ617XKc9bNM11TlK9rlOfDXbTnw1wS1uUysR58Ncsy7tkrdWfDXA3S5VPNLVBa4vGxhNZXnw1wNyWR1wYzSuZ8NbkjEEa8FU.fDXU1TBPWu25WxBHn211NUwT1r2uU1QTS58dcDbDdrlNcFTlK7Da9eE7mfLjrgbnpmvwz4a2G16XKLHKq16XKrI68.OuBuVyu6amJevCdzPjrgbaYknYgelXrwncz4a6a2V4JbXJa5qcF4G89dNbK8Etrktc1OC8rEjmeuJzBe1iOxxfjnw1xOYL2sR2OL8s.GuJzBe1iOxxfnnw1xOYL2sR2OL9M.GuJzBe1iOxxfrnw1xOYL2sR2OL9s.GuJzBe1iOxxfvnw1xOYL2sR2OL.M.GuJzBe1iOxxfznw1xOYL2sR2OL8eGfDXA3XSw67A0vVNZS05ny122WQN58e_Lvx8.PHXtz8.ePfrz68u3Z3k728eOrnnx511wSOVVsST58e_Lvx8.PHXtrammigcamlqclrz4wA--","fqdn":"syndication.realsrv.com","domain":"realsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://w7.eurosptp.com/page.php?fr\u0026countrycode=coutry","date":"2024-09-24T17:27:40.553Z","timestamp":1727198860553,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"realsrv.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Sep 2024 10:35:05 GMT","end":"Wed, 11 Dec 2024 10:35:04 GMT"},"fingerprint":{"sha1":"95:7B:F0:3D:0B:82:4B:0B:7F:3B:06:68:76:24:A6:18:CE:1F:1C:FA","sha256":"A6:2B:F5:D8:36:FD:0D:0E:D8:34:F7:08:44:11:AC:85:FD:C3:D8:E1:8B:C8:6D:51:C9:1C:6C:44:D8:B3:9F:0D"}}},"request":{"raw":"GET /vregister.php?a=vview\u0026tracking_event=progress\u0026progress=00:00:10.000\u0026idzone=3981938\u00262f0c2af9d35a1a2cdde21db2fe9eb7be=tsVuZ8uHLpt4edvLpq48_XLv659tdlTlK8E.fnju88N3Tlu49emtqayWunDMos7XA3GxK9Yw85n0466oK3F35qq5WJHM2G7I65JmYI3K6WHXYGtzU0muBthu1ymuCpynPxw5dOXTXA3PYzHBU.5Tn34dOnPprgbqgrcz8d.vnj41wN4zSuZ8_Pjj55.NcDbTFbj01OGfXh41wNtMSTsQPS59ePfx258tcDdrFMDFcE0ufHh078uPTl41wNzVZ8euuBtmma6pynPnrgbbctgacz4a4G2mKaYHKc.GuBuCqfPhrqsZz4a7WI7HM.27gDt6657GY4Kn3KV6WK3M._DXPYzHBU.5Su1ZTS5K1hmCidraYknYgelXasppclawzRPA1uXtPsSvOL1zLz2MxwVPuU58N3nhy6a3L2n2JXnF65l5XK7pqYs.OthtevCdzPnx1uzUyMV564G5XK7pqYs.OtqayWunBeamB6CViPMos7W_XXOveu7NTcxS242u7NTnrgbnpmbsarXaYrcempwz4.Nc9MDUEry8kzbkefjW_XXPVnx11NUuOSr0uVTR2VwTS567KnKV4G8.GuymNd9ip_Nvlz6cejrTrPnp45cGHGvHLs6z44dfHTt54ua4JJ6XKqoJpV6q2K7Ks.OuCSelyqqCaVeCW1iOBtelxiqaXPhrpcdcpcpXqgrcXfmqrlYkczu77nLKZqp659zU0mthtmOZqLPhrgbmddcpz4a4G42JW4JXl52HnM.Gu2BtyZdy1yWvPW5TTNS1M25nrgbbYrYaclrcpz5a4G2mKaYHKV6prKWnM.GuWapqmCevPhrglamelgrmXkmbcz4a63Kq15Jm3M.Gulx6CaVd5yaViRxeBvPhrnpmvwXqrYrsqz28dcDc7FNcrlOfDW1BXgu85NKxI4vA3nz49ePbl31yuVsNWQV4Lz0zX4L14TuZ65XK2GrIK8F56Zr8F23KmqYJ64Jpc9bDbMczUS9rlOeuCSelyqqCaVdiONeCW1iOBtelxiqaWrPhrqsZ5Z8NdVjPPPhrqapgnrXrwncz11NUwT1rysSOZ66mqYJ617XKc9bNM11TlK9rlOfDXbTnw1wS1uUysR58Ncsy7tkrdWfDXA3S5VPNLVBa4vGxhNZXnw1wNyWR1wYzSuZ8NbkjEEa8FU.fDXU1TBPWu25WxBHn211NUwT1r2uU1QTS58dcDbDdrlNcFTlK7Da9eE7mfLjrgbnpmvwz4a2G16XKLHKq16XKrI68.OuBuVyu6amJevCdzPjrgbaYknYgelXrwncz4a6a2V4JbXJa5qcF4G89dNbK8Etrktc1OC8rEjmeuJzBe1iOxxfjnw1xOYL2sR2OL8s.GuJzBe1iOxxfnnw1xOYL2sR2OL9M.GuJzBe1iOxxfrnw1xOYL2sR2OL9s.GuJzBe1iOxxfvnw1xOYL2sR2OL.M.GuJzBe1iOxxfznw1xOYL2sR2OL8eGfDXA3XSw67A0vVNZS05ny122WQN58e_Lvx8.PHXtz8.ePfrz68u3Z3k728eOrnnx511wSOVVsST58e_Lvx8.PHXtrammigcamlqclrz4wA-- HTTP/1.1\r\nHost: syndication.realsrv.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://w7.eurosptp.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 24 Sep 2024 17:27:40 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: \r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20,"size_decoded":20,"mime_type":"text/html; charset=UTF-8","magic":"gzip compressed data, max speed, from Unix","md5":"a4745abc5e7fdb89cc6df3069f3c6e69","sha1":"74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed","sha256":"d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf","sha512":"849461cb54ecde577246aad993d1ecabb879913e353ae322561c7c57605f571e23210fe12bdcef49faa99b5b003611976ff64348f620968271e38bba1c7d7f62","ssdeep":"","tlshash":"ce70000000003c30cc000030000fc000000c30003000c00300000030000300300c003f","first_seen":"2023-04-08T01:36:47Z","last_seen":"2025-03-02T02:51:47.01042Z","times_seen":42040,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":1,"connect":24,"send":0,"wait":31,"receive":1,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redirect3.online/adx.html","fqdn":"redirect3.online","domain":"redirect3.online","tld":"online"},"ip":{"addr":"104.21.55.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:38.352Z","timestamp":1727198858352,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redirect3.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Sep 2024 16:21:21 GMT","end":"Mon, 02 Dec 2024 16:21:20 GMT"},"fingerprint":{"sha1":"46:1D:B0:17:F7:A5:4C:43:98:0F:A7:F0:E3:13:1A:C5:65:27:15:AD","sha256":"69:65:AB:BA:8F:55:4D:8C:ED:7A:0B:18:55:8C:05:31:E5:C9:2F:37:39:0B:7F:BF:99:F9:58:33:1B:42:6C:CF"}}},"request":{"raw":"GET /adx.html HTTP/1.1\r\nHost: redirect3.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 40306\r\nlast-modified: Tue, 24 Sep 2024 06:15:51 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=AdE0yZJAIZ6v%2FMMdCZXse0%2FrM9W9W12il7l%2BWxhwH8zy%2F9j2gJk8ZCg13Yj5SiPK5lwTME6oDapwlmrJqnvij%2B2P8LA8Pum6iFUegC6zN2N2V%2BWf%2Fc4K%2FB22lfOCoXuhf%2B1B\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c7a194b62ba-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2850,"size_decoded":241,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"e68274eaddcb278627ae5fa811e14a22","sha1":"2febe57593cc1c6551382c4136f97c3e8dcea2a2","sha256":"6e6df531ead721829cb63c65845a5ddbb325423f1b2035cb4be091b66857dcfb","sha512":"dca42989b2f87a9df6d9d528d1cc8db787a06077afc3349ec4a48a23d69b01104f331d97a0066c4fcd222396635cf33642e1f5198d65b1a9b879a941ae598f70","ssdeep":"","tlshash":"b8d0a7f7dc28d545027042603970f34c786761480769d059e0c2c57794e4fd39f873d9","first_seen":"2023-04-09T11:23:16Z","last_seen":"2024-10-11T09:19:30.969749Z","times_seen":20,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndication.realsrv.com/vregister.php?a=vview\u0026tracking_event=progress\u0026progress=00:00:10.000\u0026idzone=3981938\u00262f0c2af9d35a1a2cdde21db2fe9eb7be=tsVuZ8uHLpt4edvLpq48_XLv659tdlTlK8E.fnju88N3Tlu49emtqayWunDMos7XA3GxK9Yw85n0466oK3F35qq5WJHM2G7I65JmYI3K6WHXYGtzU0muBthu1ymuCpynPxw5dOXTXA3PYzHBU.5Tn34dOnPprgbqgrcz8d.vnj41wN4zSuZ8_Pjj55.NcDbTFbj01OGfXh41wNtMSTsQPS59ePfx258tcDdrFMDFcE0ufHh078uPTl21wNzVZ8euuBtmma6pynPnrgbbctgacz4a4G2mKaYHKc.GuBuCqfPhrqsZz4a7WI7HM.27gDt6657GY4Kn3KV6WK3M._DXPYzHBU.5Su1ZTS5K1hmCidraYknYgelXasppclawzRPA1uXtPsSvOL1zLz2MxwVPuU58N3nhy6a3L2n2JXnF65l5XK7pqYs.OthtevCdzPnx1uzUyMV564G5XK7pqYs.OtqayWunBeamB6CViPMos7W_XXOveu7NTcxS242u7NTnrgbnpmbsarXaYrcempwz4.Nc9MDUEry8kzbkefjW_XXPVnx11NUuOSr0uVTR2VwTS567KnKV4G8.GuymNd9ip_Nvlz6cejrTrPnp45cGHGvHLs6z44dfHTt54ua4JJ6XKqoJpV6q2K7Ks.OuCSelyqqCaVeCW1iOBtelxiqaXPhrpcdcpcpXqgrcXfmqrlYkczu77nLKZqp659zU0mthtmOZqLPhrgbmddcpz4a4G42JW4JXl52HnM.Gu2BtyZdy1yWvPW5TTNS1M25nrgbbYrYaclrcpz5a4G2mKaYHKV6prKWnM.GuWapqmCevPhrglamelgrmXkmbcz4a63Kq15Jm3M.Gulx6CaVd5yaViRxeBvPhrnpmvwXqrYrsqz28dcDc7FNcrlOfDW1BXgu85NKxI4vA3nz49ePbl31yuVsNWQV4Lz0zX4L14TuZ65XK2GrIK8F56Zr8F23KmqYJ64Jpc9bDbMczUS9rlOeuCSelyqqCaVdiONeCW1iOBtelxiqaWrPhrqsZ5Z8NdVjPPPhrqapgnrXrwncz11NUwT1rysSOZ66mqYJ617XKc9bNM11TlK9rlOfDXbTnw1wS1uUysR58Ncsy7tkrdWfDXA3S5VPNLVBa4vGxhNZXnw1wNyWR1wYzSuZ8NbkjEEa8FU.fDXU1TBPWu25WxBHn211NUwT1r2uU1QTS58dcDbDdrlNcFTlK7Da9eE7mfLjrgbnpmvwz4a2G16XKLHKq16XKrI68.OuBuVyu6amJevCdzPjrgbaYknYgelXrwncz4a6a2V4JbXJa5qcF4G89dNbK8Etrktc1OC8rEjmeuJzBe1iOxxfjnw1xOYL2sR2OL8s.GuJzBe1iOxxfnnw1xOYL2sR2OL9M.GuJzBe1iOxxfrnw1xOYL2sR2OL9s.GuJzBe1iOxxfvnw1xOYL2sR2OL.M.GuJzBe1iOxxfznw1xOYL2sR2OL8eGfDXA3XSw67A0vVNZS05ny122WQN58e_Lvx8.PHXt27dO_Tx18dO3Z3k728eO3DgwzrrgkcqrYknz49.Xfj58eOvbW1NNFA41NLU5LXnxgA--","fqdn":"syndication.realsrv.com","domain":"realsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://w7.eurosptp.com/page.php?fr\u0026countrycode=coutry","date":"2024-09-24T17:27:40.576Z","timestamp":1727198860576,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"realsrv.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Sep 2024 10:35:05 GMT","end":"Wed, 11 Dec 2024 10:35:04 GMT"},"fingerprint":{"sha1":"95:7B:F0:3D:0B:82:4B:0B:7F:3B:06:68:76:24:A6:18:CE:1F:1C:FA","sha256":"A6:2B:F5:D8:36:FD:0D:0E:D8:34:F7:08:44:11:AC:85:FD:C3:D8:E1:8B:C8:6D:51:C9:1C:6C:44:D8:B3:9F:0D"}}},"request":{"raw":"GET /vregister.php?a=vview\u0026tracking_event=progress\u0026progress=00:00:10.000\u0026idzone=3981938\u00262f0c2af9d35a1a2cdde21db2fe9eb7be=tsVuZ8uHLpt4edvLpq48_XLv659tdlTlK8E.fnju88N3Tlu49emtqayWunDMos7XA3GxK9Yw85n0466oK3F35qq5WJHM2G7I65JmYI3K6WHXYGtzU0muBthu1ymuCpynPxw5dOXTXA3PYzHBU.5Tn34dOnPprgbqgrcz8d.vnj41wN4zSuZ8_Pjj55.NcDbTFbj01OGfXh41wNtMSTsQPS59ePfx258tcDdrFMDFcE0ufHh078uPTl21wNzVZ8euuBtmma6pynPnrgbbctgacz4a4G2mKaYHKc.GuBuCqfPhrqsZz4a7WI7HM.27gDt6657GY4Kn3KV6WK3M._DXPYzHBU.5Su1ZTS5K1hmCidraYknYgelXasppclawzRPA1uXtPsSvOL1zLz2MxwVPuU58N3nhy6a3L2n2JXnF65l5XK7pqYs.OthtevCdzPnx1uzUyMV564G5XK7pqYs.OtqayWunBeamB6CViPMos7W_XXOveu7NTcxS242u7NTnrgbnpmbsarXaYrcempwz4.Nc9MDUEry8kzbkefjW_XXPVnx11NUuOSr0uVTR2VwTS567KnKV4G8.GuymNd9ip_Nvlz6cejrTrPnp45cGHGvHLs6z44dfHTt54ua4JJ6XKqoJpV6q2K7Ks.OuCSelyqqCaVeCW1iOBtelxiqaXPhrpcdcpcpXqgrcXfmqrlYkczu77nLKZqp659zU0mthtmOZqLPhrgbmddcpz4a4G42JW4JXl52HnM.Gu2BtyZdy1yWvPW5TTNS1M25nrgbbYrYaclrcpz5a4G2mKaYHKV6prKWnM.GuWapqmCevPhrglamelgrmXkmbcz4a63Kq15Jm3M.Gulx6CaVd5yaViRxeBvPhrnpmvwXqrYrsqz28dcDc7FNcrlOfDW1BXgu85NKxI4vA3nz49ePbl31yuVsNWQV4Lz0zX4L14TuZ65XK2GrIK8F56Zr8F23KmqYJ64Jpc9bDbMczUS9rlOeuCSelyqqCaVdiONeCW1iOBtelxiqaWrPhrqsZ5Z8NdVjPPPhrqapgnrXrwncz11NUwT1rysSOZ66mqYJ617XKc9bNM11TlK9rlOfDXbTnw1wS1uUysR58Ncsy7tkrdWfDXA3S5VPNLVBa4vGxhNZXnw1wNyWR1wYzSuZ8NbkjEEa8FU.fDXU1TBPWu25WxBHn211NUwT1r2uU1QTS58dcDbDdrlNcFTlK7Da9eE7mfLjrgbnpmvwz4a2G16XKLHKq16XKrI68.OuBuVyu6amJevCdzPjrgbaYknYgelXrwncz4a6a2V4JbXJa5qcF4G89dNbK8Etrktc1OC8rEjmeuJzBe1iOxxfjnw1xOYL2sR2OL8s.GuJzBe1iOxxfnnw1xOYL2sR2OL9M.GuJzBe1iOxxfrnw1xOYL2sR2OL9s.GuJzBe1iOxxfvnw1xOYL2sR2OL.M.GuJzBe1iOxxfznw1xOYL2sR2OL8eGfDXA3XSw67A0vVNZS05ny122WQN58e_Lvx8.PHXt27dO_Tx18dO3Z3k728eO3DgwzrrgkcqrYknz49.Xfj58eOvbW1NNFA41NLU5LXnxgA-- HTTP/1.1\r\nHost: syndication.realsrv.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://w7.eurosptp.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 24 Sep 2024 17:27:40 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: \r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20,"size_decoded":20,"mime_type":"text/html; charset=UTF-8","magic":"gzip compressed data, max speed, from Unix","md5":"a4745abc5e7fdb89cc6df3069f3c6e69","sha1":"74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed","sha256":"d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf","sha512":"849461cb54ecde577246aad993d1ecabb879913e353ae322561c7c57605f571e23210fe12bdcef49faa99b5b003611976ff64348f620968271e38bba1c7d7f62","ssdeep":"","tlshash":"ce70000000003c30cc000030000fc000000c30003000c00300000030000300300c003f","first_seen":"2023-04-08T01:36:47Z","last_seen":"2025-03-02T02:51:47.01042Z","times_seen":42040,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":1,"connect":24,"send":0,"wait":29,"receive":1,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/zentrix.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.367Z","timestamp":1727198859367,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /zentrix.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:36 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 449826\r\nlast-modified: Thu, 19 Sep 2024 12:30:30 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=a463JBcvEKemvg110%2BBtLAFhk6wwrKWkfyhoXBsx7v00BPbH3IAlNXskkQvzirNrGSxp1rInn0JBtEcubjuR4z5tNeyeQblY%2BvNndMURwAD6bwB3%2Foib5Fhj0GrWztbF6DsD\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c77bd37726c-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":359,"size_decoded":261,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"2ca8c6b700ea75f2e732fa13a11953e4","sha1":"fa4a96ee5d5fc21e3466eaf020383e9d00675c52","sha256":"aa429c98e1fe589955113bcb136a86e4ba2a5e398759f3965ea2fdf90317a4a0","sha512":"ecb8225fdc7ce5f2e924c8934c3b393f187802a356eabbe0180f1be45382b3ebcf4120805b7442f157bf501430c7304c30503821ee91f9722d7773007a38d96e","ssdeep":"","tlshash":"0ad05bfb1d145e0545b050351d61b38e17aba15017d5a7519095966b1044bd79e833c5","first_seen":"2024-09-23T12:26:51Z","last_seen":"2024-10-11T09:11:44.806244Z","times_seen":10,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sub.votreimc.com/purea.html","fqdn":"sub.votreimc.com","domain":"votreimc.com","tld":"com"},"ip":{"addr":"172.67.222.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.385Z","timestamp":1727198859385,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votreimc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Sep 2024 02:12:01 GMT","end":"Sat, 14 Dec 2024 02:12:00 GMT"},"fingerprint":{"sha1":"AF:56:A8:13:7B:6E:27:2B:03:40:18:37:A2:8B:CA:0F:2F:6D:E0:FA","sha256":"44:AD:5E:CF:7E:DE:B0:30:21:4D:10:85:AA:65:B9:AC:F4:EA:F9:DA:BC:84:CE:A6:39:8C:B9:24:E9:77:43:4A"}}},"request":{"raw":"GET /purea.html HTTP/1.1\r\nHost: sub.votreimc.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nx-iplb-request-id: A29ECB22:302A_91EF25A2:0050_66EB1199_ACE5B:14E7\r\nx-iplb-instance: 52324\r\ncf-cache-status: HIT\r\nage: 517360\r\nlast-modified: Wed, 18 Sep 2024 17:44:57 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=wTo6bva%2BQa3Huvk1iOivYFyAHS%2BQiRFo4yekQrGU7tjKhqP%2BnwaLa%2FJp8ASqQLlC%2BvdiP86Zzu26J56rMwPxlsQ2%2BKpuv9GdxThufqVEPRpUBh4dmzj4iI9LbZdls4H27aEt\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c79188462b8-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":669,"size_decoded":251,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0cdfd400d8a358e4c558285a7adedf94","sha1":"000a2821adbaa14a1362317d6f17ed3b84fab5fa","sha256":"3c4453dc036926d8bffd286842ac26fec41f64dc4e98d80733709437a1025eaa","sha512":"c1bb81b83fc975807f843eccbd6a795e28fe2e4a2f7725f854c8a5385fede04064a00bdc60fadb78c76bbb1efec9835f1ca053f58b4e31453b3a407a6bf62440","ssdeep":"","tlshash":"8bd097e30c18c009817080202c62b20a38ea730802aae994e0c2c5679c85bc3cc077d8","first_seen":"2023-04-09T11:23:24Z","last_seen":"2024-10-11T09:11:44.807584Z","times_seen":13,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:41.328412099Z","timestamp":1727198861328,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"F9AB7CF06E984E519DBF46A0518C29D00183E037295E9F7EE5512BF484C98453\"\r\nLast-Modified: Sun, 22 Sep 2024 15:40:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=13827\r\nExpires: Tue, 24 Sep 2024 21:18:08 GMT\r\nDate: Tue, 24 Sep 2024 17:27:41 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"65c7f259e6991e4e9fc755f7b20edfd4","sha1":"24bd0302548ffaca3fb5e62f5520eb7b4ba9a0d2","sha256":"f9ab7cf06e984e519dbf46a0518c29d00183e037295e9f7ee5512bf484c98453","sha512":"4d21ce97e82db9c16975976ee18668db3e0dc9407015126452632062f617459ea07605b491e6c1afe08d7d11e348e31c6061cfa4e74498ae0ae6efa10d1a553f","ssdeep":"","tlshash":"61f005c12a52ed4486a02f3fd8d2d53135343fb9264408d5c1cc57f17e21bd96f8450c","first_seen":"2024-09-23T11:48:59Z","last_seen":"2024-09-28T08:19:06.009181Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-good.com/infinitym.html","fqdn":"ad-good.com","domain":"ad-good.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.447Z","timestamp":1727198859447,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-good.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Aug 2024 12:01:51 GMT","end":"Sun, 10 Nov 2024 12:01:50 GMT"},"fingerprint":{"sha1":"77:4B:2C:D9:8C:89:13:31:AF:23:8C:04:14:AA:A5:93:B9:95:86:50","sha256":"05:8A:8C:C7:83:B7:64:C0:B5:21:77:3B:A5:F6:F1:7E:DE:19:31:34:57:A5:16:CC:06:08:40:4E:39:C0:EC:FD"}}},"request":{"raw":"GET /infinitym.html HTTP/1.1\r\nHost: ad-good.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 540602\r\nlast-modified: Wed, 18 Sep 2024 11:17:35 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=EBcKkRrxiOmJ8hOBraECwgNA%2BphQhcl7BTtmVqqE9k%2BZ76Y7CUu67x6zKHt1Hu8yGTfsAVM0xZgSZWjD02cKxGwVxxIEDWUoC2DXpVXbxwKK0q6gHV0R%2FlV51DHzMg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c794bd19fae-AMS\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":683,"size_decoded":269,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"80bce05134661cfa800dab09d49dc6fd","sha1":"276dd8d87267f2cb3123fe0d4e4b46be1a29f835","sha256":"85266dfb71e827ef5836821ba41041b8e159c0bbabbb8f76422b9138dcce84e9","sha512":"4bbbcb563f226f9adc2b928cbdffb284dbe7c41e8135701d9d861c70f4f351257d676868bd85bac67ccb5821fcea1eb974e0845fec7b7ac95165bccbda795554","ssdeep":"","tlshash":"c3d02bfb18060d0726f041392ca3f288285374d0535be040d080813b90d0bc6dc427cd","first_seen":"2023-04-09T11:23:16Z","last_seen":"2024-10-11T09:19:30.977283Z","times_seen":25,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sub.votreimc.com/adzgameadu.html","fqdn":"sub.votreimc.com","domain":"votreimc.com","tld":"com"},"ip":{"addr":"172.67.222.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.392Z","timestamp":1727198859392,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votreimc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Sep 2024 02:12:01 GMT","end":"Sat, 14 Dec 2024 02:12:00 GMT"},"fingerprint":{"sha1":"AF:56:A8:13:7B:6E:27:2B:03:40:18:37:A2:8B:CA:0F:2F:6D:E0:FA","sha256":"44:AD:5E:CF:7E:DE:B0:30:21:4D:10:85:AA:65:B9:AC:F4:EA:F9:DA:BC:84:CE:A6:39:8C:B9:24:E9:77:43:4A"}}},"request":{"raw":"GET /adzgameadu.html HTTP/1.1\r\nHost: sub.votreimc.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nx-iplb-request-id: A29ECA41:2A72_91EF25A2:0050_66EAF63C_735B3:688D\r\nx-iplb-instance: 52360\r\ncf-cache-status: HIT\r\nage: 524365\r\nlast-modified: Wed, 18 Sep 2024 15:48:12 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2FjfuuYouJ0%2F4N9DUNHJ9xzL5TA1nY9klrmILcRZL3uzQ5i%2FfJYPh5osFbdMvPtJOZfBUmaAM79XkRMnRFJ36ivSaa3FW%2BWQXNmHyZ6pF9euj%2BZvyLMXIHKoZenJomxEPh0Fc\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c79289662b8-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":667,"size_decoded":252,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"d6074db3598998fae7163cdad999149b","sha1":"d4a7faf80dd7b86a1c152a7bd0a6379bbd680d42","sha256":"ce53277716461aaf17b92ac32c1107ebda24affef71024ed525c921495c216be","sha512":"1a1634d0d9f8575c03acacf2f868a49db7dcb4a81a73a5586b5db7ae147d7dc6a8163e36254d07d1c4c6b432f080a716896ce295fb84c8dfec36d0a799f3ce42","ssdeep":"","tlshash":"52d0a7e71d1b564709708070bd71f34cd462719852aee849e7c5d1e7a090fd6dc063d5","first_seen":"2023-04-09T11:23:16Z","last_seen":"2024-10-11T09:11:44.804499Z","times_seen":19,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sub.votreimc.com/adzgameadu1.html","fqdn":"sub.votreimc.com","domain":"votreimc.com","tld":"com"},"ip":{"addr":"172.67.222.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.416Z","timestamp":1727198859416,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votreimc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Sep 2024 02:12:01 GMT","end":"Sat, 14 Dec 2024 02:12:00 GMT"},"fingerprint":{"sha1":"AF:56:A8:13:7B:6E:27:2B:03:40:18:37:A2:8B:CA:0F:2F:6D:E0:FA","sha256":"44:AD:5E:CF:7E:DE:B0:30:21:4D:10:85:AA:65:B9:AC:F4:EA:F9:DA:BC:84:CE:A6:39:8C:B9:24:E9:77:43:4A"}}},"request":{"raw":"GET /adzgameadu1.html HTTP/1.1\r\nHost: sub.votreimc.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nx-iplb-request-id: A29ECA61:FC26_91EF25A2:0050_66EB32F3_3275E:7E2A\r\nx-iplb-instance: 52335\r\ncf-cache-status: HIT\r\nage: 508822\r\nlast-modified: Wed, 18 Sep 2024 20:07:15 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=HXBOSoAK47IgllRxswZHZPqB4sWztcZLMA2usOAD9B6NXakkwg1pYT2Ynayvyu3vlZBQSzZaxJvZ%2BFSbpiHX97Y%2B9Cw0cuUcFhDY5aykdxxvWtp1wbXiV5FgZBjLh5zdXlhh\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c78cff862b8-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":668,"size_decoded":260,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8c684e94e53291fea3612da08ad3300b","sha1":"cc22c6f1b50fdc4cf530a25dfb866b6ef34a368f","sha256":"8d3387e0191b32c6c684bbcc1584b8b03b28eab59b7b46df96e66754233f6836","sha512":"e246eb99d6ac2d4c47f8c25f12f3bcf7a992bc44b8eb039beb4d5914cc31d71b3c497a305b88e27f510324f4a66257b1af7257c2d740abe40f68a61013a649e5","ssdeep":"","tlshash":"f4d05ee71c1a951769b08021ac71734cd427719956ad9898a2c5f2e790d0bd2ec063a9","first_seen":"2024-04-09T19:05:01Z","last_seen":"2024-10-11T09:11:44.80058Z","times_seen":23,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-good.com/infinitya.html","fqdn":"ad-good.com","domain":"ad-good.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:37.801Z","timestamp":1727198857801,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-good.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Aug 2024 12:01:51 GMT","end":"Sun, 10 Nov 2024 12:01:50 GMT"},"fingerprint":{"sha1":"77:4B:2C:D9:8C:89:13:31:AF:23:8C:04:14:AA:A5:93:B9:95:86:50","sha256":"05:8A:8C:C7:83:B7:64:C0:B5:21:77:3B:A5:F6:F1:7E:DE:19:31:34:57:A5:16:CC:06:08:40:4E:39:C0:EC:FD"}}},"request":{"raw":"GET /infinitya.html HTTP/1.1\r\nHost: ad-good.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 512732\r\nlast-modified: Wed, 18 Sep 2024 19:02:07 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=FiikoTo9HQLvyzdlpbL0ubSQFDveKhbJbO5NH0dMkOc09g2xHjyJJLM3Em5a6ntNz1z5qGd%2BJMisX%2F3Y5%2FgV4G9fJdKLJAZ5kldZEqFYRRLvE9W5Xths%2FFSl9i3fFw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c855a6dca81-HAM\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":190,"size_decoded":267,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"e729b5e67c35d8431059d4aafa0ef683","sha1":"dfbe506fa025cda8f84ebdf0df5201cf0aa665ab","sha256":"232543b1420fd55a20cceeb9754ca35cdf7c78e1f6d1079eb9df6a549e0705aa","sha512":"c53e78f33860d41c9b97d883f808747081c4c78357199a96cf2e61baa893f318074079019faa9eb675df21d5c1cd1053a5b5e2115fe933d89cf5e37ed66e12ed","ssdeep":"","tlshash":"1ad05bff19165c1712f541791ca1f284685669d01b5ba545d084913f9090fdbec4279e","first_seen":"2024-08-04T23:41:47Z","last_seen":"2024-10-06T09:43:58.160984Z","times_seen":16,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.thenetwork18.com/redirect?feed=480554\u0026auth=PFCO9K\u0026subid=xxxcartoon1.com\u0026query=sexporn1\u0026url=xxxcartoon1.com","fqdn":"xml.thenetwork18.com","domain":"thenetwork18.com","tld":"com"},"ip":{"addr":"174.137.133.17","port":0,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.011Z","timestamp":1727198862011,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=480554\u0026auth=PFCO9K\u0026subid=xxxcartoon1.com\u0026query=sexporn1\u0026url=xxxcartoon1.com HTTP/1.1\r\nHost: xml.thenetwork18.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Tue, 24 Sep 2024 17:27:41 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-store\r\nLocation: https://olivedinflats.space/redirect?tid=926092\u0026subid=540352.597412\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":0,"dns":1,"connect":112,"send":0,"wait":0,"receive":0,"ssl":-1},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.thenetwork18.com/redirect?feed=417208\u0026auth=jM4Vu4\u0026subid=sexporn\u0026query=sexporn\u0026url=sexporn.com","fqdn":"xml.thenetwork18.com","domain":"thenetwork18.com","tld":"com"},"ip":{"addr":"174.137.133.17","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:40.922Z","timestamp":1727198860922,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"thenetwork18.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Aug 2024 06:44:04 GMT","end":"Thu, 14 Nov 2024 06:44:03 GMT"},"fingerprint":{"sha1":"DE:F8:57:E9:9E:C8:28:10:1A:84:95:77:B5:AE:A3:C3:5D:B3:23:6E","sha256":"36:97:C1:9A:7A:91:FC:D1:C3:20:F2:A1:59:55:26:7D:93:EA:2E:06:58:1E:AC:D2:EE:E7:B9:84:F2:71:0A:9E"}}},"request":{"raw":"GET /redirect?feed=417208\u0026auth=jM4Vu4\u0026subid=sexporn\u0026query=sexporn\u0026url=sexporn.com HTTP/1.1\r\nHost: xml.thenetwork18.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Tue, 24 Sep 2024 17:27:41 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-store\r\nLocation: https://dessedcuression.com/73470700-5fbd-4cf9-8476-9ce06ef734ac?banner=6513433\u0026pubfeed=578707\u0026siteid=707825_695395\u0026cost=0.00011\u0026conversion=5ZZ1o60yHpg\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":2356,"timings":{"blocked":934,"dns":90,"connect":99,"send":0,"wait":133,"receive":0,"ssl":1095},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.thenetwork18.com/redirect?feed=431558\u0026auth=3q55aa\u0026subid=pop\u0026query=pop\u0026url=pop.php","fqdn":"xml.thenetwork18.com","domain":"thenetwork18.com","tld":"com"},"ip":{"addr":"174.137.133.17","port":0,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.009Z","timestamp":1727198862009,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=431558\u0026auth=3q55aa\u0026subid=pop\u0026query=pop\u0026url=pop.php HTTP/1.1\r\nHost: xml.thenetwork18.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Tue, 24 Sep 2024 17:27:41 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-store\r\nLocation: https://cryingforthemoo.info/redirect?tid=1060206\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":0,"dns":1,"connect":108,"send":0,"wait":0,"receive":0,"ssl":-1},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.zentrixads.com/redirect?feed=708262\u0026auth=ZtQb\u0026subid=zentrix\u0026query=zentrix\u0026url=zentrixads.com","fqdn":"xml.zentrixads.com","domain":"zentrixads.com","tld":"com"},"ip":{"addr":"173.239.53.20","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.074Z","timestamp":1727198862074,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"zentrixads.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Aug 2024 06:43:54 GMT","end":"Fri, 08 Nov 2024 06:43:53 GMT"},"fingerprint":{"sha1":"F2:86:E7:12:4A:4C:AD:C4:A5:BC:D4:4A:D8:E2:79:04:70:29:85:2B","sha256":"50:46:92:6C:46:D5:FD:F0:B1:78:B4:49:76:6C:9F:5F:DF:00:5D:2D:89:04:55:36:C4:CB:82:D3:85:E7:A9:8F"}}},"request":{"raw":"GET /redirect?feed=708262\u0026auth=ZtQb\u0026subid=zentrix\u0026query=zentrix\u0026url=zentrixads.com HTTP/1.1\r\nHost: xml.zentrixads.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Tue, 24 Sep 2024 17:27:42 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-store\r\nLocation: https://de.forerungirdles.com/i6oKq6spPDgpeY/QrOEQ\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":792,"timings":{"blocked":219,"dns":0,"connect":0,"send":0,"wait":573,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redirect3.online/flurryn2.html","fqdn":"redirect3.online","domain":"redirect3.online","tld":"online"},"ip":{"addr":"104.21.55.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:37.020Z","timestamp":1727198857020,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redirect3.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Sep 2024 16:21:21 GMT","end":"Mon, 02 Dec 2024 16:21:20 GMT"},"fingerprint":{"sha1":"46:1D:B0:17:F7:A5:4C:43:98:0F:A7:F0:E3:13:1A:C5:65:27:15:AD","sha256":"69:65:AB:BA:8F:55:4D:8C:ED:7A:0B:18:55:8C:05:31:E5:C9:2F:37:39:0B:7F:BF:99:F9:58:33:1B:42:6C:CF"}}},"request":{"raw":"GET /flurryn2.html HTTP/1.1\r\nHost: redirect3.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 40306\r\nlast-modified: Tue, 24 Sep 2024 06:15:50 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=H%2Ba1KPZ8MV76mvlUL4Kcb9nqiq07KGT1Wf%2FS2h2Kiyna6r2xhoWa2UV69xfHEtFfgXusmEzx7VIKXWWwa6le4MiK9vZKNvm3yb43kSvEThU27CGTLInPLhkkmRH%2FqaU%2BCMVH\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c781d0e62ba-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":162,"size_decoded":247,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"fff76197cc72760635a02c0b3962bb00","sha1":"5f709c9bbdd9da55704f8ffc2771a11adfb2ae50","sha256":"25697b0632a85d8b7d28453f787a0064d57a915a6cb8fb33a6eced9991952fd4","sha512":"31451d3b6b8a1b97aae3acf37cdc006e3e544eaf6babfe7e3afcbfebe69a06723addfc42899e67f1dca64c7dbe3fe4436d0b404aa94c03aff02a19aae6936aed","ssdeep":"","tlshash":"d9d0a7eb1e096b0df1a040502974b2883c66a648366ef0faf1c9c26f5090fd7dc473d5","first_seen":"2024-05-16T10:22:41Z","last_seen":"2024-10-11T09:19:30.97503Z","times_seen":24,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndication.realsrv.com/splash.php?idzone=3981938","fqdn":"syndication.realsrv.com","domain":"realsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://w7.eurosptp.com/page.php?fr\u0026countrycode=coutry","date":"2024-09-24T17:27:36.282Z","timestamp":1727198856282,"http_version":"HTTP/1.1","security_state":"secure","security_info":null,"request":{"raw":"GET /splash.php?idzone=3981938 HTTP/1.1\r\nHost: syndication.realsrv.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://w7.eurosptp.com/\r\nOrigin: https://w7.eurosptp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 24 Sep 2024 17:27:42 GMT\r\nContent-Type: text/xml;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Headers: X-CH-VALUES\r\nSet-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%2266f2f68e546c81.667226932779931464%22%3B%7D; expires=Thu, 24 Sep 2026 17:27:42 GMT; path=; domain=.realsrv.com; Secure; SameSite=none\nc-tag=%7B%22tag-video%22%3A%22v4%7C%7CNOR%7C3981938%7C104721402%7C0%7C%7C508%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C3163480%7C3151627%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C%7C0%7Cw7.eurosptp.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1727198862%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1%7Ca60e572acfbf402f44b3d6200742aa18%7Cok%22%7D; expires=Wed, 25 Sep 2024 17:27:42 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none\r\nCache-Control: no-store\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: https://w7.eurosptp.com\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2685,"size_decoded":6656,"mime_type":"text/xml; charset=UTF-8","magic":"XML 1.0 document, ASCII text, with very long lines (1897)","md5":"b332da4a570df4990fd735039bcce889","sha1":"74c872fd48fb39887940ad0683ce1133f95bdfa2","sha256":"82b03fc8655578e3f1a0a5505b74727f1c7a13274d800f7825d859be9dce8f16","sha512":"15976a4588a5a1a8072c02b3ce60ac710da9b8250bff1fd2c1450ea31c5ca81f3b5dec480aa67fdb35828dbc4e8d96f313b449cdab0260c0d323e04e663f4fa6","ssdeep":"96:kBpUfVhzfyLoXEWq063tyqrvAEdPGXTyKUfVhzfoLoXEWq063ty1Pz+ndabCrx4s:MpUthT2o0servvyHUthTAo0sRukb3kbF","tlshash":"add13cb960d88bad017050f7c7b1718f9f950f6f1945ca99b18eea81df3693052e3a20","first_seen":"2024-09-28T07:59:48.691108Z","last_seen":"2024-09-28T07:59:48.691108Z","times_seen":1,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":87,"dns":1,"connect":29,"send":0,"wait":68,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndication.realsrv.com/splash.php?idzone=3981938","fqdn":"syndication.realsrv.com","domain":"realsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://w7.eurosptp.com/page.php?fr\u0026countrycode=coutry","date":"2024-09-24T17:27:36.282Z","timestamp":1727198856282,"http_version":"HTTP/1.1","security_state":"secure","security_info":null,"request":{"raw":"GET /splash.php?idzone=3981938 HTTP/1.1\r\nHost: syndication.realsrv.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://w7.eurosptp.com/\r\nOrigin: https://w7.eurosptp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 24 Sep 2024 17:27:42 GMT\r\nContent-Type: text/xml;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Headers: X-CH-VALUES\r\nSet-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%2266f2f68e5e5218.020341833006478767%22%3B%7D; expires=Thu, 24 Sep 2026 17:27:42 GMT; path=; domain=.realsrv.com; Secure; SameSite=none\nc-tag=%7B%22tag-video%22%3A%22v4%7C%7CNOR%7C3981938%7C104721410%7C0%7C%7C508%7C41%7C3%7C15%7C0%7C0%7C0%7C25344%7C3163480%7C3151627%7C0%7C1%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C1%7C%7C%7C0%7Cw7.eurosptp.com%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1727198862%7C%7C%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C1%7Cefd4aed4e9648065b4e0a871c32bbd67%7Cok%22%7D; expires=Wed, 25 Sep 2024 17:27:42 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none\r\nCache-Control: no-store\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: https://w7.eurosptp.com\r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2681,"size_decoded":6664,"mime_type":"text/xml; charset=UTF-8","magic":"XML 1.0 document, ASCII text, with very long lines (1897)","md5":"fb5d2ac5b0c0031ec1c87ecf1e19be0b","sha1":"aaa6bbba0e2fb6c88e960836f0bc7e3e22d20cfe","sha256":"a0782d0b2c6dc0240b342ec781fffe470ba1bc1032e229cedda26f3685f844a5","sha512":"000a0a9328d20d92cbbdb5a016500ee211ff9adac2b27de2e308b1d04a718234981b291a1f971a7ee45de884665eb3d6e9d4f7957bb55435f8df1d411d2fec4a","ssdeep":"96:kBpYfVhzfyLoXEWq063tyal5QdxXTyKYfVhzfoLoXEWq063ty1uEu64u8x4LEu6z:MpYthT2o0sWl5iHYthTAo0sRs4s","tlshash":"52d13cb960e98ffc422050f6c360648b8fe98f5b5687cb54f14fda819f268b885d3134","first_seen":"2024-09-28T07:59:48.693169Z","last_seen":"2024-09-28T07:59:48.693169Z","times_seen":1,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":87,"dns":1,"connect":29,"send":0,"wait":68,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndication.realsrv.com/vregister.php?a=vimp\u0026tracking_event=impression\u0026idzone=3981938\u00262f0c2af9d35a1a2cdde21db2fe9eb7be=tsVuZ8uHLpt4edvLpq48_XLv66ctdlTlK8E.fnju88N3Tlu49emtqayWunDMos7XA3GxK9Yw85n0466oK3F35qq5WJHM2G7I65JmYI3K6WHXYGtzU0muBthu1ymuCpynPxw5dOXTXA3PYzHBU.5Tn34dOnPprgbqgrcz8d.vnj41wN4zSuZ8_Pjj55.NcDbTFbj01OGfXh41wNtMSTsQPS59ePfx258tcDdrFMDFcE0ufHh078uPTjw1wNzVZ8euuBtmma6pynPnrgbbctgacz4a4G2mKaYHKc.GuBuCqfPhrqsZz4a7WI7HM.27gDt6657GY4Kn3KV6WK3M._DXPYzHBU.5Su1ZTS5K1hmCidraYknYgelXasppclawzRPA1uXtPsSvOL1zLz2MxwVPuU58N3nhy6a3L2n2JXnF65l5XK7pqYs.OthtevCdzPnx1uzUyMV564G5XK7pqYs.OtqayWunBeamB6CViPMos7W_XXOveu7NTcxS242u7NTnrgbnpmbsarXaYrcempwz4.Nc9MDUEry8kzbkefjW_XXPVnx11NUuOSr0uVTR2VwTS567KnKV4G8.GuymNd9ip_Nvlz6cejrTrPnp45cGHGvHLs6z44dfHTt54ua4JJ6XKqoJpV6q2K7Ks.OuCSelyqqCaVeCW1iOBtelxiqaXPhrpcdcpcpXqgrcXfmqrlYkczu77nLKZqp659zU0mthtmOZqLPhrgbmddcpz4a4G42JW4JXl52HnM.Gty9xqyuCaVeuCRzPhrgbbYrYaclrcpz5a4G2mKaYHKV6prKWnM.GuWapqmCevPhrglamelgrmXkmbcz4a63Kq15Jm3M.Gulx6CaVd5yaViRxeBvPhrnpmvwXqrYrsqz28dcDc7FNcrlOfDW1BXgu85NKxI4vA3nz49ePbl31yuVsNWQV4Lz0zX4L14TuZ65XK2GrIK8F56Zr8F23KmqYJ64Jpc9bDbMczUS9rlOeuCSelyqqCaVdiONeCW1iOBtelxiqaWrPhrqsZ5Z8NdVjPPPhrqapgnrXrwncz11NUwT1rysSOZ66mqYJ617XKc9bNM11TlK9rlOfDXbTnw1wS1uUysR58Ncsy7tkrdWfDXA3S5VPNLVBa4vGxhNZXnw1wNyWR1wYzSuZ8NbkjEEa8FU.fDXU1TBPWu25WxBHn211NUwT1r2uU1QTS58dcDbDdrlNcFTlK7Da9eE7mfLjrgbnpmvwz4a2G16XKLHKq16XKrI68.OuBuVyu6amJevCdzPjrgbaYknYgelXrwncz4a6a2V4JbXJa5qcF4G89dNbK8Etrktc1OC8rEjmeuJzBe1iOxxfjnw1xOYL2sR2OL8s.GuJzBe1iOxxfnnw1xOYL2sR2OL9M.GuJzBe1iOxxfrnw1xOYL2sR2OL9s.GuJzBe1iOxxfvnw1xOYL2sR2OL.M.GuJzBe1iOxxfznw1xOYL2sR2OL8eGfDW03KvZUw85n25dPOtmBtep9huCV5e1iOxzPhrqcamlbXZcqrXtYjscz4a2LGq4JpV3Y5pqc.GtixquCaVdpyCPPhrgbrpYddgaXqmspacz5a2bKY89dlTlK7TE88Er2euypyldpieeCV5d2lyixyVrDPXbZZA3nx78u_Hz48duXbl56cO_brz7dneTvbw51dYYb11wSOVVsST58e_Lvx8.PHblrammigcamlqclrz4w--","fqdn":"syndication.realsrv.com","domain":"realsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://w7.eurosptp.com/page.php?fr\u0026countrycode=coutry","date":"2024-09-24T17:27:42.444Z","timestamp":1727198862444,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"realsrv.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Sep 2024 10:35:05 GMT","end":"Wed, 11 Dec 2024 10:35:04 GMT"},"fingerprint":{"sha1":"95:7B:F0:3D:0B:82:4B:0B:7F:3B:06:68:76:24:A6:18:CE:1F:1C:FA","sha256":"A6:2B:F5:D8:36:FD:0D:0E:D8:34:F7:08:44:11:AC:85:FD:C3:D8:E1:8B:C8:6D:51:C9:1C:6C:44:D8:B3:9F:0D"}}},"request":{"raw":"GET /vregister.php?a=vimp\u0026tracking_event=impression\u0026idzone=3981938\u00262f0c2af9d35a1a2cdde21db2fe9eb7be=tsVuZ8uHLpt4edvLpq48_XLv66ctdlTlK8E.fnju88N3Tlu49emtqayWunDMos7XA3GxK9Yw85n0466oK3F35qq5WJHM2G7I65JmYI3K6WHXYGtzU0muBthu1ymuCpynPxw5dOXTXA3PYzHBU.5Tn34dOnPprgbqgrcz8d.vnj41wN4zSuZ8_Pjj55.NcDbTFbj01OGfXh41wNtMSTsQPS59ePfx258tcDdrFMDFcE0ufHh078uPTjw1wNzVZ8euuBtmma6pynPnrgbbctgacz4a4G2mKaYHKc.GuBuCqfPhrqsZz4a7WI7HM.27gDt6657GY4Kn3KV6WK3M._DXPYzHBU.5Su1ZTS5K1hmCidraYknYgelXasppclawzRPA1uXtPsSvOL1zLz2MxwVPuU58N3nhy6a3L2n2JXnF65l5XK7pqYs.OthtevCdzPnx1uzUyMV564G5XK7pqYs.OtqayWunBeamB6CViPMos7W_XXOveu7NTcxS242u7NTnrgbnpmbsarXaYrcempwz4.Nc9MDUEry8kzbkefjW_XXPVnx11NUuOSr0uVTR2VwTS567KnKV4G8.GuymNd9ip_Nvlz6cejrTrPnp45cGHGvHLs6z44dfHTt54ua4JJ6XKqoJpV6q2K7Ks.OuCSelyqqCaVeCW1iOBtelxiqaXPhrpcdcpcpXqgrcXfmqrlYkczu77nLKZqp659zU0mthtmOZqLPhrgbmddcpz4a4G42JW4JXl52HnM.Gty9xqyuCaVeuCRzPhrgbbYrYaclrcpz5a4G2mKaYHKV6prKWnM.GuWapqmCevPhrglamelgrmXkmbcz4a63Kq15Jm3M.Gulx6CaVd5yaViRxeBvPhrnpmvwXqrYrsqz28dcDc7FNcrlOfDW1BXgu85NKxI4vA3nz49ePbl31yuVsNWQV4Lz0zX4L14TuZ65XK2GrIK8F56Zr8F23KmqYJ64Jpc9bDbMczUS9rlOeuCSelyqqCaVdiONeCW1iOBtelxiqaWrPhrqsZ5Z8NdVjPPPhrqapgnrXrwncz11NUwT1rysSOZ66mqYJ617XKc9bNM11TlK9rlOfDXbTnw1wS1uUysR58Ncsy7tkrdWfDXA3S5VPNLVBa4vGxhNZXnw1wNyWR1wYzSuZ8NbkjEEa8FU.fDXU1TBPWu25WxBHn211NUwT1r2uU1QTS58dcDbDdrlNcFTlK7Da9eE7mfLjrgbnpmvwz4a2G16XKLHKq16XKrI68.OuBuVyu6amJevCdzPjrgbaYknYgelXrwncz4a6a2V4JbXJa5qcF4G89dNbK8Etrktc1OC8rEjmeuJzBe1iOxxfjnw1xOYL2sR2OL8s.GuJzBe1iOxxfnnw1xOYL2sR2OL9M.GuJzBe1iOxxfrnw1xOYL2sR2OL9s.GuJzBe1iOxxfvnw1xOYL2sR2OL.M.GuJzBe1iOxxfznw1xOYL2sR2OL8eGfDW03KvZUw85n25dPOtmBtep9huCV5e1iOxzPhrqcamlbXZcqrXtYjscz4a2LGq4JpV3Y5pqc.GtixquCaVdpyCPPhrgbrpYddgaXqmspacz5a2bKY89dlTlK7TE88Er2euypyldpieeCV5d2lyixyVrDPXbZZA3nx78u_Hz48duXbl56cO_brz7dneTvbw51dYYb11wSOVVsST58e_Lvx8.PHblrammigcamlqclrz4w-- HTTP/1.1\r\nHost: syndication.realsrv.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://w7.eurosptp.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 24 Sep 2024 17:27:42 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: \r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20,"size_decoded":20,"mime_type":"text/html; charset=UTF-8","magic":"gzip compressed data, max speed, from Unix","md5":"a4745abc5e7fdb89cc6df3069f3c6e69","sha1":"74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed","sha256":"d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf","sha512":"849461cb54ecde577246aad993d1ecabb879913e353ae322561c7c57605f571e23210fe12bdcef49faa99b5b003611976ff64348f620968271e38bba1c7d7f62","ssdeep":"","tlshash":"ce70000000003c30cc000030000fc000000c30003000c00300000030000300300c003f","first_seen":"2023-04-08T01:36:47Z","last_seen":"2025-03-02T02:51:47.01042Z","times_seen":42040,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":64,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:42.841086777Z","timestamp":1727198862841,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"4D6CB8EEF6A1A253810203964D4F313D8DBA28DC895FC58763119FF2943383C6\"\r\nLast-Modified: Tue, 24 Sep 2024 07:36:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=14293\r\nExpires: Tue, 24 Sep 2024 21:25:55 GMT\r\nDate: Tue, 24 Sep 2024 17:27:42 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"710a02e479f98808aa974c92c6da863a","sha1":"1165fb08b1dc53e3145d659f6301fc3d2e833e0c","sha256":"4d6cb8eef6a1a253810203964d4f313d8dba28dc895fc58763119ff2943383c6","sha512":"c76a6f481bc03cdf2bd5cb8b3fc33ccb3bff9e68711bdefa92735243c43b20c52936394ef0177f4d2f008545c5726ce3e294f8a450f3601ebd23549831d0381b","ssdeep":"","tlshash":"23f00e011fa82a0077b8086459dac8b3482422ed94a8248132a463e57852fea03c48ac","first_seen":"2024-09-24T19:28:16Z","last_seen":"2024-09-28T07:59:48.69467Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:42.844625572Z","timestamp":1727198862844,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"4D6CB8EEF6A1A253810203964D4F313D8DBA28DC895FC58763119FF2943383C6\"\r\nLast-Modified: Tue, 24 Sep 2024 07:36:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=14293\r\nExpires: Tue, 24 Sep 2024 21:25:55 GMT\r\nDate: Tue, 24 Sep 2024 17:27:42 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"710a02e479f98808aa974c92c6da863a","sha1":"1165fb08b1dc53e3145d659f6301fc3d2e833e0c","sha256":"4d6cb8eef6a1a253810203964d4f313d8dba28dc895fc58763119ff2943383c6","sha512":"c76a6f481bc03cdf2bd5cb8b3fc33ccb3bff9e68711bdefa92735243c43b20c52936394ef0177f4d2f008545c5726ce3e294f8a450f3601ebd23549831d0381b","ssdeep":"","tlshash":"23f00e011fa82a0077b8086459dac8b3482422ed94a8248132a463e57852fea03c48ac","first_seen":"2024-09-24T19:28:16Z","last_seen":"2024-09-28T07:59:48.69467Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.zentrixads.com/redirect?feed=708262\u0026auth=ZtQb\u0026subid=zentrix\u0026query=zentrix\u0026url=zentrixads.com","fqdn":"xml.zentrixads.com","domain":"zentrixads.com","tld":"com"},"ip":{"addr":"173.239.53.20","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.074Z","timestamp":1727198862074,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"zentrixads.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Aug 2024 06:43:54 GMT","end":"Fri, 08 Nov 2024 06:43:53 GMT"},"fingerprint":{"sha1":"F2:86:E7:12:4A:4C:AD:C4:A5:BC:D4:4A:D8:E2:79:04:70:29:85:2B","sha256":"50:46:92:6C:46:D5:FD:F0:B1:78:B4:49:76:6C:9F:5F:DF:00:5D:2D:89:04:55:36:C4:CB:82:D3:85:E7:A9:8F"}}},"request":{"raw":"GET /redirect?feed=708262\u0026auth=ZtQb\u0026subid=zentrix\u0026query=zentrix\u0026url=zentrixads.com HTTP/1.1\r\nHost: xml.zentrixads.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Tue, 24 Sep 2024 17:27:42 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-store\r\nLocation: https://na.rolpenszimocca.com/iE7AjAU7EnXkWAq/GBnnL\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":792,"timings":{"blocked":219,"dns":0,"connect":0,"send":0,"wait":573,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:42.880449161Z","timestamp":1727198862880,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"4D6CB8EEF6A1A253810203964D4F313D8DBA28DC895FC58763119FF2943383C6\"\r\nLast-Modified: Tue, 24 Sep 2024 07:36:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=14293\r\nExpires: Tue, 24 Sep 2024 21:25:55 GMT\r\nDate: Tue, 24 Sep 2024 17:27:42 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"710a02e479f98808aa974c92c6da863a","sha1":"1165fb08b1dc53e3145d659f6301fc3d2e833e0c","sha256":"4d6cb8eef6a1a253810203964d4f313d8dba28dc895fc58763119ff2943383c6","sha512":"c76a6f481bc03cdf2bd5cb8b3fc33ccb3bff9e68711bdefa92735243c43b20c52936394ef0177f4d2f008545c5726ce3e294f8a450f3601ebd23549831d0381b","ssdeep":"","tlshash":"23f00e011fa82a0077b8086459dac8b3482422ed94a8248132a463e57852fea03c48ac","first_seen":"2024-09-24T19:28:16Z","last_seen":"2024-09-28T07:59:48.69467Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:42.908333732Z","timestamp":1727198862908,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"4D6CB8EEF6A1A253810203964D4F313D8DBA28DC895FC58763119FF2943383C6\"\r\nLast-Modified: Tue, 24 Sep 2024 07:36:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=14293\r\nExpires: Tue, 24 Sep 2024 21:25:55 GMT\r\nDate: Tue, 24 Sep 2024 17:27:42 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"710a02e479f98808aa974c92c6da863a","sha1":"1165fb08b1dc53e3145d659f6301fc3d2e833e0c","sha256":"4d6cb8eef6a1a253810203964d4f313d8dba28dc895fc58763119ff2943383c6","sha512":"c76a6f481bc03cdf2bd5cb8b3fc33ccb3bff9e68711bdefa92735243c43b20c52936394ef0177f4d2f008545c5726ce3e294f8a450f3601ebd23549831d0381b","ssdeep":"","tlshash":"23f00e011fa82a0077b8086459dac8b3482422ed94a8248132a463e57852fea03c48ac","first_seen":"2024-09-24T19:28:16Z","last_seen":"2024-09-28T07:59:48.69467Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:42.917086413Z","timestamp":1727198862917,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"4D6CB8EEF6A1A253810203964D4F313D8DBA28DC895FC58763119FF2943383C6\"\r\nLast-Modified: Tue, 24 Sep 2024 07:36:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=14293\r\nExpires: Tue, 24 Sep 2024 21:25:55 GMT\r\nDate: Tue, 24 Sep 2024 17:27:42 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"710a02e479f98808aa974c92c6da863a","sha1":"1165fb08b1dc53e3145d659f6301fc3d2e833e0c","sha256":"4d6cb8eef6a1a253810203964d4f313d8dba28dc895fc58763119ff2943383c6","sha512":"c76a6f481bc03cdf2bd5cb8b3fc33ccb3bff9e68711bdefa92735243c43b20c52936394ef0177f4d2f008545c5726ce3e294f8a450f3601ebd23549831d0381b","ssdeep":"","tlshash":"23f00e011fa82a0077b8086459dac8b3482422ed94a8248132a463e57852fea03c48ac","first_seen":"2024-09-24T19:28:16Z","last_seen":"2024-09-28T07:59:48.69467Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:42.920252649Z","timestamp":1727198862920,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"7C1536ACF9AF91C2E819F6227F1EAC2E6DA23920D93FFF5D3FB13892B1D14D22\"\r\nLast-Modified: Sun, 22 Sep 2024 15:11:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=2236\r\nExpires: Tue, 24 Sep 2024 18:04:58 GMT\r\nDate: Tue, 24 Sep 2024 17:27:42 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"6f80e56545abaf8fee20bafa28b73092","sha1":"edf1db1ce11b48372f6a08eabb8d60914616d3a0","sha256":"7c1536acf9af91c2e819f6227f1eac2e6da23920d93fff5d3fb13892b1d14d22","sha512":"b476ede469b491410dce6dc56f1f99885b8e139b670c8f255fc5eff06c99a30b93676fae5c039a32b5504f40465587c385afc3088c8d4743948af25d448fbaf0","ssdeep":"","tlshash":"77f0057422ea54e04f65143669d8e4780c35e8ea140036cdd49453e26b2677c8245548","first_seen":"2024-09-23T11:48:59Z","last_seen":"2024-09-28T08:19:06.016625Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:42.941869191Z","timestamp":1727198862941,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"7C1536ACF9AF91C2E819F6227F1EAC2E6DA23920D93FFF5D3FB13892B1D14D22\"\r\nLast-Modified: Sun, 22 Sep 2024 15:11:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=2236\r\nExpires: Tue, 24 Sep 2024 18:04:58 GMT\r\nDate: Tue, 24 Sep 2024 17:27:42 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"6f80e56545abaf8fee20bafa28b73092","sha1":"edf1db1ce11b48372f6a08eabb8d60914616d3a0","sha256":"7c1536acf9af91c2e819f6227f1eac2e6da23920d93fff5d3fb13892b1d14d22","sha512":"b476ede469b491410dce6dc56f1f99885b8e139b670c8f255fc5eff06c99a30b93676fae5c039a32b5504f40465587c385afc3088c8d4743948af25d448fbaf0","ssdeep":"","tlshash":"77f0057422ea54e04f65143669d8e4780c35e8ea140036cdd49453e26b2677c8245548","first_seen":"2024-09-23T11:48:59Z","last_seen":"2024-09-28T08:19:06.016625Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndication.realsrv.com/vregister.php?a=vview\u0026tracking_event=progress\u0026progress=00:00:10.000\u0026idzone=3981938\u00262f0c2af9d35a1a2cdde21db2fe9eb7be=tsVuZ8uHLpt4edvLpq48_XLv65.ddlTlK8E.fnju88N3Tlu49emtqayWunDMos7XA3GxK9Yw85n0466oK3F35qq5WJHM2G7I65JmYI3K6WHXYGtzU0muBthu1ymuCpynPxw5dOXTXA3PYzHBU.5Tn34dOnPprgbqgrcz8d.vnj41wN4zSuZ8_Pjj55.NcDbTFbj01OGfXh41wNtMSTsQPS59ePfx258tcDdrFMDFcE0ufHh078uPTny1wNzVZ8euuBtmma6pynPnrgbbctgacz4a4G2mKaYHKc.GuBuCqfPhrqsZz4a7WI7HM.27gDt6657GY4Kn3KV6WK3M._DXPYzHBU.5Su1ZTS5K1hmCidraYknYgelXasppclawzRPA1uXtPsSvOL1zLz2MxwVPuU58N3nhy6a3L2n2JXnF65l5XK7pqYs.OthtevCdzPnx1uzUyMV564G5XK7pqYs.OtqayWunBeamB6CViPMos7W_XXOveu7NTcxS242u7NTnrgbnpmbsarXaYrcempwz4.Nc9MDUEry8kzbkefjW_XXPVnx11NUuOSr0uVTR2VwTS567KnKV4G8.GuymNd9ip_Pm155ePPDn3692uXJ3i227y6NcPHjly59mPLeuCSelyqqCaVeqtiuyrPjrgknpcqqgmlXgltYjgbXpcYqmlz4a6XHXKXKV6oK3F35qq5WJHM7ruO56aZvbXSw3BK9uamk1sNsxzNRZ8NcDczrrlOfDXA3GxK3BK8vOw85nw12wNuTLuWuS1563KaZqWpm3M9cDbbFbDTktblOfLXA20xTTA5SvVNZS05nw1yzVNUwT158NcErUz0sFcy8kzbmfDXW5VWvJM25nw10uPQTSrvOTSsSOLwN58Nc9M1.C9VbFdlWe3jrgbnYprlcpz4a2oK8F3nJpWJHF4G8.fHrx7cu.uVythqyCvBeema_BevCdzPXK5Ww1ZBXgvPTNfgu25U1TBPXBNLnrYbZjmaiXtcpz1wST0uVVQTSrsRxrwS2sRwNr0uMVTS1Z8NdVjPLPhrqsZ558NdTVME9a9eE7meupqmCeteViRzPXU1TBPWva5TnrZpmuqcpXtcpz4a7ac.GuCWtymViPPhrlmXdslbqz4a4G6XKp5paoLXF42MJrK8.GuBuSyOuDGaVzPhrckYgjXgqnz4a6mqYJ6123K2II8.2upqmCete1ymqCaXPjrgbYbtcprgqcpXYbXrwncz5cdcDc9M1.GfDWw2vS5RY5VWvS5VZHXnx1wNyuV3TUxL14TuZ8dcDbTEk7ED0q9eE7mfDXTWyvBLa5LXNTgvA3nrprZXgltclrmpwXlYkcz1xOYL2sR2OL8c.GuJzBe1iOxxflnw1xOYL2sR2OL88.GuJzBe1iOxxfpnw1xOYL2sR2OL9c.GuJzBe1iOxxftnw1xOYL2sR2OL98.GuJzBe1iOxxfxnw1xOYL2sR2OL.c.GuJzBe1iOxxfjwz4a4G66WHXYGl6prKWnM.Wu2yyBvPj35d.Pnx46.ePnz089uHfr27O8ne3hnp2c4.NdcEjlVbEk.fHvy78fPjx1862ppooHGppanJa8.MA-","fqdn":"syndication.realsrv.com","domain":"realsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:42.351Z","timestamp":1727198862351,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"realsrv.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Sep 2024 10:35:05 GMT","end":"Wed, 11 Dec 2024 10:35:04 GMT"},"fingerprint":{"sha1":"95:7B:F0:3D:0B:82:4B:0B:7F:3B:06:68:76:24:A6:18:CE:1F:1C:FA","sha256":"A6:2B:F5:D8:36:FD:0D:0E:D8:34:F7:08:44:11:AC:85:FD:C3:D8:E1:8B:C8:6D:51:C9:1C:6C:44:D8:B3:9F:0D"}}},"request":{"raw":"GET /vregister.php?a=vview\u0026tracking_event=progress\u0026progress=00:00:10.000\u0026idzone=3981938\u00262f0c2af9d35a1a2cdde21db2fe9eb7be=tsVuZ8uHLpt4edvLpq48_XLv65.ddlTlK8E.fnju88N3Tlu49emtqayWunDMos7XA3GxK9Yw85n0466oK3F35qq5WJHM2G7I65JmYI3K6WHXYGtzU0muBthu1ymuCpynPxw5dOXTXA3PYzHBU.5Tn34dOnPprgbqgrcz8d.vnj41wN4zSuZ8_Pjj55.NcDbTFbj01OGfXh41wNtMSTsQPS59ePfx258tcDdrFMDFcE0ufHh078uPTny1wNzVZ8euuBtmma6pynPnrgbbctgacz4a4G2mKaYHKc.GuBuCqfPhrqsZz4a7WI7HM.27gDt6657GY4Kn3KV6WK3M._DXPYzHBU.5Su1ZTS5K1hmCidraYknYgelXasppclawzRPA1uXtPsSvOL1zLz2MxwVPuU58N3nhy6a3L2n2JXnF65l5XK7pqYs.OthtevCdzPnx1uzUyMV564G5XK7pqYs.OtqayWunBeamB6CViPMos7W_XXOveu7NTcxS242u7NTnrgbnpmbsarXaYrcempwz4.Nc9MDUEry8kzbkefjW_XXPVnx11NUuOSr0uVTR2VwTS567KnKV4G8.GuymNd9ip_Pm155ePPDn3692uXJ3i227y6NcPHjly59mPLeuCSelyqqCaVeqtiuyrPjrgknpcqqgmlXgltYjgbXpcYqmlz4a6XHXKXKV6oK3F35qq5WJHM7ruO56aZvbXSw3BK9uamk1sNsxzNRZ8NcDczrrlOfDXA3GxK3BK8vOw85nw12wNuTLuWuS1563KaZqWpm3M9cDbbFbDTktblOfLXA20xTTA5SvVNZS05nw1yzVNUwT158NcErUz0sFcy8kzbmfDXW5VWvJM25nw10uPQTSrvOTSsSOLwN58Nc9M1.C9VbFdlWe3jrgbnYprlcpz4a2oK8F3nJpWJHF4G8.fHrx7cu.uVythqyCvBeema_BevCdzPXK5Ww1ZBXgvPTNfgu25U1TBPXBNLnrYbZjmaiXtcpz1wST0uVVQTSrsRxrwS2sRwNr0uMVTS1Z8NdVjPLPhrqsZ558NdTVME9a9eE7meupqmCeteViRzPXU1TBPWva5TnrZpmuqcpXtcpz4a7ac.GuCWtymViPPhrlmXdslbqz4a4G6XKp5paoLXF42MJrK8.GuBuSyOuDGaVzPhrckYgjXgqnz4a6mqYJ6123K2II8.2upqmCete1ymqCaXPjrgbYbtcprgqcpXYbXrwncz5cdcDc9M1.GfDWw2vS5RY5VWvS5VZHXnx1wNyuV3TUxL14TuZ8dcDbTEk7ED0q9eE7mfDXTWyvBLa5LXNTgvA3nrprZXgltclrmpwXlYkcz1xOYL2sR2OL8c.GuJzBe1iOxxflnw1xOYL2sR2OL88.GuJzBe1iOxxfpnw1xOYL2sR2OL9c.GuJzBe1iOxxftnw1xOYL2sR2OL98.GuJzBe1iOxxfxnw1xOYL2sR2OL.c.GuJzBe1iOxxfjwz4a4G66WHXYGl6prKWnM.Wu2yyBvPj35d.Pnx46.ePnz089uHfr27O8ne3hnp2c4.NdcEjlVbEk.fHvy78fPjx1862ppooHGppanJa8.MA- HTTP/1.1\r\nHost: syndication.realsrv.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww1.good-trading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 24 Sep 2024 17:27:42 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: \r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20,"size_decoded":20,"mime_type":"text/html; charset=UTF-8","magic":"gzip compressed data, max speed, from Unix","md5":"a4745abc5e7fdb89cc6df3069f3c6e69","sha1":"74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed","sha256":"d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf","sha512":"849461cb54ecde577246aad993d1ecabb879913e353ae322561c7c57605f571e23210fe12bdcef49faa99b5b003611976ff64348f620968271e38bba1c7d7f62","ssdeep":"","tlshash":"ce70000000003c30cc000030000fc000000c30003000c00300000030000300300c003f","first_seen":"2023-04-08T01:36:47Z","last_seen":"2025-03-02T02:51:47.01042Z","times_seen":42040,"resource_available":false,"data":null}},"time_used":655,"timings":{"blocked":619,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:43.025844018Z","timestamp":1727198863025,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"25C1DD9CABB87B1843F6B32AB4C63C5613022243ED58F40746BD5B88A8980A81\"\r\nLast-Modified: Tue, 24 Sep 2024 04:24:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=19409\r\nExpires: Tue, 24 Sep 2024 22:51:12 GMT\r\nDate: Tue, 24 Sep 2024 17:27:43 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"8086365374d4cf3d06d10de066ff33d5","sha1":"8a73848b678a77813710e08e7a25b89a2622ed28","sha256":"25c1dd9cabb87b1843f6b32ab4c63c5613022243ed58f40746bd5b88a8980a81","sha512":"983eeaa033d900b548a5c98a92e1979685e35836d09ae0d426db5f63444635104bec8c5500ac504b02bf958083e9810b10a5f54c3f1f255bafd0ce9f34e91c01","ssdeep":"","tlshash":"d1f07591320f76492f7048084dccd359262508be18c127c9c17067f11802bb81d4444e","first_seen":"2024-09-24T19:28:16Z","last_seen":"2024-09-28T07:59:48.699001Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndication.realsrv.com/vregister.php?a=vimp\u0026tracking_event=impression\u0026idzone=3981938\u00262f0c2af9d35a1a2cdde21db2fe9eb7be=tsVuZ8uHLpt4edvLpq48_XLv66ctdlTlK8E.fnju88N3Tlu49emtqayWunDMos7XA3GxK9Yw85n0466oK3F35qq5WJHM2G7I65JmYI3K6WHXYGtzU0muBthu1ymuCpynPxw5dOXTXA3PYzHBU.5Tn34dOnPprgbqgrcz8d.vnj41wN4zSuZ8_Pjj55.NcDbTFbj01OGfXh41wNtMSTsQPS59ePfx258tcDdrFMDFcE0ufHh078uPThy1wNzVZ8euuBtmma6pynPnrgbbctgacz4a4G2mKaYHKc.GuBuCqfPhrqsZz4a7WI7HM.27gDt6657GY4Kn3KV6WK3M._DXPYzHBU.5Su1ZTS5K1hmCidraYknYgelXasppclawzRPA1uXtPsSvOL1zLz2MxwVPuU58N3nhy6a3L2n2JXnF65l5XK7pqYs.OthtevCdzPnx1uzUyMV564G5XK7pqYs.OtqayWunBeamB6CViPMos7W_XXOveu7NTcxS242u7NTnrgbnpmbsarXaYrcempwz4.Nc9MDUEry8kzbkefjW_XXPVnx11NUuOSr0uVTR2VwTS567KnKV4G8.GuymNd9ip_Nvlz6cejrTrPnp45cGHGvHLs6z44dfHTt54ua4JJ6XKqoJpV6q2K7Ks.OuCSelyqqCaVeCW1iOBtelxiqaXPhrpcdcpcpXqgrcXfmqrlYkczu77nLKZqp659zU0mthtmOZqLPhrgbmddcpz4a4G42JW4JXl52HnM.Gty9xqyuCaVeuCRzPhrgbbYrYaclrcpz5a4G2mKaYHKV6prKWnM.GuWapqmCevPhrglamelgrmXkmbcz4a63Kq15Jm3M.Gulx6CaVd5yaViRxeBvPhrnpmvwXqrYrsqz28dcDc7FNcrlOfDW1BXgu85NKxI4vA3nz49ePbl31yuVsNWQV4Lz0zX4L14TuZ65XK2GrIK8F56Zr8F23KmqYJ64Jpc9bDbMczUS9rlOeuCSelyqqCaVdiONeCW1iOBtelxiqaWrPhrqsZ5Z8NdVjPPPhrqapgnrXrwncz11NUwT1rysSOZ66mqYJ617XKc9bNM11TlK9rlOfDXbTnw1wS1uUysR58Ncsy7tkrdWfDXA3S5VPNLVBa4vGxhNZXnw1wNyWR1wYzSuZ8NbkjEEa8FU.fDXU1TBPWu25WxBHn211NUwT1r2uU1QTS58dcDbDdrlNcFTlK7Da9eE7mfLjrgbnpmvwz4a2G16XKLHKq16XKrI68.OuBuVyu6amJevCdzPjrgbaYknYgelXrwncz4a6a2V4JbXJa5qcF4G89dNbK8Etrktc1OC8rEjmeuJzBe1iOxxfjnw1xOYL2sR2OL8s.GuJzBe1iOxxfnnw1xOYL2sR2OL9M.GuJzBe1iOxxfrnw1xOYL2sR2OL9s.GuJzBe1iOxxfvnw1xOYL2sR2OL.M.GuJzBe1iOxxfznw1xOYL2sR2OL8eGfDW03KvZUw85n15.OWtmBtep9huCV5e1iOxzPhrqcamlbXZcqrXtYjscz4a2LGq4JpV3Y5pqc.GtixquCaVdpyCPPhrgbrpYddgaXqmspacz5a2bKY89dlTlK7TE88Er2euypyldpieeCV5d2lyixyVrDPXbZZA3nx78u_Hz48duXHt18devXz58duzvJ3t4c69Wu_PXXBI5VWxJPnx78u_Hz48duWtqaaKBxqaWpyWvPjA","fqdn":"syndication.realsrv.com","domain":"realsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://w7.eurosptp.com/page.php?fr\u0026countrycode=coutry","date":"2024-09-24T17:27:42.433Z","timestamp":1727198862433,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"realsrv.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Sep 2024 10:35:05 GMT","end":"Wed, 11 Dec 2024 10:35:04 GMT"},"fingerprint":{"sha1":"95:7B:F0:3D:0B:82:4B:0B:7F:3B:06:68:76:24:A6:18:CE:1F:1C:FA","sha256":"A6:2B:F5:D8:36:FD:0D:0E:D8:34:F7:08:44:11:AC:85:FD:C3:D8:E1:8B:C8:6D:51:C9:1C:6C:44:D8:B3:9F:0D"}}},"request":{"raw":"GET /vregister.php?a=vimp\u0026tracking_event=impression\u0026idzone=3981938\u00262f0c2af9d35a1a2cdde21db2fe9eb7be=tsVuZ8uHLpt4edvLpq48_XLv66ctdlTlK8E.fnju88N3Tlu49emtqayWunDMos7XA3GxK9Yw85n0466oK3F35qq5WJHM2G7I65JmYI3K6WHXYGtzU0muBthu1ymuCpynPxw5dOXTXA3PYzHBU.5Tn34dOnPprgbqgrcz8d.vnj41wN4zSuZ8_Pjj55.NcDbTFbj01OGfXh41wNtMSTsQPS59ePfx258tcDdrFMDFcE0ufHh078uPThy1wNzVZ8euuBtmma6pynPnrgbbctgacz4a4G2mKaYHKc.GuBuCqfPhrqsZz4a7WI7HM.27gDt6657GY4Kn3KV6WK3M._DXPYzHBU.5Su1ZTS5K1hmCidraYknYgelXasppclawzRPA1uXtPsSvOL1zLz2MxwVPuU58N3nhy6a3L2n2JXnF65l5XK7pqYs.OthtevCdzPnx1uzUyMV564G5XK7pqYs.OtqayWunBeamB6CViPMos7W_XXOveu7NTcxS242u7NTnrgbnpmbsarXaYrcempwz4.Nc9MDUEry8kzbkefjW_XXPVnx11NUuOSr0uVTR2VwTS567KnKV4G8.GuymNd9ip_Nvlz6cejrTrPnp45cGHGvHLs6z44dfHTt54ua4JJ6XKqoJpV6q2K7Ks.OuCSelyqqCaVeCW1iOBtelxiqaXPhrpcdcpcpXqgrcXfmqrlYkczu77nLKZqp659zU0mthtmOZqLPhrgbmddcpz4a4G42JW4JXl52HnM.Gty9xqyuCaVeuCRzPhrgbbYrYaclrcpz5a4G2mKaYHKV6prKWnM.GuWapqmCevPhrglamelgrmXkmbcz4a63Kq15Jm3M.Gulx6CaVd5yaViRxeBvPhrnpmvwXqrYrsqz28dcDc7FNcrlOfDW1BXgu85NKxI4vA3nz49ePbl31yuVsNWQV4Lz0zX4L14TuZ65XK2GrIK8F56Zr8F23KmqYJ64Jpc9bDbMczUS9rlOeuCSelyqqCaVdiONeCW1iOBtelxiqaWrPhrqsZ5Z8NdVjPPPhrqapgnrXrwncz11NUwT1rysSOZ66mqYJ617XKc9bNM11TlK9rlOfDXbTnw1wS1uUysR58Ncsy7tkrdWfDXA3S5VPNLVBa4vGxhNZXnw1wNyWR1wYzSuZ8NbkjEEa8FU.fDXU1TBPWu25WxBHn211NUwT1r2uU1QTS58dcDbDdrlNcFTlK7Da9eE7mfLjrgbnpmvwz4a2G16XKLHKq16XKrI68.OuBuVyu6amJevCdzPjrgbaYknYgelXrwncz4a6a2V4JbXJa5qcF4G89dNbK8Etrktc1OC8rEjmeuJzBe1iOxxfjnw1xOYL2sR2OL8s.GuJzBe1iOxxfnnw1xOYL2sR2OL9M.GuJzBe1iOxxfrnw1xOYL2sR2OL9s.GuJzBe1iOxxfvnw1xOYL2sR2OL.M.GuJzBe1iOxxfznw1xOYL2sR2OL8eGfDW03KvZUw85n15.OWtmBtep9huCV5e1iOxzPhrqcamlbXZcqrXtYjscz4a2LGq4JpV3Y5pqc.GtixquCaVdpyCPPhrgbrpYddgaXqmspacz5a2bKY89dlTlK7TE88Er2euypyldpieeCV5d2lyixyVrDPXbZZA3nx78u_Hz48duXHt18devXz58duzvJ3t4c69Wu_PXXBI5VWxJPnx78u_Hz48duWtqaaKBxqaWpyWvPjA HTTP/1.1\r\nHost: syndication.realsrv.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://w7.eurosptp.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 24 Sep 2024 17:27:43 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: \r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20,"size_decoded":20,"mime_type":"text/html; charset=UTF-8","magic":"gzip compressed data, max speed, from Unix","md5":"a4745abc5e7fdb89cc6df3069f3c6e69","sha1":"74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed","sha256":"d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf","sha512":"849461cb54ecde577246aad993d1ecabb879913e353ae322561c7c57605f571e23210fe12bdcef49faa99b5b003611976ff64348f620968271e38bba1c7d7f62","ssdeep":"","tlshash":"ce70000000003c30cc000030000fc000000c30003000c00300000030000300300c003f","first_seen":"2023-04-08T01:36:47Z","last_seen":"2025-03-02T02:51:47.01042Z","times_seen":42040,"resource_available":false,"data":null}},"time_used":594,"timings":{"blocked":553,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:43.059201311Z","timestamp":1727198863059,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"25C1DD9CABB87B1843F6B32AB4C63C5613022243ED58F40746BD5B88A8980A81\"\r\nLast-Modified: Tue, 24 Sep 2024 04:24:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=19409\r\nExpires: Tue, 24 Sep 2024 22:51:12 GMT\r\nDate: Tue, 24 Sep 2024 17:27:43 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"8086365374d4cf3d06d10de066ff33d5","sha1":"8a73848b678a77813710e08e7a25b89a2622ed28","sha256":"25c1dd9cabb87b1843f6b32ab4c63c5613022243ed58f40746bd5b88a8980a81","sha512":"983eeaa033d900b548a5c98a92e1979685e35836d09ae0d426db5f63444635104bec8c5500ac504b02bf958083e9810b10a5f54c3f1f255bafd0ce9f34e91c01","ssdeep":"","tlshash":"d1f07591320f76492f7048084dccd359262508be18c127c9c17067f11802bb81d4444e","first_seen":"2024-09-24T19:28:16Z","last_seen":"2024-09-28T07:59:48.699001Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndication.realsrv.com/vregister.php?a=vview\u0026tracking_event=progress\u0026progress=00:00:10.000\u0026idzone=3981938\u00262f0c2af9d35a1a2cdde21db2fe9eb7be=tsVuZ8uHLpt4edvLpq48_XLv66cNdlTlK8E.fnju88N3Tlu49emtqayWunDMos7XA3GxK9Yw85n0466oK3F35qq5WJHM2G7I65JmYI3K6WHXYGtzU0muBthu1ymuCpynPxw5dOXTXA3PYzHBU.5Tn34dOnPprgbqgrcz8d.vnj41wN4zSuZ8_Pjj55.NcDbTFbj01OGfXh41wNtMSTsQPS59ePfx258tcDdrFMDFcE0ufHh078uPTnw1wNzVZ8euuBtmma6pynPnrgbbctgacz4a4G2mKaYHKc.GuBuCqfPhrqsZz4a7WI7HM.27gDt6657GY4Kn3KV6WK3M._DXPYzHBU.5Su1ZTS5K1hmCidraYknYgelXasppclawzRPA1uXtPsSvOL1zLz2MxwVPuU58N3nhy6a3L2n2JXnF65l5XK7pqYs.OthtevCdzPnx1uzUyMV564G5XK7pqYs.OtqayWunBeamB6CViPMos7W_XXOveu7NTcxS242u7NTnrgbnpmbsarXaYrcempwz4.Nc9MDUEry8kzbkefjW_XXPVnx11NUuOSr0uVTR2VwTS567KnKV4G8.GuymNd9ip_Njw126t.ODvLrz78fHnk52c4cuXXp0bbY6Mu64JJ6XKqoJpV6q2K7Ks.OuCSelyqqCaVeCW1iOBtelxiqaXPhrpcdcpcpXqgrcXfmqrlYkczuu299z00ze2ulhuCV7c1NJrYbZjmaiz4a4G5nXXKc.GuBuNiVuCV5edh5zPhrtgbcmXctclrz1uU0zUtTNuZ64G22K2GnJa3Kc.WuBtpimmByleqaylpzPhrlmqapgnrz4a4JWpnpYK5l5Jm3M.GutyqteSZtzPhrpcegmlXecmlYkcXgbz4a56Zr8F6q2K7Ks9vHXA3OxTXK5Tnw1tQV4LvOTSsSOLwN58.PXj25d9crlbDVkFeC89M1.C9eE7meuVythqyCvBeema_BdtypqmCeuCaXPWw2zHM1Eva5TnrgknpcqqgmlXYjjXgltYjgbXpcYqmlqz4a6rGeWfDXVYzzz4a6mqYJ6168J3M9dTVME9a8rEjmeupqmCete1ynPWzTNdU5Sva5Tnw12058NcEtblMrEefDXLMu7ZK3Vnw1wN0uVTzS1QWuLxsYTWV58NcDclkdcGM0rmfDW5IxBGvBVPnw11NUwT1rtuVsQR59tdTVME9a9rlNUE0ufHXA2w3a5TXBU5Suw2vXhO5ny464G56Zr8M.GthtelyixyqtelyqyOvPjrgblcrumpiXrwncz464G2mJJ2IHpV68J3M.GumtleCW1yWuanBeBvPXTWyvBLa5LXNTgvKxI5nricwXtYjscX458NcTmC9rEdji_LPhricwXtYjscX558NcTmC9rEdji_TPhricwXtYjscX658NcTmC9rEdji_bPhricwXtYjscX758NcTmC9rEdji_jPhricwXtYjscX858NcTmC9rEdji_Hhnw1wN10sOuwNL1TWUtOZ8tdtlkDefHvy78fPjx24cuPLjz5du_nv27O8ne3hrjzdc4a64JHKq2JJ8.Pfl34.fHjtw1tTTRQONTS1OS158Y","fqdn":"syndication.realsrv.com","domain":"realsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.640Z","timestamp":1727198862640,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"realsrv.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Sep 2024 10:35:05 GMT","end":"Wed, 11 Dec 2024 10:35:04 GMT"},"fingerprint":{"sha1":"95:7B:F0:3D:0B:82:4B:0B:7F:3B:06:68:76:24:A6:18:CE:1F:1C:FA","sha256":"A6:2B:F5:D8:36:FD:0D:0E:D8:34:F7:08:44:11:AC:85:FD:C3:D8:E1:8B:C8:6D:51:C9:1C:6C:44:D8:B3:9F:0D"}}},"request":{"raw":"GET /vregister.php?a=vview\u0026tracking_event=progress\u0026progress=00:00:10.000\u0026idzone=3981938\u00262f0c2af9d35a1a2cdde21db2fe9eb7be=tsVuZ8uHLpt4edvLpq48_XLv66cNdlTlK8E.fnju88N3Tlu49emtqayWunDMos7XA3GxK9Yw85n0466oK3F35qq5WJHM2G7I65JmYI3K6WHXYGtzU0muBthu1ymuCpynPxw5dOXTXA3PYzHBU.5Tn34dOnPprgbqgrcz8d.vnj41wN4zSuZ8_Pjj55.NcDbTFbj01OGfXh41wNtMSTsQPS59ePfx258tcDdrFMDFcE0ufHh078uPTnw1wNzVZ8euuBtmma6pynPnrgbbctgacz4a4G2mKaYHKc.GuBuCqfPhrqsZz4a7WI7HM.27gDt6657GY4Kn3KV6WK3M._DXPYzHBU.5Su1ZTS5K1hmCidraYknYgelXasppclawzRPA1uXtPsSvOL1zLz2MxwVPuU58N3nhy6a3L2n2JXnF65l5XK7pqYs.OthtevCdzPnx1uzUyMV564G5XK7pqYs.OtqayWunBeamB6CViPMos7W_XXOveu7NTcxS242u7NTnrgbnpmbsarXaYrcempwz4.Nc9MDUEry8kzbkefjW_XXPVnx11NUuOSr0uVTR2VwTS567KnKV4G8.GuymNd9ip_Njw126t.ODvLrz78fHnk52c4cuXXp0bbY6Mu64JJ6XKqoJpV6q2K7Ks.OuCSelyqqCaVeCW1iOBtelxiqaXPhrpcdcpcpXqgrcXfmqrlYkczuu299z00ze2ulhuCV7c1NJrYbZjmaiz4a4G5nXXKc.GuBuNiVuCV5edh5zPhrtgbcmXctclrz1uU0zUtTNuZ64G22K2GnJa3Kc.WuBtpimmByleqaylpzPhrlmqapgnrz4a4JWpnpYK5l5Jm3M.GutyqteSZtzPhrpcegmlXecmlYkcXgbz4a56Zr8F6q2K7Ks9vHXA3OxTXK5Tnw1tQV4LvOTSsSOLwN58.PXj25d9crlbDVkFeC89M1.C9eE7meuVythqyCvBeema_BdtypqmCeuCaXPWw2zHM1Eva5TnrgknpcqqgmlXYjjXgltYjgbXpcYqmlqz4a6rGeWfDXVYzzz4a6mqYJ6168J3M9dTVME9a8rEjmeupqmCete1ynPWzTNdU5Sva5Tnw12058NcEtblMrEefDXLMu7ZK3Vnw1wN0uVTzS1QWuLxsYTWV58NcDclkdcGM0rmfDW5IxBGvBVPnw11NUwT1rtuVsQR59tdTVME9a9rlNUE0ufHXA2w3a5TXBU5Suw2vXhO5ny464G56Zr8M.GthtelyixyqtelyqyOvPjrgblcrumpiXrwncz464G2mJJ2IHpV68J3M.GumtleCW1yWuanBeBvPXTWyvBLa5LXNTgvKxI5nricwXtYjscX458NcTmC9rEdji_LPhricwXtYjscX558NcTmC9rEdji_TPhricwXtYjscX658NcTmC9rEdji_bPhricwXtYjscX758NcTmC9rEdji_jPhricwXtYjscX858NcTmC9rEdji_Hhnw1wN10sOuwNL1TWUtOZ8tdtlkDefHvy78fPjx24cuPLjz5du_nv27O8ne3hrjzdc4a64JHKq2JJ8.Pfl34.fHjtw1tTTRQONTS1OS158Y HTTP/1.1\r\nHost: syndication.realsrv.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww-7.good-trading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 24 Sep 2024 17:27:43 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: \r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20,"size_decoded":20,"mime_type":"text/html; charset=UTF-8","magic":"gzip compressed data, max speed, from Unix","md5":"a4745abc5e7fdb89cc6df3069f3c6e69","sha1":"74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed","sha256":"d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf","sha512":"849461cb54ecde577246aad993d1ecabb879913e353ae322561c7c57605f571e23210fe12bdcef49faa99b5b003611976ff64348f620968271e38bba1c7d7f62","ssdeep":"","tlshash":"ce70000000003c30cc000030000fc000000c30003000c00300000030000300300c003f","first_seen":"2023-04-08T01:36:47Z","last_seen":"2025-03-02T02:51:47.01042Z","times_seen":42040,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":377,"dns":20,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:43.572404474Z","timestamp":1727198863572,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"DD141204C413C46018E49345E78C2373120053D97A40541D0782CC3EE8773668\"\r\nLast-Modified: Tue, 24 Sep 2024 07:19:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=2168\r\nExpires: Tue, 24 Sep 2024 18:03:51 GMT\r\nDate: Tue, 24 Sep 2024 17:27:43 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"0824be7fb1b0171ce369f40aa6ba76b2","sha1":"e626f02aff920d748ac22dfb2bb68c89bbbac53e","sha256":"dd141204c413c46018e49345e78c2373120053d97a40541d0782cc3ee8773668","sha512":"1f01c050276e9b5f3701209912f8dc7d5dcc21748f6cc1bcc8a5b86262de7c26d5381882d8f675b3241026a5e8ece3475a83aea37a0049a98f887bede746b7a3","ssdeep":"","tlshash":"a6f00e79037475909ba8193125c5d3fb14306ea8a81544c690d843e5eea6bef870843d","first_seen":"2024-09-24T19:28:16Z","last_seen":"2024-09-28T07:59:48.699951Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:43.64673271Z","timestamp":1727198863646,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"DD141204C413C46018E49345E78C2373120053D97A40541D0782CC3EE8773668\"\r\nLast-Modified: Tue, 24 Sep 2024 07:19:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=2168\r\nExpires: Tue, 24 Sep 2024 18:03:51 GMT\r\nDate: Tue, 24 Sep 2024 17:27:43 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"0824be7fb1b0171ce369f40aa6ba76b2","sha1":"e626f02aff920d748ac22dfb2bb68c89bbbac53e","sha256":"dd141204c413c46018e49345e78c2373120053d97a40541d0782cc3ee8773668","sha512":"1f01c050276e9b5f3701209912f8dc7d5dcc21748f6cc1bcc8a5b86262de7c26d5381882d8f675b3241026a5e8ece3475a83aea37a0049a98f887bede746b7a3","ssdeep":"","tlshash":"a6f00e79037475909ba8193125c5d3fb14306ea8a81544c690d843e5eea6bef870843d","first_seen":"2024-09-24T19:28:16Z","last_seen":"2024-09-28T07:59:48.699951Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:43.657444969Z","timestamp":1727198863657,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"3D661B2EC844A769C1E337D259ECD70418EA572DB5B532025F5B06C4960FEE0C\"\r\nLast-Modified: Sun, 22 Sep 2024 15:42:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=11180\r\nExpires: Tue, 24 Sep 2024 20:34:03 GMT\r\nDate: Tue, 24 Sep 2024 17:27:43 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"b4a8f78a3452207926a279218fecd76a","sha1":"607d7073c7ed5d57e8cd2562648f92d5815d7bfd","sha256":"3d661b2ec844a769c1e337d259ecd70418ea572db5b532025f5b06c4960fee0c","sha512":"f43c30c49a57eaf9d3951a666ea242e586e4cb235a28dc795e382ba0eefdb3c47efc147f9f06901a859af110757f8c1472ad062f4dce395ce416ed216211a6b1","ssdeep":"","tlshash":"74f00eae19f8ba04bebc1a0c2ca5e9288e206efc380142e9d490d7e057403f78b80098","first_seen":"2024-09-28T07:59:48.700939Z","last_seen":"2024-09-28T07:59:48.700939Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:43.805654979Z","timestamp":1727198863805,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"DD141204C413C46018E49345E78C2373120053D97A40541D0782CC3EE8773668\"\r\nLast-Modified: Tue, 24 Sep 2024 07:19:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=2168\r\nExpires: Tue, 24 Sep 2024 18:03:51 GMT\r\nDate: Tue, 24 Sep 2024 17:27:43 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"0824be7fb1b0171ce369f40aa6ba76b2","sha1":"e626f02aff920d748ac22dfb2bb68c89bbbac53e","sha256":"dd141204c413c46018e49345e78c2373120053d97a40541d0782cc3ee8773668","sha512":"1f01c050276e9b5f3701209912f8dc7d5dcc21748f6cc1bcc8a5b86262de7c26d5381882d8f675b3241026a5e8ece3475a83aea37a0049a98f887bede746b7a3","ssdeep":"","tlshash":"a6f00e79037475909ba8193125c5d3fb14306ea8a81544c690d843e5eea6bef870843d","first_seen":"2024-09-24T19:28:16Z","last_seen":"2024-09-28T07:59:48.699951Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:43.824108243Z","timestamp":1727198863824,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"3D661B2EC844A769C1E337D259ECD70418EA572DB5B532025F5B06C4960FEE0C\"\r\nLast-Modified: Sun, 22 Sep 2024 15:42:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=11180\r\nExpires: Tue, 24 Sep 2024 20:34:03 GMT\r\nDate: Tue, 24 Sep 2024 17:27:43 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"b4a8f78a3452207926a279218fecd76a","sha1":"607d7073c7ed5d57e8cd2562648f92d5815d7bfd","sha256":"3d661b2ec844a769c1e337d259ecd70418ea572db5b532025f5b06c4960fee0c","sha512":"f43c30c49a57eaf9d3951a666ea242e586e4cb235a28dc795e382ba0eefdb3c47efc147f9f06901a859af110757f8c1472ad062f4dce395ce416ed216211a6b1","ssdeep":"","tlshash":"74f00eae19f8ba04bebc1a0c2ca5e9288e206efc380142e9d490d7e057403f78b80098","first_seen":"2024-09-28T07:59:48.700939Z","last_seen":"2024-09-28T07:59:48.700939Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:44.099011129Z","timestamp":1727198864099,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"3D661B2EC844A769C1E337D259ECD70418EA572DB5B532025F5B06C4960FEE0C\"\r\nLast-Modified: Sun, 22 Sep 2024 15:42:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=11179\r\nExpires: Tue, 24 Sep 2024 20:34:03 GMT\r\nDate: Tue, 24 Sep 2024 17:27:44 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"b4a8f78a3452207926a279218fecd76a","sha1":"607d7073c7ed5d57e8cd2562648f92d5815d7bfd","sha256":"3d661b2ec844a769c1e337d259ecd70418ea572db5b532025f5b06c4960fee0c","sha512":"f43c30c49a57eaf9d3951a666ea242e586e4cb235a28dc795e382ba0eefdb3c47efc147f9f06901a859af110757f8c1472ad062f4dce395ce416ed216211a6b1","ssdeep":"","tlshash":"74f00eae19f8ba04bebc1a0c2ca5e9288e206efc380142e9d490d7e057403f78b80098","first_seen":"2024-09-28T07:59:48.700939Z","last_seen":"2024-09-28T07:59:48.700939Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:44.11470957Z","timestamp":1727198864114,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"3D661B2EC844A769C1E337D259ECD70418EA572DB5B532025F5B06C4960FEE0C\"\r\nLast-Modified: Sun, 22 Sep 2024 15:42:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=11179\r\nExpires: Tue, 24 Sep 2024 20:34:03 GMT\r\nDate: Tue, 24 Sep 2024 17:27:44 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"b4a8f78a3452207926a279218fecd76a","sha1":"607d7073c7ed5d57e8cd2562648f92d5815d7bfd","sha256":"3d661b2ec844a769c1e337d259ecd70418ea572db5b532025f5b06c4960fee0c","sha512":"f43c30c49a57eaf9d3951a666ea242e586e4cb235a28dc795e382ba0eefdb3c47efc147f9f06901a859af110757f8c1472ad062f4dce395ce416ed216211a6b1","ssdeep":"","tlshash":"74f00eae19f8ba04bebc1a0c2ca5e9288e206efc380142e9d490d7e057403f78b80098","first_seen":"2024-09-28T07:59:48.700939Z","last_seen":"2024-09-28T07:59:48.700939Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:44.160155484Z","timestamp":1727198864160,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"10120321A11DC72ED84888BC7C1492EA57C970F389FAA580748A9CCE6861EB62\"\r\nLast-Modified: Tue, 24 Sep 2024 09:34:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=18634\r\nExpires: Tue, 24 Sep 2024 22:38:18 GMT\r\nDate: Tue, 24 Sep 2024 17:27:44 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"a849e261de07e4df6998560130bd763d","sha1":"7e9fbcd926a618024c58e0af63a5946f803fc7ee","sha256":"10120321a11dc72ed84888bc7c1492ea57c970f389faa580748a9cce6861eb62","sha512":"0c1953139daca2122e17b1711961a43a8f251b7e571a1108c70bbe284fb767b5416d6bc00fe0096b19cc6149432ebbf737e8090c5261050b1a753b90bc304d77","ssdeep":"","tlshash":"1bf00e13379df800f76a0e1d18a9e2257904abbe3d102fd5e4a802f23850be88c96418","first_seen":"2024-09-24T19:28:16Z","last_seen":"2024-09-28T07:59:48.702507Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:44.162778689Z","timestamp":1727198864162,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"10120321A11DC72ED84888BC7C1492EA57C970F389FAA580748A9CCE6861EB62\"\r\nLast-Modified: Tue, 24 Sep 2024 09:34:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=18634\r\nExpires: Tue, 24 Sep 2024 22:38:18 GMT\r\nDate: Tue, 24 Sep 2024 17:27:44 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"a849e261de07e4df6998560130bd763d","sha1":"7e9fbcd926a618024c58e0af63a5946f803fc7ee","sha256":"10120321a11dc72ed84888bc7c1492ea57c970f389faa580748a9cce6861eb62","sha512":"0c1953139daca2122e17b1711961a43a8f251b7e571a1108c70bbe284fb767b5416d6bc00fe0096b19cc6149432ebbf737e8090c5261050b1a753b90bc304d77","ssdeep":"","tlshash":"1bf00e13379df800f76a0e1d18a9e2257904abbe3d102fd5e4a802f23850be88c96418","first_seen":"2024-09-24T19:28:16Z","last_seen":"2024-09-28T07:59:48.702507Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:44.178247566Z","timestamp":1727198864178,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"ABA9B88B17E0D150F82F1C0129E80D8844BACA72970019EFF9D392EAA5B6A6ED\"\r\nLast-Modified: Tue, 24 Sep 2024 08:38:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=17266\r\nExpires: Tue, 24 Sep 2024 22:15:30 GMT\r\nDate: Tue, 24 Sep 2024 17:27:44 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"baaad21de2b35ca1547f1ea2a3f4b635","sha1":"3925568ac0f48899f1292f9aa056b96fb4e94352","sha256":"aba9b88b17e0d150f82f1c0129e80d8844baca72970019eff9d392eaa5b6a6ed","sha512":"b09d866139ddeff1d2acc8964914587ca966396477956ff4a8621650a0326baba6df81346f9961ac96f438c2c1c286ffd98793ab313d96c0513fbc4b11fc753e","ssdeep":"","tlshash":"c4f0056597645a810fac2c2d99eac16b6a220ed810d104d14cd883c36d0b7fc384048d","first_seen":"2024-09-24T19:28:16Z","last_seen":"2024-09-28T07:59:48.703716Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:44.193208944Z","timestamp":1727198864193,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"ABA9B88B17E0D150F82F1C0129E80D8844BACA72970019EFF9D392EAA5B6A6ED\"\r\nLast-Modified: Tue, 24 Sep 2024 08:38:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=17266\r\nExpires: Tue, 24 Sep 2024 22:15:30 GMT\r\nDate: Tue, 24 Sep 2024 17:27:44 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"baaad21de2b35ca1547f1ea2a3f4b635","sha1":"3925568ac0f48899f1292f9aa056b96fb4e94352","sha256":"aba9b88b17e0d150f82f1c0129e80d8844baca72970019eff9d392eaa5b6a6ed","sha512":"b09d866139ddeff1d2acc8964914587ca966396477956ff4a8621650a0326baba6df81346f9961ac96f438c2c1c286ffd98793ab313d96c0513fbc4b11fc753e","ssdeep":"","tlshash":"c4f0056597645a810fac2c2d99eac16b6a220ed810d104d14cd883c36d0b7fc384048d","first_seen":"2024-09-24T19:28:16Z","last_seen":"2024-09-28T07:59:48.703716Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:44.20129859Z","timestamp":1727198864201,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"ABA9B88B17E0D150F82F1C0129E80D8844BACA72970019EFF9D392EAA5B6A6ED\"\r\nLast-Modified: Tue, 24 Sep 2024 08:38:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=17266\r\nExpires: Tue, 24 Sep 2024 22:15:30 GMT\r\nDate: Tue, 24 Sep 2024 17:27:44 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"baaad21de2b35ca1547f1ea2a3f4b635","sha1":"3925568ac0f48899f1292f9aa056b96fb4e94352","sha256":"aba9b88b17e0d150f82f1c0129e80d8844baca72970019eff9d392eaa5b6a6ed","sha512":"b09d866139ddeff1d2acc8964914587ca966396477956ff4a8621650a0326baba6df81346f9961ac96f438c2c1c286ffd98793ab313d96c0513fbc4b11fc753e","ssdeep":"","tlshash":"c4f0056597645a810fac2c2d99eac16b6a220ed810d104d14cd883c36d0b7fc384048d","first_seen":"2024-09-24T19:28:16Z","last_seen":"2024-09-28T07:59:48.703716Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:44.204607889Z","timestamp":1727198864204,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"10120321A11DC72ED84888BC7C1492EA57C970F389FAA580748A9CCE6861EB62\"\r\nLast-Modified: Tue, 24 Sep 2024 09:34:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=18634\r\nExpires: Tue, 24 Sep 2024 22:38:18 GMT\r\nDate: Tue, 24 Sep 2024 17:27:44 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"a849e261de07e4df6998560130bd763d","sha1":"7e9fbcd926a618024c58e0af63a5946f803fc7ee","sha256":"10120321a11dc72ed84888bc7c1492ea57c970f389faa580748a9cce6861eb62","sha512":"0c1953139daca2122e17b1711961a43a8f251b7e571a1108c70bbe284fb767b5416d6bc00fe0096b19cc6149432ebbf737e8090c5261050b1a753b90bc304d77","ssdeep":"","tlshash":"1bf00e13379df800f76a0e1d18a9e2257904abbe3d102fd5e4a802f23850be88c96418","first_seen":"2024-09-24T19:28:16Z","last_seen":"2024-09-28T07:59:48.702507Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:44.258292045Z","timestamp":1727198864258,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"0A02343E50FC553E49FC023F6E71855A8578AD1135FDBAF08D3A31E107A14DA2\"\r\nLast-Modified: Sun, 22 Sep 2024 15:59:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=11627\r\nExpires: Tue, 24 Sep 2024 20:41:31 GMT\r\nDate: Tue, 24 Sep 2024 17:27:44 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"3cf60e11da9d7f6edc670da5700531c2","sha1":"0991484ea9a8be64f26be9f10b6b123b504d9979","sha256":"0a02343e50fc553e49fc023f6e71855a8578ad1135fdbaf08d3a31e107a14da2","sha512":"4daa73091cb05f1b8df349f431e46311a4bab3872366e8ac87ca9bd690675a679330c05b4da3be998e755d12c83883a29da179b446a6dabc990b1d67ec203494","ssdeep":"","tlshash":"12f00eb529cba290cb9d1c675af4d639022028fc392478c3f25053e03951796138080c","first_seen":"2024-09-23T11:48:59Z","last_seen":"2024-09-28T08:19:06.044324Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.249","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:44.310802885Z","timestamp":1727198864310,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"19D54F3CA2E74A71E09ECD85DCA9AA54B549A352DDF730235504DF14B2A4D5BF\"\r\nLast-Modified: Tue, 24 Sep 2024 09:38:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=19456\r\nExpires: Tue, 24 Sep 2024 22:52:00 GMT\r\nDate: Tue, 24 Sep 2024 17:27:44 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"2a77db27f84fd23cbcf6f679603762ee","sha1":"ac0148902858d78d0845ad6abe419b09506da954","sha256":"19d54f3ca2e74a71e09ecd85dca9aa54b549a352ddf730235504df14b2a4d5bf","sha512":"0b6e2d2566bc72d0358ad0e4eea4b662dc44d6e45dc33dab1fa015497877d6832d8de0c22a99fc87589f294478212edc3739d65fa1e95ac09149c0ad79f8848d","ssdeep":"","tlshash":"90f0c09659827a04dafc283424d0daae7d108ded2641409317a542b1d120be4d7c1c9a","first_seen":"2024-09-24T19:28:16Z","last_seen":"2024-09-28T07:59:48.705933Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.249","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:44.311884559Z","timestamp":1727198864311,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"19D54F3CA2E74A71E09ECD85DCA9AA54B549A352DDF730235504DF14B2A4D5BF\"\r\nLast-Modified: Tue, 24 Sep 2024 09:38:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=19456\r\nExpires: Tue, 24 Sep 2024 22:52:00 GMT\r\nDate: Tue, 24 Sep 2024 17:27:44 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"2a77db27f84fd23cbcf6f679603762ee","sha1":"ac0148902858d78d0845ad6abe419b09506da954","sha256":"19d54f3ca2e74a71e09ecd85dca9aa54b549a352ddf730235504df14b2a4d5bf","sha512":"0b6e2d2566bc72d0358ad0e4eea4b662dc44d6e45dc33dab1fa015497877d6832d8de0c22a99fc87589f294478212edc3739d65fa1e95ac09149c0ad79f8848d","ssdeep":"","tlshash":"90f0c09659827a04dafc283424d0daae7d108ded2641409317a542b1d120be4d7c1c9a","first_seen":"2024-09-24T19:28:16Z","last_seen":"2024-09-28T07:59:48.705933Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.249","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:44.312630509Z","timestamp":1727198864312,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"19D54F3CA2E74A71E09ECD85DCA9AA54B549A352DDF730235504DF14B2A4D5BF\"\r\nLast-Modified: Tue, 24 Sep 2024 09:38:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=19456\r\nExpires: Tue, 24 Sep 2024 22:52:00 GMT\r\nDate: Tue, 24 Sep 2024 17:27:44 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"2a77db27f84fd23cbcf6f679603762ee","sha1":"ac0148902858d78d0845ad6abe419b09506da954","sha256":"19d54f3ca2e74a71e09ecd85dca9aa54b549a352ddf730235504df14b2a4d5bf","sha512":"0b6e2d2566bc72d0358ad0e4eea4b662dc44d6e45dc33dab1fa015497877d6832d8de0c22a99fc87589f294478212edc3739d65fa1e95ac09149c0ad79f8848d","ssdeep":"","tlshash":"90f0c09659827a04dafc283424d0daae7d108ded2641409317a542b1d120be4d7c1c9a","first_seen":"2024-09-24T19:28:16Z","last_seen":"2024-09-28T07:59:48.705933Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:44.325891081Z","timestamp":1727198864325,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"19D54F3CA2E74A71E09ECD85DCA9AA54B549A352DDF730235504DF14B2A4D5BF\"\r\nLast-Modified: Tue, 24 Sep 2024 09:38:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=19441\r\nExpires: Tue, 24 Sep 2024 22:51:45 GMT\r\nDate: Tue, 24 Sep 2024 17:27:44 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"2a77db27f84fd23cbcf6f679603762ee","sha1":"ac0148902858d78d0845ad6abe419b09506da954","sha256":"19d54f3ca2e74a71e09ecd85dca9aa54b549a352ddf730235504df14b2a4d5bf","sha512":"0b6e2d2566bc72d0358ad0e4eea4b662dc44d6e45dc33dab1fa015497877d6832d8de0c22a99fc87589f294478212edc3739d65fa1e95ac09149c0ad79f8848d","ssdeep":"","tlshash":"90f0c09659827a04dafc283424d0daae7d108ded2641409317a542b1d120be4d7c1c9a","first_seen":"2024-09-24T19:28:16Z","last_seen":"2024-09-28T07:59:48.705933Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:44.334641215Z","timestamp":1727198864334,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"19D54F3CA2E74A71E09ECD85DCA9AA54B549A352DDF730235504DF14B2A4D5BF\"\r\nLast-Modified: Tue, 24 Sep 2024 09:38:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=19482\r\nExpires: Tue, 24 Sep 2024 22:52:26 GMT\r\nDate: Tue, 24 Sep 2024 17:27:44 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"2a77db27f84fd23cbcf6f679603762ee","sha1":"ac0148902858d78d0845ad6abe419b09506da954","sha256":"19d54f3ca2e74a71e09ecd85dca9aa54b549a352ddf730235504df14b2a4d5bf","sha512":"0b6e2d2566bc72d0358ad0e4eea4b662dc44d6e45dc33dab1fa015497877d6832d8de0c22a99fc87589f294478212edc3739d65fa1e95ac09149c0ad79f8848d","ssdeep":"","tlshash":"90f0c09659827a04dafc283424d0daae7d108ded2641409317a542b1d120be4d7c1c9a","first_seen":"2024-09-24T19:28:16Z","last_seen":"2024-09-28T07:59:48.705933Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.249","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:44.363327273Z","timestamp":1727198864363,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"9E24DF36DEDB1F2517086545F771E958E1489D29654CC236E963D253E43568E7\"\r\nLast-Modified: Sun, 22 Sep 2024 16:58:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=5176\r\nExpires: Tue, 24 Sep 2024 18:54:00 GMT\r\nDate: Tue, 24 Sep 2024 17:27:44 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"44932ffcc70a409afedd2c318ac4d642","sha1":"9708ed66a2db96b3bcbb5b408c01e5645c692e58","sha256":"9e24df36dedb1f2517086545f771e958e1489d29654cc236e963d253e43568e7","sha512":"0f10e21ee152142fdac394bf0a612395c57e68ea49d2eabdb533a41dbc03fe4d87aa4fa6b7da17737eeec19098cc5b81416edc10d06dcbad1d2f63bf3a358ebf","ssdeep":"","tlshash":"bff0c9b31bc37ea1d3b889923968d3346e766dee381698c195e402a832d67f87584008","first_seen":"2024-09-28T07:59:48.706666Z","last_seen":"2024-09-28T07:59:48.706666Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.249","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:44.36483927Z","timestamp":1727198864364,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"9E24DF36DEDB1F2517086545F771E958E1489D29654CC236E963D253E43568E7\"\r\nLast-Modified: Sun, 22 Sep 2024 16:58:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=5176\r\nExpires: Tue, 24 Sep 2024 18:54:00 GMT\r\nDate: Tue, 24 Sep 2024 17:27:44 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"44932ffcc70a409afedd2c318ac4d642","sha1":"9708ed66a2db96b3bcbb5b408c01e5645c692e58","sha256":"9e24df36dedb1f2517086545f771e958e1489d29654cc236e963d253e43568e7","sha512":"0f10e21ee152142fdac394bf0a612395c57e68ea49d2eabdb533a41dbc03fe4d87aa4fa6b7da17737eeec19098cc5b81416edc10d06dcbad1d2f63bf3a358ebf","ssdeep":"","tlshash":"bff0c9b31bc37ea1d3b889923968d3346e766dee381698c195e402a832d67f87584008","first_seen":"2024-09-28T07:59:48.706666Z","last_seen":"2024-09-28T07:59:48.706666Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.249","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:44.383175997Z","timestamp":1727198864383,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"89A52EC3E963FE9C93B2800DF26FBFAC3F8F0E85D72B14F3EE0803C3F025A0DF\"\r\nLast-Modified: Sun, 22 Sep 2024 16:00:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=4464\r\nExpires: Tue, 24 Sep 2024 18:42:08 GMT\r\nDate: Tue, 24 Sep 2024 17:27:44 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"dcd9ad642103d8da11785827eb2f7be2","sha1":"2a99a447eb486aa6cd8cb9632f3ae9de88a4d1a6","sha256":"89a52ec3e963fe9c93b2800df26fbfac3f8f0e85d72b14f3ee0803c3f025a0df","sha512":"e2dd9ffc8ea102dc06ba51704687f9eb6d12ccba205df0aeb402eafea20ee73c7e6c53b9576913e49c6eb51ef64bb821e4dc32d79db0e9d05303de6c3c5f4295","ssdeep":"","tlshash":"5ff0059305e13854d6b46d1b1934d55d6e1075bc68d05dd7b1a051e13e11ff803cc00d","first_seen":"2024-09-23T11:48:59Z","last_seen":"2024-09-28T08:19:06.042723Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:44.394157619Z","timestamp":1727198864394,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"4637E708B642BA337AA5F4D773C291990905F713B33825246906184CA613B0DD\"\r\nLast-Modified: Sun, 22 Sep 2024 15:42:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=496\r\nExpires: Tue, 24 Sep 2024 17:36:00 GMT\r\nDate: Tue, 24 Sep 2024 17:27:44 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"fdac876d0de548816f086367d8a0e695","sha1":"a508a7603eaca8daa6b47748dd20b40c17d4f645","sha256":"4637e708b642ba337aa5f4d773c291990905f713b33825246906184ca613b0dd","sha512":"63bc5a5bb7c1dd47358090da477698d1b536eb81ea3e12042294ef754bd007c226616be3ea464e03b8af763e983c052b467643c5c32a9614f050761e61de24ee","ssdeep":"","tlshash":"21f00eba1ae6b461f7e80c5a36e1eb226c7055ad70c8c2d4e480d3d26551fe94764004","first_seen":"2024-09-28T07:59:48.709932Z","last_seen":"2024-09-28T07:59:48.709932Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.249","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:44.395170188Z","timestamp":1727198864395,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"4637E708B642BA337AA5F4D773C291990905F713B33825246906184CA613B0DD\"\r\nLast-Modified: Sun, 22 Sep 2024 15:42:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=554\r\nExpires: Tue, 24 Sep 2024 17:36:58 GMT\r\nDate: Tue, 24 Sep 2024 17:27:44 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"fdac876d0de548816f086367d8a0e695","sha1":"a508a7603eaca8daa6b47748dd20b40c17d4f645","sha256":"4637e708b642ba337aa5f4d773c291990905f713b33825246906184ca613b0dd","sha512":"63bc5a5bb7c1dd47358090da477698d1b536eb81ea3e12042294ef754bd007c226616be3ea464e03b8af763e983c052b467643c5c32a9614f050761e61de24ee","ssdeep":"","tlshash":"21f00eba1ae6b461f7e80c5a36e1eb226c7055ad70c8c2d4e480d3d26551fe94764004","first_seen":"2024-09-28T07:59:48.709932Z","last_seen":"2024-09-28T07:59:48.709932Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:44.410874746Z","timestamp":1727198864410,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"7FC7F5F0866183094FD2D043BC58756B743C10C3F2EF5E437B7B07888E2AAE14\"\r\nLast-Modified: Sun, 22 Sep 2024 16:21:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=15314\r\nExpires: Tue, 24 Sep 2024 21:42:58 GMT\r\nDate: Tue, 24 Sep 2024 17:27:44 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"98f6f87cc6165e2d3c2f875114c42c43","sha1":"9b4138d68c30ae0f0d9796447e505165151a97f7","sha256":"7fc7f5f0866183094fd2d043bc58756b743c10c3f2ef5e437b7b07888e2aae14","sha512":"2716f1544bdbf9fead987a25a4bcde15e15a0869b974d79005592c47dd72e20da64964714bf5ebca010fb07472032e0c5b3cdbcc1a6c141738d07d5b858e46ad","ssdeep":"","tlshash":"e5f075573bf7a7104b690827d644cb351e30afe4344481c6c4c842e72016fec8910d8c","first_seen":"2024-09-28T07:59:48.711336Z","last_seen":"2024-09-28T07:59:48.711336Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"e6.o.lencr.org/","fqdn":"e6.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.243","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:44.413711795Z","timestamp":1727198864413,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: e6.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 346\r\nETag: \"D4D439452DDC4A2A6B5532A775EAA9408CA2CC9EDEE68665BA6AF27A9C48CC82\"\r\nLast-Modified: Mon, 23 Sep 2024 05:21:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=17438\r\nExpires: Tue, 24 Sep 2024 22:18:22 GMT\r\nDate: Tue, 24 Sep 2024 17:27:44 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":346,"size_decoded":346,"mime_type":"application/octet-stream","magic":"data","md5":"be62e83c2ce0ff6bb62510bcfc82a333","sha1":"4bf4c872aed493b977a03fe86c50e30757a64351","sha256":"d4d439452ddc4a2a6b5532a775eaa9408ca2cc9edee68665ba6af27a9c48cc82","sha512":"58193e60e2653e0f6fcacbf2a539f0a882d30e4e3c73766e0b49abb3dbd4fb37e8412397a87065c68f5fe0c1da8861f97aaf9677499544a6ab63f074f856ef66","ssdeep":"","tlshash":"cde0c01267282c368f716c94787fc4223e5131ec1b019ec11400cae5b633f08894880d","first_seen":"2024-09-23T22:06:56Z","last_seen":"2024-09-28T08:13:00.609785Z","times_seen":46,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:44.416175193Z","timestamp":1727198864416,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"89A52EC3E963FE9C93B2800DF26FBFAC3F8F0E85D72B14F3EE0803C3F025A0DF\"\r\nLast-Modified: Sun, 22 Sep 2024 16:00:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=4472\r\nExpires: Tue, 24 Sep 2024 18:42:16 GMT\r\nDate: Tue, 24 Sep 2024 17:27:44 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"dcd9ad642103d8da11785827eb2f7be2","sha1":"2a99a447eb486aa6cd8cb9632f3ae9de88a4d1a6","sha256":"89a52ec3e963fe9c93b2800df26fbfac3f8f0e85d72b14f3ee0803c3f025a0df","sha512":"e2dd9ffc8ea102dc06ba51704687f9eb6d12ccba205df0aeb402eafea20ee73c7e6c53b9576913e49c6eb51ef64bb821e4dc32d79db0e9d05303de6c3c5f4295","ssdeep":"","tlshash":"5ff0059305e13854d6b46d1b1934d55d6e1075bc68d05dd7b1a051e13e11ff803cc00d","first_seen":"2024-09-23T11:48:59Z","last_seen":"2024-09-28T08:19:06.042723Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndication.realsrv.com/vregister.php?a=vview\u0026tracking_event=progress\u0026progress=00:00:10.000\u0026idzone=3981938\u00262f0c2af9d35a1a2cdde21db2fe9eb7be=tsVuZ8uHLpt4edvLpq48_XLv66ctdlTlK8E.fnju88N3Tlu49emtqayWunDMos7XA3GxK9Yw85n0466oK3F35qq5WJHM2G7I65JmYI3K6WHXYGtzU0muBthu1ymuCpynPxw5dOXTXA3PYzHBU.5Tn34dOnPprgbqgrcz8d.vnj41wN4zSuZ8_Pjj55.NcDbTFbj01OGfXh41wNtMSTsQPS59ePfx258tcDdrFMDFcE0ufHh078uPThy1wNzVZ8euuBtmma6pynPnrgbbctgacz4a4G2mKaYHKc.GuBuCqfPhrqsZz4a7WI7HM.27gDt6657GY4Kn3KV6WK3M._DXPYzHBU.5Su1ZTS5K1hmCidraYknYgelXasppclawzRPA1uXtPsSvOL1zLz2MxwVPuU58N3nhy6a3L2n2JXnF65l5XK7pqYs.OthtevCdzPnx1uzUyMV564G5XK7pqYs.OtqayWunBeamB6CViPMos7W_XXOveu7NTcxS242u7NTnrgbnpmbsarXaYrcempwz4.Nc9MDUEry8kzbkefjW_XXPVnx11NUuOSr0uVTR2VwTS567KnKV4G8.GuymNd9ip_Nvlz6cejrTrPnp45cGHGvHLs6z44dfHTt54ua4JJ6XKqoJpV6q2K7Ks.OuCSelyqqCaVeCW1iOBtelxiqaXPhrpcdcpcpXqgrcXfmqrlYkczu77nLKZqp659zU0mthtmOZqLPhrgbmddcpz4a4G42JW4JXl52HnM.Gu2BtyZdy1yWvPW5TTNS1M25nrgbbYrYaclrcpz5a4G2mKaYHKV6prKWnM.GuWapqmCevPhrglamelgrmXkmbcz4a63Kq15Jm3M.Gulx6CaVd5yaViRxeBvPhrnpmvwXqrYrsqz28dcDc7FNcrlOfDW1BXgu85NKxI4vA3nz49ePbl31yuVsNWQV4Lz0zX4L14TuZ65XK2GrIK8F56Zr8F23KmqYJ64Jpc9bDbMczUS9rlOeuCSelyqqCaVdiONeCW1iOBtelxiqaWrPhrqsZ5Z8NdVjPPPhrqapgnrXrwncz11NUwT1rysSOZ66mqYJ617XKc9bNM11TlK9rlOfDXbTnw1wS1uUysR58Ncsy7tkrdWfDXA3S5VPNLVBa4vGxhNZXnw1wNyWR1wYzSuZ8NbkjEEa8FU.fDXU1TBPWu25WxBHn211NUwT1r2uU1QTS58dcDbDdrlNcFTlK7Da9eE7mfLjrgbnpmvwz4a2G16XKLHKq16XKrI68.OuBuVyu6amJevCdzPjrgbaYknYgelXrwncz4a6a2V4JbXJa5qcF4G89dNbK8Etrktc1OC8rEjmeuJzBe1iOxxfjnw1xOYL2sR2OL8s.GuJzBe1iOxxfnnw1xOYL2sR2OL9M.GuJzBe1iOxxfrnw1xOYL2sR2OL9s.GuJzBe1iOxxfvnw1xOYL2sR2OL.M.GuJzBe1iOxxfznw1xOYL2sR2OL8eGfDXA3XSw67A0vVNZS05ny122WQN58e_Lvx8.PHblz79fPXnx8.O3Z3k728OdevhzhrrgkcqrYknz49.Xfj58eO3LW1NNFA41NLU5LXnxgA--","fqdn":"syndication.realsrv.com","domain":"realsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://w7.eurosptp.com/page.php?fr\u0026countrycode=coutry","date":"2024-09-24T17:27:44.394Z","timestamp":1727198864394,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"realsrv.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Sep 2024 10:35:05 GMT","end":"Wed, 11 Dec 2024 10:35:04 GMT"},"fingerprint":{"sha1":"95:7B:F0:3D:0B:82:4B:0B:7F:3B:06:68:76:24:A6:18:CE:1F:1C:FA","sha256":"A6:2B:F5:D8:36:FD:0D:0E:D8:34:F7:08:44:11:AC:85:FD:C3:D8:E1:8B:C8:6D:51:C9:1C:6C:44:D8:B3:9F:0D"}}},"request":{"raw":"GET /vregister.php?a=vview\u0026tracking_event=progress\u0026progress=00:00:10.000\u0026idzone=3981938\u00262f0c2af9d35a1a2cdde21db2fe9eb7be=tsVuZ8uHLpt4edvLpq48_XLv66ctdlTlK8E.fnju88N3Tlu49emtqayWunDMos7XA3GxK9Yw85n0466oK3F35qq5WJHM2G7I65JmYI3K6WHXYGtzU0muBthu1ymuCpynPxw5dOXTXA3PYzHBU.5Tn34dOnPprgbqgrcz8d.vnj41wN4zSuZ8_Pjj55.NcDbTFbj01OGfXh41wNtMSTsQPS59ePfx258tcDdrFMDFcE0ufHh078uPThy1wNzVZ8euuBtmma6pynPnrgbbctgacz4a4G2mKaYHKc.GuBuCqfPhrqsZz4a7WI7HM.27gDt6657GY4Kn3KV6WK3M._DXPYzHBU.5Su1ZTS5K1hmCidraYknYgelXasppclawzRPA1uXtPsSvOL1zLz2MxwVPuU58N3nhy6a3L2n2JXnF65l5XK7pqYs.OthtevCdzPnx1uzUyMV564G5XK7pqYs.OtqayWunBeamB6CViPMos7W_XXOveu7NTcxS242u7NTnrgbnpmbsarXaYrcempwz4.Nc9MDUEry8kzbkefjW_XXPVnx11NUuOSr0uVTR2VwTS567KnKV4G8.GuymNd9ip_Nvlz6cejrTrPnp45cGHGvHLs6z44dfHTt54ua4JJ6XKqoJpV6q2K7Ks.OuCSelyqqCaVeCW1iOBtelxiqaXPhrpcdcpcpXqgrcXfmqrlYkczu77nLKZqp659zU0mthtmOZqLPhrgbmddcpz4a4G42JW4JXl52HnM.Gu2BtyZdy1yWvPW5TTNS1M25nrgbbYrYaclrcpz5a4G2mKaYHKV6prKWnM.GuWapqmCevPhrglamelgrmXkmbcz4a63Kq15Jm3M.Gulx6CaVd5yaViRxeBvPhrnpmvwXqrYrsqz28dcDc7FNcrlOfDW1BXgu85NKxI4vA3nz49ePbl31yuVsNWQV4Lz0zX4L14TuZ65XK2GrIK8F56Zr8F23KmqYJ64Jpc9bDbMczUS9rlOeuCSelyqqCaVdiONeCW1iOBtelxiqaWrPhrqsZ5Z8NdVjPPPhrqapgnrXrwncz11NUwT1rysSOZ66mqYJ617XKc9bNM11TlK9rlOfDXbTnw1wS1uUysR58Ncsy7tkrdWfDXA3S5VPNLVBa4vGxhNZXnw1wNyWR1wYzSuZ8NbkjEEa8FU.fDXU1TBPWu25WxBHn211NUwT1r2uU1QTS58dcDbDdrlNcFTlK7Da9eE7mfLjrgbnpmvwz4a2G16XKLHKq16XKrI68.OuBuVyu6amJevCdzPjrgbaYknYgelXrwncz4a6a2V4JbXJa5qcF4G89dNbK8Etrktc1OC8rEjmeuJzBe1iOxxfjnw1xOYL2sR2OL8s.GuJzBe1iOxxfnnw1xOYL2sR2OL9M.GuJzBe1iOxxfrnw1xOYL2sR2OL9s.GuJzBe1iOxxfvnw1xOYL2sR2OL.M.GuJzBe1iOxxfznw1xOYL2sR2OL8eGfDXA3XSw67A0vVNZS05ny122WQN58e_Lvx8.PHblz79fPXnx8.O3Z3k728OdevhzhrrgkcqrYknz49.Xfj58eO3LW1NNFA41NLU5LXnxgA-- HTTP/1.1\r\nHost: syndication.realsrv.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://w7.eurosptp.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 24 Sep 2024 17:27:44 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: \r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20,"size_decoded":20,"mime_type":"text/html; charset=UTF-8","magic":"gzip compressed data, max speed, from Unix","md5":"a4745abc5e7fdb89cc6df3069f3c6e69","sha1":"74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed","sha256":"d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf","sha512":"849461cb54ecde577246aad993d1ecabb879913e353ae322561c7c57605f571e23210fe12bdcef49faa99b5b003611976ff64348f620968271e38bba1c7d7f62","ssdeep":"","tlshash":"ce70000000003c30cc000030000fc000000c30003000c00300000030000300300c003f","first_seen":"2023-04-08T01:36:47Z","last_seen":"2025-03-02T02:51:47.01042Z","times_seen":42040,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:44.425744432Z","timestamp":1727198864425,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"69A93694A07D664383A0832CB62643650EBBCFF6617A3868B723D31C6695839C\"\r\nLast-Modified: Sun, 22 Sep 2024 08:22:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=2521\r\nExpires: Tue, 24 Sep 2024 18:09:45 GMT\r\nDate: Tue, 24 Sep 2024 17:27:44 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"dfe7a6a1b1d3598463e24758f65a9f76","sha1":"8d4a20d02742d1bbb317f7b8a91756e7c7d4da83","sha256":"69a93694a07d664383a0832cb62643650ebbcff6617a3868b723d31c6695839c","sha512":"2b7cc2d80d4f44373c054732dd9081daa33ec82a059e4942c256e49edf2f983d83b814fd1d2cc7841074d3a24cd0a6826fca296f34f97676d5891d32e6fe196a","ssdeep":"","tlshash":"48f0c0503c3cb9595f6800196ee6e6723d6598d8f000b1e6c5c404d1b421fdae801089","first_seen":"2024-09-28T07:59:48.715489Z","last_seen":"2024-09-28T07:59:48.715489Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:44.426761947Z","timestamp":1727198864426,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"69A93694A07D664383A0832CB62643650EBBCFF6617A3868B723D31C6695839C\"\r\nLast-Modified: Sun, 22 Sep 2024 08:22:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=2521\r\nExpires: Tue, 24 Sep 2024 18:09:45 GMT\r\nDate: Tue, 24 Sep 2024 17:27:44 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"dfe7a6a1b1d3598463e24758f65a9f76","sha1":"8d4a20d02742d1bbb317f7b8a91756e7c7d4da83","sha256":"69a93694a07d664383a0832cb62643650ebbcff6617a3868b723d31c6695839c","sha512":"2b7cc2d80d4f44373c054732dd9081daa33ec82a059e4942c256e49edf2f983d83b814fd1d2cc7841074d3a24cd0a6826fca296f34f97676d5891d32e6fe196a","ssdeep":"","tlshash":"48f0c0503c3cb9595f6800196ee6e6723d6598d8f000b1e6c5c404d1b421fdae801089","first_seen":"2024-09-28T07:59:48.715489Z","last_seen":"2024-09-28T07:59:48.715489Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:44.427728462Z","timestamp":1727198864427,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"69A93694A07D664383A0832CB62643650EBBCFF6617A3868B723D31C6695839C\"\r\nLast-Modified: Sun, 22 Sep 2024 08:22:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=2521\r\nExpires: Tue, 24 Sep 2024 18:09:45 GMT\r\nDate: Tue, 24 Sep 2024 17:27:44 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"dfe7a6a1b1d3598463e24758f65a9f76","sha1":"8d4a20d02742d1bbb317f7b8a91756e7c7d4da83","sha256":"69a93694a07d664383a0832cb62643650ebbcff6617a3868b723d31c6695839c","sha512":"2b7cc2d80d4f44373c054732dd9081daa33ec82a059e4942c256e49edf2f983d83b814fd1d2cc7841074d3a24cd0a6826fca296f34f97676d5891d32e6fe196a","ssdeep":"","tlshash":"48f0c0503c3cb9595f6800196ee6e6723d6598d8f000b1e6c5c404d1b421fdae801089","first_seen":"2024-09-28T07:59:48.715489Z","last_seen":"2024-09-28T07:59:48.715489Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:44.442111114Z","timestamp":1727198864442,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"69A93694A07D664383A0832CB62643650EBBCFF6617A3868B723D31C6695839C\"\r\nLast-Modified: Sun, 22 Sep 2024 08:22:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=2472\r\nExpires: Tue, 24 Sep 2024 18:08:56 GMT\r\nDate: Tue, 24 Sep 2024 17:27:44 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"dfe7a6a1b1d3598463e24758f65a9f76","sha1":"8d4a20d02742d1bbb317f7b8a91756e7c7d4da83","sha256":"69a93694a07d664383a0832cb62643650ebbcff6617a3868b723d31c6695839c","sha512":"2b7cc2d80d4f44373c054732dd9081daa33ec82a059e4942c256e49edf2f983d83b814fd1d2cc7841074d3a24cd0a6826fca296f34f97676d5891d32e6fe196a","ssdeep":"","tlshash":"48f0c0503c3cb9595f6800196ee6e6723d6598d8f000b1e6c5c404d1b421fdae801089","first_seen":"2024-09-28T07:59:48.715489Z","last_seen":"2024-09-28T07:59:48.715489Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:44.456413625Z","timestamp":1727198864456,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"8AFA42FA2ABE62A8907D2C1FB672A50E5BFC256978FC7B0971072A6986EBCDC1\"\r\nLast-Modified: Sun, 22 Sep 2024 15:16:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=1022\r\nExpires: Tue, 24 Sep 2024 17:44:46 GMT\r\nDate: Tue, 24 Sep 2024 17:27:44 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"a3ad52365c1d1dd26ba1321b9e17ac3b","sha1":"a22f6fb9ee508b6a1e05fffaed70cc283cacf962","sha256":"8afa42fa2abe62a8907d2c1fb672a50e5bfc256978fc7b0971072a6986ebcdc1","sha512":"ac65827cb1925f268788f6804ddec5c740fcf2eb8cff20239682a97c080b396e9ac237cf2517a4a993dd9511fdc9c2b6972396217ec8421c9d1504e50d24ed69","ssdeep":"","tlshash":"39f00e600764f9188fa58c389ce4d23119047cfc288135c2c8e80fe13a217ac9f6408d","first_seen":"2024-09-24T19:28:16Z","last_seen":"2024-09-28T07:59:48.717472Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:44.466737169Z","timestamp":1727198864466,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"69A93694A07D664383A0832CB62643650EBBCFF6617A3868B723D31C6695839C\"\r\nLast-Modified: Sun, 22 Sep 2024 08:22:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=2549\r\nExpires: Tue, 24 Sep 2024 18:10:13 GMT\r\nDate: Tue, 24 Sep 2024 17:27:44 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"dfe7a6a1b1d3598463e24758f65a9f76","sha1":"8d4a20d02742d1bbb317f7b8a91756e7c7d4da83","sha256":"69a93694a07d664383a0832cb62643650ebbcff6617a3868b723d31c6695839c","sha512":"2b7cc2d80d4f44373c054732dd9081daa33ec82a059e4942c256e49edf2f983d83b814fd1d2cc7841074d3a24cd0a6826fca296f34f97676d5891d32e6fe196a","ssdeep":"","tlshash":"48f0c0503c3cb9595f6800196ee6e6723d6598d8f000b1e6c5c404d1b421fdae801089","first_seen":"2024-09-28T07:59:48.715489Z","last_seen":"2024-09-28T07:59:48.715489Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.225","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:44.469226885Z","timestamp":1727198864469,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"04CDB8D31CA5870DBAC07D4DB6400F7B52585134778227A40742CFAFF9AFE1A3\"\r\nLast-Modified: Tue, 24 Sep 2024 03:24:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=6623\r\nExpires: Tue, 24 Sep 2024 19:18:07 GMT\r\nDate: Tue, 24 Sep 2024 17:27:44 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"7f98129469c382ce5ac9098ed203b993","sha1":"73e6b22f715cc0e0db0cb75ac36bcc2a15f42348","sha256":"04cdb8d31ca5870dbac07d4db6400f7b52585134778227a40742cfaff9afe1a3","sha512":"a7ae2ca91cc8d368f668a07ebd181f0577da50d9cc78ec1d148b8cab8156b3b20be1f303c6bde6f17923b01671a9c5ee4a2d339fad92fd3b520b37ea747cdf91","ssdeep":"","tlshash":"15f054ab3a29f5da4f3814387cd6c1381d687ed8008a0b82d4d053e03c11fdc2c44d0c","first_seen":"2024-09-24T19:28:16Z","last_seen":"2024-09-28T07:59:48.718722Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndication.realsrv.com/vregister.php?a=vview\u0026tracking_event=progress\u0026progress=00:00:10.000\u0026idzone=3981938\u00262f0c2af9d35a1a2cdde21db2fe9eb7be=tsVuZ8uHLpt4edvLpq48_XLv66ctdlTlK8E.fnju88N3Tlu49emtqayWunDMos7XA3GxK9Yw85n0466oK3F35qq5WJHM2G7I65JmYI3K6WHXYGtzU0muBthu1ymuCpynPxw5dOXTXA3PYzHBU.5Tn34dOnPprgbqgrcz8d.vnj41wN4zSuZ8_Pjj55.NcDbTFbj01OGfXh41wNtMSTsQPS59ePfx258tcDdrFMDFcE0ufHh078uPTjw1wNzVZ8euuBtmma6pynPnrgbbctgacz4a4G2mKaYHKc.GuBuCqfPhrqsZz4a7WI7HM.27gDt6657GY4Kn3KV6WK3M._DXPYzHBU.5Su1ZTS5K1hmCidraYknYgelXasppclawzRPA1uXtPsSvOL1zLz2MxwVPuU58N3nhy6a3L2n2JXnF65l5XK7pqYs.OthtevCdzPnx1uzUyMV564G5XK7pqYs.OtqayWunBeamB6CViPMos7W_XXOveu7NTcxS242u7NTnrgbnpmbsarXaYrcempwz4.Nc9MDUEry8kzbkefjW_XXPVnx11NUuOSr0uVTR2VwTS567KnKV4G8.GuymNd9ip_Nvlz6cejrTrPnp45cGHGvHLs6z44dfHTt54ua4JJ6XKqoJpV6q2K7Ks.OuCSelyqqCaVeCW1iOBtelxiqaXPhrpcdcpcpXqgrcXfmqrlYkczu77nLKZqp659zU0mthtmOZqLPhrgbmddcpz4a4G42JW4JXl52HnM.Gu2BtyZdy1yWvPW5TTNS1M25nrgbbYrYaclrcpz5a4G2mKaYHKV6prKWnM.GuWapqmCevPhrglamelgrmXkmbcz4a63Kq15Jm3M.Gulx6CaVd5yaViRxeBvPhrnpmvwXqrYrsqz28dcDc7FNcrlOfDW1BXgu85NKxI4vA3nz49ePbl31yuVsNWQV4Lz0zX4L14TuZ65XK2GrIK8F56Zr8F23KmqYJ64Jpc9bDbMczUS9rlOeuCSelyqqCaVdiONeCW1iOBtelxiqaWrPhrqsZ5Z8NdVjPPPhrqapgnrXrwncz11NUwT1rysSOZ66mqYJ617XKc9bNM11TlK9rlOfDXbTnw1wS1uUysR58Ncsy7tkrdWfDXA3S5VPNLVBa4vGxhNZXnw1wNyWR1wYzSuZ8NbkjEEa8FU.fDXU1TBPWu25WxBHn211NUwT1r2uU1QTS58dcDbDdrlNcFTlK7Da9eE7mfLjrgbnpmvwz4a2G16XKLHKq16XKrI68.OuBuVyu6amJevCdzPjrgbaYknYgelXrwncz4a6a2V4JbXJa5qcF4G89dNbK8Etrktc1OC8rEjmeuJzBe1iOxxfjnw1xOYL2sR2OL8s.GuJzBe1iOxxfnnw1xOYL2sR2OL9M.GuJzBe1iOxxfrnw1xOYL2sR2OL9s.GuJzBe1iOxxfvnw1xOYL2sR2OL.M.GuJzBe1iOxxfznw1xOYL2sR2OL8eGfDXA3XSw67A0vVNZS05ny122WQN58e_Lvx8.PHbl388vPjv079u3Z3k728OdXe3HjrrgkcqrYknz49.Xfj58eO3LW1NNFA41NLU5LXnxgA--","fqdn":"syndication.realsrv.com","domain":"realsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://w7.eurosptp.com/page.php?fr\u0026countrycode=coutry","date":"2024-09-24T17:27:44.458Z","timestamp":1727198864458,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"realsrv.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Sep 2024 10:35:05 GMT","end":"Wed, 11 Dec 2024 10:35:04 GMT"},"fingerprint":{"sha1":"95:7B:F0:3D:0B:82:4B:0B:7F:3B:06:68:76:24:A6:18:CE:1F:1C:FA","sha256":"A6:2B:F5:D8:36:FD:0D:0E:D8:34:F7:08:44:11:AC:85:FD:C3:D8:E1:8B:C8:6D:51:C9:1C:6C:44:D8:B3:9F:0D"}}},"request":{"raw":"GET /vregister.php?a=vview\u0026tracking_event=progress\u0026progress=00:00:10.000\u0026idzone=3981938\u00262f0c2af9d35a1a2cdde21db2fe9eb7be=tsVuZ8uHLpt4edvLpq48_XLv66ctdlTlK8E.fnju88N3Tlu49emtqayWunDMos7XA3GxK9Yw85n0466oK3F35qq5WJHM2G7I65JmYI3K6WHXYGtzU0muBthu1ymuCpynPxw5dOXTXA3PYzHBU.5Tn34dOnPprgbqgrcz8d.vnj41wN4zSuZ8_Pjj55.NcDbTFbj01OGfXh41wNtMSTsQPS59ePfx258tcDdrFMDFcE0ufHh078uPTjw1wNzVZ8euuBtmma6pynPnrgbbctgacz4a4G2mKaYHKc.GuBuCqfPhrqsZz4a7WI7HM.27gDt6657GY4Kn3KV6WK3M._DXPYzHBU.5Su1ZTS5K1hmCidraYknYgelXasppclawzRPA1uXtPsSvOL1zLz2MxwVPuU58N3nhy6a3L2n2JXnF65l5XK7pqYs.OthtevCdzPnx1uzUyMV564G5XK7pqYs.OtqayWunBeamB6CViPMos7W_XXOveu7NTcxS242u7NTnrgbnpmbsarXaYrcempwz4.Nc9MDUEry8kzbkefjW_XXPVnx11NUuOSr0uVTR2VwTS567KnKV4G8.GuymNd9ip_Nvlz6cejrTrPnp45cGHGvHLs6z44dfHTt54ua4JJ6XKqoJpV6q2K7Ks.OuCSelyqqCaVeCW1iOBtelxiqaXPhrpcdcpcpXqgrcXfmqrlYkczu77nLKZqp659zU0mthtmOZqLPhrgbmddcpz4a4G42JW4JXl52HnM.Gu2BtyZdy1yWvPW5TTNS1M25nrgbbYrYaclrcpz5a4G2mKaYHKV6prKWnM.GuWapqmCevPhrglamelgrmXkmbcz4a63Kq15Jm3M.Gulx6CaVd5yaViRxeBvPhrnpmvwXqrYrsqz28dcDc7FNcrlOfDW1BXgu85NKxI4vA3nz49ePbl31yuVsNWQV4Lz0zX4L14TuZ65XK2GrIK8F56Zr8F23KmqYJ64Jpc9bDbMczUS9rlOeuCSelyqqCaVdiONeCW1iOBtelxiqaWrPhrqsZ5Z8NdVjPPPhrqapgnrXrwncz11NUwT1rysSOZ66mqYJ617XKc9bNM11TlK9rlOfDXbTnw1wS1uUysR58Ncsy7tkrdWfDXA3S5VPNLVBa4vGxhNZXnw1wNyWR1wYzSuZ8NbkjEEa8FU.fDXU1TBPWu25WxBHn211NUwT1r2uU1QTS58dcDbDdrlNcFTlK7Da9eE7mfLjrgbnpmvwz4a2G16XKLHKq16XKrI68.OuBuVyu6amJevCdzPjrgbaYknYgelXrwncz4a6a2V4JbXJa5qcF4G89dNbK8Etrktc1OC8rEjmeuJzBe1iOxxfjnw1xOYL2sR2OL8s.GuJzBe1iOxxfnnw1xOYL2sR2OL9M.GuJzBe1iOxxfrnw1xOYL2sR2OL9s.GuJzBe1iOxxfvnw1xOYL2sR2OL.M.GuJzBe1iOxxfznw1xOYL2sR2OL8eGfDXA3XSw67A0vVNZS05ny122WQN58e_Lvx8.PHbl388vPjv079u3Z3k728OdXe3HjrrgkcqrYknz49.Xfj58eO3LW1NNFA41NLU5LXnxgA-- HTTP/1.1\r\nHost: syndication.realsrv.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://w7.eurosptp.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 24 Sep 2024 17:27:44 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: \r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20,"size_decoded":20,"mime_type":"text/html; charset=UTF-8","magic":"gzip compressed data, max speed, from Unix","md5":"a4745abc5e7fdb89cc6df3069f3c6e69","sha1":"74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed","sha256":"d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf","sha512":"849461cb54ecde577246aad993d1ecabb879913e353ae322561c7c57605f571e23210fe12bdcef49faa99b5b003611976ff64348f620968271e38bba1c7d7f62","ssdeep":"","tlshash":"ce70000000003c30cc000030000fc000000c30003000c00300000030000300300c003f","first_seen":"2023-04-08T01:36:47Z","last_seen":"2025-03-02T02:51:47.01042Z","times_seen":42040,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"latest-522727.tgel2ebtx.ru/click?node=292\u0026winPrice=0.015\u0026winCurrency=USD\u0026id=1727198820000-5395","fqdn":"latest-522727.tgel2ebtx.ru","domain":"tgel2ebtx.ru","tld":"ru"},"ip":{"addr":"206.54.181.250","port":443,"asn":35415,"as":"Webzilla B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cfr.news24.media/?d","date":"2024-09-24T17:27:42.202Z","timestamp":1727198862202,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.tgel2ebtx.ru","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Sep 2024 13:52:38 GMT","end":"Tue, 10 Dec 2024 13:52:37 GMT"},"fingerprint":{"sha1":"CD:52:DA:2C:2E:8D:DC:ED:E3:D5:0B:0E:A6:08:9C:7C:4E:C2:C9:8A","sha256":"46:3B:42:FB:DC:3E:8B:1D:69:93:84:49:C9:9D:D8:BC:8E:80:D7:6E:50:7F:81:9B:70:9C:8B:D9:28:36:2A:5B"}}},"request":{"raw":"GET /click?node=292\u0026winPrice=0.015\u0026winCurrency=USD\u0026id=1727198820000-5395 HTTP/1.1\r\nHost: latest-522727.tgel2ebtx.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cfr.news24.media/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ncache-control: private, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nset-cookie: clickId_522727=1727198820000-115; path=/; samesite=none; secure; httponly\r\ndate: Tue, 24 Sep 2024 17:27:44 GMT\r\nconnection: close\r\ntransfer-encoding: chunked\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":479,"size_decoded":479,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"dbbe8670d350e050c6ee68940eafd955","sha1":"b2dc5e5d0471b01759d755798d087830dcf8fbf8","sha256":"a879635ffa6d2f2a14919fb574131933dbf907e85db161c2205a8fc7eb1fd343","sha512":"9f25a82078803bd895ab6b582e308f73cfa8e0fec4bc783b4d764a458524ce7871e744f5859b8f17ed63171223008ff6e93ac4e68b0d29adc7d41ae08e631732","ssdeep":"","tlshash":"64f05ccf6a8c5c661af18850a877b30c381e1c7d785db594fef746250405a8783456a5","first_seen":"2024-06-29T20:13:24Z","last_seen":"2024-10-04T11:19:02.794642Z","times_seen":45,"resource_available":false,"data":null}},"time_used":2314,"timings":{"blocked":611,"dns":0,"connect":17,"send":0,"wait":34,"receive":1,"ssl":1650},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.249","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:45.658767467Z","timestamp":1727198865658,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"8E8129CA2BB5038F30613D7BCE69443B211520793DF38425FB87C8CD9C338949\"\r\nLast-Modified: Sun, 22 Sep 2024 16:02:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=8145\r\nExpires: Tue, 24 Sep 2024 19:43:30 GMT\r\nDate: Tue, 24 Sep 2024 17:27:45 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"c610689ed10fb367cec328b3268a37a6","sha1":"833ef941914d7b9b0cd5e191399a67d6c2573094","sha256":"8e8129ca2bb5038f30613d7bce69443b211520793df38425fb87c8cd9c338949","sha512":"351772acbb99143e049edb276dbe98a0ff0cb0d9ad8cc662795662adbf30540266b8d16028b630ceec5b7845f466e49e811869f93397afbc951eb8feb5656c91","ssdeep":"","tlshash":"38f005be16c7f511a7dc09036cc9ea5d1c10dd7e30b094c68894c1eb6761fe5054a14c","first_seen":"2024-09-23T11:49:00Z","last_seen":"2024-09-28T08:19:06.10123Z","times_seen":73,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gbstlnd.com/adult_video_3/3333/2f1eeeafc1c1aa0ba0685904cfada495/?click_id=a2_3736566435692234949_627551_2_0\u0026sub1=a627551\u0026sub2=%24%7Bsub2%7D\u0026sub3=%24%7Bsub3%7D\u0026tb=\u0026fullscreen=1","fqdn":"gbstlnd.com","domain":"gbstlnd.com","tld":"com"},"ip":{"addr":"173.214.250.52","port":443,"asn":15317,"as":"SERVEREL-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cgb.news24.media/?d","date":"2024-09-24T17:27:44.637Z","timestamp":1727198864637,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"nwslndng.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Sep 2024 13:39:30 GMT","end":"Wed, 11 Dec 2024 13:39:29 GMT"},"fingerprint":{"sha1":"70:F3:B8:1A:DA:BD:D8:A1:23:0F:46:9D:A7:9F:CA:B8:16:5F:60:8A","sha256":"FC:1D:A8:4B:77:83:82:3C:40:76:D1:10:E1:C7:95:42:02:2C:43:94:24:20:EB:EE:DC:2B:14:AE:98:38:00:3D"}}},"request":{"raw":"GET /adult_video_3/3333/2f1eeeafc1c1aa0ba0685904cfada495/?click_id=a2_3736566435692234949_627551_2_0\u0026sub1=a627551\u0026sub2=%24%7Bsub2%7D\u0026sub3=%24%7Bsub3%7D\u0026tb=\u0026fullscreen=1 HTTP/1.1\r\nHost: gbstlnd.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cgb.news24.media/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Sep 2024 17:27:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-WoW64, Sec-CH-UA-Bitness, Sec-CH-UA-Model\r\npermissions-policy: ch-ua=(self \"https://rexpush.club\"), ch-ua-mobile=(self \"https://rexpush.club\"), ch-ua-platform=(self \"https://rexpush.club\"), ch-ua-full-version=(self \"https://rexpush.club\"), ch-ua-full-version-list=(self \"https://rexpush.club\"), ch-ua-platform-version=(self \"https://rexpush.club\"), ch-ua-arch=(self \"https://rexpush.club\"), ch-ua-wow64=(self \"https://rexpush.club\"), ch-ua-bitness=(self \"https://rexpush.club\"), ch-ua-model=(self \"https://rexpush.club\")\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":179996,"size_decoded":179996,"mime_type":"text/html; charset=UTF-8","magic":"gzip compressed data, max speed, from Unix","md5":"b227366221bb31352d58d80a5335650f","sha1":"7f528def342360ea76c88b5b9f5125f40b7cfa0f","sha256":"12ac45423a6ca7aab6d6b5464f9934ee7074c36685918d2293d2ca3e66918248","sha512":"481fb29528a057fd9fc647b5f55f6eafc3f1d3c6475e195576b609c8746f2e5cc827f52495c36a16c258d2234713d7ca6da14a088dbae80f10828fa852930649","ssdeep":"3072:wZj/z1LriQhV7rttZ4aJrOWGT7piRsntpo4ZVEsD47EbYf:I713iQvntP4a1pGTMRG/VEsD47Ebw","tlshash":"ff04129b57a19d0c286e5ffa60c3ab46f07f748b9a92fe8a40521ce92f702f415d13d4","first_seen":"2024-09-28T07:59:48.721351Z","last_seen":"2024-09-28T07:59:48.721351Z","times_seen":1,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"e6.o.lencr.org/","fqdn":"e6.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.243","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-24T17:27:46.593896913Z","timestamp":1727198866593,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: e6.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 346\r\nETag: \"DF97FDCD9BCC4D7695D39D0FD50562628BAE035E42E0A0191A190A0FA88E0693\"\r\nLast-Modified: Sun, 22 Sep 2024 16:15:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=2153\r\nExpires: Tue, 24 Sep 2024 18:03:39 GMT\r\nDate: Tue, 24 Sep 2024 17:27:46 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":346,"size_decoded":346,"mime_type":"application/octet-stream","magic":"data","md5":"97b5fa786b10d14d4bf912c1159ff9b2","sha1":"0c913c513f0209a9cb0482d08fd3349e788985e8","sha256":"df97fdcd9bcc4d7695d39d0fd50562628bae035e42e0a0191a190a0fa88e0693","sha512":"a0612379c03b16648adc64e97b50faddefc9ed22185f7fe6563c78f356428587c1fc635b53909336985ab40f640fb3b48a76783d20780fc19f174d2e2bc067d1","ssdeep":"","tlshash":"79e0c072934069708b21398195fdc42a2fa1319f9b01e9a24441d6e67b267148b0808e","first_seen":"2024-09-23T08:30:26Z","last_seen":"2024-09-28T08:21:02.143337Z","times_seen":46,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ctrtraffic.me/follow1.html","fqdn":"ctrtraffic.me","domain":"ctrtraffic.me","tld":"me"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:37.105Z","timestamp":1727198857105,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ctrtraffic.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Sep 2024 18:56:16 GMT","end":"Sun, 15 Dec 2024 18:56:15 GMT"},"fingerprint":{"sha1":"B5:5C:14:47:59:F7:46:21:B1:85:1E:A6:98:2C:65:CD:81:D3:BA:C1","sha256":"E5:25:D1:2F:7F:BC:68:5B:1F:BC:C8:BD:52:2E:65:5D:37:AD:AB:11:36:A4:DF:65:78:23:93:7B:6D:36:12:16"}}},"request":{"raw":"GET /follow1.html HTTP/1.1\r\nHost: ctrtraffic.me\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 515344\r\nlast-modified: Wed, 18 Sep 2024 18:18:33 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=cAjnm6IEe%2B8TSO572wVt26e6Ogd9FCznO0GSxRULgAVCZYug24bsoQYZsVHenY0bsp%2BYPrDJsAWwAl%2F9UN4C1ha7%2BbID18clIsv2nD9W4N8gryH%2B2aCPkwGVAzIRSdnB\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c795a676a62-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":254,"size_decoded":254,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"1f5d090667ae074b891fe2ae7a7bf793","sha1":"b3324529cd59b51b9eb8ea39bc7151707056e362","sha256":"eda59923df52ab803abd8180641fae5a3e3592246c29838153b564578bd4c6f7","sha512":"4234b7d3fe7f0823d176b9749ba887aba66ed3ade62d960d96f19d50ce05119caf9d46692e9300e0e1961af34dc1c5e69a6679672fc8ac5224168bb7bcbd711a","ssdeep":"","tlshash":"7ad02bef6e04f0360b5548951cb1775c3225f01474316010e28e8715c8c87c0ddb33e0","first_seen":"2023-10-13T04:20:32Z","last_seen":"2024-10-11T09:19:31.000485Z","times_seen":44,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":67,"dns":137,"connect":42,"send":0,"wait":29,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sub.votreimc.com/eximdigitala.html","fqdn":"sub.votreimc.com","domain":"votreimc.com","tld":"com"},"ip":{"addr":"172.67.222.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:37.629Z","timestamp":1727198857629,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votreimc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Sep 2024 02:12:01 GMT","end":"Sat, 14 Dec 2024 02:12:00 GMT"},"fingerprint":{"sha1":"AF:56:A8:13:7B:6E:27:2B:03:40:18:37:A2:8B:CA:0F:2F:6D:E0:FA","sha256":"44:AD:5E:CF:7E:DE:B0:30:21:4D:10:85:AA:65:B9:AC:F4:EA:F9:DA:BC:84:CE:A6:39:8C:B9:24:E9:77:43:4A"}}},"request":{"raw":"GET /eximdigitala.html HTTP/1.1\r\nHost: sub.votreimc.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nx-iplb-request-id: A29ECA6A:745E_91EF25A2:0050_66EB0C91_55367:7D2A\r\nx-iplb-instance: 52360\r\ncf-cache-status: HIT\r\nage: 518648\r\nlast-modified: Wed, 18 Sep 2024 17:23:29 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3iByZI9RxsBYY9DH0b5xM9uVSqOnUsQNWpT4p575rjLev4InPl%2FhCSlrOps9PKMMiVm1GJjiXab05yoDbYT1iYYCz2LRivw4aTcWK5gXSKeFVje5kAJSKZjz2nmvSfWOLK06\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c78cff162b8-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":266,"size_decoded":266,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"c0174d001a22a4947b403b62f5721551","sha1":"e6c2938dc00a11ee8d97cbd6db44cdcf28a24261","sha256":"0326eb11805a6e7e5ac8382f2440fa5db5a1c4660e4f09779d807aadba8ea874","sha512":"607d1468efa2ee1243e50ed3859ae02025ab311ea51e883be35ca29b503b37c97b41773b4f0c1fa1dff739728e3e1db7e550e18504108ad49dde1343795fa19d","ssdeep":"","tlshash":"66d0c2ef2c4890011b5018d097b2ab6c2431e434002838e4d2ca0266c9c0b9ccca37e9","first_seen":"2023-05-08T16:02:00Z","last_seen":"2024-10-06T19:12:51.520013Z","times_seen":39,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adzgame.com/redirect?feed=647206\u0026auth=T1loWp\u0026subid=adzgameadu1\u0026query=adzgameadu1\u0026url=adzgame1.com","fqdn":"xml.adzgame.com","domain":"adzgame.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:42.018Z","timestamp":1727198862018,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=647206\u0026auth=T1loWp\u0026subid=adzgameadu1\u0026query=adzgameadu1\u0026url=adzgame1.com HTTP/1.1\r\nHost: xml.adzgame.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":0,"dns":170,"connect":99,"send":0,"wait":0,"receive":0,"ssl":-1},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adxfactory.com/redirect?feed=472841\u0026auth=wtoFWi\u0026subid=adxgeo\u0026query=adxgeo\u0026url=adxfactory.com","fqdn":"xml.adxfactory.com","domain":"adxfactory.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:41.711Z","timestamp":1727198861711,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"adxfactory.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Aug 2024 06:38:50 GMT","end":"Sun, 17 Nov 2024 06:38:49 GMT"},"fingerprint":{"sha1":"1E:C6:95:35:4E:70:D5:EE:77:F2:4B:E1:2F:1F:2D:B7:5E:11:51:E8","sha256":"23:CF:DC:D8:8C:29:EC:03:76:8C:61:E5:CC:F9:DB:21:C7:D1:74:4C:CB:9E:E1:A6:F9:23:A8:14:8A:3F:3D:B5"}}},"request":{"raw":"GET /redirect?feed=472841\u0026auth=wtoFWi\u0026subid=adxgeo\u0026query=adxgeo\u0026url=adxfactory.com HTTP/1.1\r\nHost: xml.adxfactory.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":0,"dns":0,"connect":102,"send":0,"wait":0,"receive":0,"ssl":-1},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.eximdigital.com/redirect?feed=445013\u0026auth=umnz4X\u0026subid=eximdigital\u0026query=eximdigital\u0026url=eximdigital.com","fqdn":"xml.eximdigital.com","domain":"eximdigital.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.091Z","timestamp":1727198862091,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=445013\u0026auth=umnz4X\u0026subid=eximdigital\u0026query=eximdigital\u0026url=eximdigital.com HTTP/1.1\r\nHost: xml.eximdigital.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":976,"timings":{"blocked":948,"dns":28,"connect":100,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redirect3.online/flurry.html","fqdn":"redirect3.online","domain":"redirect3.online","tld":"online"},"ip":{"addr":"104.21.55.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:36.866Z","timestamp":1727198856866,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redirect3.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Sep 2024 16:21:21 GMT","end":"Mon, 02 Dec 2024 16:21:20 GMT"},"fingerprint":{"sha1":"46:1D:B0:17:F7:A5:4C:43:98:0F:A7:F0:E3:13:1A:C5:65:27:15:AD","sha256":"69:65:AB:BA:8F:55:4D:8C:ED:7A:0B:18:55:8C:05:31:E5:C9:2F:37:39:0B:7F:BF:99:F9:58:33:1B:42:6C:CF"}}},"request":{"raw":"GET /flurry.html HTTP/1.1\r\nHost: redirect3.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:36 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 40314\r\nlast-modified: Tue, 24 Sep 2024 06:15:42 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=gAVrFB2cMH9CzWy9mYmGjepFze1bamrsUY9t0ZjxZtLZIgrfKfEwc0KuU47S21TZ6I2epzW2LOKdVrx8WZWEBSUBg6YZP4vfmH8vLivSolOQt5wulTbGem6v53BhSoB2y0HZ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c782d2962ba-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":242,"size_decoded":242,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"100e11cf57d2b630d257953d8625846f","sha1":"2772e5042c4cb3a027b996c0e8e9cc27a54df42b","sha256":"8f26a4e4cace04a3b8c7811658dd5201b4961fc8b4de1a33c4961fc837bca698","sha512":"0eff438cf2749ac4812bd5aa5c2bbf35a47c2fb0c5503fdb94d35c1cd548b12fc7307287c6b3e84366bd48d628eb4e6a8b5cd13f24e9d9cb7a9724c3af8f20f5","ssdeep":"","tlshash":"f8d05eae2d48a009baa418d41772a39c385aa04438267079f5cc422e98c5695ac333e0","first_seen":"2023-05-12T17:45:47Z","last_seen":"2024-10-11T09:19:31.019593Z","times_seen":40,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":113,"dns":32,"connect":30,"send":0,"wait":27,"receive":0,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-good.com/infinitygeo.html","fqdn":"ad-good.com","domain":"ad-good.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:37.888Z","timestamp":1727198857888,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-good.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Aug 2024 12:01:51 GMT","end":"Sun, 10 Nov 2024 12:01:50 GMT"},"fingerprint":{"sha1":"77:4B:2C:D9:8C:89:13:31:AF:23:8C:04:14:AA:A5:93:B9:95:86:50","sha256":"05:8A:8C:C7:83:B7:64:C0:B5:21:77:3B:A5:F6:F1:7E:DE:19:31:34:57:A5:16:CC:06:08:40:4E:39:C0:EC:FD"}}},"request":{"raw":"GET /infinitygeo.html HTTP/1.1\r\nHost: ad-good.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 540602\r\nlast-modified: Wed, 18 Sep 2024 11:17:35 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=osG5FkjhOCLvu3r562l81desKsIwjv7l9TyTB2TstSovmCY6fcSt6eUiZmNRUPulTpjS6J3O%2Bswrp67td9wkXAxbVAXI7fFK7DNHR9vN6yrMiamVxaqaMWD1eB2i8A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c795bf29fae-AMS\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":273,"size_decoded":273,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (301), with no line terminators","md5":"ad1d130c3b4bb589803f5530dcbbdc46","sha1":"4b16d38fd3f38065af32aa63e712973088576614","sha256":"24cde747a431ad00cc99a4b3f16a0ca91c81965c68776dd41d5d6250fad0c668","sha512":"7f38a0072eebd1cc736169c159d3cc9b8ab58d8b56be754ad0f14a8d79a03de3a002e4c00815602dccf108ad7f2d8fc3fdd480a98c93d2393a60e8c896981cdd","ssdeep":"","tlshash":"a2e0c2be2d09b027266045981cf1b2a8391758541176b4009184823ec4e5acaec33fe9","first_seen":"2023-08-10T19:24:14Z","last_seen":"2024-10-11T09:19:31.02352Z","times_seen":46,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.infinity-info.com/redirect?feed=441157\u0026auth=lxC8VR\u0026subid=infinitymain\u0026query=best+deals\u0026url=infinity-info.com","fqdn":"xml.infinity-info.com","domain":"infinity-info.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:42.219Z","timestamp":1727198862219,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=441157\u0026auth=lxC8VR\u0026subid=infinitymain\u0026query=best+deals\u0026url=infinity-info.com HTTP/1.1\r\nHost: xml.infinity-info.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.eximdigital.com/redirect?feed=647204\u0026auth=AiH31G\u0026subid=eximdigitalbis1\u0026query=eximdigitalbis1\u0026url=eximdigital1.com","fqdn":"xml.eximdigital.com","domain":"eximdigital.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.086Z","timestamp":1727198862086,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=647204\u0026auth=AiH31G\u0026subid=eximdigitalbis1\u0026query=eximdigitalbis1\u0026url=eximdigital1.com HTTP/1.1\r\nHost: xml.eximdigital.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":97,"connect":102,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.ad-good.com/images/300x250.png","fqdn":"static.ad-good.com","domain":"ad-good.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://w7.eurosptp.com/page.php?fr\u0026countrycode=coutry","date":"2024-09-24T17:27:36.203Z","timestamp":1727198856203,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-good.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Aug 2024 12:01:51 GMT","end":"Sun, 10 Nov 2024 12:01:50 GMT"},"fingerprint":{"sha1":"77:4B:2C:D9:8C:89:13:31:AF:23:8C:04:14:AA:A5:93:B9:95:86:50","sha256":"05:8A:8C:C7:83:B7:64:C0:B5:21:77:3B:A5:F6:F1:7E:DE:19:31:34:57:A5:16:CC:06:08:40:4E:39:C0:EC:FD"}}},"request":{"raw":"GET /images/300x250.png HTTP/1.1\r\nHost: static.ad-good.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://w7.eurosptp.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 19151\r\nlast-modified: Mon, 06 May 2024 11:52:33 GMT\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Sep 2024 12:12:54 GMT\r\ncf-cache-status: HIT\r\nage: 106182\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2aWSqe6do5OHzTvjggGmuA9t5z3bz9SJ%2FpNaGpD3%2BTudU63rtEa2PknRAKhVbbiEfjZOrXcOW3E2uqLmceaXrrhHbwStTyH0WoVN80eIMLbDHhY%2FZIyFaKz42JokRAW78rxHXA4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8c847c7419149fae-AMS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19151,"size_decoded":19151,"mime_type":"image/png","magic":"PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced","md5":"7d02bb864ce60b37461a7275f903a9da","sha1":"a18ab6747303e47bcb4c6912f57bc742291d46ae","sha256":"9c02ea531d36bc55ddeadf6f419c652ea27e0ae136e88daeb0b4c2fd64b709b8","sha512":"bf5dcc6acfffb73bd54c04d123c4dec64c0a6fb9ef790a31b6935846b5041b4d73953ea1c04dc1d454f47bd2497e05b24543cf4897f185daad99ab24570d1132","ssdeep":"384:hdnrB5VS+TCJ76n3UyHDVTTUgtd9pm2L6Azg0iGO5xwVYHyzdID:frPRhn3THDpVT9pmstz5XiHWiD","tlshash":"7582bea88474e60c0e6279236fb4a4f0e0abb4c651c6eb1ad385ff98450e8472d6c6d8","first_seen":"2024-09-14T06:59:34Z","last_seen":"2024-11-02T23:00:17.976749Z","times_seen":36,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":118,"dns":42,"connect":20,"send":0,"wait":34,"receive":2,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/adf1.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:38.669Z","timestamp":1727198858669,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /adf1.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww1.good-trading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 449827\r\nlast-modified: Thu, 19 Sep 2024 12:30:30 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=siizUYthC3B2HXfvQeDvNS0SMlNqOYZBTZnVcLqKCDqUFGGDVVRVKhsi%2B%2BisPrBeVRV8g5B0fjs2gbBP94c38ccxLtzn%2FgGh83ef8%2FR0wasLa16vVFYIPctg%2BNsWZqgdoCKV\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c7bde62726c-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":248,"size_decoded":248,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"ab658f556be01dcd15dc530c96819083","sha1":"9a3e77b04356ad5ccca63d03a7bbb492c634ab6e","sha256":"6e81875b493a7ca887edb71fae104fe87557678bb940a85be484ba714abe9a3a","sha512":"0a1f63e3776702e9b4bca2869c150574312bab08e53b88d29b1fdd9ec3b8a59e253d79f77c06c3b78b3f31e3e152abf860b9750c9350a3bbbd54b279ca57c9ec","ssdeep":"","tlshash":"4ed02bbf9c48f015055146b0947173fc6613640864f06008f2889217ccc47c1d837be5","first_seen":"2023-04-16T23:55:08Z","last_seen":"2024-10-11T09:19:31.029216Z","times_seen":40,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"click.mediacpc.com/redirect?feed=441599\u0026auth=8VxsIi\u0026subid=mediaadult\u0026query=adult\u0026url=mediaadult.com","fqdn":"click.mediacpc.com","domain":"mediacpc.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.082Z","timestamp":1727198862082,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=441599\u0026auth=8VxsIi\u0026subid=mediaadult\u0026query=adult\u0026url=mediaadult.com HTTP/1.1\r\nHost: click.mediacpc.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":366,"timings":{"blocked":359,"dns":7,"connect":96,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.clixvista.com/redirect?feed=536488\u0026auth=j6mN1x\u0026subid=clixvista\u0026query=clixvista\u0026url=clixvista.com","fqdn":"xml.clixvista.com","domain":"clixvista.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.227Z","timestamp":1727198862227,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=536488\u0026auth=j6mN1x\u0026subid=clixvista\u0026query=clixvista\u0026url=clixvista.com HTTP/1.1\r\nHost: xml.clixvista.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":855,"timings":{"blocked":835,"dns":20,"connect":89,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.capndr.com/advertising.js","fqdn":"js.capndr.com","domain":"capndr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:33.636Z","timestamp":1727198853636,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.capndr.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Aug 2024 02:02:32 GMT","end":"Sun, 17 Nov 2024 02:02:31 GMT"},"fingerprint":{"sha1":"A0:3C:B8:F2:B0:74:40:26:0C:8B:97:F4:AE:8A:17:21:9E:B9:63:3B","sha256":"01:EB:6B:8F:AE:3A:86:57:68:40:E7:90:15:88:95:40:D9:F3:7F:96:D3:63:A3:E6:C7:40:F2:72:45:0D:41:85"}}},"request":{"raw":"GET /advertising.js HTTP/1.1\r\nHost: js.capndr.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nlast-modified: Fri, 14 Jul 2023 08:23:25 GMT\r\netag: \"64b105fd-0\"\r\nexpires: Tue, 24 Sep 2024 17:32:33 GMT\r\ncache-control: max-age=300\r\nx-proxy-cache: HIT\r\nx-cdn-host-id: ds9225\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":488,"timings":{"blocked":100,"dns":30,"connect":19,"send":0,"wait":21,"receive":267,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.eximdigital.com/redirect?feed=445008\u0026auth=AK9QGh\u0026subid=eximdigital\u0026query=eximdigital\u0026url=eximdigital.com","fqdn":"xml.eximdigital.com","domain":"eximdigital.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:42.025Z","timestamp":1727198862025,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=445008\u0026auth=AK9QGh\u0026subid=eximdigital\u0026query=eximdigital\u0026url=eximdigital.com HTTP/1.1\r\nHost: xml.eximdigital.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":216,"connect":143,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adxfactory.com/redirect?feed=470044\u0026auth=01aQpq\u0026subid=adxa\u0026query=adxa\u0026url=xxxtopwet.com","fqdn":"xml.adxfactory.com","domain":"adxfactory.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.101Z","timestamp":1727198862101,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=470044\u0026auth=01aQpq\u0026subid=adxa\u0026query=adxa\u0026url=xxxtopwet.com HTTP/1.1\r\nHost: xml.adxfactory.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":985,"timings":{"blocked":965,"dns":20,"connect":164,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adxfactory.com/redirect?feed=707606\u0026auth=tcOZ\u0026subid=adx2\u0026query=adx2\u0026url=facebook.com","fqdn":"xml.adxfactory.com","domain":"adxfactory.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:41.689Z","timestamp":1727198861689,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"adxfactory.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Aug 2024 06:38:50 GMT","end":"Sun, 17 Nov 2024 06:38:49 GMT"},"fingerprint":{"sha1":"1E:C6:95:35:4E:70:D5:EE:77:F2:4B:E1:2F:1F:2D:B7:5E:11:51:E8","sha256":"23:CF:DC:D8:8C:29:EC:03:76:8C:61:E5:CC:F9:DB:21:C7:D1:74:4C:CB:9E:E1:A6:F9:23:A8:14:8A:3F:3D:B5"}}},"request":{"raw":"GET /redirect?feed=707606\u0026auth=tcOZ\u0026subid=adx2\u0026query=adx2\u0026url=facebook.com HTTP/1.1\r\nHost: xml.adxfactory.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":3135,"timings":{"blocked":1303,"dns":1,"connect":96,"send":0,"wait":0,"receive":0,"ssl":1718},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redirect3.online/adx2.html","fqdn":"redirect3.online","domain":"redirect3.online","tld":"online"},"ip":{"addr":"104.21.55.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.725Z","timestamp":1727198859725,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redirect3.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Sep 2024 16:21:21 GMT","end":"Mon, 02 Dec 2024 16:21:20 GMT"},"fingerprint":{"sha1":"46:1D:B0:17:F7:A5:4C:43:98:0F:A7:F0:E3:13:1A:C5:65:27:15:AD","sha256":"69:65:AB:BA:8F:55:4D:8C:ED:7A:0B:18:55:8C:05:31:E5:C9:2F:37:39:0B:7F:BF:99:F9:58:33:1B:42:6C:CF"}}},"request":{"raw":"GET /adx2.html HTTP/1.1\r\nHost: redirect3.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 553737\r\nlast-modified: Wed, 18 Sep 2024 07:38:42 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7Gyw3ySdqYvgd9C4rtmclwIxhShbDAmajOBrN88Kbc5O4Rwz5JNdpzYUAUoasIfL5wEA4RSPANZy4Ys4uR614985W7BFsHLCrA2O8uiDQe5kA9Pg1seSw%2FEVXhhvAqGAq4sE\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c858898b7b5-AMS\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":239,"size_decoded":239,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"24086f294a83edc8e50698e49c1cba93","sha1":"123dc9f4a0841244a9f4f88255ade1c39677c0a4","sha256":"b08eca6fefb1b396cb7d3a3076b3765a5c81164ec1419797e5fd2092060d0d86","sha512":"20553aca8275b392e57200f77889d6939f70b050d12aced832e6d1b4a4217e7037d9568b7825424c5760aead288c3be6d19204111fa47e0cd272e87c4b605ddf","ssdeep":"","tlshash":"c9d02ebe2c18b0120a700ae41771b2ac7412c1060029b028b288626a88c43c8dcb33e1","first_seen":"2024-09-20T03:59:59Z","last_seen":"2024-10-04T11:19:02.855802Z","times_seen":14,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sub.votreimc.com/eximdigitalm1.html","fqdn":"sub.votreimc.com","domain":"votreimc.com","tld":"com"},"ip":{"addr":"172.67.222.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:37.638Z","timestamp":1727198857638,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votreimc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Sep 2024 02:12:01 GMT","end":"Sat, 14 Dec 2024 02:12:00 GMT"},"fingerprint":{"sha1":"AF:56:A8:13:7B:6E:27:2B:03:40:18:37:A2:8B:CA:0F:2F:6D:E0:FA","sha256":"44:AD:5E:CF:7E:DE:B0:30:21:4D:10:85:AA:65:B9:AC:F4:EA:F9:DA:BC:84:CE:A6:39:8C:B9:24:E9:77:43:4A"}}},"request":{"raw":"GET /eximdigitalm1.html HTTP/1.1\r\nHost: sub.votreimc.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nx-iplb-request-id: A29ECA50:CFC2_91EF25A2:0050_66EB2372_634C3:16DF\r\nx-iplb-instance: 52360\r\ncf-cache-status: HIT\r\nage: 512791\r\nlast-modified: Wed, 18 Sep 2024 19:01:06 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3ZU%2B3PW%2F0Yv5y5raHJICFgMfoEWT5DJ3SqFzeF2kiLTsWo7g8a8xvSV1Gd4yMROTeJE8kyf4b%2FNaY57VzOOx7MqUCSlNj5xGvOnDxzkOe2L1Nlb%2BUh4ko3DhZQ0UGmIXel50\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c78f84c62b8-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":269,"size_decoded":269,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"33c27f254b09173792eb326926127987","sha1":"589eed942ef71bca0dfd358c7b2e6f75c93a4940","sha256":"99d640d50a437a9d501e52219814c971ee5c91526d4ac16ec3b192551a148bc7","sha512":"6c26f9f9f11a268d187f63a22ff11a6e5dcfe2952a87a4824044ad853fed1b81553db7cca0dcb5f8aa68eb405493509fb163500a135263942518ec58d16ba94b","ssdeep":"","tlshash":"afd0c2af1e0990000b5008d097736b6c6871e574046838b4a1c54276d5c4a9cccb23e8","first_seen":"2024-04-09T19:05:02Z","last_seen":"2024-10-06T19:12:51.507262Z","times_seen":35,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adtube.media/redirect?feed=561765\u0026auth=L0SJGK\u0026subid=adtub\u0026query=adtub\u0026url=adtube.media","fqdn":"xml.adtube.media","domain":"adtube.media","tld":"media"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:41.754Z","timestamp":1727198861754,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=561765\u0026auth=L0SJGK\u0026subid=adtub\u0026query=adtub\u0026url=adtube.media HTTP/1.1\r\nHost: xml.adtube.media\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":1,"connect":104,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redirect3.online/rtba.html","fqdn":"redirect3.online","domain":"redirect3.online","tld":"online"},"ip":{"addr":"104.21.55.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:38.536Z","timestamp":1727198858536,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redirect3.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Sep 2024 16:21:21 GMT","end":"Mon, 02 Dec 2024 16:21:20 GMT"},"fingerprint":{"sha1":"46:1D:B0:17:F7:A5:4C:43:98:0F:A7:F0:E3:13:1A:C5:65:27:15:AD","sha256":"69:65:AB:BA:8F:55:4D:8C:ED:7A:0B:18:55:8C:05:31:E5:C9:2F:37:39:0B:7F:BF:99:F9:58:33:1B:42:6C:CF"}}},"request":{"raw":"GET /rtba.html HTTP/1.1\r\nHost: redirect3.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 40306\r\nlast-modified: Tue, 24 Sep 2024 06:15:51 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Q2P8Ttzgbra40HtJCof5uVb5%2BwFA%2BWDDdTUFWrVh6PkxXByYY7VFR%2BFxF%2B8ne8G%2BlPyIGhVGTec4IdduZIKrsvK8143jLGa6cvjduXiudwmZeIOPdGccK7mvG19OgUaObYX7\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c7aca6c62ba-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":241,"size_decoded":241,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"d740c3f589d8011f9dd2c264789de848","sha1":"7bc8aa03f0b106d8d56c7de95cb60176b9abaf1e","sha256":"e81f7f20e447d14f2536f2059cfad2422efce20ea56d1bc5b2f4ca4058564f9b","sha512":"589f5a7f4c9c71f0fafdbf5ca5641794790f827a2a8e871cfd3bdcd87624f486a9549020d6be5991addd5338d3d5df7393b0104ac5b5a8650477ed903094b158","ssdeep":"","tlshash":"22d05bbe1d5c90410b610ce41771e55c785690450475b06a778e822a48d47d5dd733e4","first_seen":"2023-05-08T16:02:00Z","last_seen":"2024-10-11T09:19:31.00733Z","times_seen":48,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ctrtraffic.me/follow1.html","fqdn":"ctrtraffic.me","domain":"ctrtraffic.me","tld":"me"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.380Z","timestamp":1727198859380,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ctrtraffic.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Sep 2024 18:56:16 GMT","end":"Sun, 15 Dec 2024 18:56:15 GMT"},"fingerprint":{"sha1":"B5:5C:14:47:59:F7:46:21:B1:85:1E:A6:98:2C:65:CD:81:D3:BA:C1","sha256":"E5:25:D1:2F:7F:BC:68:5B:1F:BC:C8:BD:52:2E:65:5D:37:AD:AB:11:36:A4:DF:65:78:23:93:7B:6D:36:12:16"}}},"request":{"raw":"GET /follow1.html HTTP/1.1\r\nHost: ctrtraffic.me\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 515346\r\nlast-modified: Wed, 18 Sep 2024 18:18:33 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=WzDFRpT0xDepNUKrjbupQ8WAjMHCHF2pm5IFi%2BnvY8iGkn1yg5Xqk6DDWiXkOW7EOZYiPBZYtvjXrMgEJlsLdK%2Fq9cY%2Fgu%2FFldpDopoU1B3004vzz4yrDEEBNUIPYLGA\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c852fd46a62-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":254,"size_decoded":254,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"1f5d090667ae074b891fe2ae7a7bf793","sha1":"b3324529cd59b51b9eb8ea39bc7151707056e362","sha256":"eda59923df52ab803abd8180641fae5a3e3592246c29838153b564578bd4c6f7","sha512":"4234b7d3fe7f0823d176b9749ba887aba66ed3ade62d960d96f19d50ce05119caf9d46692e9300e0e1961af34dc1c5e69a6679672fc8ac5224168bb7bcbd711a","ssdeep":"","tlshash":"7ad02bef6e04f0360b5548951cb1775c3225f01474316010e28e8715c8c87c0ddb33e0","first_seen":"2023-10-13T04:20:32Z","last_seen":"2024-10-11T09:19:31.000485Z","times_seen":44,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adflyer.media/redirect?feed=474232\u0026auth=yILiVK\u0026subid=adfa\u0026query=adfa\u0026url=adflyer.media","fqdn":"xml.adflyer.media","domain":"adflyer.media","tld":"media"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:41.727Z","timestamp":1727198861727,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=474232\u0026auth=yILiVK\u0026subid=adfa\u0026query=adfa\u0026url=adflyer.media HTTP/1.1\r\nHost: xml.adflyer.media\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":35,"connect":104,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.eroticporns.com/thumb/79/shale-sex-videos.webp","fqdn":"www.eroticporns.com","domain":"eroticporns.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:32.643Z","timestamp":1727198852643,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eroticporns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Aug 2024 16:44:19 GMT","end":"Sat, 02 Nov 2024 16:44:18 GMT"},"fingerprint":{"sha1":"C4:5B:D2:8F:70:A7:B7:31:BB:EC:DB:B4:B6:6D:9F:F1:73:FE:0C:3E","sha256":"BA:64:F6:DD:64:84:84:ED:5A:E9:A8:50:0F:D4:DE:A5:9C:B1:50:27:E0:B3:C0:53:2A:6B:1F:F3:71:3C:A1:82"}}},"request":{"raw":"GET /thumb/79/shale-sex-videos.webp HTTP/1.1\r\nHost: www.eroticporns.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/porn/upskirt-videos/\r\nCookie: PHPSESSID=r9e4h1c9jt47akapojj56ul45l\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:32 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 05 Aug 2024 00:34:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66b01dfb-37ea\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 3083\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=CshBPFCVGzaUly0yUjLkncoWO4iHEx4EIcD0TdjS7h0rUtzrJpHfVJqEk1ToUKwVgViTVZ7TNtpwVHkV2bjAkAHX92cpc2OLZB35IjQhQXl71J%2B1eANkzx8yoc8v6qDjh3L1mQb0\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c5cf945365a-FRA\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14314,"size_decoded":14314,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 352x198, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e3d5ede9c9e16de40553ab1b7bc734d6","sha1":"4e2624df2d1d4645b111d54a079254c1a3bc9ed7","sha256":"767e0eb68bba0a9e3d2ec86f12700f1569f472553b4424e27bf294555b0658a4","sha512":"7ba747bd4206d8559d01354b61ab34b55d5cd3afdfcc5570020ffb494f9b7908f7722602f91b362442305dd60ed07cf4baaebaf7481114bed7b8ca30c0b8a551","ssdeep":"192:V/ygXYILHFrjLiu0/Ig2f0fLUSaxwgpoEaRtt0W7VEqa1ewtj+ktQ2Ja5HUw7zy:V/yat59pZSoXLGva1ewtjJoJG","tlshash":"3c52c1deb66f72444abcb5618c324540964efe43ad60a4b60d89ca15ffd047fe9d3132","first_seen":"2024-09-28T07:59:48.729834Z","last_seen":"2024-09-28T07:59:48.729834Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww-7.good-trading.com/?good-e","fqdn":"ww-7.good-trading.com","domain":"good-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://w7.eurosptp.com/page.php?fr\u0026countrycode=coutry","date":"2024-09-24T17:27:36.280Z","timestamp":1727198856280,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"good-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Aug 2024 23:14:36 GMT","end":"Thu, 07 Nov 2024 23:14:35 GMT"},"fingerprint":{"sha1":"C7:4B:95:73:72:AB:33:39:3C:05:E9:B3:6F:8B:A2:16:7D:68:15:7F","sha256":"7B:C1:76:37:CA:CA:74:63:50:27:D3:B0:32:AF:B7:04:19:71:6F:2B:AC:00:E9:86:E5:3C:B4:62:85:A2:86:26"}}},"request":{"raw":"GET /?good-e HTTP/1.1\r\nHost: ww-7.good-trading.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://w7.eurosptp.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:36 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.2\r\nexpires: Sun, 01 Jan 2014 00:00:00 GMT\r\npragma: no-cache\r\ncache-control: no-cache, must-revalidate\r\nreferrer-policy: origin\r\nset-cookie: goodtrading=1; expires=Wed, 25 Sep 2024 17:27:36 GMT; Max-Age=86400; path=/; domain=good-trading.com\r\nvary: Accept-Encoding\r\nx-iplb-request-id: A29ECB9D:D41C_91EF25A2:0050_66F2F688_454D5:305D\r\nx-iplb-instance: 52295\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9WM7PY0Ceo%2FaEwgbTkSaq%2B5vr1Zn%2FTluhtT4qZ2vmF5atlxjGBbV6irQkOyKKTtJ6eDjEHFdWI%2FtCCDA0enTor0WrVqhIY6h7DGd6jDLCC1rxOB%2FtT%2FA%2B5xQoSUkU9gl1LRezKeeefA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c75196f7284-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18114,"size_decoded":18114,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":558,"timings":{"blocked":211,"dns":43,"connect":20,"send":0,"wait":135,"receive":0,"ssl":141},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redirect3.online/flurry.html","fqdn":"redirect3.online","domain":"redirect3.online","tld":"online"},"ip":{"addr":"104.21.55.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.339Z","timestamp":1727198859339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redirect3.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Sep 2024 16:21:21 GMT","end":"Mon, 02 Dec 2024 16:21:20 GMT"},"fingerprint":{"sha1":"46:1D:B0:17:F7:A5:4C:43:98:0F:A7:F0:E3:13:1A:C5:65:27:15:AD","sha256":"69:65:AB:BA:8F:55:4D:8C:ED:7A:0B:18:55:8C:05:31:E5:C9:2F:37:39:0B:7F:BF:99:F9:58:33:1B:42:6C:CF"}}},"request":{"raw":"GET /flurry.html HTTP/1.1\r\nHost: redirect3.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 42309\r\nlast-modified: Tue, 24 Sep 2024 05:42:30 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=tZ6TcBCZxZ34feZOsd4M9DtVrpRpRnOAa9XKba9yCFYmwD0oJFWii2FIzJDtFDjd8pULOGOBW9fWLUzl2D6ISfouraTbjPjH0C%2BVkV2LSC11vH1FcDmLU55V47D%2Bq%2FZw9ZHt\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c851ff8b7b5-AMS\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":242,"size_decoded":242,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"100e11cf57d2b630d257953d8625846f","sha1":"2772e5042c4cb3a027b996c0e8e9cc27a54df42b","sha256":"8f26a4e4cace04a3b8c7811658dd5201b4961fc8b4de1a33c4961fc837bca698","sha512":"0eff438cf2749ac4812bd5aa5c2bbf35a47c2fb0c5503fdb94d35c1cd548b12fc7307287c6b3e84366bd48d628eb4e6a8b5cd13f24e9d9cb7a9724c3af8f20f5","ssdeep":"","tlshash":"f8d05eae2d48a009baa418d41772a39c385aa04438267079f5cc422e98c5695ac333e0","first_seen":"2023-05-12T17:45:47Z","last_seen":"2024-10-11T09:19:31.019593Z","times_seen":40,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.eximdigital.com/redirect?feed=553310\u0026auth=LU3rE4\u0026subid=eximdigital\u0026query=eximdigital\u0026url=eximdigital.com","fqdn":"xml.eximdigital.com","domain":"eximdigital.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:42.030Z","timestamp":1727198862030,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=553310\u0026auth=LU3rE4\u0026subid=eximdigital\u0026query=eximdigital\u0026url=eximdigital.com HTTP/1.1\r\nHost: xml.eximdigital.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":208,"connect":102,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.xmladsystem.com/redirect?feed=467491\u0026auth=WhI7Jx\u0026subid=purea\u0026query=purea\u0026url=pureads.com","fqdn":"xml.xmladsystem.com","domain":"xmladsystem.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.057Z","timestamp":1727198862057,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=467491\u0026auth=WhI7Jx\u0026subid=purea\u0026query=purea\u0026url=pureads.com HTTP/1.1\r\nHost: xml.xmladsystem.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":78,"dns":14,"connect":88,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.clixvista.com/redirect?feed=536488\u0026auth=j6mN1x\u0026subid=clixvista\u0026query=clixvista\u0026url=clixvista.com","fqdn":"xml.clixvista.com","domain":"clixvista.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:42.098Z","timestamp":1727198862098,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=536488\u0026auth=j6mN1x\u0026subid=clixvista\u0026query=clixvista\u0026url=clixvista.com HTTP/1.1\r\nHost: xml.clixvista.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":447,"timings":{"blocked":443,"dns":4,"connect":100,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.eroticporns.com/thumb/31/porn-desi-indian-videos.webp","fqdn":"www.eroticporns.com","domain":"eroticporns.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:32.624Z","timestamp":1727198852624,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eroticporns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Aug 2024 16:44:19 GMT","end":"Sat, 02 Nov 2024 16:44:18 GMT"},"fingerprint":{"sha1":"C4:5B:D2:8F:70:A7:B7:31:BB:EC:DB:B4:B6:6D:9F:F1:73:FE:0C:3E","sha256":"BA:64:F6:DD:64:84:84:ED:5A:E9:A8:50:0F:D4:DE:A5:9C:B1:50:27:E0:B3:C0:53:2A:6B:1F:F3:71:3C:A1:82"}}},"request":{"raw":"GET /thumb/31/porn-desi-indian-videos.webp HTTP/1.1\r\nHost: www.eroticporns.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/porn/upskirt-videos/\r\nCookie: PHPSESSID=r9e4h1c9jt47akapojj56ul45l\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:32 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sun, 04 Aug 2024 23:20:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66b00ca5-2e66\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 4744\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=kzdBpLzr9Mc0ocmL3UF12zgExz%2B1xPgXs%2Bxshz7tEjPLO4kOLeWszoBUdL2ruKAXhyWqxbOUCJDW35WzrJ6U0lJTa53Qt2WfaY1fcyezMziRVrVdM6WVy9dsY1D9wHTKVBNCPuu6\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c5ce923365a-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11878,"size_decoded":11878,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 352x198, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c5182759127b6aa8ce84fa99c6654063","sha1":"fbfe4cfc0d90d37c14c9aa666e37ecde143a248a","sha256":"8c5a50b25abbfd0c22d429ce94e04d22ad9107343f18a617801302b1ce7062b2","sha512":"fc0094d6cd2270619a385e94a25d43b5e217094b4bdc5b871b2d098c3f40488e45f601862e04d0208755942a92b03d59bf1e591df7259f6f43e3598ab92d9bd3","ssdeep":"192:4oi1EDNPhHDSYZ9SWkdbq6au/f1mWOxcNyM9UOGJkc3z4aocE+D/ponmJX/4f7kp:dPfHNVf6ayIWOx/iXGJNj4aPhLpsmJP9","tlshash":"b232bfdd7ea32f4d87b0f4452c2a56f6b389e797b3833d548db5eac15c0462d109644c","first_seen":"2024-08-05T01:54:53Z","last_seen":"2024-09-28T07:59:48.731479Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndication.realsrv.com/vregister.php?a=vimp\u0026tracking_event=impression\u0026idzone=3981938\u00262f0c2af9d35a1a2cdde21db2fe9eb7be=tsVuZ8uHLpt4edvLpq48_XLv659tdlTlK8E.fnju88N3Tlu49emtqayWunDMos7XA3GxK9Yw85n0466oK3F35qq5WJHM2G7I65JmYI3K6WHXYGtzU0muBthu1ymuCpynPxw5dOXTXA3PYzHBU.5Tn34dOnPprgbqgrcz8d.vnj41wN4zSuZ8_Pjj55.NcDbTFbj01OGfXh41wNtMSTsQPS59ePfx258tcDdrFMDFcE0ufHh078uPTl21wNzVZ8euuBtmma6pynPnrgbbctgacz4a4G2mKaYHKc.GuBuCqfPhrqsZz4a7WI7HM.27gDt6657GY4Kn3KV6WK3M._DXPYzHBU.5Su1ZTS5K1hmCidraYknYgelXasppclawzRPA1uXtPsSvOL1zLz2MxwVPuU58N3nhy6a3L2n2JXnF65l5XK7pqYs.OthtevCdzPnx1uzUyMV564G5XK7pqYs.OtqayWunBeamB6CViPMos7W_XXOveu7NTcxS242u7NTnrgbnpmbsarXaYrcempwz4.Nc9MDUEry8kzbkefjW_XXPVnx11NUuOSr0uVTR2VwTS567KnKV4G8.GuymNd9ip_Nvlz6cejrTrPnp45cGHGvHLs6z44dfHTt54ua4JJ6XKqoJpV6q2K7Ks.OuCSelyqqCaVeCW1iOBtelxiqaXPhrpcdcpcpXqgrcXfmqrlYkczu77nLKZqp659zU0mthtmOZqLPhrgbmddcpz4a4G42JW4JXl52HnM.Gty9xqyuCaVeuCRzPhu4cdcDbbFbDTktblOfLXA20xTTA5SvVNZS05nw1yzVNUwT158NcErUz0sFcy8kzbmfDXW5VWvJM25nw10uPQTSrvOTSsSOLwN58Nc9M1.C9VbFdlWe3jrgbnYprlcpz4a2oK8F3nJpWJHF4G8.fHrx7cu.uVythqyCvBeema_BevCdzPXK5Ww1ZBXgvPTNfgu25U1TBPXBNLnrYbZjmaiXtcpz1wST0uVVQTSrsRxrwS2sRwNr0uMVTS1Z8NdVjPLPhrqsZ558NdTVME9a9eE7meupqmCeteViRzPXU1TBPWva5TnrZpmuqcpXtcpz4a7ac.GuCWtymViPPhrlmXdslbqz4a4G6XKp5paoLXF42MJrK8.GuBuSyOuDGaVzPhrckYgjXgqnz4a6mqYJ6123K2II8.2upqmCete1ymqCaXPjrgbYbtcprgqcpXYbXrwncz5cdcDc9M1.GfDWw2vS5RY5VWvS5VZHXnx1wNyuV3TUxL14TuZ8dcDbTEk7ED0q9eE7mfDXTWyvBLa5LXNTgvA3nrprZXgltclrmpwXlYkcz1xOYL2sR2OL8c.GuJzBe1iOxxflnw1xOYL2sR2OL88.GuJzBe1iOxxfpnw1xOYL2sR2OL9c.GuJzBe1iOxxftnw1xOYL2sR2OL98.GuJzBe1iOxxfxnw1xOYL2sR2OL.c.GuJzBe1iOxxfjwz4a2m5V7KmHnM._np51swNr1PsNwSvL2sR2OZ8NdTjU0ra7LlVa9rEdjmfDWxY1XBNKu7HNNTnw1sWNVwTSrtOQR58NcDddLDrsDS9U1lLTmfLWzZTHnrsqcpXaYnnglez12VOUrtMTzwSvLu0uUWOStYZ67bLIG8.Pfl34.fHjr25ceHjjw4cufbt2d5O9vHjtw68OmuuCRyqtiSfPj35d.Pnx469tbU00UDjU0tTktefGA","fqdn":"syndication.realsrv.com","domain":"realsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://w7.eurosptp.com/page.php?fr\u0026countrycode=coutry","date":"2024-09-24T17:27:36.546Z","timestamp":1727198856546,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"realsrv.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Sep 2024 10:35:05 GMT","end":"Wed, 11 Dec 2024 10:35:04 GMT"},"fingerprint":{"sha1":"95:7B:F0:3D:0B:82:4B:0B:7F:3B:06:68:76:24:A6:18:CE:1F:1C:FA","sha256":"A6:2B:F5:D8:36:FD:0D:0E:D8:34:F7:08:44:11:AC:85:FD:C3:D8:E1:8B:C8:6D:51:C9:1C:6C:44:D8:B3:9F:0D"}}},"request":{"raw":"GET /vregister.php?a=vimp\u0026tracking_event=impression\u0026idzone=3981938\u00262f0c2af9d35a1a2cdde21db2fe9eb7be=tsVuZ8uHLpt4edvLpq48_XLv659tdlTlK8E.fnju88N3Tlu49emtqayWunDMos7XA3GxK9Yw85n0466oK3F35qq5WJHM2G7I65JmYI3K6WHXYGtzU0muBthu1ymuCpynPxw5dOXTXA3PYzHBU.5Tn34dOnPprgbqgrcz8d.vnj41wN4zSuZ8_Pjj55.NcDbTFbj01OGfXh41wNtMSTsQPS59ePfx258tcDdrFMDFcE0ufHh078uPTl21wNzVZ8euuBtmma6pynPnrgbbctgacz4a4G2mKaYHKc.GuBuCqfPhrqsZz4a7WI7HM.27gDt6657GY4Kn3KV6WK3M._DXPYzHBU.5Su1ZTS5K1hmCidraYknYgelXasppclawzRPA1uXtPsSvOL1zLz2MxwVPuU58N3nhy6a3L2n2JXnF65l5XK7pqYs.OthtevCdzPnx1uzUyMV564G5XK7pqYs.OtqayWunBeamB6CViPMos7W_XXOveu7NTcxS242u7NTnrgbnpmbsarXaYrcempwz4.Nc9MDUEry8kzbkefjW_XXPVnx11NUuOSr0uVTR2VwTS567KnKV4G8.GuymNd9ip_Nvlz6cejrTrPnp45cGHGvHLs6z44dfHTt54ua4JJ6XKqoJpV6q2K7Ks.OuCSelyqqCaVeCW1iOBtelxiqaXPhrpcdcpcpXqgrcXfmqrlYkczu77nLKZqp659zU0mthtmOZqLPhrgbmddcpz4a4G42JW4JXl52HnM.Gty9xqyuCaVeuCRzPhu4cdcDbbFbDTktblOfLXA20xTTA5SvVNZS05nw1yzVNUwT158NcErUz0sFcy8kzbmfDXW5VWvJM25nw10uPQTSrvOTSsSOLwN58Nc9M1.C9VbFdlWe3jrgbnYprlcpz4a2oK8F3nJpWJHF4G8.fHrx7cu.uVythqyCvBeema_BevCdzPXK5Ww1ZBXgvPTNfgu25U1TBPXBNLnrYbZjmaiXtcpz1wST0uVVQTSrsRxrwS2sRwNr0uMVTS1Z8NdVjPLPhrqsZ558NdTVME9a9eE7meupqmCeteViRzPXU1TBPWva5TnrZpmuqcpXtcpz4a7ac.GuCWtymViPPhrlmXdslbqz4a4G6XKp5paoLXF42MJrK8.GuBuSyOuDGaVzPhrckYgjXgqnz4a6mqYJ6123K2II8.2upqmCete1ymqCaXPjrgbYbtcprgqcpXYbXrwncz5cdcDc9M1.GfDWw2vS5RY5VWvS5VZHXnx1wNyuV3TUxL14TuZ8dcDbTEk7ED0q9eE7mfDXTWyvBLa5LXNTgvA3nrprZXgltclrmpwXlYkcz1xOYL2sR2OL8c.GuJzBe1iOxxflnw1xOYL2sR2OL88.GuJzBe1iOxxfpnw1xOYL2sR2OL9c.GuJzBe1iOxxftnw1xOYL2sR2OL98.GuJzBe1iOxxfxnw1xOYL2sR2OL.c.GuJzBe1iOxxfjwz4a2m5V7KmHnM._np51swNr1PsNwSvL2sR2OZ8NdTjU0ra7LlVa9rEdjmfDWxY1XBNKu7HNNTnw1sWNVwTSrtOQR58NcDddLDrsDS9U1lLTmfLWzZTHnrsqcpXaYnnglez12VOUrtMTzwSvLu0uUWOStYZ67bLIG8.Pfl34.fHjr25ceHjjw4cufbt2d5O9vHjtw68OmuuCRyqtiSfPj35d.Pnx469tbU00UDjU0tTktefGA HTTP/1.1\r\nHost: syndication.realsrv.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://w7.eurosptp.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 24 Sep 2024 17:27:36 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: \r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":343,"timings":{"blocked":127,"dns":6,"connect":25,"send":0,"wait":48,"receive":39,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/adf2.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.789Z","timestamp":1727198859789,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /adf2.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww-7.good-trading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 449838\r\nlast-modified: Thu, 19 Sep 2024 12:30:21 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=bPsIUrvxwErXy066Uzo2poS3hltZkmEC%2BcFC8FJtOIuKTdNMoMbi1%2BKlzZd6ZfwiZv5Ep1NsdZtSz32SNPFmQP5LG5QcHGkbo%2FnYwL2w1m8SKhwb3EpoPT%2Fmgm2Rn83qF40b\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c858ef40a50-AMS\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":246,"size_decoded":246,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"16554a2bcd94dc7134fb7c019b04fe40","sha1":"554850a75fe7859f6ec2d58248ae8a8a1fe40489","sha256":"1c4521dbd8a1f2645769fe05c773e7036d632569cbe7f5394d9136699bc16805","sha512":"79a8099c0013ba4a3d11e3bfc5f83e0d1f627f8392e82cfb932e68a312803820a6cebcd8e7e15bafa2ca0b695597a956aaeaef99ad8db3499f074e4609d02ca9","ssdeep":"","tlshash":"80d02bbedd08f016110157a0587172fc6617640872b1a005b288c21bccd07c0d873be0","first_seen":"2023-05-15T13:33:44Z","last_seen":"2024-10-11T09:19:31.006924Z","times_seen":37,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.ctrtraffic.com/redirect?feed=441587\u0026auth=S50kJu\u0026subid=popm\u0026query=popm\u0026url=popm.com","fqdn":"xml.ctrtraffic.com","domain":"ctrtraffic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.063Z","timestamp":1727198862063,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=441587\u0026auth=S50kJu\u0026subid=popm\u0026query=popm\u0026url=popm.com HTTP/1.1\r\nHost: xml.ctrtraffic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":119,"dns":5,"connect":89,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.clixvista.com/redirect?feed=536493\u0026auth=cZSlEi\u0026subid=clixvistaa\u0026query=clixvistaa\u0026url=clixvista.com","fqdn":"xml.clixvista.com","domain":"clixvista.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:42.097Z","timestamp":1727198862097,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=536493\u0026auth=cZSlEi\u0026subid=clixvistaa\u0026query=clixvistaa\u0026url=clixvista.com HTTP/1.1\r\nHost: xml.clixvista.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":433,"timings":{"blocked":417,"dns":16,"connect":101,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adxfactory.com/redirect?feed=637932\u0026auth=fLqghK\u0026subid=adx1\u0026query=adx1\u0026url=adx.com","fqdn":"xml.adxfactory.com","domain":"adxfactory.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:41.655Z","timestamp":1727198861655,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"adxfactory.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Aug 2024 06:38:50 GMT","end":"Sun, 17 Nov 2024 06:38:49 GMT"},"fingerprint":{"sha1":"1E:C6:95:35:4E:70:D5:EE:77:F2:4B:E1:2F:1F:2D:B7:5E:11:51:E8","sha256":"23:CF:DC:D8:8C:29:EC:03:76:8C:61:E5:CC:F9:DB:21:C7:D1:74:4C:CB:9E:E1:A6:F9:23:A8:14:8A:3F:3D:B5"}}},"request":{"raw":"GET /redirect?feed=637932\u0026auth=fLqghK\u0026subid=adx1\u0026query=adx1\u0026url=adx.com HTTP/1.1\r\nHost: xml.adxfactory.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":3232,"timings":{"blocked":1322,"dns":62,"connect":112,"send":0,"wait":0,"receive":0,"ssl":1722},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.clickmi.net/redirect?feed=700974\u0026auth=aNe9\u0026subid=clickmi1a\u0026query=clickmi1a\u0026url=clickmi1.net","fqdn":"xml.clickmi.net","domain":"clickmi.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.172Z","timestamp":1727198862172,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=700974\u0026auth=aNe9\u0026subid=clickmi1a\u0026query=clickmi1a\u0026url=clickmi1.net HTTP/1.1\r\nHost: xml.clickmi.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":923,"timings":{"blocked":915,"dns":8,"connect":95,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imdn.pics/m/p/0/770/770823/embed/test_1_simple_html5_valid/simple/HTML5_InPage_Clicktags_300x250.html?click_event_url=https%3A%2F%2Fbts.a11k.com%2Fin%2Ftclick%2F%3Fkatds_ep%3Dm29lFp3d0cnQAcd6VVcVIP3A6MGilhjH8HflMKzCXFIyhzKqeA0prc41DLW0Q1L6tmJ38KU5ikjVweoFDFUaps6cX6CLMbmiiOtCY5Xa9YQSSoPYcINkU3hIzecyWirmA_4X2379WVhwyqhwSU6xv-GmiZ9gF40rHwh-J3a3nA-GPAaPO6cEQH8OQpi3t49keatv5jdBat53n9UvDqSaLKUN7Ihrty630xpaue6wdZJGuT7nM_fItWF2SG2r-VGZxfPauKiD4XmSkD5titn25mnYUtTn5DeeT5-YQ_Gidiz1u1Uoz6HDWOiSQsx2smZNQAUxlv13gtab11TAKbn369vLapczQxKhPwKrzdQjOmjwR3cagatJwP2AZEb9W9xt6otbRMKAGKRrvCzOxpQBaPa5Ha_HthLlhTVdDH1LnE8vckpPE7CmIiWQKpz9CnBjDx2W5Rl2ItKfPvAJSCpVSkQPLrxuCz7hgH9pzr3h-BSFqBnZJQywE9qlDf-ct-_oBWBmoTxVyWUBvKMwgKbD8_XMKltb9qhG2a2ULVtYNuPFE8JpUijiid6wb562qJCDv2EDA9awXo_HzLP-wx-RxxHpsG4kgmzL6TryxmpSaall2EcS_RbafR70G8tEUdJS6ViLdJGBBkXEa_zmwRGRGqv7XQfOzwBzBC8leIvL4WmscOcxg544QwBXJ_8YPwXrOmIR3wVUitWwKXODcPrPjzEJyTt29f8ldIexDkkIUYHylr1hTH9uStM_2DHuQfth_t0knnmWNeId3C4S0pIK4yZJXZRLqrnHGbJdtJAx1E-G6sd-ljNpAmPbs_xkAGojjybHOoqvKT50lRZX6vs3mEP4c06X-aeMCP15O05J8_QktIN6d3Fw6mIFZWpl0QecIkDIv0B6toZb3KQTDL7D1Y4BYeyi10BrU1-WSqRUP1Z1VJpdfnACQOtTSw%26bid%3D%24%7BAUCTION_PRICE%7D","fqdn":"imdn.pics","domain":"imdn.pics","tld":"pics"},"ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://imdn.pics/m/p/0/770/770824/P1r9hLS2.html?\u0026pricebox_price=0.0010\u0026OS_FAMILY=%5BOS_FAMILY%5D\u0026utm4=0-10346131-0\u0026ad_sub=71860570\u0026DOMAIN=3txxx.com\u0026id_zone=%5Bidzone%5D\u0026CAMPAIGN_ID=236776\u0026site=%7B%7B+site+%7D%7D\u0026__OS_FAMILY__=%7B%7B+__OS_FAMILY__+%7D%7D\u0026price=0.0020\u0026utm2=878669509-100\u0026MOBILE_BRAND=%5BMOBILE_BRAND%5D\u0026click_id=065399e7-1b84-4bc2-b47f-4985a71b194d\u0026COUNTRY_ISO_CODE=%5BCOUNTRY_ISO_CODE%5D\u0026BROWSER_FAMILY=%5BBROWSER_FAMILY%5D\u0026__BROWSER_FAMILY__=%7B%7B+__BROWSER_FAMILY__+%7D%7D\u0026priority=%5BPRIORITY%5D\u0026utm3=249-1353416-46616\u0026bidding_price=0.0020\u0026campaign_id=236776\u0026PRICING_MODEL=cpm\u0026__IP2L_MOBILE__=%7B%7B+__IP2L_MOBILE__+%7D%7D\u0026pricing_model=cpm\u0026OS_TYPE=%5BOS_TYPE%5D\u0026__GEOIP_COUNTRY_SHORT__=%7B%7B+__GEOIP_COUNTRY_SHORT__+%7D%7D\u0026out_name=236776%7C83954%7Ccpm%7C0.0020%7C%24+0.0020\u0026PRICE=0.0020\u0026__OS_TYPE__=%7B%7B+__OS_TYPE__+%7D%7D\u0026click_event_url=https%3A%2F%2Fbts.a11k.com%2Fin%2Ftclick%2F%3Fkatds_ep%3Dm29lFp3d0cnQAcd6VVcVIP3A6MGilhjH8HflMKzCXFIyhzKqeA0prc41DLW0Q1L6tmJ38KU5ikjVweoFDFUaps6cX6CLMbmiiOtCY5Xa9YQSSoPYcINkU3hIzecyWirmA_4X2379WVhwyqhwSU6xv-GmiZ9gF40rHwh-J3a3nA-GPAaPO6cEQH8OQpi3t49keatv5jdBat53n9UvDqSaLKUN7Ihrty630xpaue6wdZJGuT7nM_fItWF2SG2r-VGZxfPauKiD4XmSkD5titn25mnYUtTn5DeeT5-YQ_Gidiz1u1Uoz6HDWOiSQsx2smZNQAUxlv13gtab11TAKbn369vLapczQxKhPwKrzdQjOmjwR3cagatJwP2AZEb9W9xt6otbRMKAGKRrvCzOxpQBaPa5Ha_HthLlhTVdDH1LnE8vckpPE7CmIiWQKpz9CnBjDx2W5Rl2ItKfPvAJSCpVSkQPLrxuCz7hgH9pzr3h-BSFqBnZJQywE9qlDf-ct-_oBWBmoTxVyWUBvKMwgKbD8_XMKltb9qhG2a2ULVtYNuPFE8JpUijiid6wb562qJCDv2EDA9awXo_HzLP-wx-RxxHpsG4kgmzL6TryxmpSaall2EcS_RbafR70G8tEUdJS6ViLdJGBBkXEa_zmwRGRGqv7XQfOzwBzBC8leIvL4WmscOcxg544QwBXJ_8YPwXrOmIR3wVUitWwKXODcPrPjzEJyTt29f8ldIexDkkIUYHylr1hTH9uStM_2DHuQfth_t0knnmWNeId3C4S0pIK4yZJXZRLqrnHGbJdtJAx1E-G6sd-ljNpAmPbs_xkAGojjybHOoqvKT50lRZX6vs3mEP4c06X-aeMCP15O05J8_QktIN6d3Fw6mIFZWpl0QecIkDIv0B6toZb3KQTDL7D1Y4BYeyi10BrU1-WSqRUP1Z1VJpdfnACQOtTSw%26bid%3D%24%7BAUCTION_PRICE%7D\u0026utm1=tcb","date":"2024-09-24T17:27:35.577Z","timestamp":1727198855577,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imdn.pics","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Sep 2024 03:02:53 GMT","end":"Sat, 07 Dec 2024 03:02:52 GMT"},"fingerprint":{"sha1":"2C:74:6D:B1:42:DE:4E:9B:FD:75:DC:69:84:15:B7:21:D9:13:A7:0D","sha256":"B1:3D:47:0F:4C:5D:8D:A2:53:37:C2:0C:BC:78:78:E5:EC:F4:06:CB:FB:A3:78:B5:BF:41:78:2A:2B:AC:C2:68"}}},"request":{"raw":"GET /m/p/0/770/770823/embed/test_1_simple_html5_valid/simple/HTML5_InPage_Clicktags_300x250.html?click_event_url=https%3A%2F%2Fbts.a11k.com%2Fin%2Ftclick%2F%3Fkatds_ep%3Dm29lFp3d0cnQAcd6VVcVIP3A6MGilhjH8HflMKzCXFIyhzKqeA0prc41DLW0Q1L6tmJ38KU5ikjVweoFDFUaps6cX6CLMbmiiOtCY5Xa9YQSSoPYcINkU3hIzecyWirmA_4X2379WVhwyqhwSU6xv-GmiZ9gF40rHwh-J3a3nA-GPAaPO6cEQH8OQpi3t49keatv5jdBat53n9UvDqSaLKUN7Ihrty630xpaue6wdZJGuT7nM_fItWF2SG2r-VGZxfPauKiD4XmSkD5titn25mnYUtTn5DeeT5-YQ_Gidiz1u1Uoz6HDWOiSQsx2smZNQAUxlv13gtab11TAKbn369vLapczQxKhPwKrzdQjOmjwR3cagatJwP2AZEb9W9xt6otbRMKAGKRrvCzOxpQBaPa5Ha_HthLlhTVdDH1LnE8vckpPE7CmIiWQKpz9CnBjDx2W5Rl2ItKfPvAJSCpVSkQPLrxuCz7hgH9pzr3h-BSFqBnZJQywE9qlDf-ct-_oBWBmoTxVyWUBvKMwgKbD8_XMKltb9qhG2a2ULVtYNuPFE8JpUijiid6wb562qJCDv2EDA9awXo_HzLP-wx-RxxHpsG4kgmzL6TryxmpSaall2EcS_RbafR70G8tEUdJS6ViLdJGBBkXEa_zmwRGRGqv7XQfOzwBzBC8leIvL4WmscOcxg544QwBXJ_8YPwXrOmIR3wVUitWwKXODcPrPjzEJyTt29f8ldIexDkkIUYHylr1hTH9uStM_2DHuQfth_t0knnmWNeId3C4S0pIK4yZJXZRLqrnHGbJdtJAx1E-G6sd-ljNpAmPbs_xkAGojjybHOoqvKT50lRZX6vs3mEP4c06X-aeMCP15O05J8_QktIN6d3Fw6mIFZWpl0QecIkDIv0B6toZb3KQTDL7D1Y4BYeyi10BrU1-WSqRUP1Z1VJpdfnACQOtTSw%26bid%3D%24%7BAUCTION_PRICE%7D HTTP/1.1\r\nHost: imdn.pics\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://imdn.pics/m/p/0/770/770824/P1r9hLS2.html?\u0026pricebox_price=0.0010\u0026OS_FAMILY=%5BOS_FAMILY%5D\u0026utm4=0-10346131-0\u0026ad_sub=71860570\u0026DOMAIN=3txxx.com\u0026id_zone=%5Bidzone%5D\u0026CAMPAIGN_ID=236776\u0026site=%7B%7B+site+%7D%7D\u0026__OS_FAMILY__=%7B%7B+__OS_FAMILY__+%7D%7D\u0026price=0.0020\u0026utm2=878669509-100\u0026MOBILE_BRAND=%5BMOBILE_BRAND%5D\u0026click_id=065399e7-1b84-4bc2-b47f-4985a71b194d\u0026COUNTRY_ISO_CODE=%5BCOUNTRY_ISO_CODE%5D\u0026BROWSER_FAMILY=%5BBROWSER_FAMILY%5D\u0026__BROWSER_FAMILY__=%7B%7B+__BROWSER_FAMILY__+%7D%7D\u0026priority=%5BPRIORITY%5D\u0026utm3=249-1353416-46616\u0026bidding_price=0.0020\u0026campaign_id=236776\u0026PRICING_MODEL=cpm\u0026__IP2L_MOBILE__=%7B%7B+__IP2L_MOBILE__+%7D%7D\u0026pricing_model=cpm\u0026OS_TYPE=%5BOS_TYPE%5D\u0026__GEOIP_COUNTRY_SHORT__=%7B%7B+__GEOIP_COUNTRY_SHORT__+%7D%7D\u0026out_name=236776%7C83954%7Ccpm%7C0.0020%7C%24+0.0020\u0026PRICE=0.0020\u0026__OS_TYPE__=%7B%7B+__OS_TYPE__+%7D%7D\u0026click_event_url=https%3A%2F%2Fbts.a11k.com%2Fin%2Ftclick%2F%3Fkatds_ep%3Dm29lFp3d0cnQAcd6VVcVIP3A6MGilhjH8HflMKzCXFIyhzKqeA0prc41DLW0Q1L6tmJ38KU5ikjVweoFDFUaps6cX6CLMbmiiOtCY5Xa9YQSSoPYcINkU3hIzecyWirmA_4X2379WVhwyqhwSU6xv-GmiZ9gF40rHwh-J3a3nA-GPAaPO6cEQH8OQpi3t49keatv5jdBat53n9UvDqSaLKUN7Ihrty630xpaue6wdZJGuT7nM_fItWF2SG2r-VGZxfPauKiD4XmSkD5titn25mnYUtTn5DeeT5-YQ_Gidiz1u1Uoz6HDWOiSQsx2smZNQAUxlv13gtab11TAKbn369vLapczQxKhPwKrzdQjOmjwR3cagatJwP2AZEb9W9xt6otbRMKAGKRrvCzOxpQBaPa5Ha_HthLlhTVdDH1LnE8vckpPE7CmIiWQKpz9CnBjDx2W5Rl2ItKfPvAJSCpVSkQPLrxuCz7hgH9pzr3h-BSFqBnZJQywE9qlDf-ct-_oBWBmoTxVyWUBvKMwgKbD8_XMKltb9qhG2a2ULVtYNuPFE8JpUijiid6wb562qJCDv2EDA9awXo_HzLP-wx-RxxHpsG4kgmzL6TryxmpSaall2EcS_RbafR70G8tEUdJS6ViLdJGBBkXEa_zmwRGRGqv7XQfOzwBzBC8leIvL4WmscOcxg544QwBXJ_8YPwXrOmIR3wVUitWwKXODcPrPjzEJyTt29f8ldIexDkkIUYHylr1hTH9uStM_2DHuQfth_t0knnmWNeId3C4S0pIK4yZJXZRLqrnHGbJdtJAx1E-G6sd-ljNpAmPbs_xkAGojjybHOoqvKT50lRZX6vs3mEP4c06X-aeMCP15O05J8_QktIN6d3Fw6mIFZWpl0QecIkDIv0B6toZb3KQTDL7D1Y4BYeyi10BrU1-WSqRUP1Z1VJpdfnACQOtTSw%26bid%3D%24%7BAUCTION_PRICE%7D\u0026utm1=tcb\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:35 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: nginx\r\nlast-modified: Mon, 01 Apr 2024 14:09:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"660ac010-1ba\"\r\ncontent-security-policy: default-src 'self' https://bts.a11k.com; script-src 'self' https://code.jquery.com https://code.createjs.com; style-src 'self' https://fonts.googleapis.com;\r\ncontent-encoding: gzip\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache, no-cache\r\nexpires: 0\r\nx-proxy-cache: MISS, MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":442,"size_decoded":442,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (466), with no line terminators","md5":"f6034460ba5dd5d76b6e96988697a061","sha1":"d573e8cb1357e7e91a8a3b98aaf67a81da2af8c5","sha256":"455a46ff100305cbdbcebd5da7a2121500269405c50c5c90d33b05bcc55ce03e","sha512":"d9fb6d825453b08a7ee8f7583b3deb324cc2935977fc18dbb80dca91a4f197d78eba0bdb064eda0a0e3974044d1ba0403cbe2d8c6f871f7979aebc96a9fa7a54","ssdeep":"","tlshash":"c2f05caf1c18e01db2005e9478b3b06c4999b866bd51cc04b0c5a3fdd89cbed8c43748","first_seen":"2024-09-14T06:59:37Z","last_seen":"2024-10-11T09:19:31.017494Z","times_seen":27,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/adtub2.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.847Z","timestamp":1727198859847,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /adtub2.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww-7.good-trading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 449838\r\nlast-modified: Thu, 19 Sep 2024 12:30:21 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=H7%2BoILXuyEV0Z6AxV5hKqeyihSEU9LGhdGm0idmEctLq2I3QJJF6jF6PNc3nHJ5uddTBlKU3cFc2u5kJW%2BhnK6iEkw7ShGSd1okC3xiYaMHExxr2PbqOXOBLgq%2B9mWltilAn\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c85af230a50-AMS\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":246,"size_decoded":246,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"a1facf031a5a63332cecc6dd21c24af2","sha1":"e7046cb2e87aa10a8a6f5d0e3d8189c16044d7f1","sha256":"e41730d1f83151f2257c584c2af837c0d9d3d0dee430a8322cc7fdaf60a36b63","sha512":"38a4ac2a66b9cbb76feede206965391799ce4bc7f67118f1d8588d9abf9f1aa5eda5db6c06f576429673d1321aa7a0cd9389a05c637ea20e985b65f8c32b12b7","ssdeep":"","tlshash":"bad05bbe6d08f1165a9145f85471636d2626910858b96414f589451ec4d47c4dc337e0","first_seen":"2023-08-04T07:26:10Z","last_seen":"2024-10-11T09:19:31.002745Z","times_seen":45,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.clixvista.com/redirect?feed=536493\u0026auth=cZSlEi\u0026subid=clixvistaa\u0026query=clixvistaa\u0026url=clixvista.com","fqdn":"xml.clixvista.com","domain":"clixvista.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.094Z","timestamp":1727198862094,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=536493\u0026auth=cZSlEi\u0026subid=clixvistaa\u0026query=clixvistaa\u0026url=clixvista.com HTTP/1.1\r\nHost: xml.clixvista.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":435,"timings":{"blocked":419,"dns":16,"connect":90,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sub.votreimc.com/adzgamebis.html","fqdn":"sub.votreimc.com","domain":"votreimc.com","tld":"com"},"ip":{"addr":"172.67.222.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:37.354Z","timestamp":1727198857354,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votreimc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Sep 2024 02:12:01 GMT","end":"Sat, 14 Dec 2024 02:12:00 GMT"},"fingerprint":{"sha1":"AF:56:A8:13:7B:6E:27:2B:03:40:18:37:A2:8B:CA:0F:2F:6D:E0:FA","sha256":"44:AD:5E:CF:7E:DE:B0:30:21:4D:10:85:AA:65:B9:AC:F4:EA:F9:DA:BC:84:CE:A6:39:8C:B9:24:E9:77:43:4A"}}},"request":{"raw":"GET /adzgamebis.html HTTP/1.1\r\nHost: sub.votreimc.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nx-iplb-request-id: A29ECA59:D5D8_91EF25A2:0050_66EAF63C_4B3C1:5F2F\r\nx-iplb-instance: 52324\r\ncf-cache-status: HIT\r\nage: 524365\r\nlast-modified: Wed, 18 Sep 2024 15:48:12 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=TB6joc0MqKOQH%2FSl0D2Oq%2BtYSTEadVK2f1ZdnGoTDA5s4v1II8DShDUvl9Ga%2FJXQ4YoaHEXcwN76zNp%2FC1NiSC7VTZKkHELPQrOe%2FU9KkeksDyc%2FixX1KaQl7T2ZwElo0yx4\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c79188d62b8-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":251,"size_decoded":251,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"127fb6c3581af90815b2a913bb645a50","sha1":"45bbcd175016bd600211257745f1ce31d2a5fbec","sha256":"13fca4e8bbd5a84f166989a96d3e87e8c6f3d841d7f4dc6d0eecf0076f87a13c","sha512":"65a36d1e36161c11929eb97de7036bf07378542f281c49bad4808cb2937b5180bf547e7f58bab7a37849aabf4506efe9dac7ab2972fc17a76e5328202db492fc","ssdeep":"","tlshash":"5fd02bef1d1990020d7114d49771b36c9413a0455059381863c992d794d47c4dc333e0","first_seen":"2023-05-08T16:02:00Z","last_seen":"2024-10-11T09:19:31.015899Z","times_seen":46,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":11,"connect":28,"send":0,"wait":25,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adxfactory.com/redirect?feed=707606\u0026auth=tcOZ\u0026subid=adx2\u0026query=adx2\u0026url=facebook.com","fqdn":"xml.adxfactory.com","domain":"adxfactory.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.103Z","timestamp":1727198862103,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=707606\u0026auth=tcOZ\u0026subid=adx2\u0026query=adx2\u0026url=facebook.com HTTP/1.1\r\nHost: xml.adxfactory.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":984,"timings":{"blocked":964,"dns":20,"connect":160,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sub.votreimc.com/eximdigitalbis.html","fqdn":"sub.votreimc.com","domain":"votreimc.com","tld":"com"},"ip":{"addr":"172.67.222.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:37.635Z","timestamp":1727198857635,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votreimc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Sep 2024 02:12:01 GMT","end":"Sat, 14 Dec 2024 02:12:00 GMT"},"fingerprint":{"sha1":"AF:56:A8:13:7B:6E:27:2B:03:40:18:37:A2:8B:CA:0F:2F:6D:E0:FA","sha256":"44:AD:5E:CF:7E:DE:B0:30:21:4D:10:85:AA:65:B9:AC:F4:EA:F9:DA:BC:84:CE:A6:39:8C:B9:24:E9:77:43:4A"}}},"request":{"raw":"GET /eximdigitalbis.html HTTP/1.1\r\nHost: sub.votreimc.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nx-iplb-request-id: A29ECB96:71F4_91EF25A2:0050_66EB2372_A600B:08E9\r\nx-iplb-instance: 52324\r\ncf-cache-status: HIT\r\nage: 512791\r\nlast-modified: Wed, 18 Sep 2024 19:01:06 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=kjGL4mw3X0ViGg2NKLOGTwgcjYElAO%2B%2FXmTWraKyhPhrMXXhk7fr%2ByTzRyIaOwPaiCCtRb6EmqxZnXphG7nNyNZzheQjMsFG0QywsAqtbRy%2FlsBaGqOnNMalxrNP4qDgTOHw\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c78e83662b8-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":270,"size_decoded":270,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"3eb3ddf2f259df8450d2d7ff04cc4485","sha1":"a445013109b692643382d88ed1c7dfd9b349e1ce","sha256":"abf40691c6be352b0bf749c04a163908e6153e903c7bd370c7730a684f16345b","sha512":"5f1ae0092c12947e939b109fee4aca8b31094ea243fb3e70f621ad51adf5497e953206b5ec83236b3f7d24430bafe7382668f4a13201810806780793986e4407","ssdeep":"","tlshash":"d0d02bef2c4d80010b5004d4d7b3ab5c2471d434005938f8e1c94257c6c4e9cdcb33e8","first_seen":"2023-05-14T00:54:31Z","last_seen":"2024-10-11T09:19:30.994376Z","times_seen":49,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adflyer.media/redirect?feed=553006\u0026auth=HDsoD3\u0026subid=adf\u0026query=adf\u0026url=adflyer.media","fqdn":"xml.adflyer.media","domain":"adflyer.media","tld":"media"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:41.738Z","timestamp":1727198861738,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=553006\u0026auth=HDsoD3\u0026subid=adf\u0026query=adf\u0026url=adflyer.media HTTP/1.1\r\nHost: xml.adflyer.media\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":23,"connect":103,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.clixvista.com/redirect?feed=604310\u0026auth=9ITZtu\u0026subid=clixvistam1\u0026query=clixvistam1\u0026url=clixvista1.com","fqdn":"xml.clixvista.com","domain":"clixvista.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:42.164Z","timestamp":1727198862164,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=604310\u0026auth=9ITZtu\u0026subid=clixvistam1\u0026query=clixvistam1\u0026url=clixvista1.com HTTP/1.1\r\nHost: xml.clixvista.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":493,"timings":{"blocked":483,"dns":10,"connect":90,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adtube.media/redirect?feed=581061\u0026auth=WpL9mU\u0026subid=adtu\u0026query=adtu\u0026url=advert.media","fqdn":"xml.adtube.media","domain":"adtube.media","tld":"media"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.182Z","timestamp":1727198862182,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=581061\u0026auth=WpL9mU\u0026subid=adtu\u0026query=adtu\u0026url=advert.media HTTP/1.1\r\nHost: xml.adtube.media\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":916,"timings":{"blocked":911,"dns":5,"connect":161,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/direct.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:36.816Z","timestamp":1727198856816,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /direct.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:36 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 449826\r\nlast-modified: Thu, 19 Sep 2024 12:30:30 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=TRWAMPvRmG487aLSKZL34ufTWAX4YTjhN%2FLc4i6%2B0ogKpGddQv5INYn5s7DMmvvwblC0VboC2zMb5WVvLZha%2FqCdHXbxVhzzstUZmZlxrbljgz%2BQ7Se9HfE6DzHbEP9y3kQZ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c781dca726c-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":434,"size_decoded":434,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (466), with no line terminators","md5":"255a71f15e77712bff413f067ccfc2f3","sha1":"1fafc32a3a11fda87de890e3375f81a85bbf3b62","sha256":"97ce8563b99c15f21150b7543e8beaee0c34e725d71361b2bc12058af1f11211","sha512":"c0a474ba8c57623452d3f55d2c75a86c6faa8bd45e1143cb0728729b3604de10872e9afa8f870206574b05e2102aa8b085804e0e8371b880dd0be5fc62e27626","ssdeep":"","tlshash":"08f05cab7e8cb0234f7006a00cf07198657da006347ad1bce0cdd355c8d1f85f87a6a2","first_seen":"2023-05-08T16:02:00Z","last_seen":"2024-10-11T09:19:30.988434Z","times_seen":51,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":151,"dns":13,"connect":23,"send":0,"wait":29,"receive":0,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adtube.media/redirect?feed=557469\u0026auth=uclEev\u0026subid=adtumedia\u0026query=adtumedia\u0026url=advertland.media","fqdn":"xml.adtube.media","domain":"adtube.media","tld":"media"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:41.759Z","timestamp":1727198861759,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=557469\u0026auth=uclEev\u0026subid=adtumedia\u0026query=adtumedia\u0026url=advertland.media HTTP/1.1\r\nHost: xml.adtube.media\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":1,"connect":103,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adzgame.com/redirect?feed=436085\u0026auth=r2BL6s\u0026subid=adzgame\u0026query=adzgame\u0026url=adzgame.com","fqdn":"xml.adzgame.com","domain":"adzgame.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.060Z","timestamp":1727198862060,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=436085\u0026auth=r2BL6s\u0026subid=adzgame\u0026query=adzgame\u0026url=adzgame.com HTTP/1.1\r\nHost: xml.adzgame.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":1003,"timings":{"blocked":973,"dns":30,"connect":165,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gbstlnd.com/rotator/662/3333/2f1eeeafc1c1aa0ba0685904cfada495/?click_id=a2_7102076563369971295_627551_2_0\u0026sub1=a627551\u0026sub2=${sub2}\u0026sub3=${sub3}\u0026fullscreen=1","fqdn":"gbstlnd.com","domain":"gbstlnd.com","tld":"com"},"ip":{"addr":"173.214.250.52","port":443,"asn":15317,"as":"SERVEREL-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cgb.news24.media/?d","date":"2024-09-24T17:27:42.197Z","timestamp":1727198862197,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"nwslndng.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Sep 2024 13:39:30 GMT","end":"Wed, 11 Dec 2024 13:39:29 GMT"},"fingerprint":{"sha1":"70:F3:B8:1A:DA:BD:D8:A1:23:0F:46:9D:A7:9F:CA:B8:16:5F:60:8A","sha256":"FC:1D:A8:4B:77:83:82:3C:40:76:D1:10:E1:C7:95:42:02:2C:43:94:24:20:EB:EE:DC:2B:14:AE:98:38:00:3D"}}},"request":{"raw":"GET /rotator/662/3333/2f1eeeafc1c1aa0ba0685904cfada495/?click_id=a2_7102076563369971295_627551_2_0\u0026sub1=a627551\u0026sub2=${sub2}\u0026sub3=${sub3}\u0026fullscreen=1 HTTP/1.1\r\nHost: gbstlnd.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cgb.news24.media/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Tue, 24 Sep 2024 17:27:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://gbstlnd.com/adult_video_2/3333/2f1eeeafc1c1aa0ba0685904cfada495/?click_id=a2_7102076563369971295_627551_2_0\u0026sub1=a627551\u0026sub2=%24%7Bsub2%7D\u0026sub3=%24%7Bsub3%7D\u0026tb=\u0026fullscreen=1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":731859,"size_decoded":731859,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":2426,"timings":{"blocked":590,"dns":1,"connect":162,"send":0,"wait":168,"receive":0,"ssl":1498},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rexpush.club/js/s_17e2ee4ffcf2147dce9e2296dcf79c6c.min.js?tag=3333\u0026attempt=0\u0026rnd=934724856\u0026lnd=adult_video_2\u0026v=2\u0026token=2f1eeeafc1c1aa0ba0685904cfada495\u0026click_id=a2_16209272082399971748_627551_2_0\u0026sub1=a627551\u0026sub2=%24%7Bsub2%7D\u0026sub3=%24%7Bsub3%7D\u0026tb=\u0026t_rdr=","fqdn":"rexpush.club","domain":"rexpush.club","tld":"club"},"ip":{"addr":"199.182.164.165","port":443,"asn":15317,"as":"SERVEREL-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"moz-nullprincipal:{bdeb3d93-b05f-4a15-bc49-5d09a241ebd8}?https://gbstlnd.com","date":"2024-09-24T17:27:45.307Z","timestamp":1727198865307,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.druzya-push.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 17 Aug 2024 06:56:42 GMT","end":"Fri, 15 Nov 2024 06:56:41 GMT"},"fingerprint":{"sha1":"73:43:E7:23:A9:45:7F:F0:25:DA:DA:EA:5C:AA:B9:AC:A6:5B:DF:2D","sha256":"62:58:40:79:CE:FA:4A:AD:D6:FD:8F:98:19:F9:A9:0C:EF:31:9B:71:19:C8:44:01:C9:99:C4:1E:56:44:B3:7A"}}},"request":{"raw":"GET /js/s_17e2ee4ffcf2147dce9e2296dcf79c6c.min.js?tag=3333\u0026attempt=0\u0026rnd=934724856\u0026lnd=adult_video_2\u0026v=2\u0026token=2f1eeeafc1c1aa0ba0685904cfada495\u0026click_id=a2_16209272082399971748_627551_2_0\u0026sub1=a627551\u0026sub2=%24%7Bsub2%7D\u0026sub3=%24%7Bsub3%7D\u0026tb=\u0026t_rdr= HTTP/1.1\r\nHost: rexpush.club\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gbstlnd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Sep 2024 17:27:45 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nset-cookie: _f_30d9ff6117c6de28d448dd5186c64932=4; expires=Fri, 22-Sep-2034 17:27:45 GMT; Max-Age=315360000; path=/; domain=.rexpush.club; secure; SameSite=None\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":85570,"size_decoded":85570,"mime_type":"text/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":1165,"timings":{"blocked":499,"dns":12,"connect":159,"send":0,"wait":167,"receive":0,"ssl":325},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"na.rolpenszimocca.com/iBY3tLO3UVJSdx38/qLRqB","fqdn":"na.rolpenszimocca.com","domain":"rolpenszimocca.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:42.367Z","timestamp":1727198862367,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /iBY3tLO3UVJSdx38/qLRqB HTTP/1.1\r\nHost: na.rolpenszimocca.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-09-24","alert":"Sinkholed","trigger":"rolpenszimocca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/clickmia.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.797Z","timestamp":1727198859797,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /clickmia.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww-7.good-trading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 449838\r\nlast-modified: Thu, 19 Sep 2024 12:30:21 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xj9W4nw4MzUKRaz6VOn1kwkqIaYAKexKxPxu6JgSutxuBTDlTUWjWxaavKuSZyy2Rkr0fmqGGEGbq7xAh4MI16YZy7IZmMLQcADS3919SzqSdqoLtlO%2FhmGPP3DWzmtUNQ8d\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c85af150a50-AMS\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":252,"size_decoded":252,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"f0f9d17e9cb0433a8333b142898241dd","sha1":"bb050cf7f925812cbb03cc40b121ee19a60cc7c9","sha256":"28fff621fc5340411871d42c4b83a005d89f33e8b0ccc6abbb1758d4d5277305","sha512":"25150903277133dcc0d9d94cee8dc2b71607153988ee872da9715dd59a3b282ed815c0786d89966ac4b5b3efa795ad7af6eea80447f58b8a23b4273fb75bb971","ssdeep":"","tlshash":"53d02bbe5c04b004211024a414b0b27e269b500a3e7a3058e1c94a25d4cc7ccd9b3be0","first_seen":"2023-05-12T17:45:47Z","last_seen":"2024-10-11T09:19:31.003467Z","times_seen":39,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.zaimads.com/redirect?feed=449093\u0026auth=hakPcP\u0026subid=zaimads\u0026query=stream\u0026url=zaimads.com","fqdn":"xml.zaimads.com","domain":"zaimads.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.065Z","timestamp":1727198862065,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=449093\u0026auth=hakPcP\u0026subid=zaimads\u0026query=stream\u0026url=zaimads.com HTTP/1.1\r\nHost: xml.zaimads.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":147,"dns":3,"connect":96,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/adtu2.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:38.776Z","timestamp":1727198858776,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /adtu2.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww1.good-trading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 449827\r\nlast-modified: Thu, 19 Sep 2024 12:30:30 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BZ1t3nw8z%2B%2BTTKiwk1QbkhNdOLV8%2Bl%2Fb2jTxyxUKy4Xgn6U0rWDJFbiXaMUcyIK3s%2F94HHYh8AD%2FRjFIGqDz0a8x%2FK4Z5YzvAefBx1JiJjiOB5ku0p6o9AY2dDPbXKss2nGj\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c7c4f61726c-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":260,"size_decoded":260,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"3003b48144f86da375ba22f24a2ab080","sha1":"9360365acf5416742708bdf6c682602a97297e80","sha256":"928d0b584f26f5e71dcaa7c5a379f3db78ad4e857c8106d5cf1295c31673e517","sha512":"e4b9d99e4213d21e2ee89417c5d6c00f52dde01b26884af69db596060ca457634f3c9c1a4d0c319676d67a0863dccbf9d0ece927802767f9bb2b4570462d5876","ssdeep":"","tlshash":"71d02bbf6c08f1161d0144f96972736d2656964838b02838f988871bc4e07c0c833fe0","first_seen":"2023-08-05T18:45:40Z","last_seen":"2024-10-11T09:19:30.979545Z","times_seen":42,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redirect3.online/flurryad.html","fqdn":"redirect3.online","domain":"redirect3.online","tld":"online"},"ip":{"addr":"104.21.55.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.345Z","timestamp":1727198859345,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redirect3.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Sep 2024 16:21:21 GMT","end":"Mon, 02 Dec 2024 16:21:20 GMT"},"fingerprint":{"sha1":"46:1D:B0:17:F7:A5:4C:43:98:0F:A7:F0:E3:13:1A:C5:65:27:15:AD","sha256":"69:65:AB:BA:8F:55:4D:8C:ED:7A:0B:18:55:8C:05:31:E5:C9:2F:37:39:0B:7F:BF:99:F9:58:33:1B:42:6C:CF"}}},"request":{"raw":"GET /flurryad.html HTTP/1.1\r\nHost: redirect3.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 437901\r\nlast-modified: Thu, 19 Sep 2024 15:49:18 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7ZqM6ZRaHg5Wb4ji3hIIpEYKuA8zSRNG0c26hLdBIIN4IRG9%2BrtJxX80soJ1S7VH28pyZyN7G1WDFdoIiXzibTbykFj23Yeorhd%2FmqOihkMKACQmBAgTJeLEGXX4XIhJNsUC\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c851ff9b7b5-AMS\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":246,"size_decoded":246,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"badfdbfc6c9c987ee0c8570c170817d6","sha1":"1e7e42a9f37ed057753df1a5e99caf847a4ef2a5","sha256":"c9d9ed3437cf33785da1b5eeed073bd7858f5c2ec0b535a64f702ffe05d252a0","sha512":"4a2d2ab2c8884ac24601100fb11fb79f7d9c5d2b11fbfc09018c64ff1c310b927f6b9bb4f075a0c75c0627ffcbf8db8bd4a0352959fcdd9f752bbcbab3b5e9a8","ssdeep":"","tlshash":"efd05ebe6d8cb409baa508d41bb5a29c385a918438277075f1c8522e94c56d5dc733d0","first_seen":"2023-05-08T16:02:00Z","last_seen":"2024-10-06T09:49:22.714494Z","times_seen":44,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.eximdigital.com/redirect?feed=647202\u0026auth=6SL1vm\u0026subid=eximdigital1\u0026query=eximdigital1\u0026url=eximdigital1.com","fqdn":"xml.eximdigital.com","domain":"eximdigital.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.083Z","timestamp":1727198862083,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=647202\u0026auth=6SL1vm\u0026subid=eximdigital1\u0026query=eximdigital1\u0026url=eximdigital1.com HTTP/1.1\r\nHost: xml.eximdigital.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":983,"timings":{"blocked":953,"dns":30,"connect":164,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redirect3.online/flurryad1.html","fqdn":"redirect3.online","domain":"redirect3.online","tld":"online"},"ip":{"addr":"104.21.55.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:36.932Z","timestamp":1727198856932,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redirect3.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Sep 2024 16:21:21 GMT","end":"Mon, 02 Dec 2024 16:21:20 GMT"},"fingerprint":{"sha1":"46:1D:B0:17:F7:A5:4C:43:98:0F:A7:F0:E3:13:1A:C5:65:27:15:AD","sha256":"69:65:AB:BA:8F:55:4D:8C:ED:7A:0B:18:55:8C:05:31:E5:C9:2F:37:39:0B:7F:BF:99:F9:58:33:1B:42:6C:CF"}}},"request":{"raw":"GET /flurryad1.html HTTP/1.1\r\nHost: redirect3.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 40315\r\nlast-modified: Tue, 24 Sep 2024 06:15:42 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=pBFU0TCT21ErR9%2Fz4LFVLmNoIb5vtUwCUpXYGhmVANOewH1k5lLxOVvAL7c%2FoZX39bRPi6TY%2BxRB%2F4jCdxglfE7xclfgN%2FPwlTfJVeD6jvM%2FwxNwxiPBExdxgMBgGZkLq8f1\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c782d3162ba-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":249,"size_decoded":249,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"042d5b5944d00f4e7bee9d5c06e184cd","sha1":"ae0b14902e1424d33b4d9f6c92dda6d794eecf83","sha256":"124d69f0cdea44a3b9f11a168bc042ec95e26afec4fa6da57253a8efc65ee6dc","sha512":"6edc5e06c1cc3c9da965eb680b7e92599b673a271825679ae4c5acad3b217b64ce0051c31e8fe47cba36f3bcd43e8b6e6694d9508c1d5a10167a3037be6be349","ssdeep":"","tlshash":"6bd02ebfad0cb409ba5408e00770a39c781ac008346ab035f5c8822ea8c02c68c333e0","first_seen":"2023-05-08T16:02:00Z","last_seen":"2024-10-11T09:19:31.024581Z","times_seen":48,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":50,"dns":44,"connect":31,"send":0,"wait":32,"receive":0,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.clickmi.net/redirect?feed=487259\u0026auth=Phj71x\u0026subid=clickmi\u0026query=clickmi\u0026url=clickmi.net","fqdn":"xml.clickmi.net","domain":"clickmi.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:41.740Z","timestamp":1727198861740,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=487259\u0026auth=Phj71x\u0026subid=clickmi\u0026query=clickmi\u0026url=clickmi.net HTTP/1.1\r\nHost: xml.clickmi.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":73,"connect":99,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redirect3.online/flurry1.html","fqdn":"redirect3.online","domain":"redirect3.online","tld":"online"},"ip":{"addr":"104.21.55.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.347Z","timestamp":1727198859347,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redirect3.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Sep 2024 16:21:21 GMT","end":"Mon, 02 Dec 2024 16:21:20 GMT"},"fingerprint":{"sha1":"46:1D:B0:17:F7:A5:4C:43:98:0F:A7:F0:E3:13:1A:C5:65:27:15:AD","sha256":"69:65:AB:BA:8F:55:4D:8C:ED:7A:0B:18:55:8C:05:31:E5:C9:2F:37:39:0B:7F:BF:99:F9:58:33:1B:42:6C:CF"}}},"request":{"raw":"GET /flurry1.html HTTP/1.1\r\nHost: redirect3.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 42309\r\nlast-modified: Tue, 24 Sep 2024 05:42:30 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2Fj9llUE6PP%2BFqwRKV41Ut2FXWL2vSKi9C6ZIaayhZP%2F2%2F7GunAJpqHjGkvXqWVDAh5lOFFexqrPL5p9CHUnaeNWTpQC62%2BIYPmuBvQhowiakNRigOlVnIHzpM5cq4S2Lu5S9\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c851ffbb7b5-AMS\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":245,"size_decoded":245,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"fb3ccf2a2be3110c78ee1a3ba11745ec","sha1":"ed4cb774b057a28735ce9bac3a5a4f0ca1ab742d","sha256":"0113baf4355bf43c67725ab03658e69b2781ae721e3d03267f43ac7863f7fee6","sha512":"fc465fe6d77cc2c270ecdbbbbf55d103c293b3ed09d125b57c5304e54a46a8438f5329671f1d38b026e02d4e9f6fc3e52c48468c9b720c62148cf0ab9d2cff5b","ssdeep":"","tlshash":"15d05efe6d58b009ba6409d81771b29c386ad085347ab075f5c8462e84c57959c333e1","first_seen":"2023-05-08T16:02:00Z","last_seen":"2024-10-11T09:19:31.011098Z","times_seen":45,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redirect3.online/flurryn.html","fqdn":"redirect3.online","domain":"redirect3.online","tld":"online"},"ip":{"addr":"104.21.55.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:36.980Z","timestamp":1727198856980,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redirect3.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Sep 2024 16:21:21 GMT","end":"Mon, 02 Dec 2024 16:21:20 GMT"},"fingerprint":{"sha1":"46:1D:B0:17:F7:A5:4C:43:98:0F:A7:F0:E3:13:1A:C5:65:27:15:AD","sha256":"69:65:AB:BA:8F:55:4D:8C:ED:7A:0B:18:55:8C:05:31:E5:C9:2F:37:39:0B:7F:BF:99:F9:58:33:1B:42:6C:CF"}}},"request":{"raw":"GET /flurryn.html HTTP/1.1\r\nHost: redirect3.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 40312\r\nlast-modified: Tue, 24 Sep 2024 06:15:45 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=iGnPole9RbW6lfjztX9UKe0DEZgQkXAUtlcA3j30LlXIEl1jCvaNN5e9EWZNUASayHh7OTdMPl9fobnwRZA0ICQZVykLYBVZj7TWssYwyR%2F8GyUJm6iqZnP16UFAeCTGnX9%2B\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c784d7a62ba-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":245,"size_decoded":245,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"49a344fb5eebd40be6afda27648192e1","sha1":"7726f75d3cb7513f4fc2c14b4ef74ba8d207720f","sha256":"8be16ceb16f314d5ccfe590d74e95c0bd9f0784734ccb8e5a2dcde2350c133fd","sha512":"151d0fc0fb56bce8f40d15acaea29bf814b63b0f0be243a7b8e32400799c9112340a609e2146e36bdd8183f276fdcef96a4d5a97e9de5aac5c1a1fcede4bc9ec","ssdeep":"","tlshash":"3dd02efe2d08a00abaa018d817b0b2ac381b810038257034f6c8022e84c06a6ac333e0","first_seen":"2024-04-09T19:05:02Z","last_seen":"2024-10-06T19:12:51.509921Z","times_seen":43,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":24,"connect":29,"send":0,"wait":28,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-good.com/clixvistaa1.html","fqdn":"ad-good.com","domain":"ad-good.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:38.349Z","timestamp":1727198858349,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-good.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Aug 2024 12:01:51 GMT","end":"Sun, 10 Nov 2024 12:01:50 GMT"},"fingerprint":{"sha1":"77:4B:2C:D9:8C:89:13:31:AF:23:8C:04:14:AA:A5:93:B9:95:86:50","sha256":"05:8A:8C:C7:83:B7:64:C0:B5:21:77:3B:A5:F6:F1:7E:DE:19:31:34:57:A5:16:CC:06:08:40:4E:39:C0:EC:FD"}}},"request":{"raw":"GET /clixvistaa1.html HTTP/1.1\r\nHost: ad-good.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 456587\r\nlast-modified: Thu, 19 Sep 2024 10:37:50 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=JCw8g1gInjHXNGQEElVlbss5JG2Lk2L%2FJKiMMFA%2FQ%2F5MXYGUMHrRg9in8irOVarO7quX279iJrWXMHrdiEnO3XRjzRfvgzTUka%2FZgFFiPSkt0UJCm4bqirNIVvLfKg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c7a1d239fae-AMS\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":266,"size_decoded":266,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"8b4184a2b89fd55be76b6f48fba2bb3f","sha1":"f68366fe6932f4c23576b6c7697967b4710828fe","sha256":"b3ded46ea4f5786b3e62871ad528e1178891547f518823505084d87492427e4a","sha512":"1ba0e25f6a56fb0043c5ad2995145fe4f797888118d22a9a2e4c2e3ddf782834ce63a0d393947f93772c353a34cf1449686d4be30cc1c57db36438a807c389d7","ssdeep":"","tlshash":"6de0c2aa1d09b0040594869c18f5b15d373764241835a154e1c78625c4cc699cc22be5","first_seen":"2023-11-22T09:58:26Z","last_seen":"2024-10-11T09:19:31.00798Z","times_seen":43,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sub.votreimc.com/eximdigitalbis1.html","fqdn":"sub.votreimc.com","domain":"votreimc.com","tld":"com"},"ip":{"addr":"172.67.222.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.440Z","timestamp":1727198859440,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votreimc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Sep 2024 02:12:01 GMT","end":"Sat, 14 Dec 2024 02:12:00 GMT"},"fingerprint":{"sha1":"AF:56:A8:13:7B:6E:27:2B:03:40:18:37:A2:8B:CA:0F:2F:6D:E0:FA","sha256":"44:AD:5E:CF:7E:DE:B0:30:21:4D:10:85:AA:65:B9:AC:F4:EA:F9:DA:BC:84:CE:A6:39:8C:B9:24:E9:77:43:4A"}}},"request":{"raw":"GET /eximdigitalbis1.html HTTP/1.1\r\nHost: sub.votreimc.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nx-iplb-request-id: A29ECA96:C78A_91EF25A2:0050_66EB2372_A6054:08E9\r\nx-iplb-instance: 52324\r\ncf-cache-status: HIT\r\nage: 512793\r\nlast-modified: Wed, 18 Sep 2024 19:01:06 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=jB7kJ21xd8%2B%2BgnlnroYO3Wk0EFDY7P6X%2BXxSkQIIaiNxDvzjUkTTVy44P5LE2k%2FRbY1iCDzbCRpMh7NAZqHhLRzsm0r2RoyXnc0x4rPA2yjrU%2FJbrzzVmUgSYKMnUX6IKiej\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c854fc462b8-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":275,"size_decoded":275,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"4be7b5bb7cc29981469c348bc8e0eb6e","sha1":"7e478c578b050f804201f5a6e14060eb1bd9d040","sha256":"e3fbadf0af8e829e4467e94598f6787ff2051ad632016a99cdf000c30db14804","sha512":"6ee19dd36ccf02b2425228b80bfb0d4cf33d83441c47ada3eeac9ce42ba9214f59a85413706129a4e1cedf1cbc847a1e382a917f69b2638ddfebab2894681929","ssdeep":"","tlshash":"75e0c2af2d5990004b5524d4a7736b6c2431d870042478f4d1c9422ac6c4ed9c8f23e8","first_seen":"2024-04-09T19:05:03Z","last_seen":"2024-10-06T09:49:22.690232Z","times_seen":36,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.trackifyy.com/redirect?feed=668767\u0026auth=vObwDG\u0026subid=tracki1\u0026query=tracki1\u0026url=trackifyy.com","fqdn":"xml.trackifyy.com","domain":"trackifyy.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:41.297Z","timestamp":1727198861297,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=668767\u0026auth=vObwDG\u0026subid=tracki1\u0026query=tracki1\u0026url=trackifyy.com HTTP/1.1\r\nHost: xml.trackifyy.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":9,"connect":98,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sub.votreimc.com/main.html","fqdn":"sub.votreimc.com","domain":"votreimc.com","tld":"com"},"ip":{"addr":"172.67.222.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.389Z","timestamp":1727198859389,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votreimc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Sep 2024 02:12:01 GMT","end":"Sat, 14 Dec 2024 02:12:00 GMT"},"fingerprint":{"sha1":"AF:56:A8:13:7B:6E:27:2B:03:40:18:37:A2:8B:CA:0F:2F:6D:E0:FA","sha256":"44:AD:5E:CF:7E:DE:B0:30:21:4D:10:85:AA:65:B9:AC:F4:EA:F9:DA:BC:84:CE:A6:39:8C:B9:24:E9:77:43:4A"}}},"request":{"raw":"GET /main.html HTTP/1.1\r\nHost: sub.votreimc.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nx-iplb-request-id: A29ECA9B:55CC_91EF25A2:0050_66EAF660_377C2:7066\r\nx-iplb-instance: 52335\r\ncf-cache-status: HIT\r\nage: 524331\r\nlast-modified: Wed, 18 Sep 2024 15:48:48 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4rBBAOQVGyx9yYPu0P5S%2FtE1sT56cylnfbC0%2FLYwxmmkjL0CiJEiYLZ0TFZnsDBBYAZn92dlgj%2FqChcyxZAnXtD3rckUzPkBNX8zLJz15wqqqW1AcBmIGCaFtCDewtc5Oyk4\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c852f8c62b8-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":244,"size_decoded":244,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"db08b4d62091e5aa5c0ef38f4af0e957","sha1":"c547427feb242ff02ef0133973b68a3324e4c5e2","sha256":"52a42e3df8a8b1e9575507c7bb21e0d0c74545da19c06950027b40c45b2972cf","sha512":"020e69823556c599a2475d1bc075d580e772ff159c8fa7ecb25ead1647e8cc84d0fbd14cf7d02e7aa11aa541877c602e3a43c7cf897b6456020e4d7b2edad4ad","ssdeep":"","tlshash":"80d05bae1d589011055447e41775b3dc255590550476f1a4e5c5412665c87c6ed337e0","first_seen":"2023-05-12T09:55:27Z","last_seen":"2024-10-11T09:19:31.039133Z","times_seen":37,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.flurryad.com/redirect?feed=437634\u0026auth=bmMqba\u0026subid=flurry\u0026query=flurry\u0026url=flurryad.com","fqdn":"xml.flurryad.com","domain":"flurryad.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.024Z","timestamp":1727198862024,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=437634\u0026auth=bmMqba\u0026subid=flurry\u0026query=flurry\u0026url=flurryad.com HTTP/1.1\r\nHost: xml.flurryad.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":968,"timings":{"blocked":954,"dns":14,"connect":94,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adxfactory.com/redirect?feed=470039\u0026auth=iR4kYN\u0026subid=adx\u0026query=adx\u0026url=adxfactory.com","fqdn":"xml.adxfactory.com","domain":"adxfactory.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.102Z","timestamp":1727198862102,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=470039\u0026auth=iR4kYN\u0026subid=adx\u0026query=adx\u0026url=adxfactory.com HTTP/1.1\r\nHost: xml.adxfactory.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":985,"timings":{"blocked":965,"dns":20,"connect":124,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adflyer.media/redirect?feed=554839\u0026auth=kUyNIH\u0026subid=adf\u0026query=adf\u0026url=adflyer.media","fqdn":"xml.adflyer.media","domain":"adflyer.media","tld":"media"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.168Z","timestamp":1727198862168,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=554839\u0026auth=kUyNIH\u0026subid=adf\u0026query=adf\u0026url=adflyer.media HTTP/1.1\r\nHost: xml.adflyer.media\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":928,"timings":{"blocked":918,"dns":10,"connect":95,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redirect3.online/flurry2.html","fqdn":"redirect3.online","domain":"redirect3.online","tld":"online"},"ip":{"addr":"104.21.55.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:36.950Z","timestamp":1727198856950,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redirect3.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Sep 2024 16:21:21 GMT","end":"Mon, 02 Dec 2024 16:21:20 GMT"},"fingerprint":{"sha1":"46:1D:B0:17:F7:A5:4C:43:98:0F:A7:F0:E3:13:1A:C5:65:27:15:AD","sha256":"69:65:AB:BA:8F:55:4D:8C:ED:7A:0B:18:55:8C:05:31:E5:C9:2F:37:39:0B:7F:BF:99:F9:58:33:1B:42:6C:CF"}}},"request":{"raw":"GET /flurry2.html HTTP/1.1\r\nHost: redirect3.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 40313\r\nlast-modified: Tue, 24 Sep 2024 06:15:44 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XcligNo01gnczU%2BfbEAGwN3rRNSiPNw4hjGOcyjhRvhcXDtXPANWQBv6KSUM9i5oRTVGVRvjrWIwLQuYpNU9QVS0QJcoGCLVJr%2FfXnkedK7a6ijNuQFy3IskbGpw9Wt1uuY1\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c785d8262ba-HAM\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":245,"size_decoded":245,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"11d51bc2ac0c933f66dd94161ae7a68d","sha1":"b93c0f6e94c87464e2091a8adc23edd817ab4a94","sha256":"e2bcc38b9ca7f71c6707ddc83dd8e9e8247bc3d37eedd18aac2f9d042558a15a","sha512":"445e6bea0e237f189ffb6bb75342a87d85388a8e96da3a500daf52ff8dc239e1c4fb0d97ed586d72331d4e436a65d5c761f881083075204b4d09315b6625912e","ssdeep":"","tlshash":"1ad02bae1d18b009759008d01770b9ac385ad0443425b074f5c4022f48c02c58c333d0","first_seen":"2023-05-08T16:02:00Z","last_seen":"2024-10-11T09:19:31.019179Z","times_seen":45,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":53,"dns":19,"connect":37,"send":0,"wait":42,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/direct.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.308Z","timestamp":1727198859308,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /direct.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:38 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 449836\r\nlast-modified: Thu, 19 Sep 2024 12:30:22 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=s5J8QpmaA5f9X3Y2wrCEhqBfrTnTm%2BXZ2CR9z8vScVVEaLUb6TYYMy9Sj2%2FFy0KK1pIgh2%2BATSrmw%2FhgWExFskNUtqQI%2Bfaaoug7mep1xe1XdsZ%2F0GgMgUXuvCQfKjBaXWX%2B\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c844cc20a50-AMS\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":434,"size_decoded":434,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (466), with no line terminators","md5":"255a71f15e77712bff413f067ccfc2f3","sha1":"1fafc32a3a11fda87de890e3375f81a85bbf3b62","sha256":"97ce8563b99c15f21150b7543e8beaee0c34e725d71361b2bc12058af1f11211","sha512":"c0a474ba8c57623452d3f55d2c75a86c6faa8bd45e1143cb0728729b3604de10872e9afa8f870206574b05e2102aa8b085804e0e8371b880dd0be5fc62e27626","ssdeep":"","tlshash":"08f05cab7e8cb0234f7006a00cf07198657da006347ad1bce0cdd355c8d1f85f87a6a2","first_seen":"2023-05-08T16:02:00Z","last_seen":"2024-10-11T09:19:30.988434Z","times_seen":51,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adxfactory.com/redirect?feed=470044\u0026auth=01aQpq\u0026subid=adxa\u0026query=adxa\u0026url=xxxtopwet.com","fqdn":"xml.adxfactory.com","domain":"adxfactory.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:41.637Z","timestamp":1727198861637,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"adxfactory.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Aug 2024 06:38:50 GMT","end":"Sun, 17 Nov 2024 06:38:49 GMT"},"fingerprint":{"sha1":"1E:C6:95:35:4E:70:D5:EE:77:F2:4B:E1:2F:1F:2D:B7:5E:11:51:E8","sha256":"23:CF:DC:D8:8C:29:EC:03:76:8C:61:E5:CC:F9:DB:21:C7:D1:74:4C:CB:9E:E1:A6:F9:23:A8:14:8A:3F:3D:B5"}}},"request":{"raw":"GET /redirect?feed=470044\u0026auth=01aQpq\u0026subid=adxa\u0026query=adxa\u0026url=xxxtopwet.com HTTP/1.1\r\nHost: xml.adxfactory.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":3158,"timings":{"blocked":1313,"dns":25,"connect":96,"send":0,"wait":0,"receive":0,"ssl":1713},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.infinity-info.com/redirect?feed=594286\u0026auth=QquX5E\u0026subid=infinitym\u0026query=infinitym\u0026url=info.com","fqdn":"xml.infinity-info.com","domain":"infinity-info.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.085Z","timestamp":1727198862085,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=594286\u0026auth=QquX5E\u0026subid=infinitym\u0026query=infinitym\u0026url=info.com HTTP/1.1\r\nHost: xml.infinity-info.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":995,"timings":{"blocked":972,"dns":23,"connect":98,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/adtub.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:38.774Z","timestamp":1727198858774,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /adtub.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww1.good-trading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 449827\r\nlast-modified: Thu, 19 Sep 2024 12:30:30 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9muaWr9jJZIlUZ1TCZsMgaN%2F%2BzAOLweaCqTqoSBlHjqCJhce07tbMGpneq8zm43OxzGtuZZdfryODvUpf7un3zeM278g2klnrutyDXZ5Pp%2BTF5qvsuZeAA5l8SVSN3bO2nUr\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c7c4f56726c-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":248,"size_decoded":248,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"22a372463f7faf626a65563f672b5935","sha1":"ffc13ecdf2286ce0826d140bd033225784c54f58","sha256":"b29a487b7afdab5ab6bb4d8429ea3e3dd041b15e3c4926044dc4f3c04015912b","sha512":"28f1e5d5427eef1520feb0cd2dffaeecea835916ed4b8b443fb26125982aee24d438b96a93435922c29783bd7a533d4f267240cc96952d5ae2e18f91123c1a33","ssdeep":"","tlshash":"44d02ebe5d09b206191148e9a8b2736e3a22d1082cb52024f588822ac4e0784dc33be0","first_seen":"2023-06-02T23:18:15Z","last_seen":"2024-10-11T09:19:31.006316Z","times_seen":37,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adzgame.com/redirect?feed=647207\u0026auth=J7xEz2\u0026subid=adzgamebis1\u0026query=adzgameabis1\u0026url=adzgame1.com","fqdn":"xml.adzgame.com","domain":"adzgame.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.075Z","timestamp":1727198862075,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=647207\u0026auth=J7xEz2\u0026subid=adzgamebis1\u0026query=adzgameabis1\u0026url=adzgame1.com HTTP/1.1\r\nHost: xml.adzgame.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":959,"timings":{"blocked":937,"dns":22,"connect":111,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.eroticporns.com/thumb/6028/trio-pornografico.webp","fqdn":"www.eroticporns.com","domain":"eroticporns.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:32.468Z","timestamp":1727198852468,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eroticporns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Aug 2024 16:44:19 GMT","end":"Sat, 02 Nov 2024 16:44:18 GMT"},"fingerprint":{"sha1":"C4:5B:D2:8F:70:A7:B7:31:BB:EC:DB:B4:B6:6D:9F:F1:73:FE:0C:3E","sha256":"BA:64:F6:DD:64:84:84:ED:5A:E9:A8:50:0F:D4:DE:A5:9C:B1:50:27:E0:B3:C0:53:2A:6B:1F:F3:71:3C:A1:82"}}},"request":{"raw":"GET /thumb/6028/trio-pornografico.webp HTTP/1.1\r\nHost: www.eroticporns.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/porn/upskirt-videos/\r\nCookie: PHPSESSID=r9e4h1c9jt47akapojj56ul45l\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:32 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sat, 10 Aug 2024 06:27:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66b70837-4902\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 6520\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=nCPAmXmCWKKraUYpWu%2BF9C4Aoz7hzhZkmNHegk832LGsZVxWueh3i7JXZPQJY1cpqH%2F%2FU1EdWdQQRe5m2oSqLTndHclNaxuLM3IIBkNEPJk8eK8UO%2B4fjIcUc8wbreVOJbPSHmdt\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c5bffa4365a-FRA\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18690,"size_decoded":18690,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 352x198, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a5e276e0fdc662326db79dc38b4d0c97","sha1":"1218191c040dcb304a8457709918d450af0d87b2","sha256":"9128a82146d36f154eee8e03c5bc6d17b6811fbd8b7d4f6a87e80ee82d881bea","sha512":"60ab9e67a8a7e18bf77acd20d4be2d3634f5a53d6c0e1f691583d850db55b0c5d705140797c9e8bb804c8c00bf5037091065de693ed2b8894ee302b271ce6a06","ssdeep":"384:pwUPXFOtADEJgkGHrxSBm6ib12iG0V/96yVXi51C3YVYUm5XPLxbWaQQGHnC:pwcXctx1Glem6ibArMFKCICUcDkaQdHC","tlshash":"5482dfd18e80d9327e5134b08f8824de73519a3660a3beac4533de6f695d20fd6f418e","first_seen":"2024-09-28T07:59:48.740834Z","last_seen":"2024-09-28T07:59:48.740834Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c99574de6f.dd4ef151bb.com/0cc02c68f27fd6c769b3e920a5f9f2c8.js","fqdn":"c99574de6f.dd4ef151bb.com","domain":"dd4ef151bb.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:34.466Z","timestamp":1727198854466,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c99574de6f.dd4ef151bb.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Sep 2024 02:21:50 GMT","end":"Fri, 20 Dec 2024 02:21:49 GMT"},"fingerprint":{"sha1":"7D:86:0E:F7:5B:A4:C6:6D:AF:2D:39:08:2C:F3:1A:6E:B2:A9:F9:A0","sha256":"54:A2:8A:6F:67:B8:4A:D8:37:E2:26:62:0E:92:F3:A3:0F:D7:24:25:0E:25:BF:E1:80:01:D4:5C:25:0D:09:BB"}}},"request":{"raw":"GET /0cc02c68f27fd6c769b3e920a5f9f2c8.js HTTP/1.1\r\nHost: c99574de6f.dd4ef151bb.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:34 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Tue, 17 Sep 2024 14:08:15 GMT\r\netag: W/\"66e98d4f-8424f\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 24 Sep 2024 17:32:34 GMT\r\ncache-control: max-age=300\r\nx-proxy-cache: HIT\r\nx-cdn-host-id: ds9225\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":541263,"size_decoded":541263,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smkezc.com/cuload?a=1\u0026e=aeyJwaWQiOjEwNTAxODIsInNpZCI6MTM0NzExMCwid2lkIjo2Mjc1NTEsImQiOiJuZXdzMjQubWVkaWEiLCJsaSI6MX0=\u0026tz=2\u0026if=0\u0026u=aHR0cHM6Ly9mci5uZXdzMjQubWVkaWEv\u0026chpv=15.0.0","fqdn":"smkezc.com","domain":"smkezc.com","tld":"com"},"ip":{"addr":"185.162.85.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cfr.news24.media/?d","date":"2024-09-24T17:27:36.964Z","timestamp":1727198856964,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"smkezc.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Aug 2024 16:35:06 GMT","end":"Fri, 01 Nov 2024 16:35:05 GMT"},"fingerprint":{"sha1":"37:3D:1E:8C:4A:DF:80:8E:7F:FC:A6:71:84:26:87:61:DA:78:BF:90","sha256":"26:14:35:3F:BD:58:CC:7C:C2:12:09:FD:CB:49:20:F1:72:A4:80:9A:E1:DD:63:86:F2:2A:89:A3:7E:02:94:D2"}}},"request":{"raw":"GET /cuload?a=1\u0026e=aeyJwaWQiOjEwNTAxODIsInNpZCI6MTM0NzExMCwid2lkIjo2Mjc1NTEsImQiOiJuZXdzMjQubWVkaWEiLCJsaSI6MX0=\u0026tz=2\u0026if=0\u0026u=aHR0cHM6Ly9mci5uZXdzMjQubWVkaWEv\u0026chpv=15.0.0 HTTP/1.1\r\nHost: smkezc.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cfr.news24.media/\r\nOrigin: https://cfr.news24.media\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\naccept-ch: Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":150,"size_decoded":150,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"3bc3a41e7254d19b46dc351c75bb3477","sha1":"d0facdd9d1372631d049b12f9c83f88ed84d0e73","sha256":"1c469329f162fe894de03beb39c2697f3ce9893a897422f88e0d46bbbbbfcf9b","sha512":"4928c745285e7870bd76475532b5a6e5d02c022d7b9a6cec7bd65bcde3fd347166822216f26eb2bc091f1a7ba0ce3e1a260e87a08350b1641445a43882f18d09","ssdeep":"","tlshash":"dcc08cc051f2e9dfd9000c6e63b74c7880804ebbc4b7c9214cadd4c410bc1b007a24a4","first_seen":"2024-09-28T07:59:48.742389Z","last_seen":"2024-09-28T07:59:48.742389Z","times_seen":1,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":25,"connect":30,"send":0,"wait":31,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-09-24","alert":"Sinkholed","trigger":"smkezc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syndication.realsrv.com/vregister.php?a=vimp\u0026tracking_event=impression\u0026idzone=3981938\u00262f0c2af9d35a1a2cdde21db2fe9eb7be=tsVuZ8uHLpt4edvLpq48_XLv65.ddlTlK8E.fnju88N3Tlu49emtqayWunDMos7XA3GxK9Yw85n0466oK3F35qq5WJHM2G7I65JmYI3K6WHXYGtzU0muBthu1ymuCpynPxw5dOXTXA3PYzHBU.5Tn34dOnPprgbqgrcz8d.vnj41wN4zSuZ8_Pjj55.NcDbTFbj01OGfXh41wNtMSTsQPS59ePfx258tcDdrFMDFcE0ufHh078uPTny1wNzVZ8euuBtmma6pynPnrgbbctgacz4a4G2mKaYHKc.GuBuCqfPhrqsZz4a7WI7HM.27gDt6657GY4Kn3KV6WK3M._DXPYzHBU.5Su1ZTS5K1hmCidraYknYgelXasppclawzRPA1uXtPsSvOL1zLz2MxwVPuU58N3nhy6a3L2n2JXnF65l5XK7pqYs.OthtevCdzPnx1uzUyMV564G5XK7pqYs.OtqayWunBeamB6CViPMos7W_XXOveu7NTcxS242u7NTnrgbnpmbsarXaYrcempwz4.Nc9MDUEry8kzbkefjW_XXPVnx11NUuOSr0uVTR2VwTS567KnKV4G8.GuymNd9ip_Pm155ePPDn3692uXJ3i227y6NcPHjly59mPLeuCSelyqqCaVeqtiuyrPjrgknpcqqgmlXgltYjgbXpcYqmlz4a6XHXKXKV6oK3F35qq5WJHM7ruO56aZvbXSw3BK9uamk1sNsxzNRZ8NcDczrrlOfDXA3GxK3BK8vOw85nw1uXuNWVwTSr1wSOZ8NcDbbFbDTktblOfLXA20xTTA5SvVNZS05nw1yzVNUwT158NcErUz0sFcy8kzbmfDXW5VWvJM25nw10uPQTSrvOTSsSOLwN58Nc9M1.C9VbFdlWe3jrgbnYprlcpz4a2oK8F3nJpWJHF4G8.fHrx7cu.uVythqyCvBeema_BevCdzPXK5Ww1ZBXgvPTNfgu25U1TBPXBNLnrYbZjmaiXtcpz1wST0uVVQTSrsRxrwS2sRwNr0uMVTS1Z8NdVjPLPhrqsZ558NdTVME9a9eE7meupqmCeteViRzPXU1TBPWva5TnrZpmuqcpXtcpz4a7ac.GuCWtymViPPhrlmXdslbqz4a4G6XKp5paoLXF42MJrK8.GuBuSyOuDGaVzPhrckYgjXgqnz4a6mqYJ6123K2II8.2upqmCete1ymqCaXPjrgbYbtcprgqcpXYbXrwncz5cdcDc9M1.GfDWw2vS5RY5VWvS5VZHXnx1wNyuV3TUxL14TuZ8dcDbTEk7ED0q9eE7mfDXTWyvBLa5LXNTgvA3nrprZXgltclrmpwXlYkcz1xOYL2sR2OL8c.GuJzBe1iOxxflnw1xOYL2sR2OL88.GuJzBe1iOxxfpnw1xOYL2sR2OL9c.GuJzBe1iOxxftnw1xOYL2sR2OL98.GuJzBe1iOxxfxnw1xOYL2sR2OL.c.GuJzBe1iOxxfjwz4a2m5V7KmHnM.3Pr11swNr1PsNwSvL2sR2OZ8NdTjU0ra7LlVa9rEdjmfDWxY1XBNKu7HNNTnw1sWNVwTSrtOQR58NcDddLDrsDS9U1lLTmfLWzZTHnrsqcpXaYnnglez12VOUrtMTzwSvLu0uUWOStYZ67bLIG8.Pfl34.fHjr55cOfLz158ePft2d5O9vDPTvyb5664JHKq2JJ8.Pfl34.fHjr51tTTRQONTS1OS158YA--","fqdn":"syndication.realsrv.com","domain":"realsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:41.745Z","timestamp":1727198861745,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"realsrv.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Sep 2024 10:35:05 GMT","end":"Wed, 11 Dec 2024 10:35:04 GMT"},"fingerprint":{"sha1":"95:7B:F0:3D:0B:82:4B:0B:7F:3B:06:68:76:24:A6:18:CE:1F:1C:FA","sha256":"A6:2B:F5:D8:36:FD:0D:0E:D8:34:F7:08:44:11:AC:85:FD:C3:D8:E1:8B:C8:6D:51:C9:1C:6C:44:D8:B3:9F:0D"}}},"request":{"raw":"GET /vregister.php?a=vimp\u0026tracking_event=impression\u0026idzone=3981938\u00262f0c2af9d35a1a2cdde21db2fe9eb7be=tsVuZ8uHLpt4edvLpq48_XLv65.ddlTlK8E.fnju88N3Tlu49emtqayWunDMos7XA3GxK9Yw85n0466oK3F35qq5WJHM2G7I65JmYI3K6WHXYGtzU0muBthu1ymuCpynPxw5dOXTXA3PYzHBU.5Tn34dOnPprgbqgrcz8d.vnj41wN4zSuZ8_Pjj55.NcDbTFbj01OGfXh41wNtMSTsQPS59ePfx258tcDdrFMDFcE0ufHh078uPTny1wNzVZ8euuBtmma6pynPnrgbbctgacz4a4G2mKaYHKc.GuBuCqfPhrqsZz4a7WI7HM.27gDt6657GY4Kn3KV6WK3M._DXPYzHBU.5Su1ZTS5K1hmCidraYknYgelXasppclawzRPA1uXtPsSvOL1zLz2MxwVPuU58N3nhy6a3L2n2JXnF65l5XK7pqYs.OthtevCdzPnx1uzUyMV564G5XK7pqYs.OtqayWunBeamB6CViPMos7W_XXOveu7NTcxS242u7NTnrgbnpmbsarXaYrcempwz4.Nc9MDUEry8kzbkefjW_XXPVnx11NUuOSr0uVTR2VwTS567KnKV4G8.GuymNd9ip_Pm155ePPDn3692uXJ3i227y6NcPHjly59mPLeuCSelyqqCaVeqtiuyrPjrgknpcqqgmlXgltYjgbXpcYqmlz4a6XHXKXKV6oK3F35qq5WJHM7ruO56aZvbXSw3BK9uamk1sNsxzNRZ8NcDczrrlOfDXA3GxK3BK8vOw85nw1uXuNWVwTSr1wSOZ8NcDbbFbDTktblOfLXA20xTTA5SvVNZS05nw1yzVNUwT158NcErUz0sFcy8kzbmfDXW5VWvJM25nw10uPQTSrvOTSsSOLwN58Nc9M1.C9VbFdlWe3jrgbnYprlcpz4a2oK8F3nJpWJHF4G8.fHrx7cu.uVythqyCvBeema_BevCdzPXK5Ww1ZBXgvPTNfgu25U1TBPXBNLnrYbZjmaiXtcpz1wST0uVVQTSrsRxrwS2sRwNr0uMVTS1Z8NdVjPLPhrqsZ558NdTVME9a9eE7meupqmCeteViRzPXU1TBPWva5TnrZpmuqcpXtcpz4a7ac.GuCWtymViPPhrlmXdslbqz4a4G6XKp5paoLXF42MJrK8.GuBuSyOuDGaVzPhrckYgjXgqnz4a6mqYJ6123K2II8.2upqmCete1ymqCaXPjrgbYbtcprgqcpXYbXrwncz5cdcDc9M1.GfDWw2vS5RY5VWvS5VZHXnx1wNyuV3TUxL14TuZ8dcDbTEk7ED0q9eE7mfDXTWyvBLa5LXNTgvA3nrprZXgltclrmpwXlYkcz1xOYL2sR2OL8c.GuJzBe1iOxxflnw1xOYL2sR2OL88.GuJzBe1iOxxfpnw1xOYL2sR2OL9c.GuJzBe1iOxxftnw1xOYL2sR2OL98.GuJzBe1iOxxfxnw1xOYL2sR2OL.c.GuJzBe1iOxxfjwz4a2m5V7KmHnM.3Pr11swNr1PsNwSvL2sR2OZ8NdTjU0ra7LlVa9rEdjmfDWxY1XBNKu7HNNTnw1sWNVwTSrtOQR58NcDddLDrsDS9U1lLTmfLWzZTHnrsqcpXaYnnglez12VOUrtMTzwSvLu0uUWOStYZ67bLIG8.Pfl34.fHjr55cOfLz158ePft2d5O9vDPTvyb5664JHKq2JJ8.Pfl34.fHjr51tTTRQONTS1OS158YA-- HTTP/1.1\r\nHost: syndication.realsrv.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww1.good-trading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 24 Sep 2024 17:27:41 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: \r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.eximdigital.com/redirect?feed=647204\u0026auth=AiH31G\u0026subid=eximdigitalbis1\u0026query=eximdigitalbis1\u0026url=eximdigital1.com","fqdn":"xml.eximdigital.com","domain":"eximdigital.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:42.047Z","timestamp":1727198862047,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=647204\u0026auth=AiH31G\u0026subid=eximdigitalbis1\u0026query=eximdigitalbis1\u0026url=eximdigital1.com HTTP/1.1\r\nHost: xml.eximdigital.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":361,"timings":{"blocked":0,"dns":237,"connect":102,"send":0,"wait":0,"receive":0,"ssl":-1},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/adtu.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:38.773Z","timestamp":1727198858773,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /adtu.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww1.good-trading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 449827\r\nlast-modified: Thu, 19 Sep 2024 12:30:30 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=j1uoDyq3aR%2BeivAiK78RSiQg0mPOPEZndros0NTnkapMisCKfCM%2FHG4w0zLeSYCSAmZqLOKcCYVBQrzAkoS49UpTdF62wmmrAOLJThbAddNfow8UjSt%2FHUzco8OcCLPoh4E%2F\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c7c4f52726c-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":246,"size_decoded":246,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"c818a4d94151bff4a59f4cde629bfcd8","sha1":"7ec2ecd370600266a2164fca5a3eec514281f447","sha256":"5885846d6919e34a109d19f54465e1c8ef167c7148dfdb1d6042ab462cb128b7","sha512":"554628aa673880ec9ce2574d370472b1e06bf4d9d96c77852ef21db6f4d1ee6b77bef24f55388d2290ed1f5206c58954f6230de6537110ca69bb7cfe8fff46c5","ssdeep":"","tlshash":"87d02ebf1c08b105191084e9a8b273ad3a16950828b02034f188862bc8e0b80c873be4","first_seen":"2023-05-22T20:52:15Z","last_seen":"2024-10-11T09:19:30.996546Z","times_seen":35,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redirect3.online/adxa.html","fqdn":"redirect3.online","domain":"redirect3.online","tld":"online"},"ip":{"addr":"104.21.55.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.720Z","timestamp":1727198859720,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redirect3.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Sep 2024 16:21:21 GMT","end":"Mon, 02 Dec 2024 16:21:20 GMT"},"fingerprint":{"sha1":"46:1D:B0:17:F7:A5:4C:43:98:0F:A7:F0:E3:13:1A:C5:65:27:15:AD","sha256":"69:65:AB:BA:8F:55:4D:8C:ED:7A:0B:18:55:8C:05:31:E5:C9:2F:37:39:0B:7F:BF:99:F9:58:33:1B:42:6C:CF"}}},"request":{"raw":"GET /adxa.html HTTP/1.1\r\nHost: redirect3.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 42309\r\nlast-modified: Tue, 24 Sep 2024 05:42:30 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xrjv8iy0%2F28aFVhf8MtJPuIJmSuHFpwIgdwrIynCMADhoqG5rh9RzAmAKgkqSEAFeb7WtmZNRdE9WsE%2BFXTubT4zD8Qjv3AMqd23ctB7u%2F44xs%2BGjs5eE80%2F4d%2FHe54f1x2u\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c857891b7b5-AMS\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":242,"size_decoded":242,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"d36f2551646edac55145a3c21cd56b98","sha1":"0bba5cdb18f2efaf202cc6d0863a0bf1dfea7328","sha256":"0e7a95d97e3484c49d8f797cea1e6700f5d1de46667a4b1f1de064b49a22bed2","sha512":"f2e7997cc7e583209852dee7228d57bb276e1ababadec57070d8cb90b7524105a8ca750922f025f0efc3a870448c999d000facf884893ec701d3e7062594990e","ssdeep":"","tlshash":"09d05ebf2d58b0051b6058e827b1b29c74679285146ab068b2cc826a98c4bc9ec733d5","first_seen":"2024-09-11T12:59:49Z","last_seen":"2024-10-11T09:19:31.034001Z","times_seen":26,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.xmladsystem.com/redirect?feed=467491\u0026auth=WhI7Jx\u0026subid=purea\u0026query=purea\u0026url=pureads.com","fqdn":"xml.xmladsystem.com","domain":"xmladsystem.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:42.044Z","timestamp":1727198862044,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=467491\u0026auth=WhI7Jx\u0026subid=purea\u0026query=purea\u0026url=pureads.com HTTP/1.1\r\nHost: xml.xmladsystem.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":38,"connect":141,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dessedcuression.com/73470700-5fbd-4cf9-8476-9ce06ef734ac?banner=6513433\u0026pubfeed=578707\u0026siteid=707825_695395\u0026cost=0.00011\u0026conversion=5ZZ1o60yHpg","fqdn":"dessedcuression.com","domain":"dessedcuression.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:42.348Z","timestamp":1727198862348,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /73470700-5fbd-4cf9-8476-9ce06ef734ac?banner=6513433\u0026pubfeed=578707\u0026siteid=707825_695395\u0026cost=0.00011\u0026conversion=5ZZ1o60yHpg HTTP/1.1\r\nHost: dessedcuression.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.flurryad.com/redirect?feed=647220\u0026auth=1c6u8H\u0026subid=flurryn2\u0026query=flurryn2\u0026url=flurryadn.com","fqdn":"xml.flurryad.com","domain":"flurryad.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.042Z","timestamp":1727198862042,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=647220\u0026auth=1c6u8H\u0026subid=flurryn2\u0026query=flurryn2\u0026url=flurryadn.com HTTP/1.1\r\nHost: xml.flurryad.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":1635,"timings":{"blocked":1635,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sub.votreimc.com/adzgame1.html","fqdn":"sub.votreimc.com","domain":"votreimc.com","tld":"com"},"ip":{"addr":"172.67.222.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.414Z","timestamp":1727198859414,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votreimc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Sep 2024 02:12:01 GMT","end":"Sat, 14 Dec 2024 02:12:00 GMT"},"fingerprint":{"sha1":"AF:56:A8:13:7B:6E:27:2B:03:40:18:37:A2:8B:CA:0F:2F:6D:E0:FA","sha256":"44:AD:5E:CF:7E:DE:B0:30:21:4D:10:85:AA:65:B9:AC:F4:EA:F9:DA:BC:84:CE:A6:39:8C:B9:24:E9:77:43:4A"}}},"request":{"raw":"GET /adzgame1.html HTTP/1.1\r\nHost: sub.votreimc.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nx-iplb-request-id: A29ECB40:9AB8_91EF25A2:0050_66EC7AD9_932E1:7BF3\r\nx-iplb-instance: 52360\r\ncf-cache-status: HIT\r\nage: 424882\r\nlast-modified: Thu, 19 Sep 2024 19:26:17 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=U%2FiwP9Yow23Z9ELZDqHLy%2F3SH6TAYcjU1Ih28yDUpMaWfHnRPkzPtlTUtrtShiUOcrha6LiPVY8QMoKwP9uYPjHaQ3cwSLxqTO0I1Af0dhWk3QHB8nkgbbIUEhHs31qCDKzK\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c853fa262b8-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":254,"size_decoded":254,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"95601952aeb01f2189218dd042964f14","sha1":"d41c44e9882e7525d7cb1b760915818e6fd7601b","sha256":"85a85a1dbfb4ba52a2e1073ff898b2673830f141e586f2968faeee62cdc12953","sha512":"a52e14d06c0b524ff50c72b7364693921c2b708af64482f2b63bbf7305cc506813b694488c5fa54b923ad14bc6c2cfd4f31fa182efbe27fac53a7396d6ea486d","ssdeep":"","tlshash":"4ad02baf1d0690460e7014e0ab71b36cd4129045446938a8a3c482d6d4c07c1ec333f4","first_seen":"2024-05-17T09:36:38Z","last_seen":"2024-10-06T19:12:51.511834Z","times_seen":43,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adtube.media/redirect?feed=561765\u0026auth=L0SJGK\u0026subid=adtub2\u0026query=adtub2\u0026url=pubi.com","fqdn":"xml.adtube.media","domain":"adtube.media","tld":"media"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:41.750Z","timestamp":1727198861750,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=561765\u0026auth=L0SJGK\u0026subid=adtub2\u0026query=adtub2\u0026url=pubi.com HTTP/1.1\r\nHost: xml.adtube.media\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":42,"connect":99,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adflyer.media/redirect?feed=554839\u0026auth=kUyNIH\u0026subid=adf\u0026query=adf\u0026url=adflyer.media","fqdn":"xml.adflyer.media","domain":"adflyer.media","tld":"media"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:41.735Z","timestamp":1727198861735,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=554839\u0026auth=kUyNIH\u0026subid=adf\u0026query=adf\u0026url=adflyer.media HTTP/1.1\r\nHost: xml.adflyer.media\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":28,"connect":104,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.ctrtraffic.com/redirect?feed=599081\u0026auth=vXd348\u0026subid=popm1\u0026query=popm1\u0026url=popm1.com","fqdn":"xml.ctrtraffic.com","domain":"ctrtraffic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:42.074Z","timestamp":1727198862074,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=599081\u0026auth=vXd348\u0026subid=popm1\u0026query=popm1\u0026url=popm1.com HTTP/1.1\r\nHost: xml.ctrtraffic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":229,"dns":2,"connect":87,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rexpush.club/js/s_5aabbad4a02ab0a5bd8a6e5c5ce0fcfa.min.js?tag=3333\u0026attempt=0\u0026rnd=678007040\u0026lnd=adult_video_2\u0026v=2\u0026token=2f1eeeafc1c1aa0ba0685904cfada495\u0026click_id=a2_7102076563369971295_627551_2_0\u0026sub1=a627551\u0026sub2=%24%7Bsub2%7D\u0026sub3=%24%7Bsub3%7D\u0026tb=\u0026t_rdr=","fqdn":"rexpush.club","domain":"rexpush.club","tld":"club"},"ip":{"addr":"199.182.164.165","port":443,"asn":15317,"as":"SERVEREL-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"moz-nullprincipal:{0ae6798e-5481-465d-9212-112fedcf6e64}?https://gbstlnd.com","date":"2024-09-24T17:27:45.825Z","timestamp":1727198865825,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.druzya-push.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 17 Aug 2024 06:56:42 GMT","end":"Fri, 15 Nov 2024 06:56:41 GMT"},"fingerprint":{"sha1":"73:43:E7:23:A9:45:7F:F0:25:DA:DA:EA:5C:AA:B9:AC:A6:5B:DF:2D","sha256":"62:58:40:79:CE:FA:4A:AD:D6:FD:8F:98:19:F9:A9:0C:EF:31:9B:71:19:C8:44:01:C9:99:C4:1E:56:44:B3:7A"}}},"request":{"raw":"GET /js/s_5aabbad4a02ab0a5bd8a6e5c5ce0fcfa.min.js?tag=3333\u0026attempt=0\u0026rnd=678007040\u0026lnd=adult_video_2\u0026v=2\u0026token=2f1eeeafc1c1aa0ba0685904cfada495\u0026click_id=a2_7102076563369971295_627551_2_0\u0026sub1=a627551\u0026sub2=%24%7Bsub2%7D\u0026sub3=%24%7Bsub3%7D\u0026tb=\u0026t_rdr= HTTP/1.1\r\nHost: rexpush.club\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gbstlnd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Sep 2024 17:27:45 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nset-cookie: _f_30d9ff6117c6de28d448dd5186c64932=2; expires=Fri, 22-Sep-2034 17:27:45 GMT; Max-Age=315360000; path=/; domain=.rexpush.club; secure; SameSite=None\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":85498,"size_decoded":85498,"mime_type":"text/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":467,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":467,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redirect3.online/rtbm.html","fqdn":"redirect3.online","domain":"redirect3.online","tld":"online"},"ip":{"addr":"104.21.55.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:38.541Z","timestamp":1727198858541,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redirect3.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Sep 2024 16:21:21 GMT","end":"Mon, 02 Dec 2024 16:21:20 GMT"},"fingerprint":{"sha1":"46:1D:B0:17:F7:A5:4C:43:98:0F:A7:F0:E3:13:1A:C5:65:27:15:AD","sha256":"69:65:AB:BA:8F:55:4D:8C:ED:7A:0B:18:55:8C:05:31:E5:C9:2F:37:39:0B:7F:BF:99:F9:58:33:1B:42:6C:CF"}}},"request":{"raw":"GET /rtbm.html HTTP/1.1\r\nHost: redirect3.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 40306\r\nlast-modified: Tue, 24 Sep 2024 06:15:51 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=nNDZIOaJTNdexaXRRak5ZpvcvzTB7fKxDO9L9ZfaPSg%2B0j5%2FUIGYoFWABXOiX4Zboqo1WHrGl%2BA8RB0aUgkg3Ces%2FinMagqko%2FOpcMqfngFO2K%2BmAykqfdSn2SP17%2BXjwN7f\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c7afaa762ba-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":241,"size_decoded":241,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"36cd71def46f44b8f97c32306ffaa235","sha1":"da6a43e22cedd9b110a0bca1ca0fee8d07997d82","sha256":"8664d799b3fd656226524586bfd0c27695ff217b4780b83873713b1560db92c0","sha512":"91be58450a8ef9863b60a002cd3a3a6ada348a76223635246cb8b0589d927e904def7aac4a1d2494a64dda71f73eac2db77ae460c929340e362157dbfdc6d211","ssdeep":"","tlshash":"aed05ebe2d4c90410b6408e41771e6acb46790454475b06aba8e862a88e87d5deb33e4","first_seen":"2023-05-12T17:45:47Z","last_seen":"2024-10-06T19:12:51.513725Z","times_seen":41,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redirect3.online/rtbm.html","fqdn":"redirect3.online","domain":"redirect3.online","tld":"online"},"ip":{"addr":"104.21.55.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.759Z","timestamp":1727198859759,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redirect3.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Sep 2024 16:21:21 GMT","end":"Mon, 02 Dec 2024 16:21:20 GMT"},"fingerprint":{"sha1":"46:1D:B0:17:F7:A5:4C:43:98:0F:A7:F0:E3:13:1A:C5:65:27:15:AD","sha256":"69:65:AB:BA:8F:55:4D:8C:ED:7A:0B:18:55:8C:05:31:E5:C9:2F:37:39:0B:7F:BF:99:F9:58:33:1B:42:6C:CF"}}},"request":{"raw":"GET /rtbm.html HTTP/1.1\r\nHost: redirect3.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 42309\r\nlast-modified: Tue, 24 Sep 2024 05:42:30 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=mJFPSyPbinxkpL5aWKlNT3c7hNXKcRtMgAlOPtCpCFaYd463ApcEm53iBpAJmFvutLIDQhUk03Gq0%2F8p%2F1mW%2FQ47Pl8KY%2BBL0Vkd3VkS7Gw22vvPGGVhrT%2BdS4dnLQiY2qj%2B\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c85889cb7b5-AMS\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":241,"size_decoded":241,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"36cd71def46f44b8f97c32306ffaa235","sha1":"da6a43e22cedd9b110a0bca1ca0fee8d07997d82","sha256":"8664d799b3fd656226524586bfd0c27695ff217b4780b83873713b1560db92c0","sha512":"91be58450a8ef9863b60a002cd3a3a6ada348a76223635246cb8b0589d927e904def7aac4a1d2494a64dda71f73eac2db77ae460c929340e362157dbfdc6d211","ssdeep":"","tlshash":"aed05ebe2d4c90410b6408e41771e6acb46790454475b06aba8e862a88e87d5deb33e4","first_seen":"2023-05-12T17:45:47Z","last_seen":"2024-10-06T19:12:51.513725Z","times_seen":41,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.infinity-info.com/redirect?feed=594286\u0026auth=QquX5E\u0026subid=infinitym\u0026query=infinitym\u0026url=info.com","fqdn":"xml.infinity-info.com","domain":"infinity-info.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:42.059Z","timestamp":1727198862059,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=594286\u0026auth=QquX5E\u0026subid=infinitym\u0026query=infinitym\u0026url=info.com HTTP/1.1\r\nHost: xml.infinity-info.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":107,"dns":177,"connect":104,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rtbrenab.com/get/?go=1\u0026data=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","fqdn":"rtbrenab.com","domain":"rtbrenab.com","tld":"com"},"ip":{"addr":"116.202.60.226","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:34.462Z","timestamp":1727198854462,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rtbbnr.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Jun 2024 02:03:01 GMT","end":"Sat, 28 Sep 2024 02:03:00 GMT"},"fingerprint":{"sha1":"DC:D1:3A:99:18:53:59:04:68:CF:CA:F4:F7:48:72:8E:28:21:8C:3D","sha256":"F3:70:6D:0B:F3:E6:40:8C:DD:0A:92:A2:BC:ED:F2:A2:6F:9E:03:4A:1E:37:7E:1F:58:9A:F4:DF:81:05:39:60"}}},"request":{"raw":"GET /get/?go=1\u0026data=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 HTTP/1.1\r\nHost: rtbrenab.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 24 Sep 2024 17:27:34 GMT\r\ncontent-type: text/html\r\ncontent-length: 1550\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7064,"size_decoded":7064,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (7241), with no line terminators","md5":"5890c79348680f5ab8c07a6978994e54","sha1":"e88e0c9a115f55e33932e4b9c0e5127b700d77ef","sha256":"74a5cd74248946e7e58985ce7c7877be63b198b94a0054ce473dbcaec64a044e","sha512":"ca5c585bf1b0de1a9424a85cd84cf5cda15e2d0a51f7399982ec2590cb98da735a52dcb8fecc08a01d9c17237ca37e058ecbb03cb6908b79a1f27eb33ca72e9a","ssdeep":"96:yTNt5ST/KQ8gWXd28WyTNx5ST/lgEdO+hTNx5ST/lgEdb+TTNx5ST/lgEdb+8J:yTlSKQdm8yT9S2ZMT9S2UIT9S2UHJ","tlshash":"c0e1a5851b67dc2940a0a71036afb7094e53be41bbc666a1ee325738ce7cb368053f5c","first_seen":"2024-09-28T07:59:48.745048Z","last_seen":"2024-09-28T07:59:48.745048Z","times_seen":1,"resource_available":false,"data":null}},"time_used":614,"timings":{"blocked":124,"dns":25,"connect":35,"send":0,"wait":358,"receive":2,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.ad-good.com/images/300x250.png","fqdn":"static.ad-good.com","domain":"ad-good.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://w7.eurosptp.com/page.php?fr\u0026countrycode=coutry","date":"2024-09-24T17:27:36.270Z","timestamp":1727198856270,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-good.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Aug 2024 12:01:51 GMT","end":"Sun, 10 Nov 2024 12:01:50 GMT"},"fingerprint":{"sha1":"77:4B:2C:D9:8C:89:13:31:AF:23:8C:04:14:AA:A5:93:B9:95:86:50","sha256":"05:8A:8C:C7:83:B7:64:C0:B5:21:77:3B:A5:F6:F1:7E:DE:19:31:34:57:A5:16:CC:06:08:40:4E:39:C0:EC:FD"}}},"request":{"raw":"GET /images/300x250.png HTTP/1.1\r\nHost: static.ad-good.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://w7.eurosptp.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 19151\r\nlast-modified: Mon, 06 May 2024 11:52:33 GMT\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Sep 2024 12:12:54 GMT\r\ncf-cache-status: HIT\r\nage: 106182\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=cRCxsliS%2BB3c52yO1I0rX6dQ3cdxEV95CrPlHNqWR3cXeBaJyaFA0taJUozhuUfsu625U8SB%2BBxTzzYGpZ3M74agH80hzKukI39mTvbPtwKjHauRdYiGqMAxmwk1qbP2zbNktwo%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8c847c7439769fae-AMS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19151,"size_decoded":19151,"mime_type":"image/png","magic":"PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced","md5":"7d02bb864ce60b37461a7275f903a9da","sha1":"a18ab6747303e47bcb4c6912f57bc742291d46ae","sha256":"9c02ea531d36bc55ddeadf6f419c652ea27e0ae136e88daeb0b4c2fd64b709b8","sha512":"bf5dcc6acfffb73bd54c04d123c4dec64c0a6fb9ef790a31b6935846b5041b4d73953ea1c04dc1d454f47bd2497e05b24543cf4897f185daad99ab24570d1132","ssdeep":"384:hdnrB5VS+TCJ76n3UyHDVTTUgtd9pm2L6Azg0iGO5xwVYHyzdID:frPRhn3THDpVT9pmstz5XiHWiD","tlshash":"7582bea88474e60c0e6279236fb4a4f0e0abb4c651c6eb1ad385ff98450e8472d6c6d8","first_seen":"2024-09-14T06:59:34Z","last_seen":"2024-11-02T23:00:17.976749Z","times_seen":36,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":76,"dns":4,"connect":20,"send":0,"wait":63,"receive":20,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/clickmi.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:38.741Z","timestamp":1727198858741,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /clickmi.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww1.good-trading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 449827\r\nlast-modified: Thu, 19 Sep 2024 12:30:30 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QK6EPoYt8FBy9gw3p13tks7x%2BfcyDp1c0wNPARB%2BWV1ST0L1%2BRKZ4smJfJhtiaqkP1FglAwg54MzjBZUdx7%2BYt56qimSfu6deRsDwhysATcqNSHa5xeihGbodT%2FKpFAW6Rtr\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c7c2f08726c-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":250,"size_decoded":250,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"098b4e2d8b5b900a83f85ac9d673cd4c","sha1":"193942f39be3025b4331ce1b7b122bcb97d99503","sha256":"55a92acee35dd2a3b07d1188242ad68c88ba06cd1224a596d793d8932fef264c","sha512":"de2bf98c3a9b5ebd3b920d8117cfde9ce76858426aaef910d155acf103609cfd766bc5fb0494801a507a1feff591034db05d2a66dafa07459fa962cae0c14526","ssdeep":"","tlshash":"8bd02bbf5c04b0046640349454b0317d2b5b51062e7b205ce18d0e25c4cc6d9d9b2be0","first_seen":"2023-05-08T16:02:00Z","last_seen":"2024-10-11T09:19:31.001791Z","times_seen":38,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redirect3.online/flurryad1.html","fqdn":"redirect3.online","domain":"redirect3.online","tld":"online"},"ip":{"addr":"104.21.55.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.349Z","timestamp":1727198859349,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redirect3.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Sep 2024 16:21:21 GMT","end":"Mon, 02 Dec 2024 16:21:20 GMT"},"fingerprint":{"sha1":"46:1D:B0:17:F7:A5:4C:43:98:0F:A7:F0:E3:13:1A:C5:65:27:15:AD","sha256":"69:65:AB:BA:8F:55:4D:8C:ED:7A:0B:18:55:8C:05:31:E5:C9:2F:37:39:0B:7F:BF:99:F9:58:33:1B:42:6C:CF"}}},"request":{"raw":"GET /flurryad1.html HTTP/1.1\r\nHost: redirect3.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 42309\r\nlast-modified: Tue, 24 Sep 2024 05:42:30 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LC2lu8w8wZ%2FF75fKW14J4n3m0Z%2BJsdEj0VmtD39nQUEuYMzZAqeYpQrTwx1K3Bt%2FnC0eO4pbEtM1N8OP%2BKl5knj%2BeA2vpzqscuv5E4UxaAnXiXc0gO%2BNL8OktNw%2BpVvhSYJH\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c851ffeb7b5-AMS\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":249,"size_decoded":249,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"042d5b5944d00f4e7bee9d5c06e184cd","sha1":"ae0b14902e1424d33b4d9f6c92dda6d794eecf83","sha256":"124d69f0cdea44a3b9f11a168bc042ec95e26afec4fa6da57253a8efc65ee6dc","sha512":"6edc5e06c1cc3c9da965eb680b7e92599b673a271825679ae4c5acad3b217b64ce0051c31e8fe47cba36f3bcd43e8b6e6694d9508c1d5a10167a3037be6be349","ssdeep":"","tlshash":"6bd02ebfad0cb409ba5408e00770a39c781ac008346ab035f5c8822ea8c02c68c333e0","first_seen":"2023-05-08T16:02:00Z","last_seen":"2024-10-11T09:19:31.024581Z","times_seen":48,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/adfa.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.783Z","timestamp":1727198859783,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /adfa.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww-7.good-trading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 449835\r\nlast-modified: Thu, 19 Sep 2024 12:30:24 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=HnxpKf8nfgZdE0mM14C46W5yIKBAVjxJsg5mPhKnWtDgj6lswfuPh%2Fi3GX6xQJlKyBVmRMdurEqlU0ZS12hokuwJcb%2F8dNlZQmBUN2emlTJUJJuO%2FR5uDMnhvVRlUfvjhDYB\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c858ee90a50-AMS\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":248,"size_decoded":248,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"676b4b3cf64885b970df3b326c238072","sha1":"a5b6007f44271cc213f329bcb8f26aa7c9d87d04","sha256":"037457d8c17ebb41e696bea61c94cc9279d2598dd4bfc840f94184175cbedbd5","sha512":"21b8b4b896fb16cb398846ba6c06f5c5c89fcd29910224b82f9bc83a5c714eaccfbb11c6f139d53472295a1dc1bcd08b1799a5bd75645716fbefd4910e5914b3","ssdeep":"","tlshash":"45d02bbe9c08f005465046b0547173fcba53a80864b16004b2c8522bccc0bc0dc73bf1","first_seen":"2023-05-12T17:45:47Z","last_seen":"2024-10-06T09:49:22.68462Z","times_seen":41,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gbstlnd.com/adult_video_2/video.mp4","fqdn":"gbstlnd.com","domain":"gbstlnd.com","tld":"com"},"ip":{"addr":"173.214.250.52","port":443,"asn":15317,"as":"SERVEREL-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"moz-nullprincipal:{bdeb3d93-b05f-4a15-bc49-5d09a241ebd8}?https://gbstlnd.com","date":"2024-09-24T17:27:45.404Z","timestamp":1727198865404,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"nwslndng.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Sep 2024 13:39:30 GMT","end":"Wed, 11 Dec 2024 13:39:29 GMT"},"fingerprint":{"sha1":"70:F3:B8:1A:DA:BD:D8:A1:23:0F:46:9D:A7:9F:CA:B8:16:5F:60:8A","sha256":"FC:1D:A8:4B:77:83:82:3C:40:76:D1:10:E1:C7:95:42:02:2C:43:94:24:20:EB:EE:DC:2B:14:AE:98:38:00:3D"}}},"request":{"raw":"GET /adult_video_2/video.mp4 HTTP/1.1\r\nHost: gbstlnd.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gbstlnd.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Tue, 24 Sep 2024 17:27:45 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 483291\r\nlast-modified: Thu, 25 Jul 2019 13:49:48 GMT\r\netag: \"5d39b37c-75fdb\"\r\ncontent-range: bytes 0-483290/483291\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":null,"data":{"size":145366,"size_decoded":145366,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"47420493d6b8801da01117921994a674","sha1":"ba9b0f054b2eda73f61fb4823f163050d3301571","sha256":"de4ad8db8e2e32df84ece7445bddcd59880b2858709bdedcbde8f9f3f0293a87","sha512":"30b80eba028ee3cd4c0dfe661a98e36d70ba26836caea12ccf3d9f9b8b3dae74feb1556dfe7aebbb3ee567b889bf78589d3a62ec8a6236035930b983154b6bef","ssdeep":"3072:dTnRpHpQSlaHt3IahLw1KRk008uOUIu6AkmTGX3141pz:dTnRPQSlaHns1Ki00UnmTzTz","tlshash":"15e31206db6d2193c38a8333e1614bbba570f05e07a7034b55493356cabadd09ed43be","first_seen":"2024-09-28T07:59:48.747355Z","last_seen":"2024-09-28T07:59:48.747355Z","times_seen":1,"resource_available":false,"data":null}},"time_used":708,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":264,"receive":444,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.eroticporns.com/porn/upskirt-videos/","fqdn":"www.eroticporns.com","domain":"eroticporns.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-09-24T17:27:31.962Z","timestamp":1727198851962,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eroticporns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Aug 2024 16:44:19 GMT","end":"Sat, 02 Nov 2024 16:44:18 GMT"},"fingerprint":{"sha1":"C4:5B:D2:8F:70:A7:B7:31:BB:EC:DB:B4:B6:6D:9F:F1:73:FE:0C:3E","sha256":"BA:64:F6:DD:64:84:84:ED:5A:E9:A8:50:0F:D4:DE:A5:9C:B1:50:27:E0:B3:C0:53:2A:6B:1F:F3:71:3C:A1:82"}}},"request":{"raw":"GET /porn/upskirt-videos/ HTTP/1.1\r\nHost: www.eroticporns.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:32 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.2.23, PleskLin\r\nset-cookie: PHPSESSID=r9e4h1c9jt47akapojj56ul45l; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XNkwCi1zvOZx8iJCo5%2F3gztYgxK24JneXg0EBX2%2BNSmyAsuxToP%2FMGyZDzwX7wIDjOzLKtWJZyBtcORTCL8MZ1QXKMJ6wVCeXpj3vF2IQM27Aj6%2BpwcLYXNxd7hCr9eb6NuNUTvd\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c593b54365a-FRA\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":54715,"size_decoded":54715,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":66,"dns":0,"connect":22,"send":0,"wait":69,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adzgame.com/redirect?feed=553308\u0026auth=qTKzx9\u0026subid=adzgame\u0026query=adzgame\u0026url=adzgame.com","fqdn":"xml.adzgame.com","domain":"adzgame.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:42.041Z","timestamp":1727198862041,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=553308\u0026auth=qTKzx9\u0026subid=adzgame\u0026query=adzgame\u0026url=adzgame.com HTTP/1.1\r\nHost: xml.adzgame.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":139,"connect":101,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adzgame.com/redirect?feed=553308\u0026auth=qTKzx9\u0026subid=adzgame\u0026query=adzgame\u0026url=adzgame.com","fqdn":"xml.adzgame.com","domain":"adzgame.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.079Z","timestamp":1727198862079,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=553308\u0026auth=qTKzx9\u0026subid=adzgame\u0026query=adzgame\u0026url=adzgame.com HTTP/1.1\r\nHost: xml.adzgame.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":981,"timings":{"blocked":951,"dns":30,"connect":102,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adflyer.media/redirect?feed=553006\u0026auth=HDsoD3\u0026subid=adf\u0026query=adf\u0026url=adflyer.media","fqdn":"xml.adflyer.media","domain":"adflyer.media","tld":"media"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.171Z","timestamp":1727198862171,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=553006\u0026auth=HDsoD3\u0026subid=adf\u0026query=adf\u0026url=adflyer.media HTTP/1.1\r\nHost: xml.adflyer.media\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":925,"timings":{"blocked":916,"dns":9,"connect":162,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.clickmi.net/redirect?feed=700972\u0026auth=YGSz\u0026subid=clickmi1\u0026query=clickmi1\u0026url=clickmi1.net","fqdn":"xml.clickmi.net","domain":"clickmi.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.178Z","timestamp":1727198862178,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=700972\u0026auth=YGSz\u0026subid=clickmi1\u0026query=clickmi1\u0026url=clickmi1.net HTTP/1.1\r\nHost: xml.clickmi.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":919,"timings":{"blocked":911,"dns":8,"connect":162,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"na.rolpenszimocca.com/iE7AjAU7EnXkWAq/GBnnL","fqdn":"na.rolpenszimocca.com","domain":"rolpenszimocca.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.875Z","timestamp":1727198862875,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /iE7AjAU7EnXkWAq/GBnnL HTTP/1.1\r\nHost: na.rolpenszimocca.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":162,"dns":30,"connect":17,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-09-24","alert":"Sinkholed","trigger":"rolpenszimocca.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sub.votreimc.com/eximdigitalbis1.html","fqdn":"sub.votreimc.com","domain":"votreimc.com","tld":"com"},"ip":{"addr":"172.67.222.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:37.782Z","timestamp":1727198857782,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votreimc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Sep 2024 02:12:01 GMT","end":"Sat, 14 Dec 2024 02:12:00 GMT"},"fingerprint":{"sha1":"AF:56:A8:13:7B:6E:27:2B:03:40:18:37:A2:8B:CA:0F:2F:6D:E0:FA","sha256":"44:AD:5E:CF:7E:DE:B0:30:21:4D:10:85:AA:65:B9:AC:F4:EA:F9:DA:BC:84:CE:A6:39:8C:B9:24:E9:77:43:4A"}}},"request":{"raw":"GET /eximdigitalbis1.html HTTP/1.1\r\nHost: sub.votreimc.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nx-iplb-request-id: A29ECA96:C78A_91EF25A2:0050_66EB2372_A6054:08E9\r\nx-iplb-instance: 52324\r\ncf-cache-status: HIT\r\nage: 512791\r\nlast-modified: Wed, 18 Sep 2024 19:01:06 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BpBDBRjHShXRFCHNGZSQkbK316U1gjTPsZWNbbiB0oFFLLne%2Fb5gJJjUBfCtj2HpDXxmYL9pvip7vR47ySGgWKSXKB6HSqLg7zqMy7FPnHdsYIiyJG4WUCyMY7vAJmNMk7rX\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c79187662b8-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":275,"size_decoded":275,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"4be7b5bb7cc29981469c348bc8e0eb6e","sha1":"7e478c578b050f804201f5a6e14060eb1bd9d040","sha256":"e3fbadf0af8e829e4467e94598f6787ff2051ad632016a99cdf000c30db14804","sha512":"6ee19dd36ccf02b2425228b80bfb0d4cf33d83441c47ada3eeac9ce42ba9214f59a85413706129a4e1cedf1cbc847a1e382a917f69b2638ddfebab2894681929","ssdeep":"","tlshash":"75e0c2af2d5990004b5524d4a7736b6c2431d870042478f4d1c9422ac6c4ed9c8f23e8","first_seen":"2024-04-09T19:05:03Z","last_seen":"2024-10-06T09:49:22.690232Z","times_seen":36,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redirect3.online/adx1.html","fqdn":"redirect3.online","domain":"redirect3.online","tld":"online"},"ip":{"addr":"104.21.55.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:38.355Z","timestamp":1727198858355,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redirect3.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Sep 2024 16:21:21 GMT","end":"Mon, 02 Dec 2024 16:21:20 GMT"},"fingerprint":{"sha1":"46:1D:B0:17:F7:A5:4C:43:98:0F:A7:F0:E3:13:1A:C5:65:27:15:AD","sha256":"69:65:AB:BA:8F:55:4D:8C:ED:7A:0B:18:55:8C:05:31:E5:C9:2F:37:39:0B:7F:BF:99:F9:58:33:1B:42:6C:CF"}}},"request":{"raw":"GET /adx1.html HTTP/1.1\r\nHost: redirect3.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 40306\r\nlast-modified: Tue, 24 Sep 2024 06:15:51 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=d0o%2FMcg52P1DGmU6KZC3zlixoGdedW2KEG7Tu7v07KYMB6A0Zx72fQ73KBUrIW4Oz1LpskcYdlRIcQdihqB8t6Mt%2BfysITrA9cig2LK3yXXfG7bpigxLNucT5y9tLHV3X7bL\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c7a295762ba-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":236,"size_decoded":236,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"898fd06aa56be1636bfcc373523caa25","sha1":"0e841c2ab4b47eb98e44850239a8406916483589","sha256":"fef74ad233dc0d80c5bd1b79eb52301c574d2a4f91e4cc10c64a3532ef8cff2c","sha512":"bfabe23323b4a92087697294b8050ecbd8a0ce80ddded1bdae3ed1d8fe4d5329486a49822d440b9b721c39512353b9e011916844ee710b3898196adbb566b956","ssdeep":"","tlshash":"a1d05ebe2d18a0069ea028e42b71b39c7416914504657069b1c8826bd8c47d5ed733d0","first_seen":"2024-04-09T19:05:02Z","last_seen":"2024-10-06T19:12:51.505169Z","times_seen":43,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.rtbfactory.com/redirect?feed=538480\u0026auth=oBN7ws\u0026subid=rtb\u0026query=rtb\u0026url=rtbfactory.com","fqdn":"xml.rtbfactory.com","domain":"rtbfactory.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.162Z","timestamp":1727198862162,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=538480\u0026auth=oBN7ws\u0026subid=rtb\u0026query=rtb\u0026url=rtbfactory.com HTTP/1.1\r\nHost: xml.rtbfactory.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":439,"timings":{"blocked":438,"dns":1,"connect":98,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/trackif.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.370Z","timestamp":1727198859370,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /trackif.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 449835\r\nlast-modified: Thu, 19 Sep 2024 12:30:24 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=kW0pwXylC8uqGd12G2c6VfgXOCwLP41DTwkq2AFpNmJEtN6bKmm3mhzAakO4Ca9UAcIFwU81oZVTdppT4bX5RgIE6NfceEWsQadPv86J41Xv5jxDxhGLhWfeTrnUe2LsvAur\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c852e270a50-AMS\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":259,"size_decoded":259,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"676f6e3656c08b45fd592bfbf791038e","sha1":"ff935a58582a9ed92aae5044f05f86de4248284e","sha256":"2d6c0972838242947554a0e9da39a1ff8cd6e852c6ec79f65ba37e28eb5b2dd2","sha512":"f795e2171bde53026e755d0c52aaa9951b22c049bc94a53014f30a6e8a096698541b113affeae32c3c80327618b5c92da6fc0948b9fd8917ee0bddb6e9c053e0","ssdeep":"","tlshash":"48d02bef1fc4b1590a109c9408f1e1ed332a5004583d6445e3894217cbc5790dd727e1","first_seen":"2024-05-17T09:36:37Z","last_seen":"2024-10-11T09:19:30.993708Z","times_seen":45,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ctrtraffic.me/following.html","fqdn":"ctrtraffic.me","domain":"ctrtraffic.me","tld":"me"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:37.090Z","timestamp":1727198857090,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ctrtraffic.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Sep 2024 18:56:16 GMT","end":"Sun, 15 Dec 2024 18:56:15 GMT"},"fingerprint":{"sha1":"B5:5C:14:47:59:F7:46:21:B1:85:1E:A6:98:2C:65:CD:81:D3:BA:C1","sha256":"E5:25:D1:2F:7F:BC:68:5B:1F:BC:C8:BD:52:2E:65:5D:37:AD:AB:11:36:A4:DF:65:78:23:93:7B:6D:36:12:16"}}},"request":{"raw":"GET /following.html HTTP/1.1\r\nHost: ctrtraffic.me\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 508792\r\nlast-modified: Wed, 18 Sep 2024 20:07:45 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RdjtMbMO3dx8Q1nw8P6HnWGXL7jFX%2BwhDC7uaOOs2gsUi9HEZPd6K4ZZ1kVPm0y9Q6Gu6OokaEkNCetRDUgzrqp2vI%2F9UWWslAwGOqosF6GpeGX6y5I2r1iPUZGGhnFp\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c794a336a62-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":257,"size_decoded":257,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"95262ddf72d78718ebfa9c2dc4a9acab","sha1":"7ae9c63e321fcca721e6e6cc3dc3d8465548601a","sha256":"29fe4c519148df6d43d868c85fe47bdeaf4da0b0c6d8b276d77cee576ad21f20","sha512":"06515b4b27d8fdbca79e345912a4e960360238ba20c5bb0781701c74a6c07df52f41228c7e0465bd73c788ee4b9eeed25c0dd3f3c18d70cc37c932602dbeec7d","ssdeep":"","tlshash":"24d02eef2d4cf03146409ea82cb572ec6669a10494326254e28ac26ac9c8785ed373f0","first_seen":"2023-05-12T09:55:27Z","last_seen":"2024-10-11T09:19:31.02742Z","times_seen":33,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":64,"dns":114,"connect":15,"send":0,"wait":33,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redirect3.online/adx1.html","fqdn":"redirect3.online","domain":"redirect3.online","tld":"online"},"ip":{"addr":"104.21.55.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.723Z","timestamp":1727198859723,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redirect3.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Sep 2024 16:21:21 GMT","end":"Mon, 02 Dec 2024 16:21:20 GMT"},"fingerprint":{"sha1":"46:1D:B0:17:F7:A5:4C:43:98:0F:A7:F0:E3:13:1A:C5:65:27:15:AD","sha256":"69:65:AB:BA:8F:55:4D:8C:ED:7A:0B:18:55:8C:05:31:E5:C9:2F:37:39:0B:7F:BF:99:F9:58:33:1B:42:6C:CF"}}},"request":{"raw":"GET /adx1.html HTTP/1.1\r\nHost: redirect3.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 42309\r\nlast-modified: Tue, 24 Sep 2024 05:42:30 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4IBclqoqAt0AVt7mMwg0BuGdciRs3QvJiENV2LiewHWKqegTLde1%2BOkUNGBdjw0KazuYFjpqXlGhRgl0B5CC6Bna6bNFP8xy1FxfDqjRWdT%2F91LXYA66MHRoHhfwjyrmnOWX\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c857892b7b5-AMS\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":236,"size_decoded":236,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"898fd06aa56be1636bfcc373523caa25","sha1":"0e841c2ab4b47eb98e44850239a8406916483589","sha256":"fef74ad233dc0d80c5bd1b79eb52301c574d2a4f91e4cc10c64a3532ef8cff2c","sha512":"bfabe23323b4a92087697294b8050ecbd8a0ce80ddded1bdae3ed1d8fe4d5329486a49822d440b9b721c39512353b9e011916844ee710b3898196adbb566b956","ssdeep":"","tlshash":"a1d05ebe2d18a0069ea028e42b71b39c7416914504657069b1c8826bd8c47d5ed733d0","first_seen":"2024-04-09T19:05:02Z","last_seen":"2024-10-06T19:12:51.505169Z","times_seen":43,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.rtbfactory.com/redirect?feed=538480\u0026auth=oBN7ws\u0026subid=rtb\u0026query=rtb\u0026url=rtbfactory.com","fqdn":"xml.rtbfactory.com","domain":"rtbfactory.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:41.719Z","timestamp":1727198861719,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=538480\u0026auth=oBN7ws\u0026subid=rtb\u0026query=rtb\u0026url=rtbfactory.com HTTP/1.1\r\nHost: xml.rtbfactory.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.infinity-info.com/redirect?feed=443250\u0026auth=8SxGcE\u0026subid=infinitygeo\u0026query=infinitygeo\u0026url=infinity-info.com","fqdn":"xml.infinity-info.com","domain":"infinity-info.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:42.062Z","timestamp":1727198862062,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=443250\u0026auth=8SxGcE\u0026subid=infinitygeo\u0026query=infinitygeo\u0026url=infinity-info.com HTTP/1.1\r\nHost: xml.infinity-info.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":492,"timings":{"blocked":-1,"dns":492,"connect":105,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/adf.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:38.616Z","timestamp":1727198858616,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /adf.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww1.good-trading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 449827\r\nlast-modified: Thu, 19 Sep 2024 12:30:30 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=KY41v5vgCERxNeJ5c47uJcx4tEaUXOZKgBUyYGkSOEdrdhlf05t30iYlemygPCmiR7n5b1Vn4KHcBSA2T4DCC3kh2VqTyNG%2BdIylFNp4zuyBHqLybcHFOjn4BpbFgZFEhXoj\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c7b7dd6726c-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":246,"size_decoded":246,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"7903f4e8084f88509e4a1bc6ee9a2e5c","sha1":"758d8dd0132b7837eb07700429a59f5ee382dff0","sha256":"a1d5c1823991a0580dde7775e276ab2b11227e9e2fb7802dd168545356d72a24","sha512":"1a96a8e8d47cd3e9833a0d4e65d293bae853be8445de9fb20b858d7c91841aad78c7e0b2bd982b719927f301ea12c787561e53eca1d0ca5704a283406b084c4b","ssdeep":"","tlshash":"2ed02bbeec08f005010046a0987273fc76976408a6b1a005a3c48126ccd07c0d973be0","first_seen":"2023-05-08T16:02:00Z","last_seen":"2024-10-11T09:19:30.984976Z","times_seen":40,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"de.forerungirdles.com/i6oKq6spPDgpeY/QrOEQ","fqdn":"de.forerungirdles.com","domain":"forerungirdles.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:42.365Z","timestamp":1727198862365,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /i6oKq6spPDgpeY/QrOEQ HTTP/1.1\r\nHost: de.forerungirdles.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":2,"dns":48,"connect":74,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-09-24","alert":"Sinkholed","trigger":"forerungirdles.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redirect3.online/flurry1.html","fqdn":"redirect3.online","domain":"redirect3.online","tld":"online"},"ip":{"addr":"104.21.55.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:36.916Z","timestamp":1727198856916,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redirect3.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Sep 2024 16:21:21 GMT","end":"Mon, 02 Dec 2024 16:21:20 GMT"},"fingerprint":{"sha1":"46:1D:B0:17:F7:A5:4C:43:98:0F:A7:F0:E3:13:1A:C5:65:27:15:AD","sha256":"69:65:AB:BA:8F:55:4D:8C:ED:7A:0B:18:55:8C:05:31:E5:C9:2F:37:39:0B:7F:BF:99:F9:58:33:1B:42:6C:CF"}}},"request":{"raw":"GET /flurry1.html HTTP/1.1\r\nHost: redirect3.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:36 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 40314\r\nlast-modified: Tue, 24 Sep 2024 06:15:42 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=j2LabUgktLfGzlmCHk3zC8OpwfxPF8RYrEKL77nluJOkGmK5aer5ita6g4%2FC9p2KYdhMmWucuOZIPRo3U64VEYzldKOAH5VpHAjh%2BTayHRUc1KDWCZYL0ihztqAg89G1mfYN\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c781d0662ba-HAM\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":245,"size_decoded":245,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"fb3ccf2a2be3110c78ee1a3ba11745ec","sha1":"ed4cb774b057a28735ce9bac3a5a4f0ca1ab742d","sha256":"0113baf4355bf43c67725ab03658e69b2781ae721e3d03267f43ac7863f7fee6","sha512":"fc465fe6d77cc2c270ecdbbbbf55d103c293b3ed09d125b57c5304e54a46a8438f5329671f1d38b026e02d4e9f6fc3e52c48468c9b720c62148cf0ab9d2cff5b","ssdeep":"","tlshash":"15d05efe6d58b009ba6409d81771b29c386ad085347ab075f5c8462e84c57959c333e1","first_seen":"2023-05-08T16:02:00Z","last_seen":"2024-10-11T09:19:31.011098Z","times_seen":45,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":52,"dns":4,"connect":30,"send":0,"wait":40,"receive":0,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redirect3.online/flurryn.html","fqdn":"redirect3.online","domain":"redirect3.online","tld":"online"},"ip":{"addr":"104.21.55.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.351Z","timestamp":1727198859351,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redirect3.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Sep 2024 16:21:21 GMT","end":"Mon, 02 Dec 2024 16:21:20 GMT"},"fingerprint":{"sha1":"46:1D:B0:17:F7:A5:4C:43:98:0F:A7:F0:E3:13:1A:C5:65:27:15:AD","sha256":"69:65:AB:BA:8F:55:4D:8C:ED:7A:0B:18:55:8C:05:31:E5:C9:2F:37:39:0B:7F:BF:99:F9:58:33:1B:42:6C:CF"}}},"request":{"raw":"GET /flurryn.html HTTP/1.1\r\nHost: redirect3.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 42310\r\nlast-modified: Tue, 24 Sep 2024 05:42:29 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=x3S6IdmVdRbnvU14i%2B3lJjR3sQ1G9KUO7ThIbdxQT4OaSYmE5fJejuAqdc43Dp2MF3J3EgZI5HBBE47Elj9q79%2Fkjc19ueJqX7cSCRUgJ35mm5aaMJZKEpnzoxeEZrey9gSR\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c851803b7b5-AMS\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":245,"size_decoded":245,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"49a344fb5eebd40be6afda27648192e1","sha1":"7726f75d3cb7513f4fc2c14b4ef74ba8d207720f","sha256":"8be16ceb16f314d5ccfe590d74e95c0bd9f0784734ccb8e5a2dcde2350c133fd","sha512":"151d0fc0fb56bce8f40d15acaea29bf814b63b0f0be243a7b8e32400799c9112340a609e2146e36bdd8183f276fdcef96a4d5a97e9de5aac5c1a1fcede4bc9ec","ssdeep":"","tlshash":"3dd02efe2d08a00abaa018d817b0b2ac381b810038257034f6c8022e84c06a6ac333e0","first_seen":"2024-04-09T19:05:02Z","last_seen":"2024-10-06T19:12:51.509921Z","times_seen":43,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.clickmi.net/redirect?feed=700972\u0026auth=YGSz\u0026subid=clickmi1\u0026query=clickmi1\u0026url=clickmi1.net","fqdn":"xml.clickmi.net","domain":"clickmi.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:41.743Z","timestamp":1727198861743,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=700972\u0026auth=YGSz\u0026subid=clickmi1\u0026query=clickmi1\u0026url=clickmi1.net HTTP/1.1\r\nHost: xml.clickmi.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":68,"connect":99,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.flurryad.com/redirect?feed=437642\u0026auth=qKgbOv\u0026subid=flurryad\u0026query=flurryad\u0026url=flurryad.com","fqdn":"xml.flurryad.com","domain":"flurryad.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.027Z","timestamp":1727198862027,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=437642\u0026auth=qKgbOv\u0026subid=flurryad\u0026query=flurryad\u0026url=flurryad.com HTTP/1.1\r\nHost: xml.flurryad.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":968,"timings":{"blocked":954,"dns":14,"connect":98,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sub.votreimc.com/eximdigitala1.html","fqdn":"sub.votreimc.com","domain":"votreimc.com","tld":"com"},"ip":{"addr":"172.67.222.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.431Z","timestamp":1727198859431,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votreimc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Sep 2024 02:12:01 GMT","end":"Sat, 14 Dec 2024 02:12:00 GMT"},"fingerprint":{"sha1":"AF:56:A8:13:7B:6E:27:2B:03:40:18:37:A2:8B:CA:0F:2F:6D:E0:FA","sha256":"44:AD:5E:CF:7E:DE:B0:30:21:4D:10:85:AA:65:B9:AC:F4:EA:F9:DA:BC:84:CE:A6:39:8C:B9:24:E9:77:43:4A"}}},"request":{"raw":"GET /eximdigitala1.html HTTP/1.1\r\nHost: sub.votreimc.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nx-iplb-request-id: A29ECB9C:B7BC_91EF25A2:0050_66EB0C95_569D3:7D2A\r\nx-iplb-instance: 52360\r\ncf-cache-status: HIT\r\nage: 518646\r\nlast-modified: Wed, 18 Sep 2024 17:23:33 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=I6qA1UZY%2FeP2PfSCdATrrrN%2BxiEcFIkxPkjIXB7rc8aRiSOlXndP9Q%2BqSHYFO%2F3oVt0rGV7EgUmZP%2BNVMnpGseM47KxtDKBAUtR%2B4oa2xNIfi5TW1ONttvsnOWawt8NMYCfI\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c854fc262b8-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":271,"size_decoded":271,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"943e2b948a61b3801f8ef4aeaa6049a0","sha1":"8e2c9b6e80940992cb677415634ddf3371335fb2","sha256":"7f7fa179590faac6d965012b8f65e51c55c47d34e33df738f0e39309df18c475","sha512":"09c212ec43fc2f01049b2df55e2f4e3c408bf9fe300adf2713723e2d063030cb7bad593553d403b371013572471b7515bcd8a48504edf52fc2e1c48c2e5b1782","ssdeep":"","tlshash":"dcd02baf1d1590000f5108d09bb77b6c7832d47004243cf4e6c54326c6c4a9dccb37e8","first_seen":"2024-04-09T19:05:02Z","last_seen":"2024-10-11T09:19:30.988928Z","times_seen":41,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/adf.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.774Z","timestamp":1727198859774,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /adf.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww-7.good-trading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 449835\r\nlast-modified: Thu, 19 Sep 2024 12:30:24 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=qHhc56cj1SGXGbLir1VzrjMch%2Fc99p2sPO9zCym%2Bif%2BOp6ySchiijW5w4tYiaVI1BabDZqtmcrMKGipC7%2FI3HX96u9SmNTL5A%2FR12EWWN3NckVUoZWtZHwPXS%2BzU9%2BiBKUeM\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c858ee20a50-AMS\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":246,"size_decoded":246,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"7903f4e8084f88509e4a1bc6ee9a2e5c","sha1":"758d8dd0132b7837eb07700429a59f5ee382dff0","sha256":"a1d5c1823991a0580dde7775e276ab2b11227e9e2fb7802dd168545356d72a24","sha512":"1a96a8e8d47cd3e9833a0d4e65d293bae853be8445de9fb20b858d7c91841aad78c7e0b2bd982b719927f301ea12c787561e53eca1d0ca5704a283406b084c4b","ssdeep":"","tlshash":"2ed02bbeec08f005010046a0987273fc76976408a6b1a005a3c48126ccd07c0d973be0","first_seen":"2023-05-08T16:02:00Z","last_seen":"2024-10-11T09:19:30.984976Z","times_seen":40,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.zentrixads.com/redirect?feed=708257\u0026auth=5bN0\u0026subid=zentrix1\u0026query=zentrix1\u0026url=zentrixads.com","fqdn":"xml.zentrixads.com","domain":"zentrixads.com","tld":"com"},"ip":{"addr":"173.239.53.20","port":443,"asn":27257,"as":"WEBAIR-INTERNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:40.909Z","timestamp":1727198860909,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"zentrixads.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Aug 2024 06:43:54 GMT","end":"Fri, 08 Nov 2024 06:43:53 GMT"},"fingerprint":{"sha1":"F2:86:E7:12:4A:4C:AD:C4:A5:BC:D4:4A:D8:E2:79:04:70:29:85:2B","sha256":"50:46:92:6C:46:D5:FD:F0:B1:78:B4:49:76:6C:9F:5F:DF:00:5D:2D:89:04:55:36:C4:CB:82:D3:85:E7:A9:8F"}}},"request":{"raw":"GET /redirect?feed=708257\u0026auth=5bN0\u0026subid=zentrix1\u0026query=zentrix1\u0026url=zentrixads.com HTTP/1.1\r\nHost: xml.zentrixads.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Tue, 24 Sep 2024 17:27:42 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-store\r\nLocation: https://na.rolpenszimocca.com/iBY3tLO3UVJSdx38/qLRqB\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":2685,"timings":{"blocked":869,"dns":26,"connect":96,"send":0,"wait":527,"receive":1,"ssl":1163},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sub.votreimc.com/eximdigitalbis.html","fqdn":"sub.votreimc.com","domain":"votreimc.com","tld":"com"},"ip":{"addr":"172.67.222.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.425Z","timestamp":1727198859425,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votreimc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Sep 2024 02:12:01 GMT","end":"Sat, 14 Dec 2024 02:12:00 GMT"},"fingerprint":{"sha1":"AF:56:A8:13:7B:6E:27:2B:03:40:18:37:A2:8B:CA:0F:2F:6D:E0:FA","sha256":"44:AD:5E:CF:7E:DE:B0:30:21:4D:10:85:AA:65:B9:AC:F4:EA:F9:DA:BC:84:CE:A6:39:8C:B9:24:E9:77:43:4A"}}},"request":{"raw":"GET /eximdigitalbis.html HTTP/1.1\r\nHost: sub.votreimc.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nx-iplb-request-id: A29ECB96:71F4_91EF25A2:0050_66EB2372_A600B:08E9\r\nx-iplb-instance: 52324\r\ncf-cache-status: HIT\r\nage: 512793\r\nlast-modified: Wed, 18 Sep 2024 19:01:06 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=I3CdhXlW4s4V0unXXSi95qMwBxQVGtjQutLPNpr7stEjxOSK5qJXByQS%2FBcEDIozhjSWGwjPY2wJy40EafQ1wARVdG%2BXjHxrlT%2F19tO1TJBMi7kDSVAum6SBCan4yGLoy%2F%2Fq\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c854fbb62b8-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":270,"size_decoded":270,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"3eb3ddf2f259df8450d2d7ff04cc4485","sha1":"a445013109b692643382d88ed1c7dfd9b349e1ce","sha256":"abf40691c6be352b0bf749c04a163908e6153e903c7bd370c7730a684f16345b","sha512":"5f1ae0092c12947e939b109fee4aca8b31094ea243fb3e70f621ad51adf5497e953206b5ec83236b3f7d24430bafe7382668f4a13201810806780793986e4407","ssdeep":"","tlshash":"d0d02bef2c4d80010b5004d4d7b3ab5c2471d434005938f8e1c94257c6c4e9cdcb33e8","first_seen":"2023-05-14T00:54:31Z","last_seen":"2024-10-11T09:19:30.994376Z","times_seen":49,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.trackifyy.com/redirect?feed=668766\u0026auth=i7tq29\u0026subid=tracki\u0026query=tracki\u0026url=trackifyy.com","fqdn":"xml.trackifyy.com","domain":"trackifyy.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:40.957Z","timestamp":1727198860957,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=668766\u0026auth=i7tq29\u0026subid=tracki\u0026query=tracki\u0026url=trackifyy.com HTTP/1.1\r\nHost: xml.trackifyy.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.trackifyy.com/redirect?feed=668767\u0026auth=vObwDG\u0026subid=tracki1\u0026query=tracki1\u0026url=trackifyy.com","fqdn":"xml.trackifyy.com","domain":"trackifyy.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.064Z","timestamp":1727198862064,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=668767\u0026auth=vObwDG\u0026subid=tracki1\u0026query=tracki1\u0026url=trackifyy.com HTTP/1.1\r\nHost: xml.trackifyy.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":139,"dns":2,"connect":100,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redirect3.online/rtba.html","fqdn":"redirect3.online","domain":"redirect3.online","tld":"online"},"ip":{"addr":"104.21.55.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.754Z","timestamp":1727198859754,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redirect3.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Sep 2024 16:21:21 GMT","end":"Mon, 02 Dec 2024 16:21:20 GMT"},"fingerprint":{"sha1":"46:1D:B0:17:F7:A5:4C:43:98:0F:A7:F0:E3:13:1A:C5:65:27:15:AD","sha256":"69:65:AB:BA:8F:55:4D:8C:ED:7A:0B:18:55:8C:05:31:E5:C9:2F:37:39:0B:7F:BF:99:F9:58:33:1B:42:6C:CF"}}},"request":{"raw":"GET /rtba.html HTTP/1.1\r\nHost: redirect3.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 42309\r\nlast-modified: Tue, 24 Sep 2024 05:42:30 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=mw8utVLH3RRdaJR1dbAkWXqd5BtfmC8SXMk7%2FowejS12xZgQTPJjf8dvnwvK6Z3aZz4S0uSK9J70Hcc%2B7koQ3rqj33zqiVr0Bf5TdW5ahiUT1kdP3ahgVWHgWo5xfVtJHYI%2B\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c85889bb7b5-AMS\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":241,"size_decoded":241,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"d740c3f589d8011f9dd2c264789de848","sha1":"7bc8aa03f0b106d8d56c7de95cb60176b9abaf1e","sha256":"e81f7f20e447d14f2536f2059cfad2422efce20ea56d1bc5b2f4ca4058564f9b","sha512":"589f5a7f4c9c71f0fafdbf5ca5641794790f827a2a8e871cfd3bdcd87624f486a9549020d6be5991addd5338d3d5df7393b0104ac5b5a8650477ed903094b158","ssdeep":"","tlshash":"22d05bbe1d5c90410b610ce41771e55c785690450475b06a778e822a48d47d5dd733e4","first_seen":"2023-05-08T16:02:00Z","last_seen":"2024-10-11T09:19:31.00733Z","times_seen":48,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adxfactory.com/redirect?feed=637932\u0026auth=fLqghK\u0026subid=adx1\u0026query=adx1\u0026url=adx.com","fqdn":"xml.adxfactory.com","domain":"adxfactory.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.095Z","timestamp":1727198862095,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=637932\u0026auth=fLqghK\u0026subid=adx1\u0026query=adx1\u0026url=adx.com HTTP/1.1\r\nHost: xml.adxfactory.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":1,"connect":122,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ctrtraffic.me/mediaa.html","fqdn":"ctrtraffic.me","domain":"ctrtraffic.me","tld":"me"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.382Z","timestamp":1727198859382,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ctrtraffic.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Sep 2024 18:56:16 GMT","end":"Sun, 15 Dec 2024 18:56:15 GMT"},"fingerprint":{"sha1":"B5:5C:14:47:59:F7:46:21:B1:85:1E:A6:98:2C:65:CD:81:D3:BA:C1","sha256":"E5:25:D1:2F:7F:BC:68:5B:1F:BC:C8:BD:52:2E:65:5D:37:AD:AB:11:36:A4:DF:65:78:23:93:7B:6D:36:12:16"}}},"request":{"raw":"GET /mediaa.html HTTP/1.1\r\nHost: ctrtraffic.me\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 519002\r\nlast-modified: Wed, 18 Sep 2024 17:17:37 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=zmTwyd3ST4%2FMtUTfQm9Lwb%2FDhdHNOtfHlRbZSOmsc6qUU7ZGgwTUjg%2Fy%2F6FmUilAI%2Bc2cagKOWhksOwp52F%2FPNAGK6DGRIz5RBmCaZlcqBG1qmvQy1T1GK2jjTaCYEH9\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c852fd56a62-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":267,"size_decoded":267,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"85e3a1a0a77df0aac10e21b6a88e0667","sha1":"640203c63a7836105c7790028e2ac8b012cb7cd1","sha256":"f2f44acbf117ebf1bd81026dc0d51612a7bab8e12536261ac149768b6443ac2c","sha512":"f80a4eaf69c2eb36e1444e8dbd6753078ce8dbb7cb477bce1f25ca481dd9ed4d819734b3410755030ac35598c991540dc31ab59d486447f5e28af66db25760c0","ssdeep":"","tlshash":"1ce02bef1d0cf12146425da81db172bc265da10451747200fd99d266c4d8744dd73fe0","first_seen":"2023-05-03T22:30:24Z","last_seen":"2024-10-11T09:19:30.997405Z","times_seen":36,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redirect3.online/adxgeo.html","fqdn":"redirect3.online","domain":"redirect3.online","tld":"online"},"ip":{"addr":"104.21.55.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.752Z","timestamp":1727198859752,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redirect3.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Sep 2024 16:21:21 GMT","end":"Mon, 02 Dec 2024 16:21:20 GMT"},"fingerprint":{"sha1":"46:1D:B0:17:F7:A5:4C:43:98:0F:A7:F0:E3:13:1A:C5:65:27:15:AD","sha256":"69:65:AB:BA:8F:55:4D:8C:ED:7A:0B:18:55:8C:05:31:E5:C9:2F:37:39:0B:7F:BF:99:F9:58:33:1B:42:6C:CF"}}},"request":{"raw":"GET /adxgeo.html HTTP/1.1\r\nHost: redirect3.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 42309\r\nlast-modified: Tue, 24 Sep 2024 05:42:30 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8Qf3nQGBfJQO59F7U9SfI3QnW2Uf7q5qK8uWNrbKj6SuPjwtkFgTawzneh65KE1xe7TrSBsmipxwlaSYLa%2Bl7lzhha4ROZkeCkYbQkwoJhhdvF%2FQDCNExsCXJ9v7kBFompA4\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c85889ab7b5-AMS\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":247,"size_decoded":247,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"9434b2f587fb0c4ebb221f5175d36d5a","sha1":"31872f475a74fa94d5f32892eddc8ece4be23cc0","sha256":"66422dbddc75144fba156cf3b4225d6f14cb4abf5ecc091285ce334e788077bb","sha512":"8905c141a072e4424d357a3bc38a3cc9419cb822c880bfad42c58a425ab3fc332e54b59bcc0f3b17d6977955b04c3af09659f2f1d6f7af6127a86b69d54e490c","ssdeep":"","tlshash":"04d02ebe2c1ca0420ab25ce01bb1b39c3827808004a6b07ab2c8d22bccc03c09c733d0","first_seen":"2024-05-17T09:36:37Z","last_seen":"2024-10-11T09:19:31.020042Z","times_seen":34,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.flurryad.com/redirect?feed=486026\u0026auth=kWHJi8\u0026subid=flurry2\u0026query=flurry2\u0026url=flurryad.com","fqdn":"xml.flurryad.com","domain":"flurryad.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.038Z","timestamp":1727198862038,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=486026\u0026auth=kWHJi8\u0026subid=flurry2\u0026query=flurry2\u0026url=flurryad.com HTTP/1.1\r\nHost: xml.flurryad.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":971,"timings":{"blocked":955,"dns":16,"connect":100,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adtube.media/redirect?feed=557469\u0026auth=uclEev\u0026subid=adtu\u0026query=adtu\u0026url=adtube.media","fqdn":"xml.adtube.media","domain":"adtube.media","tld":"media"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.179Z","timestamp":1727198862179,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=557469\u0026auth=uclEev\u0026subid=adtu\u0026query=adtu\u0026url=adtube.media HTTP/1.1\r\nHost: xml.adtube.media\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":917,"timings":{"blocked":911,"dns":6,"connect":161,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sub.votreimc.com/adzgamebis1.html","fqdn":"sub.votreimc.com","domain":"votreimc.com","tld":"com"},"ip":{"addr":"172.67.222.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:37.611Z","timestamp":1727198857611,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votreimc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Sep 2024 02:12:01 GMT","end":"Sat, 14 Dec 2024 02:12:00 GMT"},"fingerprint":{"sha1":"AF:56:A8:13:7B:6E:27:2B:03:40:18:37:A2:8B:CA:0F:2F:6D:E0:FA","sha256":"44:AD:5E:CF:7E:DE:B0:30:21:4D:10:85:AA:65:B9:AC:F4:EA:F9:DA:BC:84:CE:A6:39:8C:B9:24:E9:77:43:4A"}}},"request":{"raw":"GET /adzgamebis1.html HTTP/1.1\r\nHost: sub.votreimc.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nx-iplb-request-id: A29ECA91:535A_91EF25A2:0050_66EAF62F_6E8F2:688D\r\nx-iplb-instance: 52360\r\ncf-cache-status: HIT\r\nage: 524378\r\nlast-modified: Wed, 18 Sep 2024 15:47:59 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=hUKFk%2FVIYHFIPkMUR5N9neSV6CM2dwLwlGqamSpnp9y38QOkF47c7QDgPqEiNIdnF43kJ2kjDhmoD%2B12XyrSF5i%2Bei%2BY8lrpxxOpDKoq%2Fa5n9Wo%2BfUYO7egO4410hm%2F0B1No\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c78cfff62b8-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":261,"size_decoded":261,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"9ad82899f9eff4a0da7c326ee73d5d28","sha1":"56d7533c50de211799562421e3204c984fe9e9f0","sha256":"c8bfb3a28a8ee9c08a2fdff29056c3b0f638bb6f43397ceddde7ebfa7a9221ae","sha512":"b461cdc68dc646403df4a8d3a9c4a603ae9e8cc996a3a4754894e09f6e38cfe73c24e962c2e7357d9873038c56b5065c276c2c42fa7d443d3c6ed9360843edc0","ssdeep":"","tlshash":"83d02baf2d5990060d7114d09b71776ca412a085446878b5a7c4829ac4c0bc2dc733e4","first_seen":"2024-04-09T19:05:02Z","last_seen":"2024-10-11T09:19:31.034366Z","times_seen":44,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.infinity-info.com/redirect?feed=441157\u0026auth=lxC8VR\u0026subid=infinitymain\u0026query=best+deals\u0026url=infinity-info.com","fqdn":"xml.infinity-info.com","domain":"infinity-info.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.080Z","timestamp":1727198862080,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=441157\u0026auth=lxC8VR\u0026subid=infinitymain\u0026query=best+deals\u0026url=infinity-info.com HTTP/1.1\r\nHost: xml.infinity-info.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":1000,"timings":{"blocked":975,"dns":25,"connect":99,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.eximdigital.com/redirect?feed=647203\u0026auth=EC06VD\u0026subid=eximdigitala1\u0026query=eximdigitala1\u0026url=eximdigital1.com","fqdn":"xml.eximdigital.com","domain":"eximdigital.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.084Z","timestamp":1727198862084,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=647203\u0026auth=EC06VD\u0026subid=eximdigitala1\u0026query=eximdigitala1\u0026url=eximdigital1.com HTTP/1.1\r\nHost: xml.eximdigital.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":982,"timings":{"blocked":954,"dns":28,"connect":100,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adflyer.media/redirect?feed=474231\u0026auth=YyannI\u0026subid=adf\u0026query=adf\u0026url=adflyer.media","fqdn":"xml.adflyer.media","domain":"adflyer.media","tld":"media"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.104Z","timestamp":1727198862104,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=474231\u0026auth=YyannI\u0026subid=adf\u0026query=adf\u0026url=adflyer.media HTTP/1.1\r\nHost: xml.adflyer.media\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":990,"timings":{"blocked":977,"dns":13,"connect":163,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.zaimads.com/redirect?feed=449093\u0026auth=hakPcP\u0026subid=zaimads\u0026query=stream\u0026url=zaimads.com","fqdn":"xml.zaimads.com","domain":"zaimads.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:42.023Z","timestamp":1727198862023,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=449093\u0026auth=hakPcP\u0026subid=zaimads\u0026query=stream\u0026url=zaimads.com HTTP/1.1\r\nHost: xml.zaimads.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":46,"connect":97,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adflyer.media/redirect?feed=542700\u0026auth=QqtgIx\u0026subid=adfa1\u0026query=adfa1\u0026url=adflyer.media","fqdn":"xml.adflyer.media","domain":"adflyer.media","tld":"media"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:41.730Z","timestamp":1727198861730,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=542700\u0026auth=QqtgIx\u0026subid=adfa1\u0026query=adfa1\u0026url=adflyer.media HTTP/1.1\r\nHost: xml.adflyer.media\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":32,"connect":104,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/adfa1.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.787Z","timestamp":1727198859787,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /adfa1.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww-7.good-trading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 449838\r\nlast-modified: Thu, 19 Sep 2024 12:30:21 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8VVfKTHYOvghRu1peZ2llZFnBFzKjwcH5zyuAnrktNFcInyCGy7ZlohQsrvwbXRDpPV92f95XAbJzPDseQ%2B1Axci00%2Fujz3dut3Ay4Dy1nCtkvBqv8dSGrTUDDxo7T7DRcSL\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c858eee0a50-AMS\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":250,"size_decoded":250,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"969729c58d5430327cc15790a7848844","sha1":"e08d56b856761d5bfcf8f43dc5f3ac50f7604d4d","sha256":"40f3364c2d76eff4509797e6f2c5cd84e6b1e4a7f53cb1e7c0b01d38e9c4f2f0","sha512":"be1b2886bd2ff4ca4387625fa7bc46b3fd80104fd57ffbb790ef0ff5616b8a222b82d6b7bfab9fe0af2918ba3738cd78240234e5f99bafc3903ea2fa1eec0708","ssdeep":"","tlshash":"09d02bbe5d08f145054046b458b173fca653780575f0a414b2898216ccc0fc0dc73be0","first_seen":"2023-05-08T16:02:00Z","last_seen":"2024-10-11T09:19:30.980813Z","times_seen":37,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.clickmi.net/redirect?feed=700974\u0026auth=aNe9\u0026subid=clickmi1a\u0026query=clickmi1a\u0026url=clickmi1.net","fqdn":"xml.clickmi.net","domain":"clickmi.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:41.742Z","timestamp":1727198861742,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=700974\u0026auth=aNe9\u0026subid=clickmi1a\u0026query=clickmi1a\u0026url=clickmi1.net HTTP/1.1\r\nHost: xml.clickmi.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":70,"connect":99,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gpshtb.com/go/708?source=3333","fqdn":"gpshtb.com","domain":"gpshtb.com","tld":"com"},"ip":{"addr":"173.214.244.181","port":443,"asn":15317,"as":"SERVEREL-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cgb.news24.media/?d","date":"2024-09-24T17:27:46.341Z","timestamp":1727198866341,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"55trck.xyz","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jul 2024 04:17:35 GMT","end":"Fri, 25 Oct 2024 04:17:34 GMT"},"fingerprint":{"sha1":"A2:EA:29:7E:33:3C:75:B7:72:9F:49:4C:C6:B9:D0:8F:1C:BD:1B:B9","sha256":"ED:EB:AF:88:64:0E:3D:5D:7A:2A:F1:54:02:BD:44:82:B3:B6:BD:03:B7:A8:8C:5A:68:7F:57:C9:E5:AD:3D:9D"}}},"request":{"raw":"GET /go/708?source=3333 HTTP/1.1\r\nHost: gpshtb.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Tue, 24 Sep 2024 17:27:46 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://ykrvt.bestssp.top/?pl=YC0GOkWFo0Wz8n7UhRmi1w\u0026sub_id=3333\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":146,"size_decoded":146,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":1132,"timings":{"blocked":485,"dns":0,"connect":157,"send":0,"wait":162,"receive":0,"ssl":323},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-good.com/infinitya1.html","fqdn":"ad-good.com","domain":"ad-good.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:37.856Z","timestamp":1727198857856,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-good.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Aug 2024 12:01:51 GMT","end":"Sun, 10 Nov 2024 12:01:50 GMT"},"fingerprint":{"sha1":"77:4B:2C:D9:8C:89:13:31:AF:23:8C:04:14:AA:A5:93:B9:95:86:50","sha256":"05:8A:8C:C7:83:B7:64:C0:B5:21:77:3B:A5:F6:F1:7E:DE:19:31:34:57:A5:16:CC:06:08:40:4E:39:C0:EC:FD"}}},"request":{"raw":"GET /infinitya1.html HTTP/1.1\r\nHost: ad-good.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 432999\r\nlast-modified: Thu, 19 Sep 2024 17:10:58 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=OnGl8zjhjfGjPXGJlbyWgcDtcKjDQhzCkGXkaiVyl8n0XpKEgnJCjnzYvzzZgRJdiNgtAlcCcindvv00Mgl9FVK2FLKtAq7AAz3H8Z9BzbvQFYbBcz7P74tVNycIwQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c794bd69fae-AMS\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":257,"size_decoded":257,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"17db8b9a808363dcbd131939f62be6e5","sha1":"aaaa29c803d56509938623e5720fc027677c3194","sha256":"39833293f435329f3ea9069d6908aa32ded4195d54be44959cb55b5992bc89eb","sha512":"ff5abfc846860461559622049e7b12a8e41576af82a3de75148a82409b14257b16372638e010dbfdf9ae32d8e0452f59558d9a6af84b40d07d18fe3a37269d75","ssdeep":"","tlshash":"f3d05bae1d49b027166154981cf1b19c351768552677b118e288412ec4d4fdadc32bf9","first_seen":"2023-10-13T04:20:32Z","last_seen":"2024-10-06T19:12:51.515469Z","times_seen":35,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.eximdigital.com/redirect?feed=445008\u0026auth=AK9QGh\u0026subid=eximdigital\u0026query=eximdigital\u0026url=eximdigital.com","fqdn":"xml.eximdigital.com","domain":"eximdigital.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.069Z","timestamp":1727198862069,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=445008\u0026auth=AK9QGh\u0026subid=eximdigital\u0026query=eximdigital\u0026url=eximdigital.com HTTP/1.1\r\nHost: xml.eximdigital.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":998,"timings":{"blocked":971,"dns":27,"connect":100,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/clickmi1.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.806Z","timestamp":1727198859806,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /clickmi1.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww-7.good-trading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 449838\r\nlast-modified: Thu, 19 Sep 2024 12:30:21 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=SFss%2Fqg1YRMboU5aZwtzKChiPhqXV8w4xIOmXrc5gIVpwRVQtKQ3Bc6N1rMp9rC%2B0G7ZD4jyoNiauBG2m26Qn%2Fd8g5p8rcfTjV80OvrzUBqY6s5zl0uuK7RkYkLBNS0p8cCe\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c85af180a50-AMS\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":249,"size_decoded":249,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"58a24473c9ecdb643b559836486f5865","sha1":"41cde5d1e57da1f26fea073f950db62beafbe817","sha256":"39f5f1d02a96173709d90316e42a6ffcb1550d1ea504600e23471debd655d75c","sha512":"105c191f7d5a436658f3e3a75ef544cf2c25f3b6fcc6cd4d839b3e4b0cb08dc1a580d3845c39a4fccef09c470d7627864ef296ed14b8b6d73806cb9995ad6137","ssdeep":"","tlshash":"ebd02ebe1f08f0012510699818b0327d2666a00a3eba2058e1c88e2ac4ccbc9ddf27e0","first_seen":"2024-09-14T06:59:37Z","last_seen":"2024-10-11T09:19:31.001162Z","times_seen":23,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/adtu.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.810Z","timestamp":1727198859810,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /adtu.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww-7.good-trading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 449838\r\nlast-modified: Thu, 19 Sep 2024 12:30:21 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=kz1AdsdQyLLPA1Qi8E434LXn0ZnxG9IECil6e%2B5I2DDCRoTQncwEKNDOm5ekAcRTAK4z8Iev4SY7I6PO0ogE5S589nzRn7Qtl%2FvqH2xV9FX2vJRA2ehbuuCbreC4rER01tAz\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c85af1d0a50-AMS\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":246,"size_decoded":246,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"c818a4d94151bff4a59f4cde629bfcd8","sha1":"7ec2ecd370600266a2164fca5a3eec514281f447","sha256":"5885846d6919e34a109d19f54465e1c8ef167c7148dfdb1d6042ab462cb128b7","sha512":"554628aa673880ec9ce2574d370472b1e06bf4d9d96c77852ef21db6f4d1ee6b77bef24f55388d2290ed1f5206c58954f6230de6537110ca69bb7cfe8fff46c5","ssdeep":"","tlshash":"87d02ebf1c08b105191084e9a8b273ad3a16950828b02034f188862bc8e0b80c873be4","first_seen":"2023-05-22T20:52:15Z","last_seen":"2024-10-11T09:19:30.996546Z","times_seen":35,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.flurryad.com/redirect?feed=480555\u0026auth=NJW4rQ\u0026subid=flurry1\u0026query=flurry1\u0026url=flurryad.com","fqdn":"xml.flurryad.com","domain":"flurryad.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:41.219Z","timestamp":1727198861219,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flurryad.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Sep 2024 06:45:11 GMT","end":"Sun, 01 Dec 2024 06:45:10 GMT"},"fingerprint":{"sha1":"43:38:58:0A:B2:FA:EA:1A:BB:BC:1E:FD:BD:D6:84:BD:55:18:6F:F5","sha256":"92:1A:E9:14:4A:62:EC:D7:C5:1B:84:DE:BA:FB:13:36:B8:1F:8E:B9:A0:67:BA:CE:9C:E9:00:F3:3B:04:A7:34"}}},"request":{"raw":"GET /redirect?feed=480555\u0026auth=NJW4rQ\u0026subid=flurry1\u0026query=flurry1\u0026url=flurryad.com HTTP/1.1\r\nHost: xml.flurryad.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":2250,"timings":{"blocked":-1,"dns":37,"connect":102,"send":0,"wait":0,"receive":0,"ssl":2110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/zentrix1.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:37.051Z","timestamp":1727198857051,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /zentrix1.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:36 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 449826\r\nlast-modified: Thu, 19 Sep 2024 12:30:30 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=SVTFyK%2BFxFo5y9Cp8%2FacaX9GklyN%2BDlGNeI8kX0W5qgK7wKHigiECGVjYEeK1Fclt34pUAQUJxTxHve9aj0GEVjbAUR%2FNa%2BNr%2BnCQazR9auj0fU9WoO1p7oybuYxkcqkt2fV\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c77bd3a726c-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":263,"size_decoded":263,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"50eae21b2bbe97f465bb3ed386af46b0","sha1":"8ee14387efae990f6af8ae42f01ec0ddcba5ab5d","sha256":"b85458bf01055272355a520e4a597d7d7e3556b57d0f832dec4930e5899a0e2c","sha512":"029e3cdb68960bafb2f4e47a679a7351c9547d7aa93db3a48d9882504bab4ada49df939331115bd4a6fc8dd6456cd66ea190125da4b348fb3dc383a4dd883703","ssdeep":"","tlshash":"47d0c2af1d08b211094108e40971b19e635b510420b1a390918d422ac4c8a82dc233e0","first_seen":"2024-09-20T04:00:01Z","last_seen":"2024-10-11T09:19:30.986121Z","times_seen":31,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.clixvista.com/redirect?feed=604308\u0026auth=TKnqy8\u0026subid=clixvista1\u0026query=clixvista1\u0026url=clixvista1.com","fqdn":"xml.clixvista.com","domain":"clixvista.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.096Z","timestamp":1727198862096,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=604308\u0026auth=TKnqy8\u0026subid=clixvista1\u0026query=clixvista1\u0026url=clixvista1.com HTTP/1.1\r\nHost: xml.clixvista.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":433,"timings":{"blocked":417,"dns":16,"connect":113,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gbstlnd.com/rotator/662/3333/2f1eeeafc1c1aa0ba0685904cfada495/?click_id=a2_3736566435692234949_627551_2_0\u0026sub1=a627551\u0026sub2=${sub2}\u0026sub3=${sub3}\u0026fullscreen=1","fqdn":"gbstlnd.com","domain":"gbstlnd.com","tld":"com"},"ip":{"addr":"173.214.250.52","port":443,"asn":15317,"as":"SERVEREL-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cgb.news24.media/?d","date":"2024-09-24T17:27:42.199Z","timestamp":1727198862199,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"nwslndng.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Sep 2024 13:39:30 GMT","end":"Wed, 11 Dec 2024 13:39:29 GMT"},"fingerprint":{"sha1":"70:F3:B8:1A:DA:BD:D8:A1:23:0F:46:9D:A7:9F:CA:B8:16:5F:60:8A","sha256":"FC:1D:A8:4B:77:83:82:3C:40:76:D1:10:E1:C7:95:42:02:2C:43:94:24:20:EB:EE:DC:2B:14:AE:98:38:00:3D"}}},"request":{"raw":"GET /rotator/662/3333/2f1eeeafc1c1aa0ba0685904cfada495/?click_id=a2_3736566435692234949_627551_2_0\u0026sub1=a627551\u0026sub2=${sub2}\u0026sub3=${sub3}\u0026fullscreen=1 HTTP/1.1\r\nHost: gbstlnd.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cgb.news24.media/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Tue, 24 Sep 2024 17:27:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://gbstlnd.com/adult_video_3/3333/2f1eeeafc1c1aa0ba0685904cfada495/?click_id=a2_3736566435692234949_627551_2_0\u0026sub1=a627551\u0026sub2=%24%7Bsub2%7D\u0026sub3=%24%7Bsub3%7D\u0026tb=\u0026fullscreen=1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":243479,"size_decoded":243479,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":2433,"timings":{"blocked":601,"dns":1,"connect":158,"send":0,"wait":169,"receive":0,"ssl":1486},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-good.com/infinitygeo.html","fqdn":"ad-good.com","domain":"ad-good.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.535Z","timestamp":1727198859535,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-good.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Aug 2024 12:01:51 GMT","end":"Sun, 10 Nov 2024 12:01:50 GMT"},"fingerprint":{"sha1":"77:4B:2C:D9:8C:89:13:31:AF:23:8C:04:14:AA:A5:93:B9:95:86:50","sha256":"05:8A:8C:C7:83:B7:64:C0:B5:21:77:3B:A5:F6:F1:7E:DE:19:31:34:57:A5:16:CC:06:08:40:4E:39:C0:EC:FD"}}},"request":{"raw":"GET /infinitygeo.html HTTP/1.1\r\nHost: ad-good.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 518488\r\nlast-modified: Wed, 18 Sep 2024 17:26:11 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=GHL43lUaov%2B3lpV5Z5%2BU0JAHresT65eZitQaSyx6FypQmnM9506J1eA6QAMiS1Gs6RiwMbwxSz6xYgX52wlmmWudislhb8LhnsH6ED0qfCRIWfZYJfoWmebm8ba5HA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c855a7eca81-HAM\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":273,"size_decoded":273,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (301), with no line terminators","md5":"ad1d130c3b4bb589803f5530dcbbdc46","sha1":"4b16d38fd3f38065af32aa63e712973088576614","sha256":"24cde747a431ad00cc99a4b3f16a0ca91c81965c68776dd41d5d6250fad0c668","sha512":"7f38a0072eebd1cc736169c159d3cc9b8ab58d8b56be754ad0f14a8d79a03de3a002e4c00815602dccf108ad7f2d8fc3fdd480a98c93d2393a60e8c896981cdd","ssdeep":"","tlshash":"a2e0c2be2d09b027266045981cf1b2a8391758541176b4009184823ec4e5acaec33fe9","first_seen":"2023-08-10T19:24:14Z","last_seen":"2024-10-11T09:19:31.02352Z","times_seen":46,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.infinity-info.com/redirect?feed=441159\u0026auth=kCy2hF\u0026subid=infinityad\u0026query=infinityad\u0026url=infinity-info.com","fqdn":"xml.infinity-info.com","domain":"infinity-info.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:42.058Z","timestamp":1727198862058,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=441159\u0026auth=kCy2hF\u0026subid=infinityad\u0026query=infinityad\u0026url=infinity-info.com HTTP/1.1\r\nHost: xml.infinity-info.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":78,"dns":206,"connect":105,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.infinity-info.com/redirect?feed=443250\u0026auth=8SxGcE\u0026subid=infinitygeo\u0026query=infinitygeo\u0026url=infinity-info.com","fqdn":"xml.infinity-info.com","domain":"infinity-info.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.160Z","timestamp":1727198862160,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=443250\u0026auth=8SxGcE\u0026subid=infinitygeo\u0026query=infinitygeo\u0026url=infinity-info.com HTTP/1.1\r\nHost: xml.infinity-info.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":346,"connect":105,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/trackif1.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:37.081Z","timestamp":1727198857081,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /trackif1.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:36 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 449826\r\nlast-modified: Thu, 19 Sep 2024 12:30:30 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1dPXodKoFdgbT39jXl4padn5Yl2U0TQhiR0D5x7iSsLT5AP1jj5GHiHszWeE2D%2BdPCzNHckZrdCcNNEMaV99E9tjwk6ctNA5wxm%2Foq9EZFTcJ5X0I054cMc4lgddGs5hEal8\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c77bd41726c-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":261,"size_decoded":261,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"d415faa0e67e7d73aa58eb5a0de51e09","sha1":"a65b6e12d07f23f68b5e1b17020674b2912c86cb","sha256":"7f0bf35d75c98364d89368e05c1f7664a32631d32a2d137d5e19fc23e3021da1","sha512":"b8427d75a63258e9751dd5282d202fe031633c0d8189f6f4df44caeb0238c56b4a21b90e4611cdcc1127ec71575439e55f7becf4c600966939740142074d1cb2","ssdeep":"","tlshash":"bfd02baf1f84b05d16005ca018b1e2ed332d500858796455f3898226cbc5790cc327e5","first_seen":"2024-05-17T09:36:38Z","last_seen":"2024-10-11T09:19:31.018802Z","times_seen":47,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gbstlnd.com/adult_video_2/video.mp4","fqdn":"gbstlnd.com","domain":"gbstlnd.com","tld":"com"},"ip":{"addr":"173.214.250.52","port":443,"asn":15317,"as":"SERVEREL-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"moz-nullprincipal:{0ae6798e-5481-465d-9212-112fedcf6e64}?https://gbstlnd.com","date":"2024-09-24T17:27:45.884Z","timestamp":1727198865884,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"nwslndng.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Sep 2024 13:39:30 GMT","end":"Wed, 11 Dec 2024 13:39:29 GMT"},"fingerprint":{"sha1":"70:F3:B8:1A:DA:BD:D8:A1:23:0F:46:9D:A7:9F:CA:B8:16:5F:60:8A","sha256":"FC:1D:A8:4B:77:83:82:3C:40:76:D1:10:E1:C7:95:42:02:2C:43:94:24:20:EB:EE:DC:2B:14:AE:98:38:00:3D"}}},"request":{"raw":"GET /adult_video_2/video.mp4 HTTP/1.1\r\nHost: gbstlnd.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gbstlnd.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Tue, 24 Sep 2024 17:27:45 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 483291\r\nlast-modified: Thu, 25 Jul 2019 13:49:48 GMT\r\netag: \"5d39b37c-75fdb\"\r\ncontent-range: bytes 0-483290/483291\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":null,"data":{"size":85989,"size_decoded":85989,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"7e700f4c9c16737207537f15a18c2afe","sha1":"f87624b2531785bc2b4fe3c04ea0df04d4985e88","sha256":"358b665407922cd5fe699cfbfcc4281154880d2f6eae7cfeca8b15840f81fc1a","sha512":"57dc52bcf80288f5e1665b2543884e976fd6d427f6703650aba88d893d1dcf53fbda9e4a9cdec6b9e6e88b141ed7c929213b3a745565fffaeca764d46a7f48a8","ssdeep":"1536:dTRNlxRjpHpQtn0jo8aHt3E9r+iya9/EcCNLex1KRLkkQKtfQ:dTnRpHpQSlaHt3IahLw1KRk0Q","tlshash":"b9830146eb3d3593d64a02b6f1e14b76a272d1394393038fa09d2351897dce59ea03fd","first_seen":"2024-06-29T22:56:15Z","last_seen":"2025-05-06T08:00:48.163076Z","times_seen":7,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":271,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smkezc.com/cuload?a=1\u0026e=aeyJwaWQiOjEwNTAxODIsInNpZCI6MTM0NzExMCwid2lkIjo2Mjc1NTEsImQiOiJuZXdzMjQubWVkaWEiLCJsaSI6MX0=\u0026tz=2\u0026if=0\u0026u=aHR0cHM6Ly9mci5uZXdzMjQubWVkaWEv\u0026chpv=15.0.0","fqdn":"smkezc.com","domain":"smkezc.com","tld":"com"},"ip":{"addr":"185.162.85.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cgb.news24.media/?d","date":"2024-09-24T17:27:37.353Z","timestamp":1727198857353,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"smkezc.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Aug 2024 16:35:06 GMT","end":"Fri, 01 Nov 2024 16:35:05 GMT"},"fingerprint":{"sha1":"37:3D:1E:8C:4A:DF:80:8E:7F:FC:A6:71:84:26:87:61:DA:78:BF:90","sha256":"26:14:35:3F:BD:58:CC:7C:C2:12:09:FD:CB:49:20:F1:72:A4:80:9A:E1:DD:63:86:F2:2A:89:A3:7E:02:94:D2"}}},"request":{"raw":"GET /cuload?a=1\u0026e=aeyJwaWQiOjEwNTAxODIsInNpZCI6MTM0NzExMCwid2lkIjo2Mjc1NTEsImQiOiJuZXdzMjQubWVkaWEiLCJsaSI6MX0=\u0026tz=2\u0026if=0\u0026u=aHR0cHM6Ly9mci5uZXdzMjQubWVkaWEv\u0026chpv=15.0.0 HTTP/1.1\r\nHost: smkezc.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cgb.news24.media/\r\nOrigin: https://cgb.news24.media\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\naccept-ch: Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":149,"size_decoded":149,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"73e5d268755c62cb455eb8860d3b1086","sha1":"251cd11a789dd5f5347213ca055d3ab6758bda40","sha256":"d9bcb92342509b4a9d3aae0741941ffaaa5dfbb4168bc9a0929aabbab0c76ac6","sha512":"4ad947f42fc912812659afc1fa6894bd9b3a20b0b00ba60a48ec3875b6ce3781f10b93a0e5243e289d76346b3990353434f6eb6c055582c013ba1c9bdfe9d82b","ssdeep":"","tlshash":"68c08cd011f2d0c9d8604d2aa3f70c3880828efbc5bb8a264c6cd4c210bc1b0038a4d2","first_seen":"2024-09-28T07:59:48.755625Z","last_seen":"2024-09-28T07:59:48.755625Z","times_seen":1,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-09-24","alert":"Sinkholed","trigger":"smkezc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/clickmi1a.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.808Z","timestamp":1727198859808,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /clickmi1a.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww-7.good-trading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 449838\r\nlast-modified: Thu, 19 Sep 2024 12:30:21 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RrbYn5x1ycTZjzYTo9goAogbx%2Fgtm6W6Doef60FZKWgfNcxZRP5Few8GBHYh3PcMWsA1M2e6pF22E%2B4keYRzNgjzSYJEPpdg80XFleRqc2Qp3aDuRSLbS67dpnqURM2AqTkD\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c85af1a0a50-AMS\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":251,"size_decoded":251,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"0c8c99b18a36884f94a8a17295db18e2","sha1":"6f3f18eb92d3355fadf68c3ba917d89cfa0dae2c","sha256":"5664af156faf57d64628233bea04ea48118d0b674e44fef6390c0de30ac653ac","sha512":"957e69af3f7b96e507832b27e37c90453d57765d1a3003b4c91696d81db82c17e81bb531923bde0e792ad05fa7734407c63a206cffca02c03efc0d49f608f658","ssdeep":"","tlshash":"92d02bbe1f48b0002100649819b0317d265650063dbd6158e1cc4a16d4dcbc4ddb27f0","first_seen":"2024-09-11T12:59:48Z","last_seen":"2024-10-11T09:19:31.013837Z","times_seen":29,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.eximdigital.com/redirect?feed=445013\u0026auth=umnz4X\u0026subid=eximdigital\u0026query=eximdigital\u0026url=eximdigital.com","fqdn":"xml.eximdigital.com","domain":"eximdigital.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:42.012Z","timestamp":1727198862012,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=445013\u0026auth=umnz4X\u0026subid=eximdigital\u0026query=eximdigital\u0026url=eximdigital.com HTTP/1.1\r\nHost: xml.eximdigital.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cfr.news24.media/?d","fqdn":"cfr.news24.media","domain":"news24.media","tld":"media"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://w7.eurosptp.com/page.php?fr\u0026countrycode=coutry","date":"2024-09-24T17:27:36.251Z","timestamp":1727198856251,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"news24.media","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Aug 2024 23:13:48 GMT","end":"Thu, 07 Nov 2024 23:13:47 GMT"},"fingerprint":{"sha1":"C7:D5:FC:A4:F6:85:4C:62:EB:B9:66:9D:B6:09:11:F2:DC:EA:42:F6","sha256":"01:F4:2C:9E:A7:9D:5B:CE:F6:1B:36:4B:26:4F:58:07:3D:A6:AE:36:F5:07:06:1F:C7:E6:6A:03:BB:92:AA:41"}}},"request":{"raw":"GET /?d HTTP/1.1\r\nHost: cfr.news24.media\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:36 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/7.1\r\nreferrer-policy: origin\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LXnIvoew2ffQSItJFMwLaCuSe%2FQ3TGSi7%2Fcf7vF3vfn7LWA00rCqfLSkeux%2FH8nv5HH7v96QGlyKnP5j53ESSk%2FIyeVQjODnZLeLYa%2BY0ZaHgD1jcULEnRnTDZ91y2K4JXkO\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c745e656610-AMS\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4181,"size_decoded":4181,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (4431), with no line terminators","md5":"03c3246abbbf5d016c3b5efe4f5ce889","sha1":"29cb2eac23b2bc57783b114201452a8628c0d111","sha256":"09c26f2aa26cb0d3855c43db5eed544a52ef841fb564c49d1eaedc74fc250afa","sha512":"34dbc9db55742b242c5e186c6547b8e20b75a7552e87087065a851dd51e33338df221d0027425a9fc7a06b16a65b0a49937a13083beb7dc527f232ccbe9ad5a6","ssdeep":"96:TogKtR9K/KWvEjzp5aDobwCfsROVJfX4YsCfsROVJfX4Yd:MgKtR9K/KWvE8U4YZ4Yd","tlshash":"a5914431fe6b333a1e129194678aa54c110bd48fd614946eaba65814cff07edec78873","first_seen":"2024-09-28T07:59:48.756702Z","last_seen":"2024-09-28T07:59:48.756702Z","times_seen":1,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":110,"dns":29,"connect":21,"send":0,"wait":77,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/clickmi1a.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:38.769Z","timestamp":1727198858769,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /clickmi1a.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww1.good-trading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 449827\r\nlast-modified: Thu, 19 Sep 2024 12:30:30 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=NT9zeD%2BayDya1iq5ox7tWCQbBOaXEtQ6ByW0kvTDDa7eZAVMZAfX9zzQ2v9b2V9ZaLwhYiKcQP0iZ8RelPxA6O40%2BhVj2adITbcJSeGFMygMcq5zdBUU1jL6ne7vCGG%2F%2BZbl\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c7c3f2d726c-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":251,"size_decoded":251,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"0c8c99b18a36884f94a8a17295db18e2","sha1":"6f3f18eb92d3355fadf68c3ba917d89cfa0dae2c","sha256":"5664af156faf57d64628233bea04ea48118d0b674e44fef6390c0de30ac653ac","sha512":"957e69af3f7b96e507832b27e37c90453d57765d1a3003b4c91696d81db82c17e81bb531923bde0e792ad05fa7734407c63a206cffca02c03efc0d49f608f658","ssdeep":"","tlshash":"92d02bbe1f48b0002100649819b0317d265650063dbd6158e1cc4a16d4dcbc4ddb27f0","first_seen":"2024-09-11T12:59:48Z","last_seen":"2024-10-11T09:19:31.013837Z","times_seen":29,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/adtub.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.839Z","timestamp":1727198859839,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /adtub.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww-7.good-trading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 449838\r\nlast-modified: Thu, 19 Sep 2024 12:30:21 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=mU%2FMmqhtRh%2BJyYE6qcOOnh0R9WcGEBKfk3GXg9V9kF%2FlPVWFtextuJuI%2BYOALkjfpdQDGthPBua2JR98QUL0CUU2tm31vtmCtJa%2Fmy0TOU%2BuIgJH3TaqK0LVBkL9b8FfLS9b\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c85af200a50-AMS\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":248,"size_decoded":248,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"22a372463f7faf626a65563f672b5935","sha1":"ffc13ecdf2286ce0826d140bd033225784c54f58","sha256":"b29a487b7afdab5ab6bb4d8429ea3e3dd041b15e3c4926044dc4f3c04015912b","sha512":"28f1e5d5427eef1520feb0cd2dffaeecea835916ed4b8b443fb26125982aee24d438b96a93435922c29783bd7a533d4f267240cc96952d5ae2e18f91123c1a33","ssdeep":"","tlshash":"44d02ebe5d09b206191148e9a8b2736e3a22d1082cb52024f588822ac4e0784dc33be0","first_seen":"2023-06-02T23:18:15Z","last_seen":"2024-10-11T09:19:31.006316Z","times_seen":37,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adzgame.com/redirect?feed=647205\u0026auth=WYD00z\u0026subid=adzgame1\u0026query=adzgame1\u0026url=adzgame1.com","fqdn":"xml.adzgame.com","domain":"adzgame.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:42.020Z","timestamp":1727198862020,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=647205\u0026auth=WYD00z\u0026subid=adzgame1\u0026query=adzgame1\u0026url=adzgame1.com HTTP/1.1\r\nHost: xml.adzgame.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":109,"dns":6,"connect":97,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.good-trading.com/?good-e","fqdn":"ww1.good-trading.com","domain":"good-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://w7.eurosptp.com/page.php?fr\u0026countrycode=coutry","date":"2024-09-24T17:27:36.248Z","timestamp":1727198856248,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"good-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Aug 2024 23:14:36 GMT","end":"Thu, 07 Nov 2024 23:14:35 GMT"},"fingerprint":{"sha1":"C7:4B:95:73:72:AB:33:39:3C:05:E9:B3:6F:8B:A2:16:7D:68:15:7F","sha256":"7B:C1:76:37:CA:CA:74:63:50:27:D3:B0:32:AF:B7:04:19:71:6F:2B:AC:00:E9:86:E5:3C:B4:62:85:A2:86:26"}}},"request":{"raw":"GET /?good-e HTTP/1.1\r\nHost: ww1.good-trading.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://w7.eurosptp.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:36 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.2\r\nexpires: Sun, 01 Jan 2014 00:00:00 GMT\r\npragma: no-cache\r\ncache-control: no-cache, must-revalidate\r\nreferrer-policy: origin\r\nset-cookie: goodtrading=1; expires=Wed, 25 Sep 2024 17:27:36 GMT; Max-Age=86400; path=/; domain=good-trading.com\r\nvary: Accept-Encoding\r\nx-iplb-request-id: A29ECB07:DB88_91EF25A2:0050_66F2F688_9CD29:12FB\r\nx-iplb-instance: 52335\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=i3rTnEIY70DaRMN8B8AVp420%2BMZ3bJM6kEjE4y1UdXrbsZb%2Bo%2Fi8IxYnMR4p5gxTuz952nl7d%2FLgwN3puqUIXVNu%2Bt4SBDGw0K21UanfwDhRwoYlHiFu4ORYb5YCMzLyU1DfJ8c1SQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c743f6d7284-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18116,"size_decoded":18116,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":404,"timings":{"blocked":99,"dns":33,"connect":15,"send":0,"wait":202,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adtube.media/redirect?feed=561765\u0026auth=L0SJGK\u0026subid=adtub2\u0026query=adtub2\u0026url=pubi.com","fqdn":"xml.adtube.media","domain":"adtube.media","tld":"media"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.235Z","timestamp":1727198862235,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=561765\u0026auth=L0SJGK\u0026subid=adtub2\u0026query=adtub2\u0026url=pubi.com HTTP/1.1\r\nHost: xml.adtube.media\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":1,"connect":98,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/adf1.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.785Z","timestamp":1727198859785,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /adf1.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww-7.good-trading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 449835\r\nlast-modified: Thu, 19 Sep 2024 12:30:24 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=IgJZ9uts5%2Fi7QQVOIxjJMiPTfY8EQbF0Lm0ilg7w5ry6wcKkR7W37kQlGS1Wi83GV9XT40sjyHCcsrIHHNgms%2FZWFxn1iqD6UssGBeaBU5eZxKdxUqhx%2FqTrjYyVIHtE%2FrVg\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c858eec0a50-AMS\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":248,"size_decoded":248,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"ab658f556be01dcd15dc530c96819083","sha1":"9a3e77b04356ad5ccca63d03a7bbb492c634ab6e","sha256":"6e81875b493a7ca887edb71fae104fe87557678bb940a85be484ba714abe9a3a","sha512":"0a1f63e3776702e9b4bca2869c150574312bab08e53b88d29b1fdd9ec3b8a59e253d79f77c06c3b78b3f31e3e152abf860b9750c9350a3bbbd54b279ca57c9ec","ssdeep":"","tlshash":"4ed02bbf9c48f015055146b0947173fc6613640864f06008f2889217ccc47c1d837be5","first_seen":"2023-04-16T23:55:08Z","last_seen":"2024-10-11T09:19:31.029216Z","times_seen":40,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adtube.media/redirect?feed=557469\u0026auth=uclEev\u0026subid=adtu\u0026query=adtu\u0026url=adtube.media","fqdn":"xml.adtube.media","domain":"adtube.media","tld":"media"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:41.744Z","timestamp":1727198861744,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=557469\u0026auth=uclEev\u0026subid=adtu\u0026query=adtu\u0026url=adtube.media HTTP/1.1\r\nHost: xml.adtube.media\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":29,"connect":99,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.flurryad.com/redirect?feed=486026\u0026auth=kWHJi8\u0026subid=flurry2\u0026query=flurry2\u0026url=flurryad.com","fqdn":"xml.flurryad.com","domain":"flurryad.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:41.243Z","timestamp":1727198861243,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=486026\u0026auth=kWHJi8\u0026subid=flurry2\u0026query=flurry2\u0026url=flurryad.com HTTP/1.1\r\nHost: xml.flurryad.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.rmhfrtnd.com/widgets/wrapper?userId=21bef55dbc8f276fe29aaae6f9e950e3b6129b2c6480c95e51858c64ffbb33e4\u0026bb=8ef83ac6.gif","fqdn":"creative.rmhfrtnd.com","domain":"rmhfrtnd.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://rtbrenab.com/get/?go=1\u0026data=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","date":"2024-09-24T17:27:35.905Z","timestamp":1727198855905,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rmhfrtnd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Sep 2024 16:20:49 GMT","end":"Tue, 17 Dec 2024 16:20:48 GMT"},"fingerprint":{"sha1":"8C:6E:DB:60:9F:B6:67:74:EC:FA:2E:5C:F0:02:88:06:E6:E2:EA:F3","sha256":"CF:31:E3:98:44:35:AD:4D:A5:6D:BD:40:46:5F:6D:FC:34:21:B3:65:63:52:A9:9B:50:94:0F:21:89:87:38:CD"}}},"request":{"raw":"GET /widgets/wrapper?userId=21bef55dbc8f276fe29aaae6f9e950e3b6129b2c6480c95e51858c64ffbb33e4\u0026bb=8ef83ac6.gif HTTP/1.1\r\nHost: creative.rmhfrtnd.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kaminari.systems/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:36 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 23 Sep 2024 10:44:20 GMT\r\nexpires: Tue, 24 Sep 2024 17:27:37 GMT\r\ncache-control: max-age=10\r\nstrict-transport-security: max-age=15768000\r\npragma: public\r\nreport-to: { \"endpoints\":[{ \"url\": \"https://go.stripchat.com/report\" }], \"group\": \"default\", \"max_age\":  1048576 }\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\ncf-cache-status: HIT\r\nage: 4\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8c847c721c74b512-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":558,"size_decoded":558,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (601), with no line terminators","md5":"cd4ebe1fecb69960be6d44c1204bec1c","sha1":"4b856e4be1e33296eeaab012a56faf81c46857e8","sha256":"d4d82cf8a74b19cf71b6cf60444a1e5355d5cdd99dd95bff231c2d1206302043","sha512":"ba5d7ecb0ee45a7426d56ff3e3721f88f7b77c3ce9a6afce4f489c3f5eeb5917f82bb203096d1e387a3eb88a8882b565fcb486778fdf856035959fcb0e735cc7","ssdeep":"","tlshash":"06f0a69b08c0d12c92609ace7ed1b27c4ec7be943f02888834cc849c8bd8fc48ce3640","first_seen":"2024-09-13T09:55:17Z","last_seen":"2024-10-27T20:19:52.213674Z","times_seen":48,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":115,"dns":93,"connect":1,"send":0,"wait":15,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redirect3.online/rtb1.html","fqdn":"redirect3.online","domain":"redirect3.online","tld":"online"},"ip":{"addr":"104.21.55.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.772Z","timestamp":1727198859772,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redirect3.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Sep 2024 16:21:21 GMT","end":"Mon, 02 Dec 2024 16:21:20 GMT"},"fingerprint":{"sha1":"46:1D:B0:17:F7:A5:4C:43:98:0F:A7:F0:E3:13:1A:C5:65:27:15:AD","sha256":"69:65:AB:BA:8F:55:4D:8C:ED:7A:0B:18:55:8C:05:31:E5:C9:2F:37:39:0B:7F:BF:99:F9:58:33:1B:42:6C:CF"}}},"request":{"raw":"GET /rtb1.html HTTP/1.1\r\nHost: redirect3.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 42309\r\nlast-modified: Tue, 24 Sep 2024 05:42:30 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2F%2F8S%2BMtwAIF9MdQGWhMCUncW8N%2BSrzGSAWFu84rLQN9uPQRva2KcEf8gN0OptGWNsUYUe0u55FtZ7%2FKghsHKo4qlSfvwLgv9%2B4vRXJCceyYoy3X7xxaVwPHCw6ItvRmP2gQb\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c85889db7b5-AMS\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":236,"size_decoded":236,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"b8debba54afc99921c1d6b3e259e8741","sha1":"f62d88fa8e9c3af426e45d51401fa282a19ac875","sha256":"dfbe0e77475fc1b732ca38074d42470623bd2c79d8eaba363f4cb00ecea7b59d","sha512":"5208945de96e24cb7396582de01c5a476e1b192e90ba847eb7265e0512b7d97ba71eb947dfbd343c3c603250cf0ee884819d08aad6e1925494b0c9a165471d5c","ssdeep":"","tlshash":"8ad05eae2e4c90051a6018e55b76e2ac782a90484565f06aa9ca823698c46d5dd733e4","first_seen":"2024-04-09T19:05:03Z","last_seen":"2024-10-11T09:19:30.983747Z","times_seen":37,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adflyer.media/redirect?feed=474232\u0026auth=yILiVK\u0026subid=adfa\u0026query=adfa\u0026url=adflyer.media","fqdn":"xml.adflyer.media","domain":"adflyer.media","tld":"media"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.161Z","timestamp":1727198862161,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=474232\u0026auth=yILiVK\u0026subid=adfa\u0026query=adfa\u0026url=adflyer.media HTTP/1.1\r\nHost: xml.adflyer.media\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":933,"timings":{"blocked":922,"dns":11,"connect":96,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gbstlnd.com/adult_video_2/3333/2f1eeeafc1c1aa0ba0685904cfada495/?click_id=a2_7102076563369971295_627551_2_0\u0026sub1=a627551\u0026sub2=%24%7Bsub2%7D\u0026sub3=%24%7Bsub3%7D\u0026tb=\u0026fullscreen=1","fqdn":"gbstlnd.com","domain":"gbstlnd.com","tld":"com"},"ip":{"addr":"173.214.250.52","port":443,"asn":15317,"as":"SERVEREL-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cgb.news24.media/?d","date":"2024-09-24T17:27:44.628Z","timestamp":1727198864628,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"nwslndng.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Sep 2024 13:39:30 GMT","end":"Wed, 11 Dec 2024 13:39:29 GMT"},"fingerprint":{"sha1":"70:F3:B8:1A:DA:BD:D8:A1:23:0F:46:9D:A7:9F:CA:B8:16:5F:60:8A","sha256":"FC:1D:A8:4B:77:83:82:3C:40:76:D1:10:E1:C7:95:42:02:2C:43:94:24:20:EB:EE:DC:2B:14:AE:98:38:00:3D"}}},"request":{"raw":"GET /adult_video_2/3333/2f1eeeafc1c1aa0ba0685904cfada495/?click_id=a2_7102076563369971295_627551_2_0\u0026sub1=a627551\u0026sub2=%24%7Bsub2%7D\u0026sub3=%24%7Bsub3%7D\u0026tb=\u0026fullscreen=1 HTTP/1.1\r\nHost: gbstlnd.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cgb.news24.media/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Sep 2024 17:27:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-WoW64, Sec-CH-UA-Bitness, Sec-CH-UA-Model\r\npermissions-policy: ch-ua=(self \"https://rexpush.club\"), ch-ua-mobile=(self \"https://rexpush.club\"), ch-ua-platform=(self \"https://rexpush.club\"), ch-ua-full-version=(self \"https://rexpush.club\"), ch-ua-full-version-list=(self \"https://rexpush.club\"), ch-ua-platform-version=(self \"https://rexpush.club\"), ch-ua-arch=(self \"https://rexpush.club\"), ch-ua-wow64=(self \"https://rexpush.club\"), ch-ua-bitness=(self \"https://rexpush.club\"), ch-ua-model=(self \"https://rexpush.club\")\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":731859,"size_decoded":731859,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":461,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":461,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-good.com/infinitym1.html","fqdn":"ad-good.com","domain":"ad-good.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:37.797Z","timestamp":1727198857797,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-good.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Aug 2024 12:01:51 GMT","end":"Sun, 10 Nov 2024 12:01:50 GMT"},"fingerprint":{"sha1":"77:4B:2C:D9:8C:89:13:31:AF:23:8C:04:14:AA:A5:93:B9:95:86:50","sha256":"05:8A:8C:C7:83:B7:64:C0:B5:21:77:3B:A5:F6:F1:7E:DE:19:31:34:57:A5:16:CC:06:08:40:4E:39:C0:EC:FD"}}},"request":{"raw":"GET /infinitym1.html HTTP/1.1\r\nHost: ad-good.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 540602\r\nlast-modified: Wed, 18 Sep 2024 11:17:35 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=qmDSPoq76Cnt4OHV68eoY1aIaw2yIiIP0%2B7%2BjnZvbyMEfAvLauC18tx9Pt2lNC5rjVrpOF9BHlMz9AtOW50wbeqtoUJHTAdg7YTf%2Fky8nPEa3NMyif2degwjGVY%2BvQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c794bcf9fae-AMS\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":256,"size_decoded":256,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"b45da26ef76669f4d0eb140a90aa38cf","sha1":"c1f3f26c8d88fa1aeff97c1c169ada81c389c695","sha256":"2b0cde5306e6650fa52b1e314f3678aa0d8549640ff8cfca13fcb42ced6d673e","sha512":"c6358ea03f9b378d72dc09d9738b105c3c770ba4fc6fd17bc8b7e99a7723ee6c2691dc7399a4089734f12af1558b39df5ac8b984e6889e51ed1e78378475d87c","ssdeep":"","tlshash":"d5d02bae1d05b013165104941cf1b1bc351691041576b000e288422ec8e0fc9dc32bf9","first_seen":"2024-05-17T09:36:38Z","last_seen":"2024-10-11T09:19:30.984464Z","times_seen":38,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww-7.good-trading.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"ww-7.good-trading.com","domain":"good-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:40.222Z","timestamp":1727198860222,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"good-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Aug 2024 23:14:36 GMT","end":"Thu, 07 Nov 2024 23:14:35 GMT"},"fingerprint":{"sha1":"C7:4B:95:73:72:AB:33:39:3C:05:E9:B3:6F:8B:A2:16:7D:68:15:7F","sha256":"7B:C1:76:37:CA:CA:74:63:50:27:D3:B0:32:AF:B7:04:19:71:6F:2B:AC:00:E9:86:E5:3C:B4:62:85:A2:86:26"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: ww-7.good-trading.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww-7.good-trading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 16 Sep 2024 09:32:12 GMT\r\netag: W/\"66e7fb1c-4d7\"\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=blQGfhzjFsAZkXTCxmi9hj8ED%2FpC8YKo%2BhL354kBBIGyMI2ln1pUbrmy40HLMg0gIzvLACIpoebtS9qUWC28y3DSskPFsrrojQJYDMK0nkjF2cHPyDNBX8vVLW%2FWU9hRSpcbRlnBDSg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8c847c869f707284-HAM\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nexpires: Thu, 26 Sep 2024 17:27:39 GMT\r\ncache-control: max-age=172800, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1239,"size_decoded":1239,"mime_type":"application/javascript","magic":"HTML document, ASCII text, with very long lines (1271), with no line terminators","md5":"40d981045a7516cdadd00e8dccc9c58d","sha1":"8b8d9a48c6b9d2fba596034ef5db3dd0f2f781c3","sha256":"71c7d5fc630ff38080f71945be1e8b0c43140d8c25338056b752495e18739c0c","sha512":"c4a328efda11026b8efeccbf79d7d87dd5d8988b47ad80ee924da0d9e2d0e6cfc22f0a194470b76eabb1ff83495ff693eee1d16b5c1d1e81bd373dbc31f12a45","ssdeep":"","tlshash":"de2112643e58607e22660133e53f65cee0b12251bd07e150409edc99a5e4fe5063fee9","first_seen":"2023-04-05T04:01:24Z","last_seen":"2025-04-06T22:31:21.493416Z","times_seen":42361,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ctrtraffic.me/follow.html","fqdn":"ctrtraffic.me","domain":"ctrtraffic.me","tld":"me"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.378Z","timestamp":1727198859378,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ctrtraffic.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Sep 2024 18:56:16 GMT","end":"Sun, 15 Dec 2024 18:56:15 GMT"},"fingerprint":{"sha1":"B5:5C:14:47:59:F7:46:21:B1:85:1E:A6:98:2C:65:CD:81:D3:BA:C1","sha256":"E5:25:D1:2F:7F:BC:68:5B:1F:BC:C8:BD:52:2E:65:5D:37:AD:AB:11:36:A4:DF:65:78:23:93:7B:6D:36:12:16"}}},"request":{"raw":"GET /follow.html HTTP/1.1\r\nHost: ctrtraffic.me\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 509488\r\nlast-modified: Wed, 18 Sep 2024 19:56:11 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=yGd8Ds8cu%2FPJyU8NbFP3aMN30R8k%2FpWohp2CNt7a5Jr1psRsTwZ%2BNAQTGa8t1IdGLtVhPvSgPV3g6aXxJKCKtO5KViTm5jkMUuGBAiBpCeS0TCtyHFDDxHUaiSCsQSZz\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c852fd16a62-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":251,"size_decoded":251,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"aed10362eda36bfc52bb2dad06431ee0","sha1":"48ab9706e34a5742d559f53a049301354598ed0d","sha256":"295b1bcd63880315327cc3efeac85888ea230f5f4b4f07a2df2e6019fbf6e49c","sha512":"ae122346f7c162c032a8ff2f96b206faa42c5d006de6f8ea7cddd8adf25dd6af8572e90fa2fef576c0a7802151184168c51038588d32221221456cc5c6cfc13d","ssdeep":"","tlshash":"39d02eef5c08f0218ba14aa828b1a26c2266e0043431a050e38a436ac8c87c5ddb77e8","first_seen":"2023-05-14T10:33:36Z","last_seen":"2024-10-11T09:19:30.991355Z","times_seen":24,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-good.com/clixvistam1.html","fqdn":"ad-good.com","domain":"ad-good.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:38.351Z","timestamp":1727198858351,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-good.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Aug 2024 12:01:51 GMT","end":"Sun, 10 Nov 2024 12:01:50 GMT"},"fingerprint":{"sha1":"77:4B:2C:D9:8C:89:13:31:AF:23:8C:04:14:AA:A5:93:B9:95:86:50","sha256":"05:8A:8C:C7:83:B7:64:C0:B5:21:77:3B:A5:F6:F1:7E:DE:19:31:34:57:A5:16:CC:06:08:40:4E:39:C0:EC:FD"}}},"request":{"raw":"GET /clixvistam1.html HTTP/1.1\r\nHost: ad-good.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 439673\r\nlast-modified: Thu, 19 Sep 2024 15:19:44 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=tmVdvTnSKZ59zBgOAYH97BffwFmC6ZNnW1BLTk4IyCjcQgBvzujfXDkvz%2FnIVnScB%2Bl2J%2FRmB8qaYT5bweA2%2BycMU%2BZnNcAom1qazY6tW7zajlYPOhOZnGO3TTMQAg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c7a2d369fae-AMS\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":264,"size_decoded":264,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"17a6cc2a9b69da6e623bb0fc49e23835","sha1":"dfff386beb8bd8b56cb7d88c7216e5cecf35003f","sha256":"bcddd0cee34ea5598924edf6d2983df8ca84a72668b68e5f4235e1ae8a7a4961","sha512":"6a6c5676097edaf2c545fa87a665817ce3411e43d64552b456b22b492c171eb8967831b6c447ee1ee0f63482b55c7fffbab774507ac679aa04da64812846912f","ssdeep":"","tlshash":"b9e02bbe1c48b00509908a9d18f8715c373764250835e064e1878325c4e868dcc32ff1","first_seen":"2023-11-22T09:58:26Z","last_seen":"2024-10-11T09:19:30.987242Z","times_seen":44,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adxfactory.com/redirect?feed=470039\u0026auth=iR4kYN\u0026subid=adx\u0026query=adx\u0026url=adxfactory.com","fqdn":"xml.adxfactory.com","domain":"adxfactory.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:41.649Z","timestamp":1727198861649,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=470039\u0026auth=iR4kYN\u0026subid=adx\u0026query=adx\u0026url=adxfactory.com HTTP/1.1\r\nHost: xml.adxfactory.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":35,"connect":100,"send":0,"wait":0,"receive":0,"ssl":-1},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adxfactory.com/redirect?feed=472841\u0026auth=wtoFWi\u0026subid=adxgeo\u0026query=adxgeo\u0026url=adxfactory.com","fqdn":"xml.adxfactory.com","domain":"adxfactory.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.158Z","timestamp":1727198862158,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=472841\u0026auth=wtoFWi\u0026subid=adxgeo\u0026query=adxgeo\u0026url=adxfactory.com HTTP/1.1\r\nHost: xml.adxfactory.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":928,"timings":{"blocked":909,"dns":19,"connect":160,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.good-trading.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"ww1.good-trading.com","domain":"good-trading.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:36.792Z","timestamp":1727198856792,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"good-trading.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Aug 2024 23:14:36 GMT","end":"Thu, 07 Nov 2024 23:14:35 GMT"},"fingerprint":{"sha1":"C7:4B:95:73:72:AB:33:39:3C:05:E9:B3:6F:8B:A2:16:7D:68:15:7F","sha256":"7B:C1:76:37:CA:CA:74:63:50:27:D3:B0:32:AF:B7:04:19:71:6F:2B:AC:00:E9:86:E5:3C:B4:62:85:A2:86:26"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: ww1.good-trading.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww1.good-trading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 16 Sep 2024 09:32:12 GMT\r\netag: W/\"66e7fb1c-4d7\"\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2F3AWukDi1ANUa1E%2FbkSIt5mRehtgyjMbTSWh2QSEjDmosIEM5Uz%2BEtagB9osh533QiHqTjw1kDn7SppEIHA2aBheyZmp7YwnwK%2BO1mybwkFPYJoe0lHjVim%2B4msEhGTfNlcwz%2FZZFg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8c847c76de1c7284-HAM\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nexpires: Thu, 26 Sep 2024 17:27:36 GMT\r\ncache-control: max-age=172800, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1239,"size_decoded":1239,"mime_type":"application/javascript","magic":"HTML document, ASCII text, with very long lines (1271), with no line terminators","md5":"40d981045a7516cdadd00e8dccc9c58d","sha1":"8b8d9a48c6b9d2fba596034ef5db3dd0f2f781c3","sha256":"71c7d5fc630ff38080f71945be1e8b0c43140d8c25338056b752495e18739c0c","sha512":"c4a328efda11026b8efeccbf79d7d87dd5d8988b47ad80ee924da0d9e2d0e6cfc22f0a194470b76eabb1ff83495ff693eee1d16b5c1d1e81bd373dbc31f12a45","ssdeep":"","tlshash":"de2112643e58607e22660133e53f65cee0b12251bd07e150409edc99a5e4fe5063fee9","first_seen":"2023-04-05T04:01:24Z","last_seen":"2025-04-06T22:31:21.493416Z","times_seen":42361,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/direct2.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.315Z","timestamp":1727198859315,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /direct2.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:38 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 449836\r\nlast-modified: Thu, 19 Sep 2024 12:30:22 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=SJe%2B9Q5pizxAnKMbJXuuF0xxGpEVZEO5Fu%2FkU1SGn5uwaGujsJYFBz24AJIfwM5ygJ1Ab26KCopWzFfU2%2BuhCHTrrKjSn9H8GLQOA0BM3vTLF7rF6UeWsypFUJynWI4VmHR1\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c848d280a50-AMS\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":465,"size_decoded":465,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (495), with no line terminators","md5":"11447d5083e75c53718787ab7106e46e","sha1":"f1811064f779324e127fe55ea0b26eea33ad6b33","sha256":"ebe76503970fa4f1e9a31d974649dc7d354b6ff49d81e4fb8a5add532c26fc5d","sha512":"d2d523faacbaf276dd2c49836eca84d21077aab6c63f8e9a2f743963faec37a3ac3ad756d17a7c14bc2276e26f0eed9fe562724c52297bc7f8fd8ab45d313be0","ssdeep":"","tlshash":"cdf09e6b6e58b0032e6405950db072546175b007147ae4fce0c8c761c4d4948d826ab5","first_seen":"2024-05-17T09:36:38Z","last_seen":"2024-10-11T09:19:30.987945Z","times_seen":42,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adflyer.media/redirect?feed=542697\u0026auth=HDsoD3\u0026subid=adf1\u0026query=adf1\u0026url=adflyer.media","fqdn":"xml.adflyer.media","domain":"adflyer.media","tld":"media"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:41.732Z","timestamp":1727198861732,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=542697\u0026auth=HDsoD3\u0026subid=adf1\u0026query=adf1\u0026url=adflyer.media HTTP/1.1\r\nHost: xml.adflyer.media\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":30,"connect":104,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.flurryad.com/redirect?feed=480555\u0026auth=NJW4rQ\u0026subid=flurry1\u0026query=flurry1\u0026url=flurryad.com","fqdn":"xml.flurryad.com","domain":"flurryad.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.036Z","timestamp":1727198862036,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=480555\u0026auth=NJW4rQ\u0026subid=flurry1\u0026query=flurry1\u0026url=flurryad.com HTTP/1.1\r\nHost: xml.flurryad.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":959,"timings":{"blocked":948,"dns":11,"connect":97,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-good.com/clixvistaa1.html","fqdn":"ad-good.com","domain":"ad-good.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.637Z","timestamp":1727198859637,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-good.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Aug 2024 12:01:51 GMT","end":"Sun, 10 Nov 2024 12:01:50 GMT"},"fingerprint":{"sha1":"77:4B:2C:D9:8C:89:13:31:AF:23:8C:04:14:AA:A5:93:B9:95:86:50","sha256":"05:8A:8C:C7:83:B7:64:C0:B5:21:77:3B:A5:F6:F1:7E:DE:19:31:34:57:A5:16:CC:06:08:40:4E:39:C0:EC:FD"}}},"request":{"raw":"GET /clixvistaa1.html HTTP/1.1\r\nHost: ad-good.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 524361\r\nlast-modified: Wed, 18 Sep 2024 15:48:18 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2fO9tJ4NpwZVGYXVXUgesZXH8sfET8JPefdQ%2B1CA6aSKvk4Czgu6eOs96Zc%2BZlXV8bK6yHIzzXYvEW%2Bq%2FnIHq1BBbttFxUaK9CWAg%2BOnoXAtzE%2FANR%2Bd0TtK42OwSw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c856a8eca81-HAM\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":266,"size_decoded":266,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"8b4184a2b89fd55be76b6f48fba2bb3f","sha1":"f68366fe6932f4c23576b6c7697967b4710828fe","sha256":"b3ded46ea4f5786b3e62871ad528e1178891547f518823505084d87492427e4a","sha512":"1ba0e25f6a56fb0043c5ad2995145fe4f797888118d22a9a2e4c2e3ddf782834ce63a0d393947f93772c353a34cf1449686d4be30cc1c57db36438a807c389d7","ssdeep":"","tlshash":"6de0c2aa1d09b0040594869c18f5b15d373764241835a154e1c78625c4cc699cc22be5","first_seen":"2023-11-22T09:58:26Z","last_seen":"2024-10-11T09:19:31.00798Z","times_seen":43,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.thenetwork18.com/redirect?feed=417207\u0026auth=WBnpsR\u0026subid=main\u0026query=main\u0026url=main.com","fqdn":"xml.thenetwork18.com","domain":"thenetwork18.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.004Z","timestamp":1727198862004,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=417207\u0026auth=WBnpsR\u0026subid=main\u0026query=main\u0026url=main.com HTTP/1.1\r\nHost: xml.thenetwork18.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":1,"connect":94,"send":0,"wait":0,"receive":0,"ssl":-1},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ykrvt.bestssp.top/?pl=YC0GOkWFo0Wz8n7UhRmi1w\u0026sub_id=3333","fqdn":"ykrvt.bestssp.top","domain":"bestssp.top","tld":"top"},"ip":{"addr":"172.67.196.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cfr.news24.media/?d","date":"2024-09-24T17:27:46.902Z","timestamp":1727198866902,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bestssp.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Sep 2024 02:51:42 GMT","end":"Thu, 05 Dec 2024 02:51:41 GMT"},"fingerprint":{"sha1":"6E:85:CD:2C:6D:1C:BB:D2:D8:8E:D6:89:B7:9F:AB:91:DD:59:8E:6B","sha256":"B2:A2:9F:90:C5:F0:0D:1E:E3:6C:09:B7:C6:4F:37:08:9F:67:8E:5B:E5:E8:8C:8E:74:87:D3:A5:40:97:10:02"}}},"request":{"raw":"GET /?pl=YC0GOkWFo0Wz8n7UhRmi1w\u0026sub_id=3333 HTTP/1.1\r\nHost: ykrvt.bestssp.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Tue, 24 Sep 2024 17:27:47 GMT\r\ncontent-type: text/html\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7d05ENoBs8RA3jv5t00tX9iQKa7Ylt0YJgBocrPn%2FEBrEdAfyn8QcXtI0gqE4demXREiSU7Bx%2BAgrmYU%2FK2A%2Bs%2Be83TiyKD637eObL%2FaUW4mjJIQHzFTr2G0yLN6ni5QW9f54A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847cb6aaf90e30-AMS\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":146,"size_decoded":146,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"bcfacc6f2d2ee7cd5e014be08612f93e","sha1":"7bb6f49a83b5186d5f8598e852bfbeee102d8a4d","sha256":"ef1a3d1af87d9d441ef37f001f2ffb6900ef0a7a4884a5ef165bc2b09e224b38","sha512":"ae07b7a56215c748fb459fc4f5f4099b7bef4b6a98c3153d7927131d7749cdb123cda9fc60ff28eb08d11b0e69e85d5e4321f40d7d6a18e5a37476e72cddfb90","ssdeep":"","tlshash":"eec04c5db95e340896535bd10bc73a41d296e2758cba481087890753f0c6177c8eb794","first_seen":"2023-04-07T15:42:29Z","last_seen":"2025-04-06T20:35:25.209905Z","times_seen":4816,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":69,"dns":6,"connect":20,"send":0,"wait":62,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imdn.pics/m/p/0/770/770823/embed/test_1_simple_html5_valid/simple/HTML5_InPage_Clicktags_300x250.html?click_event_url=https%3A%2F%2Fbts.a11k.com%2Fin%2Ftclick%2F%3Fkatds_ep%3DGdxUfEKfQdIbyN4pPn33PRoSsf_ui7NMJJha3h2v7XoD0wwHf-NY39Vno8vJrRWiDDyKWFBw63rsjOC_L7b3WTNnCkdRvMyRmoFBGYmpllnlxe9SIK6ikFtBFz0TLaYdp_sfUOsDQ_edMPCX2XO8dQaPME0wBiIIGy6HqHF197ib73l7TSmoZ_6F7uqmhHO6BaNvLdxefOvJalx1iglO2WeFXfs_80XtW6ju5Hw92gMutzChMCo4FLnQLza8oFas2RRrDSJNG0jnNt5LmJoaJPA3xra5msxHWUNBId2p-iA56D73PLRJq-MElsZz7X6te_Na3aGAD8mpWz70fh8UdV6klm3tWu-5z73U3g-EFQRMvWWwO0WFtyc5dT5_pYhXcQaPbZyiw9vhmKG8nvJDjKzk3wxpTFHPoGfRs-Y3E-d3NtGFN3Dxj8Dt5-xnUxRw6X1ab1R-n_Mk02dSNN6L1iSyu1RHdIFhU0hu936-O7QE9uxtPTj9JQ-3Rzk1KdW3ZVodbGfPqxWSIkBEvZp_sfdci96gIvrHGKXch98CKFQZMC7mQqPZds5FUXMXhHYQsbO_GhwuJzXn8b54kROnKxhumftUVpq5YluHF3TLcLt37sg7WRmgJfqj3F1C39jUuzQirKvuRZCf6nyIpXlZ7KM_YQFvf3xrTqC1zPJW-_KMNpYQlBzEWUfkSny_U5chT47Fz_m_bcNnpyFwHTKSIVesHYhYab0-46F1xayPWLJFQ7MENRh0wqvM1QToE5xaTaHBU9R65lbfSai5A20mWXqx1ET4h8SMMP57joW9IqB9hB_HNTa4NjDi5MQIwYYjpf-V631pKVK_XM0QZlKV4arCCKw5KlONTdC42wa984FeAGXlNyJnWttPq_CEeSfSvUMbU5FrV1dFGjDQgPr_703ylpPuj7Y7-Rr4XMpxG-HBGgmYiU_E4YBHsA%26bid%3D%24%7BAUCTION_PRICE%7D","fqdn":"imdn.pics","domain":"imdn.pics","tld":"pics"},"ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://imdn.pics/m/p/0/770/770824/P1r9hLS2.html?\u0026campaign_id=236776\u0026utm1=tcb\u0026__GEOIP_COUNTRY_SHORT__=%7B%7B+__GEOIP_COUNTRY_SHORT__+%7D%7D\u0026DOMAIN=3txxx.com\u0026__IP2L_MOBILE__=%7B%7B+__IP2L_MOBILE__+%7D%7D\u0026BROWSER_FAMILY=%5BBROWSER_FAMILY%5D\u0026ad_sub=71860570\u0026__BROWSER_FAMILY__=%7B%7B+__BROWSER_FAMILY__+%7D%7D\u0026CAMPAIGN_ID=236776\u0026PRICING_MODEL=cpm\u0026PRICE=0.0020\u0026OS_TYPE=%5BOS_TYPE%5D\u0026priority=%5BPRIORITY%5D\u0026pricing_model=cpm\u0026utm4=0-10346131-0\u0026click_event_url=https%3A%2F%2Fbts.a11k.com%2Fin%2Ftclick%2F%3Fkatds_ep%3DGdxUfEKfQdIbyN4pPn33PRoSsf_ui7NMJJha3h2v7XoD0wwHf-NY39Vno8vJrRWiDDyKWFBw63rsjOC_L7b3WTNnCkdRvMyRmoFBGYmpllnlxe9SIK6ikFtBFz0TLaYdp_sfUOsDQ_edMPCX2XO8dQaPME0wBiIIGy6HqHF197ib73l7TSmoZ_6F7uqmhHO6BaNvLdxefOvJalx1iglO2WeFXfs_80XtW6ju5Hw92gMutzChMCo4FLnQLza8oFas2RRrDSJNG0jnNt5LmJoaJPA3xra5msxHWUNBId2p-iA56D73PLRJq-MElsZz7X6te_Na3aGAD8mpWz70fh8UdV6klm3tWu-5z73U3g-EFQRMvWWwO0WFtyc5dT5_pYhXcQaPbZyiw9vhmKG8nvJDjKzk3wxpTFHPoGfRs-Y3E-d3NtGFN3Dxj8Dt5-xnUxRw6X1ab1R-n_Mk02dSNN6L1iSyu1RHdIFhU0hu936-O7QE9uxtPTj9JQ-3Rzk1KdW3ZVodbGfPqxWSIkBEvZp_sfdci96gIvrHGKXch98CKFQZMC7mQqPZds5FUXMXhHYQsbO_GhwuJzXn8b54kROnKxhumftUVpq5YluHF3TLcLt37sg7WRmgJfqj3F1C39jUuzQirKvuRZCf6nyIpXlZ7KM_YQFvf3xrTqC1zPJW-_KMNpYQlBzEWUfkSny_U5chT47Fz_m_bcNnpyFwHTKSIVesHYhYab0-46F1xayPWLJFQ7MENRh0wqvM1QToE5xaTaHBU9R65lbfSai5A20mWXqx1ET4h8SMMP57joW9IqB9hB_HNTa4NjDi5MQIwYYjpf-V631pKVK_XM0QZlKV4arCCKw5KlONTdC42wa984FeAGXlNyJnWttPq_CEeSfSvUMbU5FrV1dFGjDQgPr_703ylpPuj7Y7-Rr4XMpxG-HBGgmYiU_E4YBHsA%26bid%3D%24%7BAUCTION_PRICE%7D\u0026MOBILE_BRAND=%5BMOBILE_BRAND%5D\u0026out_name=236776%7C83954%7Ccpm%7C0.0020%7C%24+0.0020\u0026__OS_TYPE__=%7B%7B+__OS_TYPE__+%7D%7D\u0026pricebox_price=0.0010\u0026__OS_FAMILY__=%7B%7B+__OS_FAMILY__+%7D%7D\u0026utm3=249-1353416-46616\u0026id_zone=%5Bidzone%5D\u0026COUNTRY_ISO_CODE=%5BCOUNTRY_ISO_CODE%5D\u0026price=0.0020\u0026click_id=30a4de03-108d-45ef-8397-bdcff162a5e3\u0026OS_FAMILY=%5BOS_FAMILY%5D\u0026utm2=878669509-100\u0026bidding_price=0.0020\u0026site=%7B%7B+site+%7D%7D","date":"2024-09-24T17:27:35.584Z","timestamp":1727198855584,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imdn.pics","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Sep 2024 03:02:53 GMT","end":"Sat, 07 Dec 2024 03:02:52 GMT"},"fingerprint":{"sha1":"2C:74:6D:B1:42:DE:4E:9B:FD:75:DC:69:84:15:B7:21:D9:13:A7:0D","sha256":"B1:3D:47:0F:4C:5D:8D:A2:53:37:C2:0C:BC:78:78:E5:EC:F4:06:CB:FB:A3:78:B5:BF:41:78:2A:2B:AC:C2:68"}}},"request":{"raw":"GET /m/p/0/770/770823/embed/test_1_simple_html5_valid/simple/HTML5_InPage_Clicktags_300x250.html?click_event_url=https%3A%2F%2Fbts.a11k.com%2Fin%2Ftclick%2F%3Fkatds_ep%3DGdxUfEKfQdIbyN4pPn33PRoSsf_ui7NMJJha3h2v7XoD0wwHf-NY39Vno8vJrRWiDDyKWFBw63rsjOC_L7b3WTNnCkdRvMyRmoFBGYmpllnlxe9SIK6ikFtBFz0TLaYdp_sfUOsDQ_edMPCX2XO8dQaPME0wBiIIGy6HqHF197ib73l7TSmoZ_6F7uqmhHO6BaNvLdxefOvJalx1iglO2WeFXfs_80XtW6ju5Hw92gMutzChMCo4FLnQLza8oFas2RRrDSJNG0jnNt5LmJoaJPA3xra5msxHWUNBId2p-iA56D73PLRJq-MElsZz7X6te_Na3aGAD8mpWz70fh8UdV6klm3tWu-5z73U3g-EFQRMvWWwO0WFtyc5dT5_pYhXcQaPbZyiw9vhmKG8nvJDjKzk3wxpTFHPoGfRs-Y3E-d3NtGFN3Dxj8Dt5-xnUxRw6X1ab1R-n_Mk02dSNN6L1iSyu1RHdIFhU0hu936-O7QE9uxtPTj9JQ-3Rzk1KdW3ZVodbGfPqxWSIkBEvZp_sfdci96gIvrHGKXch98CKFQZMC7mQqPZds5FUXMXhHYQsbO_GhwuJzXn8b54kROnKxhumftUVpq5YluHF3TLcLt37sg7WRmgJfqj3F1C39jUuzQirKvuRZCf6nyIpXlZ7KM_YQFvf3xrTqC1zPJW-_KMNpYQlBzEWUfkSny_U5chT47Fz_m_bcNnpyFwHTKSIVesHYhYab0-46F1xayPWLJFQ7MENRh0wqvM1QToE5xaTaHBU9R65lbfSai5A20mWXqx1ET4h8SMMP57joW9IqB9hB_HNTa4NjDi5MQIwYYjpf-V631pKVK_XM0QZlKV4arCCKw5KlONTdC42wa984FeAGXlNyJnWttPq_CEeSfSvUMbU5FrV1dFGjDQgPr_703ylpPuj7Y7-Rr4XMpxG-HBGgmYiU_E4YBHsA%26bid%3D%24%7BAUCTION_PRICE%7D HTTP/1.1\r\nHost: imdn.pics\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://imdn.pics/m/p/0/770/770824/P1r9hLS2.html?\u0026campaign_id=236776\u0026utm1=tcb\u0026__GEOIP_COUNTRY_SHORT__=%7B%7B+__GEOIP_COUNTRY_SHORT__+%7D%7D\u0026DOMAIN=3txxx.com\u0026__IP2L_MOBILE__=%7B%7B+__IP2L_MOBILE__+%7D%7D\u0026BROWSER_FAMILY=%5BBROWSER_FAMILY%5D\u0026ad_sub=71860570\u0026__BROWSER_FAMILY__=%7B%7B+__BROWSER_FAMILY__+%7D%7D\u0026CAMPAIGN_ID=236776\u0026PRICING_MODEL=cpm\u0026PRICE=0.0020\u0026OS_TYPE=%5BOS_TYPE%5D\u0026priority=%5BPRIORITY%5D\u0026pricing_model=cpm\u0026utm4=0-10346131-0\u0026click_event_url=https%3A%2F%2Fbts.a11k.com%2Fin%2Ftclick%2F%3Fkatds_ep%3DGdxUfEKfQdIbyN4pPn33PRoSsf_ui7NMJJha3h2v7XoD0wwHf-NY39Vno8vJrRWiDDyKWFBw63rsjOC_L7b3WTNnCkdRvMyRmoFBGYmpllnlxe9SIK6ikFtBFz0TLaYdp_sfUOsDQ_edMPCX2XO8dQaPME0wBiIIGy6HqHF197ib73l7TSmoZ_6F7uqmhHO6BaNvLdxefOvJalx1iglO2WeFXfs_80XtW6ju5Hw92gMutzChMCo4FLnQLza8oFas2RRrDSJNG0jnNt5LmJoaJPA3xra5msxHWUNBId2p-iA56D73PLRJq-MElsZz7X6te_Na3aGAD8mpWz70fh8UdV6klm3tWu-5z73U3g-EFQRMvWWwO0WFtyc5dT5_pYhXcQaPbZyiw9vhmKG8nvJDjKzk3wxpTFHPoGfRs-Y3E-d3NtGFN3Dxj8Dt5-xnUxRw6X1ab1R-n_Mk02dSNN6L1iSyu1RHdIFhU0hu936-O7QE9uxtPTj9JQ-3Rzk1KdW3ZVodbGfPqxWSIkBEvZp_sfdci96gIvrHGKXch98CKFQZMC7mQqPZds5FUXMXhHYQsbO_GhwuJzXn8b54kROnKxhumftUVpq5YluHF3TLcLt37sg7WRmgJfqj3F1C39jUuzQirKvuRZCf6nyIpXlZ7KM_YQFvf3xrTqC1zPJW-_KMNpYQlBzEWUfkSny_U5chT47Fz_m_bcNnpyFwHTKSIVesHYhYab0-46F1xayPWLJFQ7MENRh0wqvM1QToE5xaTaHBU9R65lbfSai5A20mWXqx1ET4h8SMMP57joW9IqB9hB_HNTa4NjDi5MQIwYYjpf-V631pKVK_XM0QZlKV4arCCKw5KlONTdC42wa984FeAGXlNyJnWttPq_CEeSfSvUMbU5FrV1dFGjDQgPr_703ylpPuj7Y7-Rr4XMpxG-HBGgmYiU_E4YBHsA%26bid%3D%24%7BAUCTION_PRICE%7D\u0026MOBILE_BRAND=%5BMOBILE_BRAND%5D\u0026out_name=236776%7C83954%7Ccpm%7C0.0020%7C%24+0.0020\u0026__OS_TYPE__=%7B%7B+__OS_TYPE__+%7D%7D\u0026pricebox_price=0.0010\u0026__OS_FAMILY__=%7B%7B+__OS_FAMILY__+%7D%7D\u0026utm3=249-1353416-46616\u0026id_zone=%5Bidzone%5D\u0026COUNTRY_ISO_CODE=%5BCOUNTRY_ISO_CODE%5D\u0026price=0.0020\u0026click_id=30a4de03-108d-45ef-8397-bdcff162a5e3\u0026OS_FAMILY=%5BOS_FAMILY%5D\u0026utm2=878669509-100\u0026bidding_price=0.0020\u0026site=%7B%7B+site+%7D%7D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:35 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: nginx\r\nlast-modified: Mon, 01 Apr 2024 14:09:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"660ac010-1ba\"\r\ncontent-security-policy: default-src 'self' https://bts.a11k.com; script-src 'self' https://code.jquery.com https://code.createjs.com; style-src 'self' https://fonts.googleapis.com;\r\ncontent-encoding: gzip\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache, no-cache\r\nexpires: 0\r\nx-proxy-cache: MISS, MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":442,"size_decoded":442,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (466), with no line terminators","md5":"f6034460ba5dd5d76b6e96988697a061","sha1":"d573e8cb1357e7e91a8a3b98aaf67a81da2af8c5","sha256":"455a46ff100305cbdbcebd5da7a2121500269405c50c5c90d33b05bcc55ce03e","sha512":"d9fb6d825453b08a7ee8f7583b3deb324cc2935977fc18dbb80dca91a4f197d78eba0bdb064eda0a0e3974044d1ba0403cbe2d8c6f871f7979aebc96a9fa7a54","ssdeep":"","tlshash":"c2f05caf1c18e01db2005e9478b3b06c4999b866bd51cc04b0c5a3fdd89cbed8c43748","first_seen":"2024-09-14T06:59:37Z","last_seen":"2024-10-11T09:19:31.017494Z","times_seen":27,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sub.votreimc.com/eximdigitala1.html","fqdn":"sub.votreimc.com","domain":"votreimc.com","tld":"com"},"ip":{"addr":"172.67.222.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:37.726Z","timestamp":1727198857726,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votreimc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Sep 2024 02:12:01 GMT","end":"Sat, 14 Dec 2024 02:12:00 GMT"},"fingerprint":{"sha1":"AF:56:A8:13:7B:6E:27:2B:03:40:18:37:A2:8B:CA:0F:2F:6D:E0:FA","sha256":"44:AD:5E:CF:7E:DE:B0:30:21:4D:10:85:AA:65:B9:AC:F4:EA:F9:DA:BC:84:CE:A6:39:8C:B9:24:E9:77:43:4A"}}},"request":{"raw":"GET /eximdigitala1.html HTTP/1.1\r\nHost: sub.votreimc.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nx-iplb-request-id: A29ECB9C:B7BC_91EF25A2:0050_66EB0C95_569D3:7D2A\r\nx-iplb-instance: 52360\r\ncf-cache-status: HIT\r\nage: 518644\r\nlast-modified: Wed, 18 Sep 2024 17:23:33 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7EYge5QcOgB6zLXWGG4o%2Brmr9wS%2F%2F%2FbrYH64HkhxuTFrv1uuYSMZT%2BBut70bGX4Uz32%2Fl2NJ41tmgkSv5L%2FfxjKMimb%2F9OdS6N%2BMBZ%2BzXGdd%2FbaWkWj9YpkihLE8gEOWVqew\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c79086b62b8-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":271,"size_decoded":271,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"943e2b948a61b3801f8ef4aeaa6049a0","sha1":"8e2c9b6e80940992cb677415634ddf3371335fb2","sha256":"7f7fa179590faac6d965012b8f65e51c55c47d34e33df738f0e39309df18c475","sha512":"09c212ec43fc2f01049b2df55e2f4e3c408bf9fe300adf2713723e2d063030cb7bad593553d403b371013572471b7515bcd8a48504edf52fc2e1c48c2e5b1782","ssdeep":"","tlshash":"dcd02baf1d1590000f5108d09bb77b6c7832d47004243cf4e6c54326c6c4a9dccb37e8","first_seen":"2024-04-09T19:05:02Z","last_seen":"2024-10-11T09:19:30.988928Z","times_seen":41,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.rtbfactory.com/redirect?feed=538479\u0026auth=yKffhA\u0026subid=rtb\u0026query=rtb\u0026url=rtbfactory.com","fqdn":"xml.rtbfactory.com","domain":"rtbfactory.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:41.722Z","timestamp":1727198861722,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=538479\u0026auth=yKffhA\u0026subid=rtb\u0026query=rtb\u0026url=rtbfactory.com HTTP/1.1\r\nHost: xml.rtbfactory.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":51,"connect":108,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rexpush.club/js/s_930720bc3a03c2ff60f06b32d5ec4b5f.min.js?tag=3333\u0026attempt=0\u0026rnd=646027372\u0026lnd=adult_video_3\u0026v=2\u0026token=2f1eeeafc1c1aa0ba0685904cfada495\u0026click_id=a2_3736566435692234949_627551_2_0\u0026sub1=a627551\u0026sub2=%24%7Bsub2%7D\u0026sub3=%24%7Bsub3%7D\u0026tb=\u0026t_rdr=","fqdn":"rexpush.club","domain":"rexpush.club","tld":"club"},"ip":{"addr":"199.182.164.165","port":443,"asn":15317,"as":"SERVEREL-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"moz-nullprincipal:{c48eded4-9521-435e-b481-192c28168c22}?https://gbstlnd.com","date":"2024-09-24T17:27:45.686Z","timestamp":1727198865686,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.druzya-push.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 17 Aug 2024 06:56:42 GMT","end":"Fri, 15 Nov 2024 06:56:41 GMT"},"fingerprint":{"sha1":"73:43:E7:23:A9:45:7F:F0:25:DA:DA:EA:5C:AA:B9:AC:A6:5B:DF:2D","sha256":"62:58:40:79:CE:FA:4A:AD:D6:FD:8F:98:19:F9:A9:0C:EF:31:9B:71:19:C8:44:01:C9:99:C4:1E:56:44:B3:7A"}}},"request":{"raw":"GET /js/s_930720bc3a03c2ff60f06b32d5ec4b5f.min.js?tag=3333\u0026attempt=0\u0026rnd=646027372\u0026lnd=adult_video_3\u0026v=2\u0026token=2f1eeeafc1c1aa0ba0685904cfada495\u0026click_id=a2_3736566435692234949_627551_2_0\u0026sub1=a627551\u0026sub2=%24%7Bsub2%7D\u0026sub3=%24%7Bsub3%7D\u0026tb=\u0026t_rdr= HTTP/1.1\r\nHost: rexpush.club\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gbstlnd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Sep 2024 17:27:45 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nset-cookie: _f_30d9ff6117c6de28d448dd5186c64932=3; expires=Fri, 22-Sep-2034 17:27:45 GMT; Max-Age=315360000; path=/; domain=.rexpush.club; secure; SameSite=None\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":85569,"size_decoded":85569,"mime_type":"text/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":120,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpshsdk.com/npc/sdk/push.m.js?v=1","fqdn":"js.wpshsdk.com","domain":"wpshsdk.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:34.141Z","timestamp":1727198854141,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.wpshsdk.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Sep 2024 08:03:04 GMT","end":"Sun, 15 Dec 2024 08:03:03 GMT"},"fingerprint":{"sha1":"50:B9:2C:1B:17:92:95:AC:8A:0C:A4:18:F1:99:DF:B3:A7:91:D8:67","sha256":"00:9E:2F:3C:0D:23:C4:09:1D:E5:92:DF:31:CE:88:60:67:CC:AF:C0:BA:54:0A:A3:6F:8D:A0:1D:43:FB:B7:34"}}},"request":{"raw":"GET /npc/sdk/push.m.js?v=1 HTTP/1.1\r\nHost: js.wpshsdk.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:34 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Tue, 27 Aug 2024 13:05:30 GMT\r\netag: W/\"66cdcf1a-85f3\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 24 Sep 2024 17:32:34 GMT\r\ncache-control: max-age=300\r\nx-proxy-cache: HIT\r\nx-cdn-host-id: ds9225\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34291,"size_decoded":34291,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":88,"dns":22,"connect":19,"send":0,"wait":21,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/adtub2.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:38.841Z","timestamp":1727198858841,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /adtub2.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww1.good-trading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 449827\r\nlast-modified: Thu, 19 Sep 2024 12:30:30 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=PlVWFSCvT%2BvcL9yLxD65PZTblYD2qn7rz6ipe%2Fz6TIFAyU9iiPuEA4rqXepUz7WP4tnpnho%2FRx1PNJLUUqPUccA1PvJ8W0Z3swxCI48OxO6nuqdlnA0e8EiHBigbf7RASeJI\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c7c5f70726c-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":246,"size_decoded":246,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"a1facf031a5a63332cecc6dd21c24af2","sha1":"e7046cb2e87aa10a8a6f5d0e3d8189c16044d7f1","sha256":"e41730d1f83151f2257c584c2af837c0d9d3d0dee430a8322cc7fdaf60a36b63","sha512":"38a4ac2a66b9cbb76feede206965391799ce4bc7f67118f1d8588d9abf9f1aa5eda5db6c06f576429673d1321aa7a0cd9389a05c637ea20e985b65f8c32b12b7","ssdeep":"","tlshash":"bad05bbe6d08f1165a9145f85471636d2626910858b96414f589451ec4d47c4dc337e0","first_seen":"2023-08-04T07:26:10Z","last_seen":"2024-10-11T09:19:31.002745Z","times_seen":45,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.clixvista.com/redirect?feed=604308\u0026auth=TKnqy8\u0026subid=clixvista1\u0026query=clixvista1\u0026url=clixvista1.com","fqdn":"xml.clixvista.com","domain":"clixvista.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:42.166Z","timestamp":1727198862166,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=604308\u0026auth=TKnqy8\u0026subid=clixvista1\u0026query=clixvista1\u0026url=clixvista1.com HTTP/1.1\r\nHost: xml.clixvista.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-good.com/clixvistaa.html","fqdn":"ad-good.com","domain":"ad-good.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:38.343Z","timestamp":1727198858343,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-good.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Aug 2024 12:01:51 GMT","end":"Sun, 10 Nov 2024 12:01:50 GMT"},"fingerprint":{"sha1":"77:4B:2C:D9:8C:89:13:31:AF:23:8C:04:14:AA:A5:93:B9:95:86:50","sha256":"05:8A:8C:C7:83:B7:64:C0:B5:21:77:3B:A5:F6:F1:7E:DE:19:31:34:57:A5:16:CC:06:08:40:4E:39:C0:EC:FD"}}},"request":{"raw":"GET /clixvistaa.html HTTP/1.1\r\nHost: ad-good.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 540602\r\nlast-modified: Wed, 18 Sep 2024 11:17:35 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2BrLx%2FpohwiYlMBvFxQ5nEe05dahDw9O0atTVtuDaZgvZaqNOgaAH1R4X%2FXSVEoUGixnmeknZ2S9zuULZGCUzkGumhVtb2oTRkWoy5vHYh%2Bw9JRiQrqvKW%2FAvrBqYBQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c7a1d159fae-AMS\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":263,"size_decoded":263,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"8a4caacf5ba17d8b8696c9bbcde6f18a","sha1":"a183dc1a002ce3db04a078fd3e1f5882a86a5486","sha256":"d98b58b3eccfa298ebb7f530ce81994647422545da2b5cd21352e09562348674","sha512":"decaafe5ed014a3cc70cb22b7b3b74109f16a143a5e3a27375c8e8cbba1c3889330031cb42a4bf428f106a443ba6c9a7e3c3a18dd99d0288e1a23a7f4a8ee5d4","ssdeep":"","tlshash":"50d05bee5d58b005099187dc18f9b25d3b3764351c756064e68a4729c8d8acddc33ff5","first_seen":"2023-08-10T19:24:14Z","last_seen":"2024-10-11T09:19:31.022942Z","times_seen":43,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redirect3.online/adxgeo.html","fqdn":"redirect3.online","domain":"redirect3.online","tld":"online"},"ip":{"addr":"104.21.55.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:38.499Z","timestamp":1727198858499,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redirect3.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Sep 2024 16:21:21 GMT","end":"Mon, 02 Dec 2024 16:21:20 GMT"},"fingerprint":{"sha1":"46:1D:B0:17:F7:A5:4C:43:98:0F:A7:F0:E3:13:1A:C5:65:27:15:AD","sha256":"69:65:AB:BA:8F:55:4D:8C:ED:7A:0B:18:55:8C:05:31:E5:C9:2F:37:39:0B:7F:BF:99:F9:58:33:1B:42:6C:CF"}}},"request":{"raw":"GET /adxgeo.html HTTP/1.1\r\nHost: redirect3.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 40306\r\nlast-modified: Tue, 24 Sep 2024 06:15:51 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=86F71bZUVgwpeRd7Ub4oG3dxix4dTsag%2BXoyzQGiImupzxzOu8CsPOC%2FZabyXZxSIMNwjluAeVbsSRy4EvBzT7FESKV9SeSJKvHcAL2RdXbFfgoB3aCBnB164vVwJukiFzAQ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c7a89d962ba-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":247,"size_decoded":247,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"9434b2f587fb0c4ebb221f5175d36d5a","sha1":"31872f475a74fa94d5f32892eddc8ece4be23cc0","sha256":"66422dbddc75144fba156cf3b4225d6f14cb4abf5ecc091285ce334e788077bb","sha512":"8905c141a072e4424d357a3bc38a3cc9419cb822c880bfad42c58a425ab3fc332e54b59bcc0f3b17d6977955b04c3af09659f2f1d6f7af6127a86b69d54e490c","ssdeep":"","tlshash":"04d02ebe2c1ca0420ab25ce01bb1b39c3827808004a6b07ab2c8d22bccc03c09c733d0","first_seen":"2024-05-17T09:36:37Z","last_seen":"2024-10-11T09:19:31.020042Z","times_seen":34,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/adf3.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:38.674Z","timestamp":1727198858674,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /adf3.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww1.good-trading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 449827\r\nlast-modified: Thu, 19 Sep 2024 12:30:30 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=nB0eB4b5aLFrmysHUPCSaPI8ttddn1kiEpYfFRnQY5155lpC4OvjpqNyZLjZWWNC9VM%2F3Amq2l4BiEjN6%2Boz1CbG8X07IxoC36l4FD46DA1QBHwJ3Ck5IlctJS67NOJntoMO\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c7bfecc726c-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":246,"size_decoded":246,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"8a6be47a4e7efea28a80d74ccbb2047b","sha1":"20e0afbb9bf6a8f414934b7521453be9deef00ef","sha256":"ef890c797332b264943c30985b5025badb28d860fa60b511f371a27145a2347d","sha512":"3dedb966d956fb7ba261c4a6cecded58c602731ae1187104ca124dde10f9734b9c670463300d498095af86de8f6e6c55acaef6f9b91a248737efbd0110184ee9","ssdeep":"","tlshash":"1fd02bbfdc48f115114046a0547172fc6667740462f1a005f2c89217ccd07c5d833be0","first_seen":"2023-05-14T10:33:36Z","last_seen":"2024-10-11T09:19:31.024986Z","times_seen":39,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adzgame.com/redirect?feed=647207\u0026auth=J7xEz2\u0026subid=adzgamebis1\u0026query=adzgameabis1\u0026url=adzgame1.com","fqdn":"xml.adzgame.com","domain":"adzgame.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:42.029Z","timestamp":1727198862029,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=647207\u0026auth=J7xEz2\u0026subid=adzgamebis1\u0026query=adzgameabis1\u0026url=adzgame1.com HTTP/1.1\r\nHost: xml.adzgame.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":155,"connect":99,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.flurryad.com/redirect?feed=647219\u0026auth=Ep6ImT\u0026subid=flurryn1\u0026query=flurryn1\u0026url=flurryadn.com","fqdn":"xml.flurryad.com","domain":"flurryad.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.053Z","timestamp":1727198862053,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=647219\u0026auth=Ep6ImT\u0026subid=flurryn1\u0026query=flurryn1\u0026url=flurryadn.com HTTP/1.1\r\nHost: xml.flurryad.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":1627,"timings":{"blocked":1626,"dns":1,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"olivedinflats.space/redirect?tid=926092\u0026subid=540352.597412","fqdn":"olivedinflats.space","domain":"olivedinflats.space","tld":"space"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:42.347Z","timestamp":1727198862347,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?tid=926092\u0026subid=540352.597412 HTTP/1.1\r\nHost: olivedinflats.space\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.flurryad.com/redirect?feed=647218\u0026auth=bVOVbk\u0026subid=flurryn\u0026query=flurryn\u0026url=flurryadn.com","fqdn":"xml.flurryad.com","domain":"flurryad.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:41.241Z","timestamp":1727198861241,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=647218\u0026auth=bVOVbk\u0026subid=flurryn\u0026query=flurryn\u0026url=flurryadn.com HTTP/1.1\r\nHost: xml.flurryad.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adzgame.com/redirect?feed=647206\u0026auth=T1loWp\u0026subid=adzgameadu1\u0026query=adzgameadu1\u0026url=adzgame1.com","fqdn":"xml.adzgame.com","domain":"adzgame.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.073Z","timestamp":1727198862073,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=647206\u0026auth=T1loWp\u0026subid=adzgameadu1\u0026query=adzgameadu1\u0026url=adzgame1.com HTTP/1.1\r\nHost: xml.adzgame.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":956,"timings":{"blocked":937,"dns":19,"connect":103,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smkezc.com/cuclc?aid=7075206623203247069\u0026t=1727198857\u0026s=176","fqdn":"smkezc.com","domain":"smkezc.com","tld":"com"},"ip":{"addr":"185.162.85.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cfr.news24.media/?d","date":"2024-09-24T17:27:40.261Z","timestamp":1727198860261,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"smkezc.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Aug 2024 16:35:06 GMT","end":"Fri, 01 Nov 2024 16:35:05 GMT"},"fingerprint":{"sha1":"37:3D:1E:8C:4A:DF:80:8E:7F:FC:A6:71:84:26:87:61:DA:78:BF:90","sha256":"26:14:35:3F:BD:58:CC:7C:C2:12:09:FD:CB:49:20:F1:72:A4:80:9A:E1:DD:63:86:F2:2A:89:A3:7E:02:94:D2"}}},"request":{"raw":"GET /cuclc?aid=7075206623203247069\u0026t=1727198857\u0026s=176 HTTP/1.1\r\nHost: smkezc.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cfr.news24.media/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.18.0\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 224\r\nlocation: https://latest-522727.tgel2ebtx.ru/click?node=292\u0026winPrice=0.015\u0026winCurrency=USD\u0026id=1727198820000-5395\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":479,"size_decoded":479,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-09-24","alert":"Sinkholed","trigger":"smkezc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xml.trackifyy.com/redirect?feed=668766\u0026auth=i7tq29\u0026subid=tracki\u0026query=tracki\u0026url=trackifyy.com","fqdn":"xml.trackifyy.com","domain":"trackifyy.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.054Z","timestamp":1727198862054,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=668766\u0026auth=i7tq29\u0026subid=tracki\u0026query=tracki\u0026url=trackifyy.com HTTP/1.1\r\nHost: xml.trackifyy.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":32,"dns":2,"connect":102,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gbstlnd.com/adult_video_2/3333/2f1eeeafc1c1aa0ba0685904cfada495/?click_id=a2_16209272082399971748_627551_2_0\u0026sub1=a627551\u0026sub2=%24%7Bsub2%7D\u0026sub3=%24%7Bsub3%7D\u0026tb=\u0026fullscreen=1","fqdn":"gbstlnd.com","domain":"gbstlnd.com","tld":"com"},"ip":{"addr":"173.214.250.52","port":443,"asn":15317,"as":"SERVEREL-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cfr.news24.media/?d","date":"2024-09-24T17:27:44.591Z","timestamp":1727198864591,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"nwslndng.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Sep 2024 13:39:30 GMT","end":"Wed, 11 Dec 2024 13:39:29 GMT"},"fingerprint":{"sha1":"70:F3:B8:1A:DA:BD:D8:A1:23:0F:46:9D:A7:9F:CA:B8:16:5F:60:8A","sha256":"FC:1D:A8:4B:77:83:82:3C:40:76:D1:10:E1:C7:95:42:02:2C:43:94:24:20:EB:EE:DC:2B:14:AE:98:38:00:3D"}}},"request":{"raw":"GET /adult_video_2/3333/2f1eeeafc1c1aa0ba0685904cfada495/?click_id=a2_16209272082399971748_627551_2_0\u0026sub1=a627551\u0026sub2=%24%7Bsub2%7D\u0026sub3=%24%7Bsub3%7D\u0026tb=\u0026fullscreen=1 HTTP/1.1\r\nHost: gbstlnd.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cfr.news24.media/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 24 Sep 2024 17:27:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-WoW64, Sec-CH-UA-Bitness, Sec-CH-UA-Model\r\npermissions-policy: ch-ua=(self \"https://rexpush.club\"), ch-ua-mobile=(self \"https://rexpush.club\"), ch-ua-platform=(self \"https://rexpush.club\"), ch-ua-full-version=(self \"https://rexpush.club\"), ch-ua-full-version-list=(self \"https://rexpush.club\"), ch-ua-platform-version=(self \"https://rexpush.club\"), ch-ua-arch=(self \"https://rexpush.club\"), ch-ua-wow64=(self \"https://rexpush.club\"), ch-ua-bitness=(self \"https://rexpush.club\"), ch-ua-model=(self \"https://rexpush.club\")\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":731860,"size_decoded":731860,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.eroticporns.com/thumb/93/girl-on-girl-sex-videos.webp","fqdn":"www.eroticporns.com","domain":"eroticporns.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:32.650Z","timestamp":1727198852650,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eroticporns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Aug 2024 16:44:19 GMT","end":"Sat, 02 Nov 2024 16:44:18 GMT"},"fingerprint":{"sha1":"C4:5B:D2:8F:70:A7:B7:31:BB:EC:DB:B4:B6:6D:9F:F1:73:FE:0C:3E","sha256":"BA:64:F6:DD:64:84:84:ED:5A:E9:A8:50:0F:D4:DE:A5:9C:B1:50:27:E0:B3:C0:53:2A:6B:1F:F3:71:3C:A1:82"}}},"request":{"raw":"GET /thumb/93/girl-on-girl-sex-videos.webp HTTP/1.1\r\nHost: www.eroticporns.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/porn/upskirt-videos/\r\nCookie: PHPSESSID=r9e4h1c9jt47akapojj56ul45l\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:32 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 05 Aug 2024 00:48:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66b02143-464e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 1740\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=FetsDdo3b5CC%2FcvzM0WhVPI%2BLSAICuBMgkCEwXkC5cMq0bF2d2WcLy6Id8F5J79DTXJiWGWKJXzLgayI%2BCKAUuoOmQEX1KCOdyQonGmc%2BibxFex2i5UdCaeVU%2FK%2FD82m8jcAiV%2BP\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c5d0968365a-FRA\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17998,"size_decoded":17998,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 352x198, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2519ee69e0c25a684a11675dd9b95b6d","sha1":"ea234c21c93a796a726b957125e5b5f029aa0e77","sha256":"c0f7db526cceba61cf49f345fbbd92c86e6e7f33e6e4323e6a24835c71d45f3a","sha512":"e07fe27bbe3307bc7b65ef0e5a2055707b7679b80df5c4ea298de4de90bd1cad0d0b21114927b666364d361a32253bb70652c79e1e742457d7f05702a00d060b","ssdeep":"384:pAm7fI/w/CVeUDOE2zHWHPpzVAvt/RKTc4HkspZGC1WpIZyv5:Cm7fxrc5SpQTJLp1UCIx","tlshash":"fa82c0035c12fed73db96dcae10a1eb4aabb586a45b54f09c10b7e84cbce158473391b","first_seen":"2024-09-28T07:59:48.763434Z","last_seen":"2024-09-28T07:59:48.763434Z","times_seen":1,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imdn.pics/m/p/0/770/770824/P1r9hLS2.html?\u0026campaign_id=236776\u0026utm1=tcb\u0026__GEOIP_COUNTRY_SHORT__=%7B%7B+__GEOIP_COUNTRY_SHORT__+%7D%7D\u0026DOMAIN=3txxx.com\u0026__IP2L_MOBILE__=%7B%7B+__IP2L_MOBILE__+%7D%7D\u0026BROWSER_FAMILY=%5BBROWSER_FAMILY%5D\u0026ad_sub=71860570\u0026__BROWSER_FAMILY__=%7B%7B+__BROWSER_FAMILY__+%7D%7D\u0026CAMPAIGN_ID=236776\u0026PRICING_MODEL=cpm\u0026PRICE=0.0020\u0026OS_TYPE=%5BOS_TYPE%5D\u0026priority=%5BPRIORITY%5D\u0026pricing_model=cpm\u0026utm4=0-10346131-0\u0026click_event_url=https%3A%2F%2Fbts.a11k.com%2Fin%2Ftclick%2F%3Fkatds_ep%3DGdxUfEKfQdIbyN4pPn33PRoSsf_ui7NMJJha3h2v7XoD0wwHf-NY39Vno8vJrRWiDDyKWFBw63rsjOC_L7b3WTNnCkdRvMyRmoFBGYmpllnlxe9SIK6ikFtBFz0TLaYdp_sfUOsDQ_edMPCX2XO8dQaPME0wBiIIGy6HqHF197ib73l7TSmoZ_6F7uqmhHO6BaNvLdxefOvJalx1iglO2WeFXfs_80XtW6ju5Hw92gMutzChMCo4FLnQLza8oFas2RRrDSJNG0jnNt5LmJoaJPA3xra5msxHWUNBId2p-iA56D73PLRJq-MElsZz7X6te_Na3aGAD8mpWz70fh8UdV6klm3tWu-5z73U3g-EFQRMvWWwO0WFtyc5dT5_pYhXcQaPbZyiw9vhmKG8nvJDjKzk3wxpTFHPoGfRs-Y3E-d3NtGFN3Dxj8Dt5-xnUxRw6X1ab1R-n_Mk02dSNN6L1iSyu1RHdIFhU0hu936-O7QE9uxtPTj9JQ-3Rzk1KdW3ZVodbGfPqxWSIkBEvZp_sfdci96gIvrHGKXch98CKFQZMC7mQqPZds5FUXMXhHYQsbO_GhwuJzXn8b54kROnKxhumftUVpq5YluHF3TLcLt37sg7WRmgJfqj3F1C39jUuzQirKvuRZCf6nyIpXlZ7KM_YQFvf3xrTqC1zPJW-_KMNpYQlBzEWUfkSny_U5chT47Fz_m_bcNnpyFwHTKSIVesHYhYab0-46F1xayPWLJFQ7MENRh0wqvM1QToE5xaTaHBU9R65lbfSai5A20mWXqx1ET4h8SMMP57joW9IqB9hB_HNTa4NjDi5MQIwYYjpf-V631pKVK_XM0QZlKV4arCCKw5KlONTdC42wa984FeAGXlNyJnWttPq_CEeSfSvUMbU5FrV1dFGjDQgPr_703ylpPuj7Y7-Rr4XMpxG-HBGgmYiU_E4YBHsA%26bid%3D%24%7BAUCTION_PRICE%7D\u0026MOBILE_BRAND=%5BMOBILE_BRAND%5D\u0026out_name=236776%7C83954%7Ccpm%7C0.0020%7C%24+0.0020\u0026__OS_TYPE__=%7B%7B+__OS_TYPE__+%7D%7D\u0026pricebox_price=0.0010\u0026__OS_FAMILY__=%7B%7B+__OS_FAMILY__+%7D%7D\u0026utm3=249-1353416-46616\u0026id_zone=%5Bidzone%5D\u0026COUNTRY_ISO_CODE=%5BCOUNTRY_ISO_CODE%5D\u0026price=0.0020\u0026click_id=30a4de03-108d-45ef-8397-bdcff162a5e3\u0026OS_FAMILY=%5BOS_FAMILY%5D\u0026utm2=878669509-100\u0026bidding_price=0.0020\u0026site=%7B%7B+site+%7D%7D","fqdn":"imdn.pics","domain":"imdn.pics","tld":"pics"},"ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://rtbrenab.com/get/?go=1\u0026data=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","date":"2024-09-24T17:27:35.292Z","timestamp":1727198855292,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imdn.pics","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Sep 2024 03:02:53 GMT","end":"Sat, 07 Dec 2024 03:02:52 GMT"},"fingerprint":{"sha1":"2C:74:6D:B1:42:DE:4E:9B:FD:75:DC:69:84:15:B7:21:D9:13:A7:0D","sha256":"B1:3D:47:0F:4C:5D:8D:A2:53:37:C2:0C:BC:78:78:E5:EC:F4:06:CB:FB:A3:78:B5:BF:41:78:2A:2B:AC:C2:68"}}},"request":{"raw":"GET /m/p/0/770/770824/P1r9hLS2.html?\u0026campaign_id=236776\u0026utm1=tcb\u0026__GEOIP_COUNTRY_SHORT__=%7B%7B+__GEOIP_COUNTRY_SHORT__+%7D%7D\u0026DOMAIN=3txxx.com\u0026__IP2L_MOBILE__=%7B%7B+__IP2L_MOBILE__+%7D%7D\u0026BROWSER_FAMILY=%5BBROWSER_FAMILY%5D\u0026ad_sub=71860570\u0026__BROWSER_FAMILY__=%7B%7B+__BROWSER_FAMILY__+%7D%7D\u0026CAMPAIGN_ID=236776\u0026PRICING_MODEL=cpm\u0026PRICE=0.0020\u0026OS_TYPE=%5BOS_TYPE%5D\u0026priority=%5BPRIORITY%5D\u0026pricing_model=cpm\u0026utm4=0-10346131-0\u0026click_event_url=https%3A%2F%2Fbts.a11k.com%2Fin%2Ftclick%2F%3Fkatds_ep%3DGdxUfEKfQdIbyN4pPn33PRoSsf_ui7NMJJha3h2v7XoD0wwHf-NY39Vno8vJrRWiDDyKWFBw63rsjOC_L7b3WTNnCkdRvMyRmoFBGYmpllnlxe9SIK6ikFtBFz0TLaYdp_sfUOsDQ_edMPCX2XO8dQaPME0wBiIIGy6HqHF197ib73l7TSmoZ_6F7uqmhHO6BaNvLdxefOvJalx1iglO2WeFXfs_80XtW6ju5Hw92gMutzChMCo4FLnQLza8oFas2RRrDSJNG0jnNt5LmJoaJPA3xra5msxHWUNBId2p-iA56D73PLRJq-MElsZz7X6te_Na3aGAD8mpWz70fh8UdV6klm3tWu-5z73U3g-EFQRMvWWwO0WFtyc5dT5_pYhXcQaPbZyiw9vhmKG8nvJDjKzk3wxpTFHPoGfRs-Y3E-d3NtGFN3Dxj8Dt5-xnUxRw6X1ab1R-n_Mk02dSNN6L1iSyu1RHdIFhU0hu936-O7QE9uxtPTj9JQ-3Rzk1KdW3ZVodbGfPqxWSIkBEvZp_sfdci96gIvrHGKXch98CKFQZMC7mQqPZds5FUXMXhHYQsbO_GhwuJzXn8b54kROnKxhumftUVpq5YluHF3TLcLt37sg7WRmgJfqj3F1C39jUuzQirKvuRZCf6nyIpXlZ7KM_YQFvf3xrTqC1zPJW-_KMNpYQlBzEWUfkSny_U5chT47Fz_m_bcNnpyFwHTKSIVesHYhYab0-46F1xayPWLJFQ7MENRh0wqvM1QToE5xaTaHBU9R65lbfSai5A20mWXqx1ET4h8SMMP57joW9IqB9hB_HNTa4NjDi5MQIwYYjpf-V631pKVK_XM0QZlKV4arCCKw5KlONTdC42wa984FeAGXlNyJnWttPq_CEeSfSvUMbU5FrV1dFGjDQgPr_703ylpPuj7Y7-Rr4XMpxG-HBGgmYiU_E4YBHsA%26bid%3D%24%7BAUCTION_PRICE%7D\u0026MOBILE_BRAND=%5BMOBILE_BRAND%5D\u0026out_name=236776%7C83954%7Ccpm%7C0.0020%7C%24+0.0020\u0026__OS_TYPE__=%7B%7B+__OS_TYPE__+%7D%7D\u0026pricebox_price=0.0010\u0026__OS_FAMILY__=%7B%7B+__OS_FAMILY__+%7D%7D\u0026utm3=249-1353416-46616\u0026id_zone=%5Bidzone%5D\u0026COUNTRY_ISO_CODE=%5BCOUNTRY_ISO_CODE%5D\u0026price=0.0020\u0026click_id=30a4de03-108d-45ef-8397-bdcff162a5e3\u0026OS_FAMILY=%5BOS_FAMILY%5D\u0026utm2=878669509-100\u0026bidding_price=0.0020\u0026site=%7B%7B+site+%7D%7D HTTP/1.1\r\nHost: imdn.pics\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rtbrenab.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:35 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: nginx\r\nlast-modified: Mon, 01 Apr 2024 14:09:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"660ac017-aaa\"\r\nx-request-id: d05273d32c6e5e971c9be41c433ed7a6\r\ncontent-encoding: gzip\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache, no-cache\r\nexpires: 0\r\nx-proxy-cache: MISS, MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2730,"size_decoded":2730,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2850), with no line terminators","md5":"393e3125fb9d1af891ee6ed46970d739","sha1":"ef88129e230205ca9368373e59817d8120057c3b","sha256":"f7ae4a86d9a01de17a5e5e3345b4b1249dbf9077b1f977ce06c4a8915f4e57a6","sha512":"56ee62adeab39a08b28c5496395dcfa8a4b5276b2c4350f14fb7d552bc4ab91b7901bbd938846b70489a597be8bbb28d5edb82ebd790040dad2558987a4be595","ssdeep":"","tlshash":"1e51b55f26c0d1b4012244340377f53e78bb3a947a660424f0cc9998ab98f6f5243bf8","first_seen":"2024-09-20T04:00:00Z","last_seen":"2024-10-04T11:19:02.801642Z","times_seen":12,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ctrtraffic.me/media1.html","fqdn":"ctrtraffic.me","domain":"ctrtraffic.me","tld":"me"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.384Z","timestamp":1727198859384,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ctrtraffic.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Sep 2024 18:56:16 GMT","end":"Sun, 15 Dec 2024 18:56:15 GMT"},"fingerprint":{"sha1":"B5:5C:14:47:59:F7:46:21:B1:85:1E:A6:98:2C:65:CD:81:D3:BA:C1","sha256":"E5:25:D1:2F:7F:BC:68:5B:1F:BC:C8:BD:52:2E:65:5D:37:AD:AB:11:36:A4:DF:65:78:23:93:7B:6D:36:12:16"}}},"request":{"raw":"GET /media1.html HTTP/1.1\r\nHost: ctrtraffic.me\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 519988\r\nlast-modified: Wed, 18 Sep 2024 17:01:11 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=sloy898cB14cJns07MoSNdV7xCJY1LfeOmbvQm7Pevdk2ZbDbCMsVvH6itDqQDFQMkO1TkDPyjQkJZr7Jq8n4tfyMwTeLfqaNDp6k4b3Iqin%2FjVP5UBoba4wp7RTDSmQ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c852fdd6a62-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":262,"size_decoded":262,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"e54d92b39e5456dbfe0efe2ef80ffdee","sha1":"bc05a0ef67c49b849b4b6d7956fba50b66a58202","sha256":"cb08464b825935db8446e2cfebc34b4cc7c5239f78f60b75d6a2c12152d7b88d","sha512":"0e1dd1bbac3d5ce0de49ca18d4ae09d2c04646d8255856fd0676b5ec8fd589b7963209038e7498941acc686786b21e2c4b14a71d71c854ce5f109911cabd5569","ssdeep":"","tlshash":"92d02bef6c4cf071454144a42cb572fd232e700451306004f289d625c8c8794cc36be0","first_seen":"2023-10-13T04:20:32Z","last_seen":"2024-10-11T09:19:30.994815Z","times_seen":39,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"click.mediacpc.com/redirect?feed=441597\u0026auth=K62AKr\u0026subid=mediamain\u0026query=main\u0026url=media.com","fqdn":"click.mediacpc.com","domain":"mediacpc.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:42.072Z","timestamp":1727198862072,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=441597\u0026auth=K62AKr\u0026subid=mediamain\u0026query=main\u0026url=media.com HTTP/1.1\r\nHost: click.mediacpc.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":193,"dns":3,"connect":93,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ykrvt.bestssp.top/?pl=YC0GOkWFo0Wz8n7UhRmi1w\u0026sub_id=3333","fqdn":"ykrvt.bestssp.top","domain":"bestssp.top","tld":"top"},"ip":{"addr":"172.67.196.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cgb.news24.media/?d","date":"2024-09-24T17:27:47.153Z","timestamp":1727198867153,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bestssp.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Sep 2024 02:51:42 GMT","end":"Thu, 05 Dec 2024 02:51:41 GMT"},"fingerprint":{"sha1":"6E:85:CD:2C:6D:1C:BB:D2:D8:8E:D6:89:B7:9F:AB:91:DD:59:8E:6B","sha256":"B2:A2:9F:90:C5:F0:0D:1E:E3:6C:09:B7:C6:4F:37:08:9F:67:8E:5B:E5:E8:8C:8E:74:87:D3:A5:40:97:10:02"}}},"request":{"raw":"GET /?pl=YC0GOkWFo0Wz8n7UhRmi1w\u0026sub_id=3333 HTTP/1.1\r\nHost: ykrvt.bestssp.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Tue, 24 Sep 2024 17:27:47 GMT\r\ncontent-type: text/html\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2BWn53whPx9CpxpX9dzEoYkSLL93Igr6LdwuoidQzBvybazuwF9Nxi19da4ql7JWv%2F4bZmlO3eKjBSt4Y13hz7cI%2B8EsOc5lHflS3hb6xJ%2BE6aZAlvQ7B%2BQkYCidMibTYsYynWg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847cb7ccec0e30-AMS\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":146,"size_decoded":146,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"bcfacc6f2d2ee7cd5e014be08612f93e","sha1":"7bb6f49a83b5186d5f8598e852bfbeee102d8a4d","sha256":"ef1a3d1af87d9d441ef37f001f2ffb6900ef0a7a4884a5ef165bc2b09e224b38","sha512":"ae07b7a56215c748fb459fc4f5f4099b7bef4b6a98c3153d7927131d7749cdb123cda9fc60ff28eb08d11b0e69e85d5e4321f40d7d6a18e5a37476e72cddfb90","ssdeep":"","tlshash":"eec04c5db95e340896535bd10bc73a41d296e2758cba481087890753f0c6177c8eb794","first_seen":"2023-04-07T15:42:29Z","last_seen":"2025-04-06T20:35:25.209905Z","times_seen":4816,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smkezc.com/cuload?a=1\u0026e=aeyJwaWQiOjEwNTAxODIsInNpZCI6MTM0NzExMCwid2lkIjo2Mjc1NTEsImQiOiJuZXdzMjQubWVkaWEiLCJsaSI6MX0=\u0026tz=2\u0026if=0\u0026u=aHR0cHM6Ly9mci5uZXdzMjQubWVkaWEv\u0026chpv=15.0.0","fqdn":"smkezc.com","domain":"smkezc.com","tld":"com"},"ip":{"addr":"185.162.85.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cfr.news24.media/?d","date":"2024-09-24T17:27:36.927Z","timestamp":1727198856927,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"smkezc.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Aug 2024 16:35:06 GMT","end":"Fri, 01 Nov 2024 16:35:05 GMT"},"fingerprint":{"sha1":"37:3D:1E:8C:4A:DF:80:8E:7F:FC:A6:71:84:26:87:61:DA:78:BF:90","sha256":"26:14:35:3F:BD:58:CC:7C:C2:12:09:FD:CB:49:20:F1:72:A4:80:9A:E1:DD:63:86:F2:2A:89:A3:7E:02:94:D2"}}},"request":{"raw":"GET /cuload?a=1\u0026e=aeyJwaWQiOjEwNTAxODIsInNpZCI6MTM0NzExMCwid2lkIjo2Mjc1NTEsImQiOiJuZXdzMjQubWVkaWEiLCJsaSI6MX0=\u0026tz=2\u0026if=0\u0026u=aHR0cHM6Ly9mci5uZXdzMjQubWVkaWEv\u0026chpv=15.0.0 HTTP/1.1\r\nHost: smkezc.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cfr.news24.media/\r\nOrigin: https://cfr.news24.media\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\naccept-ch: Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":146,"size_decoded":146,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"3d59e978224839892b5cde91172c1813","sha1":"c07c8f08c153f312b42372b13ff68ebc512c2a43","sha256":"bd756c90d55b9343d25aef16762b4a63956d0215dc77f95793a88d6075e6cb65","sha512":"89d9510d7c43c2c4ee859aa86d7c86496dda30c4be70c584769607e106be66dfa9d17b30cfb9188a2ba4c754067eff729b4b3a5fb24491c11770382610c12104","ssdeep":"","tlshash":"7cc08cc042f6e1cedd000c2e63b31c3090804fbbd07b89259c6dc08564ae0f843960e4","first_seen":"2024-09-28T07:59:48.766081Z","last_seen":"2024-09-28T07:59:48.766081Z","times_seen":1,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":25,"dns":0,"connect":37,"send":0,"wait":145,"receive":0,"ssl":81},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-09-24","alert":"Sinkholed","trigger":"smkezc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ad-good.com/infinitya1.html","fqdn":"ad-good.com","domain":"ad-good.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.510Z","timestamp":1727198859510,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-good.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Aug 2024 12:01:51 GMT","end":"Sun, 10 Nov 2024 12:01:50 GMT"},"fingerprint":{"sha1":"77:4B:2C:D9:8C:89:13:31:AF:23:8C:04:14:AA:A5:93:B9:95:86:50","sha256":"05:8A:8C:C7:83:B7:64:C0:B5:21:77:3B:A5:F6:F1:7E:DE:19:31:34:57:A5:16:CC:06:08:40:4E:39:C0:EC:FD"}}},"request":{"raw":"GET /infinitya1.html HTTP/1.1\r\nHost: ad-good.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 518132\r\nlast-modified: Wed, 18 Sep 2024 17:32:07 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=b8%2F0VYk7%2BptnhUGvTFQYzTbCV4U8UsJMcO1eRJioAKGir75E2kOm0LKTqjx7tyn7Gf1vVCHu2aEtrl8ljSAb5sWi5dprVBEB4ysSFPSY4XLSl2lKOgXlUNeg4wva2Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c855a7aca81-HAM\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":257,"size_decoded":257,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"17db8b9a808363dcbd131939f62be6e5","sha1":"aaaa29c803d56509938623e5720fc027677c3194","sha256":"39833293f435329f3ea9069d6908aa32ded4195d54be44959cb55b5992bc89eb","sha512":"ff5abfc846860461559622049e7b12a8e41576af82a3de75148a82409b14257b16372638e010dbfdf9ae32d8e0452f59558d9a6af84b40d07d18fe3a37269d75","ssdeep":"","tlshash":"f3d05bae1d49b027166154981cf1b19c351768552677b118e288412ec4d4fdadc32bf9","first_seen":"2023-10-13T04:20:32Z","last_seen":"2024-10-06T19:12:51.515469Z","times_seen":35,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.eximdigital.com/redirect?feed=647203\u0026auth=EC06VD\u0026subid=eximdigitala1\u0026query=eximdigitala1\u0026url=eximdigital1.com","fqdn":"xml.eximdigital.com","domain":"eximdigital.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:42.039Z","timestamp":1727198862039,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=647203\u0026auth=EC06VD\u0026subid=eximdigitala1\u0026query=eximdigitala1\u0026url=eximdigital1.com HTTP/1.1\r\nHost: xml.eximdigital.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":70,"connect":102,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.infinity-info.com/redirect?feed=594287\u0026auth=g1ZSSA\u0026subid=infinitya\u0026query=infinitya\u0026url=infoa.com","fqdn":"xml.infinity-info.com","domain":"infinity-info.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.088Z","timestamp":1727198862088,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=594287\u0026auth=g1ZSSA\u0026subid=infinitya\u0026query=infinitya\u0026url=infoa.com HTTP/1.1\r\nHost: xml.infinity-info.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":993,"timings":{"blocked":968,"dns":25,"connect":98,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.clickmi.net/redirect?feed=487259\u0026auth=Phj71x\u0026subid=clickmi\u0026query=clickmi\u0026url=clickmi.net","fqdn":"xml.clickmi.net","domain":"clickmi.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.169Z","timestamp":1727198862169,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=487259\u0026auth=Phj71x\u0026subid=clickmi\u0026query=clickmi\u0026url=clickmi.net HTTP/1.1\r\nHost: xml.clickmi.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":507,"timings":{"blocked":507,"dns":0,"connect":99,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.rtbfactory.com/redirect?feed=637931\u0026auth=qGwRRI\u0026subid=rtb1\u0026query=rtb1\u0026url=rtb.com","fqdn":"xml.rtbfactory.com","domain":"rtbfactory.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.154Z","timestamp":1727198862154,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=637931\u0026auth=qGwRRI\u0026subid=rtb1\u0026query=rtb1\u0026url=rtb.com HTTP/1.1\r\nHost: xml.rtbfactory.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":8,"connect":101,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/clickmi.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.794Z","timestamp":1727198859794,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /clickmi.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww-7.good-trading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 449838\r\nlast-modified: Thu, 19 Sep 2024 12:30:21 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Csc3Fn8tIJtY0GMUw6SseFmawQgIB6Xf1yrhhvipmbv0O6rDO7Tv393MWYAwqJrRkHdHIBXs06edRpGog5xotyw0S5%2BENuYhZdZrw6FfHmyJ5AFxm8VbRE9laqO%2Fn0Rh3wiE\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c85af120a50-AMS\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":250,"size_decoded":250,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"098b4e2d8b5b900a83f85ac9d673cd4c","sha1":"193942f39be3025b4331ce1b7b122bcb97d99503","sha256":"55a92acee35dd2a3b07d1188242ad68c88ba06cd1224a596d793d8932fef264c","sha512":"de2bf98c3a9b5ebd3b920d8117cfde9ce76858426aaef910d155acf103609cfd766bc5fb0494801a507a1feff591034db05d2a66dafa07459fa962cae0c14526","ssdeep":"","tlshash":"8bd02bbf5c04b0046640349454b0317d2b5b51062e7b205ce18d0e25c4cc6d9d9b2be0","first_seen":"2023-05-08T16:02:00Z","last_seen":"2024-10-11T09:19:31.001791Z","times_seen":38,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ykrvt.bestssp.top/?pl=YC0GOkWFo0Wz8n7UhRmi1w\u0026sub_id=3333","fqdn":"ykrvt.bestssp.top","domain":"bestssp.top","tld":"top"},"ip":{"addr":"172.67.196.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cgb.news24.media/?d","date":"2024-09-24T17:27:46.993Z","timestamp":1727198866993,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bestssp.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Sep 2024 02:51:42 GMT","end":"Thu, 05 Dec 2024 02:51:41 GMT"},"fingerprint":{"sha1":"6E:85:CD:2C:6D:1C:BB:D2:D8:8E:D6:89:B7:9F:AB:91:DD:59:8E:6B","sha256":"B2:A2:9F:90:C5:F0:0D:1E:E3:6C:09:B7:C6:4F:37:08:9F:67:8E:5B:E5:E8:8C:8E:74:87:D3:A5:40:97:10:02"}}},"request":{"raw":"GET /?pl=YC0GOkWFo0Wz8n7UhRmi1w\u0026sub_id=3333 HTTP/1.1\r\nHost: ykrvt.bestssp.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Tue, 24 Sep 2024 17:27:47 GMT\r\ncontent-type: text/html\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5CsLZO0dHoVW4TzCIVBjueEpTzmP2eD%2FowRhepvehE5om2OlVoFnW4jZEMi3hlu1utsnXiTwWjwm%2FGu5sUqtTD1Np%2FH0XtOxSDL24n532h4QVpQMRopgpsSwTa2SDcow5tsJiw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847cb6cb480e30-AMS\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":146,"size_decoded":146,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"bcfacc6f2d2ee7cd5e014be08612f93e","sha1":"7bb6f49a83b5186d5f8598e852bfbeee102d8a4d","sha256":"ef1a3d1af87d9d441ef37f001f2ffb6900ef0a7a4884a5ef165bc2b09e224b38","sha512":"ae07b7a56215c748fb459fc4f5f4099b7bef4b6a98c3153d7927131d7749cdb123cda9fc60ff28eb08d11b0e69e85d5e4321f40d7d6a18e5a37476e72cddfb90","ssdeep":"","tlshash":"eec04c5db95e340896535bd10bc73a41d296e2758cba481087890753f0c6177c8eb794","first_seen":"2023-04-07T15:42:29Z","last_seen":"2025-04-06T20:35:25.209905Z","times_seen":4816,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/trackif.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:37.068Z","timestamp":1727198857068,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /trackif.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:36 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 449826\r\nlast-modified: Thu, 19 Sep 2024 12:30:30 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=iN2AovYCedvLJ1dsj9dtpkzo265Sf2%2BQKO7%2BuHq%2BUuk8d%2FsG6WPLY4J1FCL9IWX36k%2Fyi7OEwsbm09FMVCdG0%2FEeEhir8dM7%2Bze%2FfAYyl%2FRvCTGPaoxi3jPdcAInve1r8KR%2B\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c77bd3e726c-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":259,"size_decoded":259,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"676f6e3656c08b45fd592bfbf791038e","sha1":"ff935a58582a9ed92aae5044f05f86de4248284e","sha256":"2d6c0972838242947554a0e9da39a1ff8cd6e852c6ec79f65ba37e28eb5b2dd2","sha512":"f795e2171bde53026e755d0c52aaa9951b22c049bc94a53014f30a6e8a096698541b113affeae32c3c80327618b5c92da6fc0948b9fd8917ee0bddb6e9c053e0","ssdeep":"","tlshash":"48d02bef1fc4b1590a109c9408f1e1ed332a5004583d6445e3894217cbc5790dd727e1","first_seen":"2024-05-17T09:36:37Z","last_seen":"2024-10-11T09:19:30.993708Z","times_seen":45,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-good.com/clixvistam.html","fqdn":"ad-good.com","domain":"ad-good.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.613Z","timestamp":1727198859613,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-good.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Aug 2024 12:01:51 GMT","end":"Sun, 10 Nov 2024 12:01:50 GMT"},"fingerprint":{"sha1":"77:4B:2C:D9:8C:89:13:31:AF:23:8C:04:14:AA:A5:93:B9:95:86:50","sha256":"05:8A:8C:C7:83:B7:64:C0:B5:21:77:3B:A5:F6:F1:7E:DE:19:31:34:57:A5:16:CC:06:08:40:4E:39:C0:EC:FD"}}},"request":{"raw":"GET /clixvistam.html HTTP/1.1\r\nHost: ad-good.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 320380\r\nlast-modified: Sat, 21 Sep 2024 00:27:59 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=znNKzgZeZXXy2z9dUN%2BJscmeVFw9MfqSKzEUnXh6fwDou3xVpSdBnxYziqUFvYmvx9mQN998j7qhpagFaUo4o323SriiwOAdP7ycZ6U8SUlEstDlHjiLpPJRYGYuMg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c855a85ca81-HAM\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":261,"size_decoded":261,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"d7252c5545dc26a32588e31ed4ca3b60","sha1":"f7e6b8e0e4b87a9b09e47dcc475adfea8133983e","sha256":"dde30e3146173ef674a44d410308b9e7eb160c5c5ba0b93768b5ac681245b645","sha512":"5c8d7c1231ebd7d64b0969349cde063b87c6153e3376ae8e757abc989d7c0c3bbe748b28eb3721e53bce4b1d682ac1d92f389f3e0ef719280fb09382e8fb5b49","ssdeep":"","tlshash":"4ad02bae5d18b008059186dc58f4b15c3737b82408346068e38a0225c4c8b8dcc32ff5","first_seen":"2023-08-10T19:24:14Z","last_seen":"2024-10-11T09:19:30.995903Z","times_seen":45,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redirect3.online/adxa.html","fqdn":"redirect3.online","domain":"redirect3.online","tld":"online"},"ip":{"addr":"104.21.55.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:38.353Z","timestamp":1727198858353,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redirect3.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Sep 2024 16:21:21 GMT","end":"Mon, 02 Dec 2024 16:21:20 GMT"},"fingerprint":{"sha1":"46:1D:B0:17:F7:A5:4C:43:98:0F:A7:F0:E3:13:1A:C5:65:27:15:AD","sha256":"69:65:AB:BA:8F:55:4D:8C:ED:7A:0B:18:55:8C:05:31:E5:C9:2F:37:39:0B:7F:BF:99:F9:58:33:1B:42:6C:CF"}}},"request":{"raw":"GET /adxa.html HTTP/1.1\r\nHost: redirect3.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 40306\r\nlast-modified: Tue, 24 Sep 2024 06:15:51 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=so4naP9ynL%2FF4o5hwkk7GL3UEr3sSdVzj%2FWOx9UY%2Brv7ZJROqghoGkFsKVwOhHCPdSX35tCXPFcSFB1VdrzimNZ7ApiS3JYrQNbCJzSn3eg5TCTufrQsqwAkids8E71Zczy9\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c7a195062ba-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":242,"size_decoded":242,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"d36f2551646edac55145a3c21cd56b98","sha1":"0bba5cdb18f2efaf202cc6d0863a0bf1dfea7328","sha256":"0e7a95d97e3484c49d8f797cea1e6700f5d1de46667a4b1f1de064b49a22bed2","sha512":"f2e7997cc7e583209852dee7228d57bb276e1ababadec57070d8cb90b7524105a8ca750922f025f0efc3a870448c999d000facf884893ec701d3e7062594990e","ssdeep":"","tlshash":"09d05ebf2d58b0051b6058e827b1b29c74679285146ab068b2cc826a98c4bc9ec733d5","first_seen":"2024-09-11T12:59:49Z","last_seen":"2024-10-11T09:19:31.034001Z","times_seen":26,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sub.votreimc.com/adzgamebis.html","fqdn":"sub.votreimc.com","domain":"votreimc.com","tld":"com"},"ip":{"addr":"172.67.222.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.412Z","timestamp":1727198859412,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votreimc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Sep 2024 02:12:01 GMT","end":"Sat, 14 Dec 2024 02:12:00 GMT"},"fingerprint":{"sha1":"AF:56:A8:13:7B:6E:27:2B:03:40:18:37:A2:8B:CA:0F:2F:6D:E0:FA","sha256":"44:AD:5E:CF:7E:DE:B0:30:21:4D:10:85:AA:65:B9:AC:F4:EA:F9:DA:BC:84:CE:A6:39:8C:B9:24:E9:77:43:4A"}}},"request":{"raw":"GET /adzgamebis.html HTTP/1.1\r\nHost: sub.votreimc.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nx-iplb-request-id: A29ECA59:D5D8_91EF25A2:0050_66EAF63C_4B3C1:5F2F\r\nx-iplb-instance: 52324\r\ncf-cache-status: HIT\r\nage: 524367\r\nlast-modified: Wed, 18 Sep 2024 15:48:12 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=o7mplcpPYl3dkQGcA08XwWsu5WFwqJL3Xmiw6%2FbrW4V9U3ZwQfFkPYQU8IgepyBEjPBREzmnWQZNN21ggnfLqDV3X4Gktd9A9lYbimtfNwbdqkKbpNLpbvoIyePgXx7%2Bnb6R\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c852f9a62b8-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":251,"size_decoded":251,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"127fb6c3581af90815b2a913bb645a50","sha1":"45bbcd175016bd600211257745f1ce31d2a5fbec","sha256":"13fca4e8bbd5a84f166989a96d3e87e8c6f3d841d7f4dc6d0eecf0076f87a13c","sha512":"65a36d1e36161c11929eb97de7036bf07378542f281c49bad4808cb2937b5180bf547e7f58bab7a37849aabf4506efe9dac7ab2972fc17a76e5328202db492fc","ssdeep":"","tlshash":"5fd02bef1d1990020d7114d49771b36c9413a0455059381863c992d794d47c4dc333e0","first_seen":"2023-05-08T16:02:00Z","last_seen":"2024-10-11T09:19:31.015899Z","times_seen":46,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.ctrtraffic.com/redirect?feed=441588\u0026auth=6H5Hgo\u0026subid=adult\u0026query=adult\u0026url=adult.com","fqdn":"xml.ctrtraffic.com","domain":"ctrtraffic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:42.221Z","timestamp":1727198862221,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=441588\u0026auth=6H5Hgo\u0026subid=adult\u0026query=adult\u0026url=adult.com HTTP/1.1\r\nHost: xml.ctrtraffic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":642,"timings":{"blocked":641,"dns":1,"connect":93,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/adtu3.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:38.915Z","timestamp":1727198858915,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /adtu3.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww1.good-trading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 449827\r\nlast-modified: Thu, 19 Sep 2024 12:30:30 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xHZAFU9CX729lhOvZqe1HR3rnae2pmGsp6m%2Bv7oAYuHyd8SB9WutsphJaxIViTVT1a3w1zMRlDYk0ec1CCyQHfWltYAG3SGt%2Bh741esZ6BjMGtjOQpgbhhiPINxmBQmyo4h%2F\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c7c8ff6726c-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":246,"size_decoded":246,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"22cbc710f09edaaadbd5519bc8451e47","sha1":"9665b26dc3d76751f300e7fc958274163fba81b5","sha256":"a40edddc27c3227d494bedbff1edd93ed51eb6dfc05f9c5edc89588cef38b668","sha512":"407984af65e0ce0aa63fdf1ef90523cbfde21f997fcfe6eba19ba5f4b5e97d7cc661eef6b7d5bcdcdd6c013c85c58df2395a4cb08af0ca2efe2a31a1aaf694bb","ssdeep":"","tlshash":"a9d02ebf5c08b206090049e868b2b36e36179a0828f43024f188862bc8d0780c833be0","first_seen":"2023-08-02T15:19:22Z","last_seen":"2024-10-11T09:19:30.989621Z","times_seen":44,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sub.votreimc.com/adzgamebis1.html","fqdn":"sub.votreimc.com","domain":"votreimc.com","tld":"com"},"ip":{"addr":"172.67.222.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.419Z","timestamp":1727198859419,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votreimc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Sep 2024 02:12:01 GMT","end":"Sat, 14 Dec 2024 02:12:00 GMT"},"fingerprint":{"sha1":"AF:56:A8:13:7B:6E:27:2B:03:40:18:37:A2:8B:CA:0F:2F:6D:E0:FA","sha256":"44:AD:5E:CF:7E:DE:B0:30:21:4D:10:85:AA:65:B9:AC:F4:EA:F9:DA:BC:84:CE:A6:39:8C:B9:24:E9:77:43:4A"}}},"request":{"raw":"GET /adzgamebis1.html HTTP/1.1\r\nHost: sub.votreimc.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nx-iplb-request-id: A29ECA91:535A_91EF25A2:0050_66EAF62F_6E8F2:688D\r\nx-iplb-instance: 52360\r\ncf-cache-status: HIT\r\nage: 524380\r\nlast-modified: Wed, 18 Sep 2024 15:47:59 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xQEEZO9d9kKNe2bO%2B%2FBT%2BxRZhzWwBWaUPe%2F9D0IixRfeb0a7cye0xyCyGSdiUx2JqjhRc7n23XtmySi18CwpbQN6FD3oX3%2B7IYUl5QVMFxSHdpYN%2BI4gZYpGeg64KjYdF4GT\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c853fa662b8-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":261,"size_decoded":261,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"9ad82899f9eff4a0da7c326ee73d5d28","sha1":"56d7533c50de211799562421e3204c984fe9e9f0","sha256":"c8bfb3a28a8ee9c08a2fdff29056c3b0f638bb6f43397ceddde7ebfa7a9221ae","sha512":"b461cdc68dc646403df4a8d3a9c4a603ae9e8cc996a3a4754894e09f6e38cfe73c24e962c2e7357d9873038c56b5065c276c2c42fa7d443d3c6ed9360843edc0","ssdeep":"","tlshash":"83d02baf2d5990060d7114d09b71776ca412a085446878b5a7c4829ac4c0bc2dc733e4","first_seen":"2024-04-09T19:05:02Z","last_seen":"2024-10-11T09:19:31.034366Z","times_seen":44,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.eximdigital.com/redirect?feed=647202\u0026auth=6SL1vm\u0026subid=eximdigital1\u0026query=eximdigital1\u0026url=eximdigital1.com","fqdn":"xml.eximdigital.com","domain":"eximdigital.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:42.037Z","timestamp":1727198862037,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=647202\u0026auth=6SL1vm\u0026subid=eximdigital1\u0026query=eximdigital1\u0026url=eximdigital1.com HTTP/1.1\r\nHost: xml.eximdigital.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":146,"connect":95,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.infinity-info.com/redirect?feed=594287\u0026auth=g1ZSSA\u0026subid=infinitya\u0026query=infinitya\u0026url=infoa.com","fqdn":"xml.infinity-info.com","domain":"infinity-info.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:42.056Z","timestamp":1727198862056,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=594287\u0026auth=g1ZSSA\u0026subid=infinitya\u0026query=infinitya\u0026url=infoa.com HTTP/1.1\r\nHost: xml.infinity-info.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":80,"dns":206,"connect":105,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adzgame.com/redirect?feed=436086\u0026auth=7bONam\u0026subid=adzgamea\u0026query=adzgamea\u0026url=adzgame.com","fqdn":"xml.adzgame.com","domain":"adzgame.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.061Z","timestamp":1727198862061,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=436086\u0026auth=7bONam\u0026subid=adzgamea\u0026query=adzgamea\u0026url=adzgame.com HTTP/1.1\r\nHost: xml.adzgame.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":1002,"timings":{"blocked":973,"dns":29,"connect":102,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-good.com/clixvistaa.html","fqdn":"ad-good.com","domain":"ad-good.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.586Z","timestamp":1727198859586,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-good.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Aug 2024 12:01:51 GMT","end":"Sun, 10 Nov 2024 12:01:50 GMT"},"fingerprint":{"sha1":"77:4B:2C:D9:8C:89:13:31:AF:23:8C:04:14:AA:A5:93:B9:95:86:50","sha256":"05:8A:8C:C7:83:B7:64:C0:B5:21:77:3B:A5:F6:F1:7E:DE:19:31:34:57:A5:16:CC:06:08:40:4E:39:C0:EC:FD"}}},"request":{"raw":"GET /clixvistaa.html HTTP/1.1\r\nHost: ad-good.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 512730\r\nlast-modified: Wed, 18 Sep 2024 19:02:09 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=u3WQuk%2F6XqlGE2g2MYIGKqvkNF0l2KDYkSJP2wejLjNjqqavFg%2FOATmgVOQWTTeGFIID9KkUU9SWbTfdYrwW2BdCubaOYhVhGWhxkeAYU2Y9hYGYtUvE8y7rcAVX9Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c855a80ca81-HAM\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":263,"size_decoded":263,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"8a4caacf5ba17d8b8696c9bbcde6f18a","sha1":"a183dc1a002ce3db04a078fd3e1f5882a86a5486","sha256":"d98b58b3eccfa298ebb7f530ce81994647422545da2b5cd21352e09562348674","sha512":"decaafe5ed014a3cc70cb22b7b3b74109f16a143a5e3a27375c8e8cbba1c3889330031cb42a4bf428f106a443ba6c9a7e3c3a18dd99d0288e1a23a7f4a8ee5d4","ssdeep":"","tlshash":"50d05bee5d58b005099187dc18f9b25d3b3764351c756064e68a4729c8d8acddc33ff5","first_seen":"2023-08-10T19:24:14Z","last_seen":"2024-10-11T09:19:31.022942Z","times_seen":43,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.flurryad.com/redirect?feed=480556\u0026auth=7VgrMJ\u0026subid=flurryad1\u0026query=flurryad1\u0026url=flurryad.com","fqdn":"xml.flurryad.com","domain":"flurryad.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:41.228Z","timestamp":1727198861228,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flurryad.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Sep 2024 06:45:11 GMT","end":"Sun, 01 Dec 2024 06:45:10 GMT"},"fingerprint":{"sha1":"43:38:58:0A:B2:FA:EA:1A:BB:BC:1E:FD:BD:D6:84:BD:55:18:6F:F5","sha256":"92:1A:E9:14:4A:62:EC:D7:C5:1B:84:DE:BA:FB:13:36:B8:1F:8E:B9:A0:67:BA:CE:9C:E9:00:F3:3B:04:A7:34"}}},"request":{"raw":"GET /redirect?feed=480556\u0026auth=7VgrMJ\u0026subid=flurryad1\u0026query=flurryad1\u0026url=flurryad.com HTTP/1.1\r\nHost: xml.flurryad.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":2206,"timings":{"blocked":-1,"dns":25,"connect":93,"send":0,"wait":0,"receive":0,"ssl":2082},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adflyer.media/redirect?feed=542700\u0026auth=QqtgIx\u0026subid=adfa1\u0026query=adfa1\u0026url=adflyer.media","fqdn":"xml.adflyer.media","domain":"adflyer.media","tld":"media"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.167Z","timestamp":1727198862167,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=542700\u0026auth=QqtgIx\u0026subid=adfa1\u0026query=adfa1\u0026url=adflyer.media HTTP/1.1\r\nHost: xml.adflyer.media\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":928,"timings":{"blocked":918,"dns":10,"connect":162,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sub.votreimc.com/adzgame.html","fqdn":"sub.votreimc.com","domain":"votreimc.com","tld":"com"},"ip":{"addr":"172.67.222.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.391Z","timestamp":1727198859391,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votreimc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Sep 2024 02:12:01 GMT","end":"Sat, 14 Dec 2024 02:12:00 GMT"},"fingerprint":{"sha1":"AF:56:A8:13:7B:6E:27:2B:03:40:18:37:A2:8B:CA:0F:2F:6D:E0:FA","sha256":"44:AD:5E:CF:7E:DE:B0:30:21:4D:10:85:AA:65:B9:AC:F4:EA:F9:DA:BC:84:CE:A6:39:8C:B9:24:E9:77:43:4A"}}},"request":{"raw":"GET /adzgame.html HTTP/1.1\r\nHost: sub.votreimc.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nx-iplb-request-id: A29ECA85:2FF0_91EF25A2:0050_66EB32F3_55EE2:7EF8\r\nx-iplb-instance: 52360\r\ncf-cache-status: HIT\r\nage: 508824\r\nlast-modified: Wed, 18 Sep 2024 20:07:15 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=6ibffX4Ob9jEHCZ1mdpfJ5NucPGYNlubtUy1NbG2cH7NMO90hHb0T7tlrNALWfAyD1NtiPAiK8aVwYlC6ywFjYsf9Y7nZLoAZ%2BPxvPlwTnzLPxgxNtXYMQaPt5BYLT2tV55o\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c852f9062b8-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":250,"size_decoded":250,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"ff783313859dde7d84e84f663b082abd","sha1":"b3d347c7be360c99d8ad29b5fdb03459c6bf4d3a","sha256":"43c1887e2fc3f39b3bd84de5d2ef6df0ea6350e21b8290c1f6e8dbf2b774b42c","sha512":"9b2e7ed0943e13cda6047e790e52f0c39564ca4e84b53032e3c97a0936300bff9a91f6f87751f081cf0774aea433ed7fa503214483a66fb8fc70975791dfca5d","ssdeep":"","tlshash":"3cd095ef1e1590030d7154d09771b75ca417b044545c785453c591f7d4d47c4dc333d0","first_seen":"2023-05-14T10:33:36Z","last_seen":"2024-10-11T09:19:30.998061Z","times_seen":44,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sub.votreimc.com/eximdigitala.html","fqdn":"sub.votreimc.com","domain":"votreimc.com","tld":"com"},"ip":{"addr":"172.67.222.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.424Z","timestamp":1727198859424,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votreimc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Sep 2024 02:12:01 GMT","end":"Sat, 14 Dec 2024 02:12:00 GMT"},"fingerprint":{"sha1":"AF:56:A8:13:7B:6E:27:2B:03:40:18:37:A2:8B:CA:0F:2F:6D:E0:FA","sha256":"44:AD:5E:CF:7E:DE:B0:30:21:4D:10:85:AA:65:B9:AC:F4:EA:F9:DA:BC:84:CE:A6:39:8C:B9:24:E9:77:43:4A"}}},"request":{"raw":"GET /eximdigitala.html HTTP/1.1\r\nHost: sub.votreimc.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nx-iplb-request-id: A29ECA6A:745E_91EF25A2:0050_66EB0C91_55367:7D2A\r\nx-iplb-instance: 52360\r\ncf-cache-status: HIT\r\nage: 518650\r\nlast-modified: Wed, 18 Sep 2024 17:23:29 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=yCJ5PlaCeURELRnsRPShEYBoGYBZ7UoxuX1tKUvl3gb073Is6x%2Fx1plCelVyexazS2GJZgAs%2F1aFsDGstM6O1BXreHBwWX0FDdyjDk97iAkdO68fiebqXRAIvLn6GreNR7Zs\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c853fac62b8-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":266,"size_decoded":266,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"c0174d001a22a4947b403b62f5721551","sha1":"e6c2938dc00a11ee8d97cbd6db44cdcf28a24261","sha256":"0326eb11805a6e7e5ac8382f2440fa5db5a1c4660e4f09779d807aadba8ea874","sha512":"607d1468efa2ee1243e50ed3859ae02025ab311ea51e883be35ca29b503b37c97b41773b4f0c1fa1dff739728e3e1db7e550e18504108ad49dde1343795fa19d","ssdeep":"","tlshash":"66d0c2ef2c4890011b5018d097b2ab6c2431e434002838e4d2ca0266c9c0b9ccca37e9","first_seen":"2023-05-08T16:02:00Z","last_seen":"2024-10-06T19:12:51.520013Z","times_seen":39,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.flurryad.com/redirect?feed=437634\u0026auth=bmMqba\u0026subid=flurry\u0026query=flurry\u0026url=flurryad.com","fqdn":"xml.flurryad.com","domain":"flurryad.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:41.213Z","timestamp":1727198861213,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flurryad.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Sep 2024 06:45:11 GMT","end":"Sun, 01 Dec 2024 06:45:10 GMT"},"fingerprint":{"sha1":"43:38:58:0A:B2:FA:EA:1A:BB:BC:1E:FD:BD:D6:84:BD:55:18:6F:F5","sha256":"92:1A:E9:14:4A:62:EC:D7:C5:1B:84:DE:BA:FB:13:36:B8:1F:8E:B9:A0:67:BA:CE:9C:E9:00:F3:3B:04:A7:34"}}},"request":{"raw":"GET /redirect?feed=437634\u0026auth=bmMqba\u0026subid=flurry\u0026query=flurry\u0026url=flurryad.com HTTP/1.1\r\nHost: xml.flurryad.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":4043,"timings":{"blocked":1729,"dns":44,"connect":102,"send":0,"wait":0,"receive":0,"ssl":2149},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gpshtb.com/go/708?source=3333","fqdn":"gpshtb.com","domain":"gpshtb.com","tld":"com"},"ip":{"addr":"173.214.244.181","port":443,"asn":15317,"as":"SERVEREL-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cgb.news24.media/?d","date":"2024-09-24T17:27:46.496Z","timestamp":1727198866496,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"55trck.xyz","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jul 2024 04:17:35 GMT","end":"Fri, 25 Oct 2024 04:17:34 GMT"},"fingerprint":{"sha1":"A2:EA:29:7E:33:3C:75:B7:72:9F:49:4C:C6:B9:D0:8F:1C:BD:1B:B9","sha256":"ED:EB:AF:88:64:0E:3D:5D:7A:2A:F1:54:02:BD:44:82:B3:B6:BD:03:B7:A8:8C:5A:68:7F:57:C9:E5:AD:3D:9D"}}},"request":{"raw":"GET /go/708?source=3333 HTTP/1.1\r\nHost: gpshtb.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Tue, 24 Sep 2024 17:27:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://ykrvt.bestssp.top/?pl=YC0GOkWFo0Wz8n7UhRmi1w\u0026sub_id=3333\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":146,"size_decoded":146,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":1142,"timings":{"blocked":490,"dns":1,"connect":159,"send":0,"wait":162,"receive":0,"ssl":322},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sub.votreimc.com/adzgame1.html","fqdn":"sub.votreimc.com","domain":"votreimc.com","tld":"com"},"ip":{"addr":"172.67.222.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:37.482Z","timestamp":1727198857482,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votreimc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Sep 2024 02:12:01 GMT","end":"Sat, 14 Dec 2024 02:12:00 GMT"},"fingerprint":{"sha1":"AF:56:A8:13:7B:6E:27:2B:03:40:18:37:A2:8B:CA:0F:2F:6D:E0:FA","sha256":"44:AD:5E:CF:7E:DE:B0:30:21:4D:10:85:AA:65:B9:AC:F4:EA:F9:DA:BC:84:CE:A6:39:8C:B9:24:E9:77:43:4A"}}},"request":{"raw":"GET /adzgame1.html HTTP/1.1\r\nHost: sub.votreimc.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nx-iplb-request-id: A29ECB40:9AB8_91EF25A2:0050_66EC7AD9_932E1:7BF3\r\nx-iplb-instance: 52360\r\ncf-cache-status: HIT\r\nage: 424880\r\nlast-modified: Thu, 19 Sep 2024 19:26:17 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QLteEmGjOAgbvo%2FpRkbIig7yo1EgV52Ttu1JwgXeo32aOZIDMCr%2FsXHgK0SdoodH2orpQZzOE4SVq5WNRpBHHawFlSAraiaBQuVAIIA7Yyyfnj9%2BUHdSd3Bb7484%2BVN3CsSJ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c78cff562b8-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":254,"size_decoded":254,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"95601952aeb01f2189218dd042964f14","sha1":"d41c44e9882e7525d7cb1b760915818e6fd7601b","sha256":"85a85a1dbfb4ba52a2e1073ff898b2673830f141e586f2968faeee62cdc12953","sha512":"a52e14d06c0b524ff50c72b7364693921c2b708af64482f2b63bbf7305cc506813b694488c5fa54b923ad14bc6c2cfd4f31fa182efbe27fac53a7396d6ea486d","ssdeep":"","tlshash":"4ad02baf1d0690460e7014e0ab71b36cd4129045446938a8a3c482d6d4c07c1ec333f4","first_seen":"2024-05-17T09:36:38Z","last_seen":"2024-10-06T19:12:51.511834Z","times_seen":43,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":19,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/trackif1.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.373Z","timestamp":1727198859373,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /trackif1.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 449835\r\nlast-modified: Thu, 19 Sep 2024 12:30:24 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=MFqfKgPrOKP2p%2Fe7Got5UD5CUqe%2BH0ejlwLNMokTmZqc%2FuihhfNszCTJF6Cg9hs99lTYqGEmlU9kW%2Fm5zfFgcNR9lmOiylklwFB25f5HGUsp%2BTjYiKqOiq2KOepMq1PfFlZV\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c852e2b0a50-AMS\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":261,"size_decoded":261,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"d415faa0e67e7d73aa58eb5a0de51e09","sha1":"a65b6e12d07f23f68b5e1b17020674b2912c86cb","sha256":"7f0bf35d75c98364d89368e05c1f7664a32631d32a2d137d5e19fc23e3021da1","sha512":"b8427d75a63258e9751dd5282d202fe031633c0d8189f6f4df44caeb0238c56b4a21b90e4611cdcc1127ec71575439e55f7becf4c600966939740142074d1cb2","ssdeep":"","tlshash":"bfd02baf1f84b05d16005ca018b1e2ed332d500858796455f3898226cbc5790cc327e5","first_seen":"2024-05-17T09:36:38Z","last_seen":"2024-10-11T09:19:31.018802Z","times_seen":47,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-good.com/infinitym1.html","fqdn":"ad-good.com","domain":"ad-good.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.486Z","timestamp":1727198859486,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-good.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Aug 2024 12:01:51 GMT","end":"Sun, 10 Nov 2024 12:01:50 GMT"},"fingerprint":{"sha1":"77:4B:2C:D9:8C:89:13:31:AF:23:8C:04:14:AA:A5:93:B9:95:86:50","sha256":"05:8A:8C:C7:83:B7:64:C0:B5:21:77:3B:A5:F6:F1:7E:DE:19:31:34:57:A5:16:CC:06:08:40:4E:39:C0:EC:FD"}}},"request":{"raw":"GET /infinitym1.html HTTP/1.1\r\nHost: ad-good.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 425697\r\nlast-modified: Thu, 19 Sep 2024 19:12:42 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=dezdoExlm%2BxdKWlbru5nYCeosMcwgpr5jjxURw6oPDsQ%2FGSGNziNA5Ymd8GjgZ19g%2FJyUe2lhTUvOeDdtONt9L%2BH6f6UsTa08p5a3NodnDQUrP2YdLQMLcjzc2C0Og%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c855a62ca81-HAM\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":256,"size_decoded":256,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"b45da26ef76669f4d0eb140a90aa38cf","sha1":"c1f3f26c8d88fa1aeff97c1c169ada81c389c695","sha256":"2b0cde5306e6650fa52b1e314f3678aa0d8549640ff8cfca13fcb42ced6d673e","sha512":"c6358ea03f9b378d72dc09d9738b105c3c770ba4fc6fd17bc8b7e99a7723ee6c2691dc7399a4089734f12af1558b39df5ac8b984e6889e51ed1e78378475d87c","ssdeep":"","tlshash":"d5d02bae1d05b013165104941cf1b1bc351691041576b000e288422ec8e0fc9dc32bf9","first_seen":"2024-05-17T09:36:38Z","last_seen":"2024-10-11T09:19:30.984464Z","times_seen":38,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-good.com/clixvistam1.html","fqdn":"ad-good.com","domain":"ad-good.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.680Z","timestamp":1727198859680,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-good.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Aug 2024 12:01:51 GMT","end":"Sun, 10 Nov 2024 12:01:50 GMT"},"fingerprint":{"sha1":"77:4B:2C:D9:8C:89:13:31:AF:23:8C:04:14:AA:A5:93:B9:95:86:50","sha256":"05:8A:8C:C7:83:B7:64:C0:B5:21:77:3B:A5:F6:F1:7E:DE:19:31:34:57:A5:16:CC:06:08:40:4E:39:C0:EC:FD"}}},"request":{"raw":"GET /clixvistam1.html HTTP/1.1\r\nHost: ad-good.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 508788\r\nlast-modified: Wed, 18 Sep 2024 20:07:51 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2FiO4VKMbR4%2BGrb4n3ETYlBIwwJ6tm0%2F3wxpuwLQS8jkGvgsNAfivjglJb7q7GvMEF08jZXS67kdp%2B0fwfJi0u8ymp5gxaITpn35PqnxaRlnLuHob%2FqejkB%2F1M%2BHjPw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c857a9fca81-HAM\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":264,"size_decoded":264,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"17a6cc2a9b69da6e623bb0fc49e23835","sha1":"dfff386beb8bd8b56cb7d88c7216e5cecf35003f","sha256":"bcddd0cee34ea5598924edf6d2983df8ca84a72668b68e5f4235e1ae8a7a4961","sha512":"6a6c5676097edaf2c545fa87a665817ce3411e43d64552b456b22b492c171eb8967831b6c447ee1ee0f63482b55c7fffbab774507ac679aa04da64812846912f","ssdeep":"","tlshash":"b9e02bbe1c48b00509908a9d18f8715c373764250835e064e1878325c4e868dcc32ff1","first_seen":"2023-11-22T09:58:26Z","last_seen":"2024-10-11T09:19:30.987242Z","times_seen":44,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.rtbfactory.com/redirect?feed=637931\u0026auth=qGwRRI\u0026subid=rtb1\u0026query=rtb1\u0026url=rtb.com","fqdn":"xml.rtbfactory.com","domain":"rtbfactory.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:41.724Z","timestamp":1727198861724,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=637931\u0026auth=qGwRRI\u0026subid=rtb1\u0026query=rtb1\u0026url=rtb.com HTTP/1.1\r\nHost: xml.rtbfactory.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":44,"connect":97,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adzgame.com/redirect?feed=436086\u0026auth=7bONam\u0026subid=adzgamea\u0026query=adzgamea\u0026url=adzgame.com","fqdn":"xml.adzgame.com","domain":"adzgame.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:42.048Z","timestamp":1727198862048,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=436086\u0026auth=7bONam\u0026subid=adzgamea\u0026query=adzgamea\u0026url=adzgame.com HTTP/1.1\r\nHost: xml.adzgame.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adtube.media/redirect?feed=557469\u0026auth=uclEev\u0026subid=adtumedia\u0026query=adtumedia\u0026url=advertland.media","fqdn":"xml.adtube.media","domain":"adtube.media","tld":"media"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.180Z","timestamp":1727198862180,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=557469\u0026auth=uclEev\u0026subid=adtumedia\u0026query=adtumedia\u0026url=advertland.media HTTP/1.1\r\nHost: xml.adtube.media\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":917,"timings":{"blocked":911,"dns":6,"connect":161,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redirect3.online/flurryn1.html","fqdn":"redirect3.online","domain":"redirect3.online","tld":"online"},"ip":{"addr":"104.21.55.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.359Z","timestamp":1727198859359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redirect3.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Sep 2024 16:21:21 GMT","end":"Mon, 02 Dec 2024 16:21:20 GMT"},"fingerprint":{"sha1":"46:1D:B0:17:F7:A5:4C:43:98:0F:A7:F0:E3:13:1A:C5:65:27:15:AD","sha256":"69:65:AB:BA:8F:55:4D:8C:ED:7A:0B:18:55:8C:05:31:E5:C9:2F:37:39:0B:7F:BF:99:F9:58:33:1B:42:6C:CF"}}},"request":{"raw":"GET /flurryn1.html HTTP/1.1\r\nHost: redirect3.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 42310\r\nlast-modified: Tue, 24 Sep 2024 05:42:29 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=P2bM2SbvSQwRo03Pc0JJXZcc0R8TgxfSWhNPuUvCBVvi8wWZAzlN%2B8%2B4EHO9VBtbIbL4xlB7kJrt3iHrk8nDo9PUoL6XAyRwkaerq6Bfb12F1BRTWifi0wWLF9LqnYxgiu8E\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c851806b7b5-AMS\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":247,"size_decoded":247,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"f40ce66e2552aded08420b10779c681f","sha1":"e68b9378502459f5cf43995706913acace1339dd","sha256":"3f0f6061362432681354ebf5fb3783e08a73083ad36dd22a7078ddac66a7d22c","sha512":"e78ab58035cfb5071b23166a487ff708e4c82149ecb5092b8bbbb3173f137bdde71baece1184f4acc39230ee68bb8c261ac01164f2e81b28c9f4474e57c8f17a","ssdeep":"","tlshash":"c0d05eee2e58b50dba9548d417b1a2ac381a91453865b079f6cc466e88c46ea9cb33d0","first_seen":"2024-05-17T09:36:37Z","last_seen":"2024-10-11T09:19:30.985607Z","times_seen":41,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.flurryad.com/redirect?feed=647219\u0026auth=Ep6ImT\u0026subid=flurryn1\u0026query=flurryn1\u0026url=flurryadn.com","fqdn":"xml.flurryad.com","domain":"flurryad.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:41.210Z","timestamp":1727198861210,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flurryad.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Sep 2024 06:45:11 GMT","end":"Sun, 01 Dec 2024 06:45:10 GMT"},"fingerprint":{"sha1":"43:38:58:0A:B2:FA:EA:1A:BB:BC:1E:FD:BD:D6:84:BD:55:18:6F:F5","sha256":"92:1A:E9:14:4A:62:EC:D7:C5:1B:84:DE:BA:FB:13:36:B8:1F:8E:B9:A0:67:BA:CE:9C:E9:00:F3:3B:04:A7:34"}}},"request":{"raw":"GET /redirect?feed=647219\u0026auth=Ep6ImT\u0026subid=flurryn1\u0026query=flurryn1\u0026url=flurryadn.com HTTP/1.1\r\nHost: xml.flurryad.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":3986,"timings":{"blocked":1703,"dns":41,"connect":102,"send":0,"wait":0,"receive":0,"ssl":2131},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gbstlnd.com/rotator/662/3333/2f1eeeafc1c1aa0ba0685904cfada495/?click_id=a2_16209272082399971748_627551_2_0\u0026sub1=a627551\u0026sub2=${sub2}\u0026sub3=${sub3}\u0026fullscreen=1","fqdn":"gbstlnd.com","domain":"gbstlnd.com","tld":"com"},"ip":{"addr":"173.214.250.52","port":443,"asn":15317,"as":"SERVEREL-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cfr.news24.media/?d","date":"2024-09-24T17:27:42.195Z","timestamp":1727198862195,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"nwslndng.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Sep 2024 13:39:30 GMT","end":"Wed, 11 Dec 2024 13:39:29 GMT"},"fingerprint":{"sha1":"70:F3:B8:1A:DA:BD:D8:A1:23:0F:46:9D:A7:9F:CA:B8:16:5F:60:8A","sha256":"FC:1D:A8:4B:77:83:82:3C:40:76:D1:10:E1:C7:95:42:02:2C:43:94:24:20:EB:EE:DC:2B:14:AE:98:38:00:3D"}}},"request":{"raw":"GET /rotator/662/3333/2f1eeeafc1c1aa0ba0685904cfada495/?click_id=a2_16209272082399971748_627551_2_0\u0026sub1=a627551\u0026sub2=${sub2}\u0026sub3=${sub3}\u0026fullscreen=1 HTTP/1.1\r\nHost: gbstlnd.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cfr.news24.media/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Tue, 24 Sep 2024 17:27:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://gbstlnd.com/adult_video_2/3333/2f1eeeafc1c1aa0ba0685904cfada495/?click_id=a2_16209272082399971748_627551_2_0\u0026sub1=a627551\u0026sub2=%24%7Bsub2%7D\u0026sub3=%24%7Bsub3%7D\u0026tb=\u0026fullscreen=1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":731860,"size_decoded":731860,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":2585,"timings":{"blocked":-1,"dns":14,"connect":168,"send":0,"wait":167,"receive":0,"ssl":2234},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/direct2.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:36.858Z","timestamp":1727198856858,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /direct2.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:36 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 449826\r\nlast-modified: Thu, 19 Sep 2024 12:30:30 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=dTpkbXR7gnIokX7ITNxTpu%2BXRJU4hduEacBLwABVhv%2Br18XLVC48U2MI5d3ppp5WeMq0JQH9i17HHd5%2FEV61eUDi%2F8cWgXTDdne68M9gGAmPYCc7gsDtKudcxw6h4u5vDopu\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c781dcc726c-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":465,"size_decoded":465,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (495), with no line terminators","md5":"11447d5083e75c53718787ab7106e46e","sha1":"f1811064f779324e127fe55ea0b26eea33ad6b33","sha256":"ebe76503970fa4f1e9a31d974649dc7d354b6ff49d81e4fb8a5add532c26fc5d","sha512":"d2d523faacbaf276dd2c49836eca84d21077aab6c63f8e9a2f743963faec37a3ac3ad756d17a7c14bc2276e26f0eed9fe562724c52297bc7f8fd8ab45d313be0","ssdeep":"","tlshash":"cdf09e6b6e58b0032e6405950db072546175b007147ae4fce0c8c761c4d4948d826ab5","first_seen":"2024-05-17T09:36:38Z","last_seen":"2024-10-11T09:19:30.987945Z","times_seen":42,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":109,"dns":21,"connect":20,"send":0,"wait":30,"receive":0,"ssl":108},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/adf3.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.791Z","timestamp":1727198859791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /adf3.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww-7.good-trading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 449838\r\nlast-modified: Thu, 19 Sep 2024 12:30:21 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=EYGBtKN3tCoyJyMRXrupSBwVpbQLg14TBuBnakoPKCItyKPbAcGXK2Ky5nB7aTThNTYHqBd4Zfj6cZKFKFzkw3vfPfHVV8IfP6UzDQp3RV7vqIotguN9ZTmDcqw5syyhM81s\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c858ef70a50-AMS\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":246,"size_decoded":246,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"8a6be47a4e7efea28a80d74ccbb2047b","sha1":"20e0afbb9bf6a8f414934b7521453be9deef00ef","sha256":"ef890c797332b264943c30985b5025badb28d860fa60b511f371a27145a2347d","sha512":"3dedb966d956fb7ba261c4a6cecded58c602731ae1187104ca124dde10f9734b9c670463300d498095af86de8f6e6c55acaef6f9b91a248737efbd0110184ee9","ssdeep":"","tlshash":"1fd02bbfdc48f115114046a0547172fc6667740462f1a005f2c89217ccd07c5d833be0","first_seen":"2023-05-14T10:33:36Z","last_seen":"2024-10-11T09:19:31.024986Z","times_seen":39,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndication.realsrv.com/vregister.php?a=vimp\u0026tracking_event=impression\u0026idzone=3981938\u00262f0c2af9d35a1a2cdde21db2fe9eb7be=tsVuZ8uHLpt4edvLpq48_XLv66cNdlTlK8E.fnju88N3Tlu49emtqayWunDMos7XA3GxK9Yw85n0466oK3F35qq5WJHM2G7I65JmYI3K6WHXYGtzU0muBthu1ymuCpynPxw5dOXTXA3PYzHBU.5Tn34dOnPprgbqgrcz8d.vnj41wN4zSuZ8_Pjj55.NcDbTFbj01OGfXh41wNtMSTsQPS59ePfx258tcDdrFMDFcE0ufHh078uPTnw1wNzVZ8euuBtmma6pynPnrgbbctgacz4a4G2mKaYHKc.GuBuCqfPhrqsZz4a7WI7HM.27gDt6657GY4Kn3KV6WK3M._DXPYzHBU.5Su1ZTS5K1hmCidraYknYgelXasppclawzRPA1uXtPsSvOL1zLz2MxwVPuU58N3nhy6a3L2n2JXnF65l5XK7pqYs.OthtevCdzPnx1uzUyMV564G5XK7pqYs.OtqayWunBeamB6CViPMos7W_XXOveu7NTcxS242u7NTnrgbnpmbsarXaYrcempwz4.Nc9MDUEry8kzbkefjW_XXPVnx11NUuOSr0uVTR2VwTS567KnKV4G8.GuymNd9ip_Njw126t.ODvLrz78fHnk52c4cuXXp0bbY6Mu64JJ6XKqoJpV6q2K7Ks.OuCSelyqqCaVeCW1iOBtelxiqaXPhrpcdcpcpXqgrcXfmqrlYkczuu299z00ze2ulhuCV7c1NJrYbZjmaiz4a4G5nXXKc.GuBuNiVuCV5edh5zPhrcvcasrgmlXrgkcz4a4G22K2GnJa3Kc.WuBtpimmByleqaylpzPhrlmqapgnrz4a4JWpnpYK5l5Jm3M.GutyqteSZtzPhrpcegmlXecmlYkcXgbz4a56Zr8F6q2K7Ks9vHXA3OxTXK5Tnw1tQV4LvOTSsSOLwN58.PXj25d9crlbDVkFeC89M1.C9eE7meuVythqyCvBeema_BdtypqmCeuCaXPWw2zHM1Eva5TnrgknpcqqgmlXYjjXgltYjgbXpcYqmlqz4a6rGeWfDXVYzzz4a6mqYJ6168J3M9dTVME9a8rEjmeupqmCete1ynPWzTNdU5Sva5Tnw12058NcEtblMrEefDXLMu7ZK3Vnw1wN0uVTzS1QWuLxsYTWV58NcDclkdcGM0rmfDW5IxBGvBVPnw11NUwT1rtuVsQR59tdTVME9a9rlNUE0ufHXA2w3a5TXBU5Suw2vXhO5ny464G56Zr8M.GthtelyixyqtelyqyOvPjrgblcrumpiXrwncz464G2mJJ2IHpV68J3M.GumtleCW1yWuanBeBvPXTWyvBLa5LXNTgvKxI5nricwXtYjscX458NcTmC9rEdji_LPhricwXtYjscX558NcTmC9rEdji_TPhricwXtYjscX658NcTmC9rEdji_bPhricwXtYjscX758NcTmC9rEdji_jPhricwXtYjscX858NcTmC9rEdji_Hhnw1tNyr2VMPOZ9fHftrZgbXqfYbgleXtYjscz4a6nGppW12XKq17WI7HM.GtixquCaVd2OaanPhrYsargmlXacgjz4a4G66WHXYGl6prKWnM.WtmymPPXZU5Su0xPPBK9nrsqcpXaYnngleXdpcosclawz122WQN58e_Lvx8.PHbhx49uHPzx4cfHbs7yd7eGuPTn48664JHKq2JJ8.Pfl34.fHjtw1tTTRQONTS1OS158YA-","fqdn":"syndication.realsrv.com","domain":"realsrv.com","tld":"com"},"ip":{"addr":"95.211.229.247","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:41.988Z","timestamp":1727198861988,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"realsrv.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Sep 2024 10:35:05 GMT","end":"Wed, 11 Dec 2024 10:35:04 GMT"},"fingerprint":{"sha1":"95:7B:F0:3D:0B:82:4B:0B:7F:3B:06:68:76:24:A6:18:CE:1F:1C:FA","sha256":"A6:2B:F5:D8:36:FD:0D:0E:D8:34:F7:08:44:11:AC:85:FD:C3:D8:E1:8B:C8:6D:51:C9:1C:6C:44:D8:B3:9F:0D"}}},"request":{"raw":"GET /vregister.php?a=vimp\u0026tracking_event=impression\u0026idzone=3981938\u00262f0c2af9d35a1a2cdde21db2fe9eb7be=tsVuZ8uHLpt4edvLpq48_XLv66cNdlTlK8E.fnju88N3Tlu49emtqayWunDMos7XA3GxK9Yw85n0466oK3F35qq5WJHM2G7I65JmYI3K6WHXYGtzU0muBthu1ymuCpynPxw5dOXTXA3PYzHBU.5Tn34dOnPprgbqgrcz8d.vnj41wN4zSuZ8_Pjj55.NcDbTFbj01OGfXh41wNtMSTsQPS59ePfx258tcDdrFMDFcE0ufHh078uPTnw1wNzVZ8euuBtmma6pynPnrgbbctgacz4a4G2mKaYHKc.GuBuCqfPhrqsZz4a7WI7HM.27gDt6657GY4Kn3KV6WK3M._DXPYzHBU.5Su1ZTS5K1hmCidraYknYgelXasppclawzRPA1uXtPsSvOL1zLz2MxwVPuU58N3nhy6a3L2n2JXnF65l5XK7pqYs.OthtevCdzPnx1uzUyMV564G5XK7pqYs.OtqayWunBeamB6CViPMos7W_XXOveu7NTcxS242u7NTnrgbnpmbsarXaYrcempwz4.Nc9MDUEry8kzbkefjW_XXPVnx11NUuOSr0uVTR2VwTS567KnKV4G8.GuymNd9ip_Njw126t.ODvLrz78fHnk52c4cuXXp0bbY6Mu64JJ6XKqoJpV6q2K7Ks.OuCSelyqqCaVeCW1iOBtelxiqaXPhrpcdcpcpXqgrcXfmqrlYkczuu299z00ze2ulhuCV7c1NJrYbZjmaiz4a4G5nXXKc.GuBuNiVuCV5edh5zPhrcvcasrgmlXrgkcz4a4G22K2GnJa3Kc.WuBtpimmByleqaylpzPhrlmqapgnrz4a4JWpnpYK5l5Jm3M.GutyqteSZtzPhrpcegmlXecmlYkcXgbz4a56Zr8F6q2K7Ks9vHXA3OxTXK5Tnw1tQV4LvOTSsSOLwN58.PXj25d9crlbDVkFeC89M1.C9eE7meuVythqyCvBeema_BdtypqmCeuCaXPWw2zHM1Eva5TnrgknpcqqgmlXYjjXgltYjgbXpcYqmlqz4a6rGeWfDXVYzzz4a6mqYJ6168J3M9dTVME9a8rEjmeupqmCete1ynPWzTNdU5Sva5Tnw12058NcEtblMrEefDXLMu7ZK3Vnw1wN0uVTzS1QWuLxsYTWV58NcDclkdcGM0rmfDW5IxBGvBVPnw11NUwT1rtuVsQR59tdTVME9a9rlNUE0ufHXA2w3a5TXBU5Suw2vXhO5ny464G56Zr8M.GthtelyixyqtelyqyOvPjrgblcrumpiXrwncz464G2mJJ2IHpV68J3M.GumtleCW1yWuanBeBvPXTWyvBLa5LXNTgvKxI5nricwXtYjscX458NcTmC9rEdji_LPhricwXtYjscX558NcTmC9rEdji_TPhricwXtYjscX658NcTmC9rEdji_bPhricwXtYjscX758NcTmC9rEdji_jPhricwXtYjscX858NcTmC9rEdji_Hhnw1tNyr2VMPOZ9fHftrZgbXqfYbgleXtYjscz4a6nGppW12XKq17WI7HM.GtixquCaVd2OaanPhrYsargmlXacgjz4a4G66WHXYGl6prKWnM.WtmymPPXZU5Su0xPPBK9nrsqcpXaYnngleXdpcosclawz122WQN58e_Lvx8.PHbhx49uHPzx4cfHbs7yd7eGuPTn48664JHKq2JJ8.Pfl34.fHjtw1tTTRQONTS1OS158YA- HTTP/1.1\r\nHost: syndication.realsrv.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww-7.good-trading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 24 Sep 2024 17:27:41 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: \r\nAccess-Control-Allow-Credentials: true\r\nX-Robots-Tag: noindex, follow\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.clixvista.com/redirect?feed=604310\u0026auth=9ITZtu\u0026subid=clixvistam1\u0026query=clixvistam1\u0026url=clixvista1.com","fqdn":"xml.clixvista.com","domain":"clixvista.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.099Z","timestamp":1727198862099,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=604310\u0026auth=9ITZtu\u0026subid=clixvistam1\u0026query=clixvistam1\u0026url=clixvista1.com HTTP/1.1\r\nHost: xml.clixvista.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":446,"timings":{"blocked":442,"dns":4,"connect":89,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ctrtraffic.me/mediam.html","fqdn":"ctrtraffic.me","domain":"ctrtraffic.me","tld":"me"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:37.108Z","timestamp":1727198857108,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ctrtraffic.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Sep 2024 18:56:16 GMT","end":"Sun, 15 Dec 2024 18:56:15 GMT"},"fingerprint":{"sha1":"B5:5C:14:47:59:F7:46:21:B1:85:1E:A6:98:2C:65:CD:81:D3:BA:C1","sha256":"E5:25:D1:2F:7F:BC:68:5B:1F:BC:C8:BD:52:2E:65:5D:37:AD:AB:11:36:A4:DF:65:78:23:93:7B:6D:36:12:16"}}},"request":{"raw":"GET /mediam.html HTTP/1.1\r\nHost: ctrtraffic.me\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 513675\r\nlast-modified: Wed, 18 Sep 2024 18:46:22 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9iwGAEO69LEMYRA8dv0BqESm7KzY3KtDRike%2FEGUvyC0GHnpb7jJsLS2TJK54g8hZSStMSg1ZZWThgI9wzOBuegPvNwSc4B6529wEzltVl4LhRb6tbmWd%2FZ9UnPKlGdq\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c796a706a62-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":262,"size_decoded":262,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"015922f89bb47cb037a4bbc0f2149abc","sha1":"e2f686f2dfb684fb9d986211358b620c293ed142","sha256":"ed6cc1e807c0f6a48f750dcd6e5445604b4274445f53d84c46cac96a485733d2","sha512":"195f282d80861cbe65259dea25660d89f89505f0046d7a4da044a5abc185a67fa1b4e57cd4b844c23c60d03bbb6fdf7114433870d59bd8524ccf29a5bdd6bf07","ssdeep":"","tlshash":"fcd02bff1d08f0001a9219e83cf1717c239ea54851747104b5895326c8d8b80c832fe4","first_seen":"2023-04-30T05:58:34Z","last_seen":"2024-10-11T09:19:31.004207Z","times_seen":27,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":66,"dns":114,"connect":42,"send":0,"wait":25,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sub.votreimc.com/eximdigitalm1.html","fqdn":"sub.votreimc.com","domain":"votreimc.com","tld":"com"},"ip":{"addr":"172.67.222.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.429Z","timestamp":1727198859429,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votreimc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Sep 2024 02:12:01 GMT","end":"Sat, 14 Dec 2024 02:12:00 GMT"},"fingerprint":{"sha1":"AF:56:A8:13:7B:6E:27:2B:03:40:18:37:A2:8B:CA:0F:2F:6D:E0:FA","sha256":"44:AD:5E:CF:7E:DE:B0:30:21:4D:10:85:AA:65:B9:AC:F4:EA:F9:DA:BC:84:CE:A6:39:8C:B9:24:E9:77:43:4A"}}},"request":{"raw":"GET /eximdigitalm1.html HTTP/1.1\r\nHost: sub.votreimc.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nx-iplb-request-id: A29ECA50:CFC2_91EF25A2:0050_66EB2372_634C3:16DF\r\nx-iplb-instance: 52360\r\ncf-cache-status: HIT\r\nage: 512793\r\nlast-modified: Wed, 18 Sep 2024 19:01:06 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=cmqENF3pjaMMCVv8EiRxwFiFGnRhXHjP5YdIaEAYBl%2BiFpxd4U3mPedYJXxOjxDE%2BGhkoujdnE6oRsFZVcyNJEZIdsPrQrPNA9fcHt1%2BmiMQNEEH7wjl%2FJB8u94xiSXDFuHu\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c854fbf62b8-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":269,"size_decoded":269,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"33c27f254b09173792eb326926127987","sha1":"589eed942ef71bca0dfd358c7b2e6f75c93a4940","sha256":"99d640d50a437a9d501e52219814c971ee5c91526d4ac16ec3b192551a148bc7","sha512":"6c26f9f9f11a268d187f63a22ff11a6e5dcfe2952a87a4824044ad853fed1b81553db7cca0dcb5f8aa68eb405493509fb163500a135263942518ec58d16ba94b","ssdeep":"","tlshash":"afd0c2af1e0990000b5008d097736b6c6871e574046838b4a1c54276d5c4a9cccb23e8","first_seen":"2024-04-09T19:05:02Z","last_seen":"2024-10-06T19:12:51.507262Z","times_seen":35,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adzgame.com/redirect?feed=647205\u0026auth=WYD00z\u0026subid=adzgame1\u0026query=adzgame1\u0026url=adzgame1.com","fqdn":"xml.adzgame.com","domain":"adzgame.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.077Z","timestamp":1727198862077,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=647205\u0026auth=WYD00z\u0026subid=adzgame1\u0026query=adzgame1\u0026url=adzgame1.com HTTP/1.1\r\nHost: xml.adzgame.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":960,"timings":{"blocked":939,"dns":21,"connect":101,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imdn.pics/m/p/0/770/770824/P1r9hLS2.html?\u0026pricebox_price=0.0010\u0026OS_FAMILY=%5BOS_FAMILY%5D\u0026utm4=0-10346131-0\u0026ad_sub=71860570\u0026DOMAIN=3txxx.com\u0026id_zone=%5Bidzone%5D\u0026CAMPAIGN_ID=236776\u0026site=%7B%7B+site+%7D%7D\u0026__OS_FAMILY__=%7B%7B+__OS_FAMILY__+%7D%7D\u0026price=0.0020\u0026utm2=878669509-100\u0026MOBILE_BRAND=%5BMOBILE_BRAND%5D\u0026click_id=065399e7-1b84-4bc2-b47f-4985a71b194d\u0026COUNTRY_ISO_CODE=%5BCOUNTRY_ISO_CODE%5D\u0026BROWSER_FAMILY=%5BBROWSER_FAMILY%5D\u0026__BROWSER_FAMILY__=%7B%7B+__BROWSER_FAMILY__+%7D%7D\u0026priority=%5BPRIORITY%5D\u0026utm3=249-1353416-46616\u0026bidding_price=0.0020\u0026campaign_id=236776\u0026PRICING_MODEL=cpm\u0026__IP2L_MOBILE__=%7B%7B+__IP2L_MOBILE__+%7D%7D\u0026pricing_model=cpm\u0026OS_TYPE=%5BOS_TYPE%5D\u0026__GEOIP_COUNTRY_SHORT__=%7B%7B+__GEOIP_COUNTRY_SHORT__+%7D%7D\u0026out_name=236776%7C83954%7Ccpm%7C0.0020%7C%24+0.0020\u0026PRICE=0.0020\u0026__OS_TYPE__=%7B%7B+__OS_TYPE__+%7D%7D\u0026click_event_url=https%3A%2F%2Fbts.a11k.com%2Fin%2Ftclick%2F%3Fkatds_ep%3Dm29lFp3d0cnQAcd6VVcVIP3A6MGilhjH8HflMKzCXFIyhzKqeA0prc41DLW0Q1L6tmJ38KU5ikjVweoFDFUaps6cX6CLMbmiiOtCY5Xa9YQSSoPYcINkU3hIzecyWirmA_4X2379WVhwyqhwSU6xv-GmiZ9gF40rHwh-J3a3nA-GPAaPO6cEQH8OQpi3t49keatv5jdBat53n9UvDqSaLKUN7Ihrty630xpaue6wdZJGuT7nM_fItWF2SG2r-VGZxfPauKiD4XmSkD5titn25mnYUtTn5DeeT5-YQ_Gidiz1u1Uoz6HDWOiSQsx2smZNQAUxlv13gtab11TAKbn369vLapczQxKhPwKrzdQjOmjwR3cagatJwP2AZEb9W9xt6otbRMKAGKRrvCzOxpQBaPa5Ha_HthLlhTVdDH1LnE8vckpPE7CmIiWQKpz9CnBjDx2W5Rl2ItKfPvAJSCpVSkQPLrxuCz7hgH9pzr3h-BSFqBnZJQywE9qlDf-ct-_oBWBmoTxVyWUBvKMwgKbD8_XMKltb9qhG2a2ULVtYNuPFE8JpUijiid6wb562qJCDv2EDA9awXo_HzLP-wx-RxxHpsG4kgmzL6TryxmpSaall2EcS_RbafR70G8tEUdJS6ViLdJGBBkXEa_zmwRGRGqv7XQfOzwBzBC8leIvL4WmscOcxg544QwBXJ_8YPwXrOmIR3wVUitWwKXODcPrPjzEJyTt29f8ldIexDkkIUYHylr1hTH9uStM_2DHuQfth_t0knnmWNeId3C4S0pIK4yZJXZRLqrnHGbJdtJAx1E-G6sd-ljNpAmPbs_xkAGojjybHOoqvKT50lRZX6vs3mEP4c06X-aeMCP15O05J8_QktIN6d3Fw6mIFZWpl0QecIkDIv0B6toZb3KQTDL7D1Y4BYeyi10BrU1-WSqRUP1Z1VJpdfnACQOtTSw%26bid%3D%24%7BAUCTION_PRICE%7D\u0026utm1=tcb","fqdn":"imdn.pics","domain":"imdn.pics","tld":"pics"},"ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://rtbrenab.com/get/?go=1\u0026data=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","date":"2024-09-24T17:27:35.295Z","timestamp":1727198855295,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imdn.pics","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Sep 2024 03:02:53 GMT","end":"Sat, 07 Dec 2024 03:02:52 GMT"},"fingerprint":{"sha1":"2C:74:6D:B1:42:DE:4E:9B:FD:75:DC:69:84:15:B7:21:D9:13:A7:0D","sha256":"B1:3D:47:0F:4C:5D:8D:A2:53:37:C2:0C:BC:78:78:E5:EC:F4:06:CB:FB:A3:78:B5:BF:41:78:2A:2B:AC:C2:68"}}},"request":{"raw":"GET /m/p/0/770/770824/P1r9hLS2.html?\u0026pricebox_price=0.0010\u0026OS_FAMILY=%5BOS_FAMILY%5D\u0026utm4=0-10346131-0\u0026ad_sub=71860570\u0026DOMAIN=3txxx.com\u0026id_zone=%5Bidzone%5D\u0026CAMPAIGN_ID=236776\u0026site=%7B%7B+site+%7D%7D\u0026__OS_FAMILY__=%7B%7B+__OS_FAMILY__+%7D%7D\u0026price=0.0020\u0026utm2=878669509-100\u0026MOBILE_BRAND=%5BMOBILE_BRAND%5D\u0026click_id=065399e7-1b84-4bc2-b47f-4985a71b194d\u0026COUNTRY_ISO_CODE=%5BCOUNTRY_ISO_CODE%5D\u0026BROWSER_FAMILY=%5BBROWSER_FAMILY%5D\u0026__BROWSER_FAMILY__=%7B%7B+__BROWSER_FAMILY__+%7D%7D\u0026priority=%5BPRIORITY%5D\u0026utm3=249-1353416-46616\u0026bidding_price=0.0020\u0026campaign_id=236776\u0026PRICING_MODEL=cpm\u0026__IP2L_MOBILE__=%7B%7B+__IP2L_MOBILE__+%7D%7D\u0026pricing_model=cpm\u0026OS_TYPE=%5BOS_TYPE%5D\u0026__GEOIP_COUNTRY_SHORT__=%7B%7B+__GEOIP_COUNTRY_SHORT__+%7D%7D\u0026out_name=236776%7C83954%7Ccpm%7C0.0020%7C%24+0.0020\u0026PRICE=0.0020\u0026__OS_TYPE__=%7B%7B+__OS_TYPE__+%7D%7D\u0026click_event_url=https%3A%2F%2Fbts.a11k.com%2Fin%2Ftclick%2F%3Fkatds_ep%3Dm29lFp3d0cnQAcd6VVcVIP3A6MGilhjH8HflMKzCXFIyhzKqeA0prc41DLW0Q1L6tmJ38KU5ikjVweoFDFUaps6cX6CLMbmiiOtCY5Xa9YQSSoPYcINkU3hIzecyWirmA_4X2379WVhwyqhwSU6xv-GmiZ9gF40rHwh-J3a3nA-GPAaPO6cEQH8OQpi3t49keatv5jdBat53n9UvDqSaLKUN7Ihrty630xpaue6wdZJGuT7nM_fItWF2SG2r-VGZxfPauKiD4XmSkD5titn25mnYUtTn5DeeT5-YQ_Gidiz1u1Uoz6HDWOiSQsx2smZNQAUxlv13gtab11TAKbn369vLapczQxKhPwKrzdQjOmjwR3cagatJwP2AZEb9W9xt6otbRMKAGKRrvCzOxpQBaPa5Ha_HthLlhTVdDH1LnE8vckpPE7CmIiWQKpz9CnBjDx2W5Rl2ItKfPvAJSCpVSkQPLrxuCz7hgH9pzr3h-BSFqBnZJQywE9qlDf-ct-_oBWBmoTxVyWUBvKMwgKbD8_XMKltb9qhG2a2ULVtYNuPFE8JpUijiid6wb562qJCDv2EDA9awXo_HzLP-wx-RxxHpsG4kgmzL6TryxmpSaall2EcS_RbafR70G8tEUdJS6ViLdJGBBkXEa_zmwRGRGqv7XQfOzwBzBC8leIvL4WmscOcxg544QwBXJ_8YPwXrOmIR3wVUitWwKXODcPrPjzEJyTt29f8ldIexDkkIUYHylr1hTH9uStM_2DHuQfth_t0knnmWNeId3C4S0pIK4yZJXZRLqrnHGbJdtJAx1E-G6sd-ljNpAmPbs_xkAGojjybHOoqvKT50lRZX6vs3mEP4c06X-aeMCP15O05J8_QktIN6d3Fw6mIFZWpl0QecIkDIv0B6toZb3KQTDL7D1Y4BYeyi10BrU1-WSqRUP1Z1VJpdfnACQOtTSw%26bid%3D%24%7BAUCTION_PRICE%7D\u0026utm1=tcb HTTP/1.1\r\nHost: imdn.pics\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rtbrenab.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:35 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: nginx\r\nlast-modified: Mon, 01 Apr 2024 14:09:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"660ac017-aaa\"\r\nx-request-id: 6afa3b0a33ae8f0ca00dc64fecf8737f\r\ncontent-encoding: gzip\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache, no-cache\r\nexpires: 0\r\nx-proxy-cache: MISS, MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2730,"size_decoded":2730,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2850), with no line terminators","md5":"393e3125fb9d1af891ee6ed46970d739","sha1":"ef88129e230205ca9368373e59817d8120057c3b","sha256":"f7ae4a86d9a01de17a5e5e3345b4b1249dbf9077b1f977ce06c4a8915f4e57a6","sha512":"56ee62adeab39a08b28c5496395dcfa8a4b5276b2c4350f14fb7d552bc4ab91b7901bbd938846b70489a597be8bbb28d5edb82ebd790040dad2558987a4be595","ssdeep":"","tlshash":"1e51b55f26c0d1b4012244340377f53e78bb3a947a660424f0cc9998ab98f6f5243bf8","first_seen":"2024-09-20T04:00:00Z","last_seen":"2024-10-04T11:19:02.801642Z","times_seen":12,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.clickmi.net/redirect?feed=487260\u0026auth=AaB5ql\u0026subid=clickmia\u0026query=clickmia\u0026url=clickmi.net","fqdn":"xml.clickmi.net","domain":"clickmi.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:41.741Z","timestamp":1727198861741,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=487260\u0026auth=AaB5ql\u0026subid=clickmia\u0026query=clickmia\u0026url=clickmi.net HTTP/1.1\r\nHost: xml.clickmi.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":72,"connect":99,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sub.votreimc.com/adzgame.html","fqdn":"sub.votreimc.com","domain":"votreimc.com","tld":"com"},"ip":{"addr":"172.67.222.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:37.282Z","timestamp":1727198857282,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votreimc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Sep 2024 02:12:01 GMT","end":"Sat, 14 Dec 2024 02:12:00 GMT"},"fingerprint":{"sha1":"AF:56:A8:13:7B:6E:27:2B:03:40:18:37:A2:8B:CA:0F:2F:6D:E0:FA","sha256":"44:AD:5E:CF:7E:DE:B0:30:21:4D:10:85:AA:65:B9:AC:F4:EA:F9:DA:BC:84:CE:A6:39:8C:B9:24:E9:77:43:4A"}}},"request":{"raw":"GET /adzgame.html HTTP/1.1\r\nHost: sub.votreimc.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nx-iplb-request-id: A29ECA85:2FF0_91EF25A2:0050_66EB32F3_55EE2:7EF8\r\nx-iplb-instance: 52360\r\ncf-cache-status: HIT\r\nage: 508822\r\nlast-modified: Wed, 18 Sep 2024 20:07:15 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=WNR1W8oSF7Dz4Hd3uWkm1c%2B7X9CrWdNJpd8CFJohi59oQSV0Y8gfbuQDg9U6UO1C17kflnVwpQjbmUTiRFVDJ1gM02mXVIA4a3D8zY0v%2BL4fuNVyZ0fM%2Be1h1xqOxaKGJmMq\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c7938c762b8-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":250,"size_decoded":250,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"ff783313859dde7d84e84f663b082abd","sha1":"b3d347c7be360c99d8ad29b5fdb03459c6bf4d3a","sha256":"43c1887e2fc3f39b3bd84de5d2ef6df0ea6350e21b8290c1f6e8dbf2b774b42c","sha512":"9b2e7ed0943e13cda6047e790e52f0c39564ca4e84b53032e3c97a0936300bff9a91f6f87751f081cf0774aea433ed7fa503214483a66fb8fc70975791dfca5d","ssdeep":"","tlshash":"3cd095ef1e1590030d7154d09771b75ca417b044545c785453c591f7d4d47c4dc333d0","first_seen":"2023-05-14T10:33:36Z","last_seen":"2024-10-11T09:19:30.998061Z","times_seen":44,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":44,"connect":35,"send":0,"wait":29,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.flurryad.com/redirect?feed=647218\u0026auth=bVOVbk\u0026subid=flurryn\u0026query=flurryn\u0026url=flurryadn.com","fqdn":"xml.flurryad.com","domain":"flurryad.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.040Z","timestamp":1727198862040,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=647218\u0026auth=bVOVbk\u0026subid=flurryn\u0026query=flurryn\u0026url=flurryadn.com HTTP/1.1\r\nHost: xml.flurryad.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":970,"timings":{"blocked":953,"dns":17,"connect":93,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.rtbfactory.com/redirect?feed=538479\u0026auth=yKffhA\u0026subid=rtb\u0026query=rtb\u0026url=rtbfactory.com","fqdn":"xml.rtbfactory.com","domain":"rtbfactory.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.165Z","timestamp":1727198862165,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=538479\u0026auth=yKffhA\u0026subid=rtb\u0026query=rtb\u0026url=rtbfactory.com HTTP/1.1\r\nHost: xml.rtbfactory.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":462,"timings":{"blocked":461,"dns":1,"connect":100,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c99574de6f.dd4ef151bb.com/aa120219a4a8504943209594a109c121.js","fqdn":"c99574de6f.dd4ef151bb.com","domain":"dd4ef151bb.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:34.145Z","timestamp":1727198854145,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c99574de6f.dd4ef151bb.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Sep 2024 02:21:50 GMT","end":"Fri, 20 Dec 2024 02:21:49 GMT"},"fingerprint":{"sha1":"7D:86:0E:F7:5B:A4:C6:6D:AF:2D:39:08:2C:F3:1A:6E:B2:A9:F9:A0","sha256":"54:A2:8A:6F:67:B8:4A:D8:37:E2:26:62:0E:92:F3:A3:0F:D7:24:25:0E:25:BF:E1:80:01:D4:5C:25:0D:09:BB"}}},"request":{"raw":"GET /aa120219a4a8504943209594a109c121.js HTTP/1.1\r\nHost: c99574de6f.dd4ef151bb.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:34 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Tue, 17 Sep 2024 14:08:19 GMT\r\netag: W/\"66e98d53-2d54d\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 24 Sep 2024 17:32:34 GMT\r\ncache-control: max-age=300\r\nx-proxy-cache: HIT\r\nx-cdn-host-id: ds9225\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":185677,"size_decoded":185677,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smkezc.com/cuload?a=1\u0026e=aeyJwaWQiOjEwNTAxODIsInNpZCI6MTM0NzExMCwid2lkIjo2Mjc1NTEsImQiOiJuZXdzMjQubWVkaWEiLCJsaSI6MX0=\u0026tz=2\u0026if=0\u0026u=aHR0cHM6Ly9mci5uZXdzMjQubWVkaWEv\u0026chpv=15.0.0","fqdn":"smkezc.com","domain":"smkezc.com","tld":"com"},"ip":{"addr":"185.162.85.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cgb.news24.media/?d","date":"2024-09-24T17:27:37.300Z","timestamp":1727198857300,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"smkezc.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Aug 2024 16:35:06 GMT","end":"Fri, 01 Nov 2024 16:35:05 GMT"},"fingerprint":{"sha1":"37:3D:1E:8C:4A:DF:80:8E:7F:FC:A6:71:84:26:87:61:DA:78:BF:90","sha256":"26:14:35:3F:BD:58:CC:7C:C2:12:09:FD:CB:49:20:F1:72:A4:80:9A:E1:DD:63:86:F2:2A:89:A3:7E:02:94:D2"}}},"request":{"raw":"GET /cuload?a=1\u0026e=aeyJwaWQiOjEwNTAxODIsInNpZCI6MTM0NzExMCwid2lkIjo2Mjc1NTEsImQiOiJuZXdzMjQubWVkaWEiLCJsaSI6MX0=\u0026tz=2\u0026if=0\u0026u=aHR0cHM6Ly9mci5uZXdzMjQubWVkaWEv\u0026chpv=15.0.0 HTTP/1.1\r\nHost: smkezc.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cgb.news24.media/\r\nOrigin: https://cgb.news24.media\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\naccept-ch: Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":149,"size_decoded":149,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"2c1dcb9e94b1b77a796fdbb994029d45","sha1":"0c3003e6de2ba3aa394027ec9744172fcc14e983","sha256":"9daab5c0ad00ec79f9e300b12d90a6310058b1d94b39cb7c53d0a715d28e59be","sha512":"0d82b3ff5242e6b274972330ad0f009e2c46837ebab56b19016b6155a39552ff35518abdf38339dd9981d428811bb5ee7d2e6fc73cb984549a4b543188e56906","ssdeep":"","tlshash":"52c08cc061e6c0ced8000e2ea3bb0c3490825ebac4b788226c7cd4c014bc1b0439b4a0","first_seen":"2024-09-28T07:59:48.768896Z","last_seen":"2024-09-28T07:59:48.768896Z","times_seen":1,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-09-24","alert":"Sinkholed","trigger":"smkezc.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xml.adtube.media/redirect?feed=581061\u0026auth=WpL9mU\u0026subid=adtu\u0026query=adtu\u0026url=advert.media","fqdn":"xml.adtube.media","domain":"adtube.media","tld":"media"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:41.766Z","timestamp":1727198861766,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=581061\u0026auth=WpL9mU\u0026subid=adtu\u0026query=adtu\u0026url=advert.media HTTP/1.1\r\nHost: xml.adtube.media\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":17,"connect":109,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adzgame.com/redirect?feed=436085\u0026auth=r2BL6s\u0026subid=adzgame\u0026query=adzgame\u0026url=adzgame.com","fqdn":"xml.adzgame.com","domain":"adzgame.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:42.050Z","timestamp":1727198862050,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=436085\u0026auth=r2BL6s\u0026subid=adzgame\u0026query=adzgame\u0026url=adzgame.com HTTP/1.1\r\nHost: xml.adzgame.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":43,"dns":4,"connect":99,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/clickmia.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:38.743Z","timestamp":1727198858743,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /clickmia.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww1.good-trading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 449827\r\nlast-modified: Thu, 19 Sep 2024 12:30:30 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QdRCPDob3Tr7dOG4qfsugjH56mbJHgJjigprgQ1INUVtXdwzjK7Ih%2BUOFMMYHcSuZsrxX1oNJxXTcMSqlJcWb7lLmsKy0Av77D01okTQFSDCNgfB%2BpEev2XkeHl%2BZ3TxzqJJ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c7c2f11726c-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":252,"size_decoded":252,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"f0f9d17e9cb0433a8333b142898241dd","sha1":"bb050cf7f925812cbb03cc40b121ee19a60cc7c9","sha256":"28fff621fc5340411871d42c4b83a005d89f33e8b0ccc6abbb1758d4d5277305","sha512":"25150903277133dcc0d9d94cee8dc2b71607153988ee872da9715dd59a3b282ed815c0786d89966ac4b5b3efa795ad7af6eea80447f58b8a23b4273fb75bb971","ssdeep":"","tlshash":"53d02bbe5c04b004211024a414b0b27e269b500a3e7a3058e1c94a25d4cc7ccd9b3be0","first_seen":"2023-05-12T17:45:47Z","last_seen":"2024-10-11T09:19:31.003467Z","times_seen":39,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ctrtraffic.me/media1.html","fqdn":"ctrtraffic.me","domain":"ctrtraffic.me","tld":"me"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:37.113Z","timestamp":1727198857113,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ctrtraffic.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Sep 2024 18:56:16 GMT","end":"Sun, 15 Dec 2024 18:56:15 GMT"},"fingerprint":{"sha1":"B5:5C:14:47:59:F7:46:21:B1:85:1E:A6:98:2C:65:CD:81:D3:BA:C1","sha256":"E5:25:D1:2F:7F:BC:68:5B:1F:BC:C8:BD:52:2E:65:5D:37:AD:AB:11:36:A4:DF:65:78:23:93:7B:6D:36:12:16"}}},"request":{"raw":"GET /media1.html HTTP/1.1\r\nHost: ctrtraffic.me\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 519986\r\nlast-modified: Wed, 18 Sep 2024 17:01:11 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2Bi4MCIvxYeuCKFRoCK7Uhrj%2BsIW4qNjwEV5cTVmeseMSBw%2FwuLEOoMILfNmdGCNBx1Y3zoAiUCjFUVLw8RJAA2RfL4uSi5JIuZ5E1sCrSIgFkaY06sIqHusQvmU8%2FV%2Bx\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c796a846a62-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":262,"size_decoded":262,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"e54d92b39e5456dbfe0efe2ef80ffdee","sha1":"bc05a0ef67c49b849b4b6d7956fba50b66a58202","sha256":"cb08464b825935db8446e2cfebc34b4cc7c5239f78f60b75d6a2c12152d7b88d","sha512":"0e1dd1bbac3d5ce0de49ca18d4ae09d2c04646d8255856fd0676b5ec8fd589b7963209038e7498941acc686786b21e2c4b14a71d71c854ce5f109911cabd5569","ssdeep":"","tlshash":"92d02bef6c4cf071454144a42cb572fd232e700451306004f289d625c8c8794cc36be0","first_seen":"2023-10-13T04:20:32Z","last_seen":"2024-10-11T09:19:30.994815Z","times_seen":39,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":69,"dns":115,"connect":42,"send":0,"wait":28,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redirect3.online/rtb1.html","fqdn":"redirect3.online","domain":"redirect3.online","tld":"online"},"ip":{"addr":"104.21.55.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:38.585Z","timestamp":1727198858585,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redirect3.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Sep 2024 16:21:21 GMT","end":"Mon, 02 Dec 2024 16:21:20 GMT"},"fingerprint":{"sha1":"46:1D:B0:17:F7:A5:4C:43:98:0F:A7:F0:E3:13:1A:C5:65:27:15:AD","sha256":"69:65:AB:BA:8F:55:4D:8C:ED:7A:0B:18:55:8C:05:31:E5:C9:2F:37:39:0B:7F:BF:99:F9:58:33:1B:42:6C:CF"}}},"request":{"raw":"GET /rtb1.html HTTP/1.1\r\nHost: redirect3.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 42307\r\nlast-modified: Tue, 24 Sep 2024 05:42:30 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=PILgXRIIZ%2FqeYH4AurQifZgdpeLbApOBqVLC%2FEd%2BDbCkNgFu6zeoWO8kVqRYgQAENcEfBydSaIGVTnhZlESAu%2FwNSs5cLPZbu%2FWtHOgOogtpVGsYyFDRqq7TOiq67HRuPqHk\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c7b2a4eb7b5-AMS\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":236,"size_decoded":236,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"b8debba54afc99921c1d6b3e259e8741","sha1":"f62d88fa8e9c3af426e45d51401fa282a19ac875","sha256":"dfbe0e77475fc1b732ca38074d42470623bd2c79d8eaba363f4cb00ecea7b59d","sha512":"5208945de96e24cb7396582de01c5a476e1b192e90ba847eb7265e0512b7d97ba71eb947dfbd343c3c603250cf0ee884819d08aad6e1925494b0c9a165471d5c","ssdeep":"","tlshash":"8ad05eae2e4c90051a6018e55b76e2ac782a90484565f06aa9ca823698c46d5dd733e4","first_seen":"2024-04-09T19:05:03Z","last_seen":"2024-10-11T09:19:30.983747Z","times_seen":37,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/adfa.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:38.618Z","timestamp":1727198858618,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /adfa.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww1.good-trading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 449827\r\nlast-modified: Thu, 19 Sep 2024 12:30:30 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XpEqBhsgpRyuKFSA3FsibcocpVmVS2W%2FBXBFX0XkI6kElQlLNVP7sOLrbh1gGsBfj5ykY%2BjgcZ4kNbHyTM1kNfkWNR9a4%2B%2Fkf0jbpoymOOuCeWZqDpl%2FBi5fn6jqgiZj5TEP\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c7b7dda726c-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":248,"size_decoded":248,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"676b4b3cf64885b970df3b326c238072","sha1":"a5b6007f44271cc213f329bcb8f26aa7c9d87d04","sha256":"037457d8c17ebb41e696bea61c94cc9279d2598dd4bfc840f94184175cbedbd5","sha512":"21b8b4b896fb16cb398846ba6c06f5c5c89fcd29910224b82f9bc83a5c714eaccfbb11c6f139d53472295a1dc1bcd08b1799a5bd75645716fbefd4910e5914b3","ssdeep":"","tlshash":"45d02bbe9c08f005465046b0547173fcba53a80864b16004b2c8522bccc0bc0dc73bf1","first_seen":"2023-05-12T17:45:47Z","last_seen":"2024-10-06T09:49:22.68462Z","times_seen":41,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.ctrtraffic.com/redirect?feed=599081\u0026auth=vXd348\u0026subid=popm1\u0026query=popm1\u0026url=popm1.com","fqdn":"xml.ctrtraffic.com","domain":"ctrtraffic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.067Z","timestamp":1727198862067,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=599081\u0026auth=vXd348\u0026subid=popm1\u0026query=popm1\u0026url=popm1.com HTTP/1.1\r\nHost: xml.ctrtraffic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":170,"dns":1,"connect":88,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gpshtb.com/go/708?source=3333","fqdn":"gpshtb.com","domain":"gpshtb.com","tld":"com"},"ip":{"addr":"173.214.244.181","port":443,"asn":15317,"as":"SERVEREL-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cfr.news24.media/?d","date":"2024-09-24T17:27:46.241Z","timestamp":1727198866241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"55trck.xyz","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jul 2024 04:17:35 GMT","end":"Fri, 25 Oct 2024 04:17:34 GMT"},"fingerprint":{"sha1":"A2:EA:29:7E:33:3C:75:B7:72:9F:49:4C:C6:B9:D0:8F:1C:BD:1B:B9","sha256":"ED:EB:AF:88:64:0E:3D:5D:7A:2A:F1:54:02:BD:44:82:B3:B6:BD:03:B7:A8:8C:5A:68:7F:57:C9:E5:AD:3D:9D"}}},"request":{"raw":"GET /go/708?source=3333 HTTP/1.1\r\nHost: gpshtb.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Tue, 24 Sep 2024 17:27:46 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://ykrvt.bestssp.top/?pl=YC0GOkWFo0Wz8n7UhRmi1w\u0026sub_id=3333\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":146,"size_decoded":146,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":1154,"timings":{"blocked":495,"dns":12,"connect":160,"send":0,"wait":161,"receive":0,"ssl":324},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative.rmhfrtnd.com/widgets/wrapper/index.b54835e4f932e3498192.js","fqdn":"creative.rmhfrtnd.com","domain":"rmhfrtnd.com","tld":"com"},"ip":{"addr":"104.18.40.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://creative.rmhfrtnd.com/widgets/wrapper?userId=21bef55dbc8f276fe29aaae6f9e950e3b6129b2c6480c95e51858c64ffbb33e4\u0026bb=8ef83ac6.gif","date":"2024-09-24T17:27:36.210Z","timestamp":1727198856210,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rmhfrtnd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Sep 2024 16:20:49 GMT","end":"Tue, 17 Dec 2024 16:20:48 GMT"},"fingerprint":{"sha1":"8C:6E:DB:60:9F:B6:67:74:EC:FA:2E:5C:F0:02:88:06:E6:E2:EA:F3","sha256":"CF:31:E3:98:44:35:AD:4D:A5:6D:BD:40:46:5F:6D:FC:34:21:B3:65:63:52:A9:9B:50:94:0F:21:89:87:38:CD"}}},"request":{"raw":"GET /widgets/wrapper/index.b54835e4f932e3498192.js HTTP/1.1\r\nHost: creative.rmhfrtnd.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://creative.rmhfrtnd.com/widgets/wrapper?userId=21bef55dbc8f276fe29aaae6f9e950e3b6129b2c6480c95e51858c64ffbb33e4\u0026bb=8ef83ac6.gif\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 23 Sep 2024 10:45:57 GMT\r\netag: W/\"66f146e5-2c07b\"\r\nexpires: Tue, 24 Sep 2024 17:27:37 GMT\r\ncache-control: max-age=10\r\npragma: public\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 4\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8c847c734ee6b512-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":180347,"size_decoded":180347,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redirect3.online/adx2.html","fqdn":"redirect3.online","domain":"redirect3.online","tld":"online"},"ip":{"addr":"104.21.55.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:38.358Z","timestamp":1727198858358,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redirect3.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Sep 2024 16:21:21 GMT","end":"Mon, 02 Dec 2024 16:21:20 GMT"},"fingerprint":{"sha1":"46:1D:B0:17:F7:A5:4C:43:98:0F:A7:F0:E3:13:1A:C5:65:27:15:AD","sha256":"69:65:AB:BA:8F:55:4D:8C:ED:7A:0B:18:55:8C:05:31:E5:C9:2F:37:39:0B:7F:BF:99:F9:58:33:1B:42:6C:CF"}}},"request":{"raw":"GET /adx2.html HTTP/1.1\r\nHost: redirect3.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 553735\r\nlast-modified: Wed, 18 Sep 2024 07:38:42 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Dl3zawMZL%2FXw6ktC4d7%2BA7secTb4tdk%2FtsLqXonGhfdGOun2GOD3EOpRl6%2FUMJUcL3wlBrLnmBWwxlgYNp9rmFQbkT7hU%2F1JZjl%2BHIPeDBCKTpXSdNfTFenuXrXWPAWF5S5D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c7a296162ba-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":239,"size_decoded":239,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"24086f294a83edc8e50698e49c1cba93","sha1":"123dc9f4a0841244a9f4f88255ade1c39677c0a4","sha256":"b08eca6fefb1b396cb7d3a3076b3765a5c81164ec1419797e5fd2092060d0d86","sha512":"20553aca8275b392e57200f77889d6939f70b050d12aced832e6d1b4a4217e7037d9568b7825424c5760aead288c3be6d19204111fa47e0cd272e87c4b605ddf","ssdeep":"","tlshash":"c9d02ebe2c18b0120a700ae41771b2ac7412c1060029b028b288626a88c43c8dcb33e1","first_seen":"2024-09-20T03:59:59Z","last_seen":"2024-10-04T11:19:02.855802Z","times_seen":14,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adtube.media/redirect?feed=561765\u0026auth=L0SJGK\u0026subid=adtub\u0026query=adtub\u0026url=adtube.media","fqdn":"xml.adtube.media","domain":"adtube.media","tld":"media"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.175Z","timestamp":1727198862175,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=561765\u0026auth=L0SJGK\u0026subid=adtub\u0026query=adtub\u0026url=adtube.media HTTP/1.1\r\nHost: xml.adtube.media\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":921,"timings":{"blocked":914,"dns":7,"connect":161,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bts.a11k.com/in/tishow/?katds_ep=JksJgZkrR9laf18T0JQd5cz49OKIyIdJ-BcuWi_EBAVLwCgXDBNm63Di0HPQ5ATWbNF_-ZP7RIBo0PqPUMxt-HyFRUBfh543lwuEBmD8ZWJ0_zquFBTGBEMBDOQmcqz85RArqfHtduEpqPSkyYeddZX08s6rvZyKBGil9tLI0Xi5NLpqU7JoPnADW9wqhYKWAN6rWTgyIiVoxwwS69LqQmROEn_XwOzEMqjSGUPBq1LEL6od-01nLEK1LHhsMtHFZt_WpfxMgMNmvEbYx5B7TQbXVhD7ywcqALfH9FvN0puIkBJbCGscDoMU3xxZ4HdpgvHMhljb4OfvkdLD6KBOkH2vpKVFPR6cDMJjCDC0WO1COSpXz8eCLCOhfPWoxNgZp-Vx4Jhbgj-ZzkTgppbtaYd-RUAHdKTsiOMJxIHcTrnfGSjT0YtQuUL0WsVfKxN2CIemxqc5gfZch324XlnKzPPowYC70LxbeUgvlEXD2VhnGj3qplWFcXEY_b09BPhuSGpKajxJHY1p6mswO3_SZa28W7P9zttSMcVo6eb2xop_5xRNuR6PizrVx54iD1HJqkRjsM7Ml0oX-fwBWo6yZlaqqC4_h1MRvIe2RXAyIm3naubtmxfv9-z5Re4FivVdI7oJbNIfcDk_npjh4vh_PNtVeNw4ceimhxvFMceVkGGbq7RbyRUB2htBUaxdKfss9oDOgfLFudKK0sXkhpYX_6UzZ5t7XYtlafatzrB2tzFvcWL8NOlVSGZedMTykJkvxobaDaUdt79EODKwwD6bfzHghvup8KIZQ7Wgnx_3l-ozqQXxjH9UaR5WV-kZ8ru1BBnSkvV6F74Jb1jwlBHM3tWsFdN6yh8LyTkOpSOYI1jx0PvxjOD8z_qS2JYI2mGgCsgWEJsNA9c3ZzZvP90YxkYDXuY_WUVW8BaxG4-qJfMq8sfEakBxLAYyjOWLhAXOQxwxWEv1RHsRmLnajHvDdHPpJrPKE0OtxK0b-ETIkDROoXJKirktpa7S7bU1uZ5TvoWVFUxs63rvVbfneJ-UBPxjPQopBrYnyn_yOEYsVGpFn078p6pzWXZF0Of-4Q31XemmHvUKCkZht52mHQpLUiv9a5LGScE_0tU68gbNsTM62efOkRCWuaJvZ-_sqZnYlxVLtDOHah9I5UaPlicILhuivTgRN6vC28a5XMvo_L6ocflqIuKQqMXJnDHr7Ag6Fb_6fgCtREnr1XgZETMK00phcGEadzC6DLp6illnE-lhADBa21w2NHm3kUN4vv210GkhnpOlOdElcL55hQVM844Mv4gsvQ17CXUl57nGpjQYrLcL3dnhAbDw-Q5FcyF7YAb_HAEuxM1Ty9V9OqTbeiTpOAEWBMulDfP-Q-IAEwAMPQURzzM5wr6rvpVUO5OQdKRpG0jBODrkX-NDjKqpuQMXdCcDpYeA--jSAY4kSrzEBluPWcUcYZTjykIhAK-fPEVVKtU6x7S0MPUjdEBbzCfOlARRzCywMH6rs3EPLV3GtTRBMZnGJC5HSM2srf9oWg7UOD717HaatAun7SpDQQnQpg4PRYg1ShWrFj6VkgMtLeMUdq02bHwdwyiPI8fIJvpNAQ5NVoKWyc_SYLsrroDR5qReyPDxQqftIFh_OqIYvTw4Nkz5y4c_BrMHfi6BIMPZ3VJJAz4swsK-6fH3KkiDXWvVPHtAiz-oY5IpqAAzMl-KyWmFRstgPOqSucBZ9YcjXQBuUm5yM_HLAIl59WLQPFrSrQtbOMkasTZfZniqJy6eQ9PBsWHup5oTX_qYWFfgBnl705poQmsnAZN-8UO2DlEFGpO4CWCKJebFoT-b9mtn-3KPDQjnUWnLKKTGyZIB_F4oe2FpOBx7xFfgoPuE9TVGmTsKirsfbdUnVq1pDuDxFJ_sH1UPjPF2QtvOp-AEYWd-90TTqRb2C5oIdOMosQeOB4aUHqMz1gqM7sme5JKqJZzlUkQMYqe2ue8ZP55mpIcXh2N4mVTvBg-dp5UQ8Hhx11U81BYAnEKOMH19azVdwG25iO1FlKM8-WCDkj2lRfroMn3t-g8JvzEM_lak4Wtmsoxhx8peeWLpcE7H9zJUq2x2nl2kcj6E3JoX3JYMQ8QTUr9HH3kx-cxKqRqF8gfUC_RH8uZYQqIEOCdjOABaAB8DyawlMRRU6uXz8ri4HTWZP5wLp7KMnzc2C4DjfoOsDjZj-REclh7-wKT4vP2wIlyYaqn_FOdu5Bd-TJTXyPWMbIUn89wghGtYd8mcdmIx3R2FB80Z06qA_DhoI3U8E-85qJYN8xTGahldw-m1FyP-xLHTTinsP3NpvNMw7twLrGQixFIQ9PRoGxsNQs2jR2GzJ-mxq9rSQLh_r1oi4pwm9zQ4rOzeBZlnsiKhw3hApcbWe0SgppChKneHifs5LbMOUPwkQ-f-spcnXsmTruDXFigicRtGKB654j5YuEnv2EErl4F1U5qK0AHrweIf6dopIHwzS8cMJdK6_33C_D5cGZtdmkCGi3pGMcmTxguXaAMuzIneqKFt_E5WSsw7wC_i1XB4sbGPhQHmQYZsg4CdOXECNaaMiobKCgHFrX_LwIsPTZuIWwcBn7zixEeCZE8VpfeTNzQZ7Vhhr6zwlG4Vm2PMqdpxXllgMMSYCZtKNO6c5_6jv3GO73w-o1PJqFHEQhX6ApqghmfHZXIVP9gfw1RBkH4wMtlQfZljz0ss9k__m4QKlKxnCzWaMd25Wj_68RhwPdp62JGoxYavBqsjleZQNbaL7TWnk3DfxMPwP87ikba1Tn3saYrzw5qxHyMUwS5zLR_FdxuakYzJ2Lj1LvOtyUV9KKXtOcVKYI3jks_vo9zz1wFrBNT5olLqmM1Khim10_yH6AIDVo12EemxC8J_qn9Zk5_cZxiReHoAiuZZE-gFeQ_epa2HcMay0hnYXUIHGk2rECsZ8bQD1u5x7gAuN2G71OwdDGWV0G-jMmm85LhoIxlXNd260hlp8Fxqr9TtPXx8K_CDQpwuv7FmO3VLEcCw0YJ2q2fWJkLE41A-Ftf77BiFcXzNmajXTMW2xYVePE8Ku8zMMUAHjC3bnSTeDfP3Dbdrm-uRU1aprrU5_Wq--lNIGY2qcmTZDa2MOvCoWOplc-oMc6I6JUCcownhNIIsTUynTV3Vc0Js5cvNN5ODhYLARuAD3vjYstwXAaXLD2FBm14bqHS_VjWPxF40VzE78vegxlCoYBbfgLD8ehe2Fo1LzSJ_fE5OU4RVPhhDaKp6AF9ra0qc-Bpibv5vru7lR4DW3ki2X0kIwZmtIhB8WGJadpMXRs8w5cfQGjnLcO5E55yFYVAko4xqmuXQZcyqihCFgJsDr2w7s3To6qh3cSAt4enZkXHojmHRQJNy6cbn1GdVAe7egTzRcMu8GXcxyPkKdhGYQ6n8lw-aM2JvWQNVvx2lSRd8176ZKvej4Ku6G2d-CCijxP4w7MvYyY1uYkzf7Fxr6VejDkg_sUACfkflMlIIBbrl0_QvfCgf1GR9yoGwqeUmHljul2NnxxJLwS-Rowqj-KGklRo9uPkNP9j6M8XaCsGYAACxQD65BeQiYLwWL-yyuufAVjmzZ0Ym5qKAUoOGkjXkDGedKiHnlid1in9lacGRYJ7QGfEn_8ndNa_170cAhR5pDvq-47XQZxi_Mvbf6pztWKo899_sGC9r6bWA3GBoRmr6K7bIKqOPdXRWJJU6YPmkJ7pJD6uZURmMg921jBkqWA2mSi3jia-IgnwYPjOufcC-JSZsqeM8qYyZ1E7WicAD4MNFsfvmqmnv4sLCsUu35IvhDQniPEW7pxkug_II3ZgjZ3u5M7OEsZTcv0ReTKEXq4TEu8gbkc9rbLCs5R3_mCZmuEVZWThP53EL4GXzY8HeeiaSM91QqAABHj-vCkMsXLByDd4cwFb8TdXG1al0LvTbhXPt0yAhpW4SF6NRcck7eeyI3vscvZJAz2SGaRhtMR5j48429wae7qsPFC0W49NRJ5vAD2UuP5aESNUfrnPi9It2Qgf8ektwunBY4ULg8-q7C491bDAUI2iKD5PvUkBabjOED2K2I4gZAvAb_Csg-4Y8w2rgeL74uLukduom_m32sM7Fwywt2XN1BAl1c3UkvlSUdlu8cA1Nb0c3pCLFXDMI2sWpg3ocpXJxvKVtNM4dldyK_I3K7BHfLbONmU6IYRChq3dEwRMv1wb-FxQpS08galjl24LTO6YSto5Zwe4lAW8PFDphq4IXGgvEUIGioODtf13YQ8PZpRL9zHrpy0zL-iYPkVAxaKjwSPTLuXGhelbkOgJ3vXvoieQxofDGknHSPgLQEDxy2Wnft8mLtaOcOPT9FoTm5L44kv-9XKfFh0Kh360JJE2JlwGdpnLgIpQfUr-efRcppQ8MjvCVKHqgPVECAUzdfRKC2cQqEX1SU6Y1WholNeG9XTerALARbbdcHXwGc0nR7ks01oycf61KYFgIXv68b8Q1gDXYj24XB2ltbwwWvFWLIvBCq-Is4ZVdHYwbveq2JBzqiBfA_54PVEKtK46BKSfFZjkrdHqtOpl4pXdssIu4r5iYvKsKq5eiIJHONFHiP2ImSlt5jGwibR19eYAyDkz2q9P5ZDW6rP154SSHlLOEPvO6FjQc1NzM0OpIH6WDkyezpktMbPKT4GtqLn1n-xQmQpPHlZrRtR9WMlkN_MBuWd36EobPMasZ7ZM5d1UCMAuSY_hRDUwq_yLydDAwo3rGgzqmHvYKoIHrduvSjzAsUORybJjH0jZZqZ9vcANX3Y9iGqi_a2GEZtPLw8_cDpCwnGDCYbOjSY922aWU4PR02RBxJXKtsnlM0M_xkaVfZZSQELclnpiTvLuW2cg9fuOlVgSPL1al5J2AtbnMgqSdGxneJutEIhOh7O19GY-FUo837l2X-cJYCCpS9Ez6qGl8ZmwTqLiwyQTPLuADoHUvG79SY1_tTaEQrOfrz-1iesGWEr-VuF_sAIY4kpMViI4xeX_GX-vzqmkcWXKG2WfTS0or2e5sAmK6xMWWNU3CMzP7pmOeWZYZIsL8e41MiqL4-iWyaJ5BvpnlB191kzSmWP9PrTHwXIQK6aW1uk34iG88Y5ogMmpjRR29cs6lThIajepLTHZ7XQcmRbM90tQR6t-C_9uhlx7L4QkfrUdy9WdVDC0eA4I2GwZAE_Kv\u0026bid=0.0016666666666666668","fqdn":"bts.a11k.com","domain":"a11k.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://rtbrenab.com/get/?go=1\u0026data=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","date":"2024-09-24T17:27:34.944Z","timestamp":1727198854944,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bts.a11k.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 22 Aug 2024 03:08:25 GMT","end":"Wed, 20 Nov 2024 03:08:24 GMT"},"fingerprint":{"sha1":"43:DC:67:61:69:04:B5:72:2B:9E:A1:F7:5A:47:6E:88:DB:91:B8:19","sha256":"F0:A7:07:BB:1C:C0:7A:05:36:B0:42:39:99:24:17:6E:55:22:2A:A4:F5:7C:28:41:CF:F1:BF:A7:E8:32:A1:9C"}}},"request":{"raw":"GET /in/tishow/?katds_ep=JksJgZkrR9laf18T0JQd5cz49OKIyIdJ-BcuWi_EBAVLwCgXDBNm63Di0HPQ5ATWbNF_-ZP7RIBo0PqPUMxt-HyFRUBfh543lwuEBmD8ZWJ0_zquFBTGBEMBDOQmcqz85RArqfHtduEpqPSkyYeddZX08s6rvZyKBGil9tLI0Xi5NLpqU7JoPnADW9wqhYKWAN6rWTgyIiVoxwwS69LqQmROEn_XwOzEMqjSGUPBq1LEL6od-01nLEK1LHhsMtHFZt_WpfxMgMNmvEbYx5B7TQbXVhD7ywcqALfH9FvN0puIkBJbCGscDoMU3xxZ4HdpgvHMhljb4OfvkdLD6KBOkH2vpKVFPR6cDMJjCDC0WO1COSpXz8eCLCOhfPWoxNgZp-Vx4Jhbgj-ZzkTgppbtaYd-RUAHdKTsiOMJxIHcTrnfGSjT0YtQuUL0WsVfKxN2CIemxqc5gfZch324XlnKzPPowYC70LxbeUgvlEXD2VhnGj3qplWFcXEY_b09BPhuSGpKajxJHY1p6mswO3_SZa28W7P9zttSMcVo6eb2xop_5xRNuR6PizrVx54iD1HJqkRjsM7Ml0oX-fwBWo6yZlaqqC4_h1MRvIe2RXAyIm3naubtmxfv9-z5Re4FivVdI7oJbNIfcDk_npjh4vh_PNtVeNw4ceimhxvFMceVkGGbq7RbyRUB2htBUaxdKfss9oDOgfLFudKK0sXkhpYX_6UzZ5t7XYtlafatzrB2tzFvcWL8NOlVSGZedMTykJkvxobaDaUdt79EODKwwD6bfzHghvup8KIZQ7Wgnx_3l-ozqQXxjH9UaR5WV-kZ8ru1BBnSkvV6F74Jb1jwlBHM3tWsFdN6yh8LyTkOpSOYI1jx0PvxjOD8z_qS2JYI2mGgCsgWEJsNA9c3ZzZvP90YxkYDXuY_WUVW8BaxG4-qJfMq8sfEakBxLAYyjOWLhAXOQxwxWEv1RHsRmLnajHvDdHPpJrPKE0OtxK0b-ETIkDROoXJKirktpa7S7bU1uZ5TvoWVFUxs63rvVbfneJ-UBPxjPQopBrYnyn_yOEYsVGpFn078p6pzWXZF0Of-4Q31XemmHvUKCkZht52mHQpLUiv9a5LGScE_0tU68gbNsTM62efOkRCWuaJvZ-_sqZnYlxVLtDOHah9I5UaPlicILhuivTgRN6vC28a5XMvo_L6ocflqIuKQqMXJnDHr7Ag6Fb_6fgCtREnr1XgZETMK00phcGEadzC6DLp6illnE-lhADBa21w2NHm3kUN4vv210GkhnpOlOdElcL55hQVM844Mv4gsvQ17CXUl57nGpjQYrLcL3dnhAbDw-Q5FcyF7YAb_HAEuxM1Ty9V9OqTbeiTpOAEWBMulDfP-Q-IAEwAMPQURzzM5wr6rvpVUO5OQdKRpG0jBODrkX-NDjKqpuQMXdCcDpYeA--jSAY4kSrzEBluPWcUcYZTjykIhAK-fPEVVKtU6x7S0MPUjdEBbzCfOlARRzCywMH6rs3EPLV3GtTRBMZnGJC5HSM2srf9oWg7UOD717HaatAun7SpDQQnQpg4PRYg1ShWrFj6VkgMtLeMUdq02bHwdwyiPI8fIJvpNAQ5NVoKWyc_SYLsrroDR5qReyPDxQqftIFh_OqIYvTw4Nkz5y4c_BrMHfi6BIMPZ3VJJAz4swsK-6fH3KkiDXWvVPHtAiz-oY5IpqAAzMl-KyWmFRstgPOqSucBZ9YcjXQBuUm5yM_HLAIl59WLQPFrSrQtbOMkasTZfZniqJy6eQ9PBsWHup5oTX_qYWFfgBnl705poQmsnAZN-8UO2DlEFGpO4CWCKJebFoT-b9mtn-3KPDQjnUWnLKKTGyZIB_F4oe2FpOBx7xFfgoPuE9TVGmTsKirsfbdUnVq1pDuDxFJ_sH1UPjPF2QtvOp-AEYWd-90TTqRb2C5oIdOMosQeOB4aUHqMz1gqM7sme5JKqJZzlUkQMYqe2ue8ZP55mpIcXh2N4mVTvBg-dp5UQ8Hhx11U81BYAnEKOMH19azVdwG25iO1FlKM8-WCDkj2lRfroMn3t-g8JvzEM_lak4Wtmsoxhx8peeWLpcE7H9zJUq2x2nl2kcj6E3JoX3JYMQ8QTUr9HH3kx-cxKqRqF8gfUC_RH8uZYQqIEOCdjOABaAB8DyawlMRRU6uXz8ri4HTWZP5wLp7KMnzc2C4DjfoOsDjZj-REclh7-wKT4vP2wIlyYaqn_FOdu5Bd-TJTXyPWMbIUn89wghGtYd8mcdmIx3R2FB80Z06qA_DhoI3U8E-85qJYN8xTGahldw-m1FyP-xLHTTinsP3NpvNMw7twLrGQixFIQ9PRoGxsNQs2jR2GzJ-mxq9rSQLh_r1oi4pwm9zQ4rOzeBZlnsiKhw3hApcbWe0SgppChKneHifs5LbMOUPwkQ-f-spcnXsmTruDXFigicRtGKB654j5YuEnv2EErl4F1U5qK0AHrweIf6dopIHwzS8cMJdK6_33C_D5cGZtdmkCGi3pGMcmTxguXaAMuzIneqKFt_E5WSsw7wC_i1XB4sbGPhQHmQYZsg4CdOXECNaaMiobKCgHFrX_LwIsPTZuIWwcBn7zixEeCZE8VpfeTNzQZ7Vhhr6zwlG4Vm2PMqdpxXllgMMSYCZtKNO6c5_6jv3GO73w-o1PJqFHEQhX6ApqghmfHZXIVP9gfw1RBkH4wMtlQfZljz0ss9k__m4QKlKxnCzWaMd25Wj_68RhwPdp62JGoxYavBqsjleZQNbaL7TWnk3DfxMPwP87ikba1Tn3saYrzw5qxHyMUwS5zLR_FdxuakYzJ2Lj1LvOtyUV9KKXtOcVKYI3jks_vo9zz1wFrBNT5olLqmM1Khim10_yH6AIDVo12EemxC8J_qn9Zk5_cZxiReHoAiuZZE-gFeQ_epa2HcMay0hnYXUIHGk2rECsZ8bQD1u5x7gAuN2G71OwdDGWV0G-jMmm85LhoIxlXNd260hlp8Fxqr9TtPXx8K_CDQpwuv7FmO3VLEcCw0YJ2q2fWJkLE41A-Ftf77BiFcXzNmajXTMW2xYVePE8Ku8zMMUAHjC3bnSTeDfP3Dbdrm-uRU1aprrU5_Wq--lNIGY2qcmTZDa2MOvCoWOplc-oMc6I6JUCcownhNIIsTUynTV3Vc0Js5cvNN5ODhYLARuAD3vjYstwXAaXLD2FBm14bqHS_VjWPxF40VzE78vegxlCoYBbfgLD8ehe2Fo1LzSJ_fE5OU4RVPhhDaKp6AF9ra0qc-Bpibv5vru7lR4DW3ki2X0kIwZmtIhB8WGJadpMXRs8w5cfQGjnLcO5E55yFYVAko4xqmuXQZcyqihCFgJsDr2w7s3To6qh3cSAt4enZkXHojmHRQJNy6cbn1GdVAe7egTzRcMu8GXcxyPkKdhGYQ6n8lw-aM2JvWQNVvx2lSRd8176ZKvej4Ku6G2d-CCijxP4w7MvYyY1uYkzf7Fxr6VejDkg_sUACfkflMlIIBbrl0_QvfCgf1GR9yoGwqeUmHljul2NnxxJLwS-Rowqj-KGklRo9uPkNP9j6M8XaCsGYAACxQD65BeQiYLwWL-yyuufAVjmzZ0Ym5qKAUoOGkjXkDGedKiHnlid1in9lacGRYJ7QGfEn_8ndNa_170cAhR5pDvq-47XQZxi_Mvbf6pztWKo899_sGC9r6bWA3GBoRmr6K7bIKqOPdXRWJJU6YPmkJ7pJD6uZURmMg921jBkqWA2mSi3jia-IgnwYPjOufcC-JSZsqeM8qYyZ1E7WicAD4MNFsfvmqmnv4sLCsUu35IvhDQniPEW7pxkug_II3ZgjZ3u5M7OEsZTcv0ReTKEXq4TEu8gbkc9rbLCs5R3_mCZmuEVZWThP53EL4GXzY8HeeiaSM91QqAABHj-vCkMsXLByDd4cwFb8TdXG1al0LvTbhXPt0yAhpW4SF6NRcck7eeyI3vscvZJAz2SGaRhtMR5j48429wae7qsPFC0W49NRJ5vAD2UuP5aESNUfrnPi9It2Qgf8ektwunBY4ULg8-q7C491bDAUI2iKD5PvUkBabjOED2K2I4gZAvAb_Csg-4Y8w2rgeL74uLukduom_m32sM7Fwywt2XN1BAl1c3UkvlSUdlu8cA1Nb0c3pCLFXDMI2sWpg3ocpXJxvKVtNM4dldyK_I3K7BHfLbONmU6IYRChq3dEwRMv1wb-FxQpS08galjl24LTO6YSto5Zwe4lAW8PFDphq4IXGgvEUIGioODtf13YQ8PZpRL9zHrpy0zL-iYPkVAxaKjwSPTLuXGhelbkOgJ3vXvoieQxofDGknHSPgLQEDxy2Wnft8mLtaOcOPT9FoTm5L44kv-9XKfFh0Kh360JJE2JlwGdpnLgIpQfUr-efRcppQ8MjvCVKHqgPVECAUzdfRKC2cQqEX1SU6Y1WholNeG9XTerALARbbdcHXwGc0nR7ks01oycf61KYFgIXv68b8Q1gDXYj24XB2ltbwwWvFWLIvBCq-Is4ZVdHYwbveq2JBzqiBfA_54PVEKtK46BKSfFZjkrdHqtOpl4pXdssIu4r5iYvKsKq5eiIJHONFHiP2ImSlt5jGwibR19eYAyDkz2q9P5ZDW6rP154SSHlLOEPvO6FjQc1NzM0OpIH6WDkyezpktMbPKT4GtqLn1n-xQmQpPHlZrRtR9WMlkN_MBuWd36EobPMasZ7ZM5d1UCMAuSY_hRDUwq_yLydDAwo3rGgzqmHvYKoIHrduvSjzAsUORybJjH0jZZqZ9vcANX3Y9iGqi_a2GEZtPLw8_cDpCwnGDCYbOjSY922aWU4PR02RBxJXKtsnlM0M_xkaVfZZSQELclnpiTvLuW2cg9fuOlVgSPL1al5J2AtbnMgqSdGxneJutEIhOh7O19GY-FUo837l2X-cJYCCpS9Ez6qGl8ZmwTqLiwyQTPLuADoHUvG79SY1_tTaEQrOfrz-1iesGWEr-VuF_sAIY4kpMViI4xeX_GX-vzqmkcWXKG2WfTS0or2e5sAmK6xMWWNU3CMzP7pmOeWZYZIsL8e41MiqL4-iWyaJ5BvpnlB191kzSmWP9PrTHwXIQK6aW1uk34iG88Y5ogMmpjRR29cs6lThIajepLTHZ7XQcmRbM90tQR6t-C_9uhlx7L4QkfrUdy9WdVDC0eA4I2GwZAE_Kv\u0026bid=0.0016666666666666668 HTTP/1.1\r\nHost: bts.a11k.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rtbrenab.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":115,"dns":40,"connect":22,"send":0,"wait":0,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.zentrixads.com/redirect?feed=708257\u0026auth=5bN0\u0026subid=zentrix1\u0026query=zentrix1\u0026url=zentrixads.com","fqdn":"xml.zentrixads.com","domain":"zentrixads.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.046Z","timestamp":1727198862046,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=708257\u0026auth=5bN0\u0026subid=zentrix1\u0026query=zentrix1\u0026url=zentrixads.com HTTP/1.1\r\nHost: xml.zentrixads.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":1,"connect":118,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-good.com/clixvistam.html","fqdn":"ad-good.com","domain":"ad-good.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:38.346Z","timestamp":1727198858346,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-good.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Aug 2024 12:01:51 GMT","end":"Sun, 10 Nov 2024 12:01:50 GMT"},"fingerprint":{"sha1":"77:4B:2C:D9:8C:89:13:31:AF:23:8C:04:14:AA:A5:93:B9:95:86:50","sha256":"05:8A:8C:C7:83:B7:64:C0:B5:21:77:3B:A5:F6:F1:7E:DE:19:31:34:57:A5:16:CC:06:08:40:4E:39:C0:EC:FD"}}},"request":{"raw":"GET /clixvistam.html HTTP/1.1\r\nHost: ad-good.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 75201\r\nlast-modified: Mon, 23 Sep 2024 20:34:16 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=i2p7By2J5CeAM%2FrwwCDBUCUlGc%2BZoyJp9bgbsFFIPLzGo7iLaxsXLNIjCP3zPCd5y48ZVPGKEjdVgCi3s9Fa7TCb%2BlAlcIMJzNoq7C4b7LGZnkLA6uK9AJ2SL%2BGb0g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c7a1d1d9fae-AMS\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":261,"size_decoded":261,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"d7252c5545dc26a32588e31ed4ca3b60","sha1":"f7e6b8e0e4b87a9b09e47dcc475adfea8133983e","sha256":"dde30e3146173ef674a44d410308b9e7eb160c5c5ba0b93768b5ac681245b645","sha512":"5c8d7c1231ebd7d64b0969349cde063b87c6153e3376ae8e757abc989d7c0c3bbe748b28eb3721e53bce4b1d682ac1d92f389f3e0ef719280fb09382e8fb5b49","ssdeep":"","tlshash":"4ad02bae5d18b008059186dc58f4b15c3737b82408346068e38a0225c4c8b8dcc32ff5","first_seen":"2023-08-10T19:24:14Z","last_seen":"2024-10-11T09:19:30.995903Z","times_seen":45,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sub.votreimc.com/eximdigitalm.html","fqdn":"sub.votreimc.com","domain":"votreimc.com","tld":"com"},"ip":{"addr":"172.67.222.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.421Z","timestamp":1727198859421,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votreimc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Sep 2024 02:12:01 GMT","end":"Sat, 14 Dec 2024 02:12:00 GMT"},"fingerprint":{"sha1":"AF:56:A8:13:7B:6E:27:2B:03:40:18:37:A2:8B:CA:0F:2F:6D:E0:FA","sha256":"44:AD:5E:CF:7E:DE:B0:30:21:4D:10:85:AA:65:B9:AC:F4:EA:F9:DA:BC:84:CE:A6:39:8C:B9:24:E9:77:43:4A"}}},"request":{"raw":"GET /eximdigitalm.html HTTP/1.1\r\nHost: sub.votreimc.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nx-iplb-request-id: A29ECA26:AC10_91EF25A2:0050_66EAF62F_270F0:7066\r\nx-iplb-instance: 52335\r\ncf-cache-status: HIT\r\nage: 524380\r\nlast-modified: Wed, 18 Sep 2024 15:47:59 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=lj577iDzdkcQIX4PDWCm4Z06SH8lLXiMMOJpT%2BUKqUlh1BYqQluju3HKUj83wc69C0bcVvY9w4016LEyDGNbtumo5nN1cmaOepe3DoxfVXWZ5XqrFKZ%2BkWwOgJd93Rc2iilv\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c853faa62b8-HAM\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":266,"size_decoded":266,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"fdbd993bd0042172f38e90d0e52cfede","sha1":"461203823fe1f98d14a5408b886daa385d00c4a1","sha256":"2d841296f9c6c64cee93a96aa13abc6d04d14c6fa6312578adce771484aa237e","sha512":"c9d450c0d6f2fc0d0ffad0ee82a5c41266f5080bebd914f327862dbd0256dbe9e9964abc497c6c2cad59ea5f1c3dba3addcd133888e34dc618841013a14330b6","ssdeep":"","tlshash":"d0d0c2ef2c4c90010f6014d0a7b27b5c6432d424041878a4d1c50266c5c0a9cc8a27e8","first_seen":"2023-05-03T22:30:24Z","last_seen":"2024-10-06T19:12:51.522222Z","times_seen":41,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/adtu3.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.854Z","timestamp":1727198859854,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /adtu3.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww-7.good-trading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 340434\r\nlast-modified: Fri, 20 Sep 2024 18:53:45 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=0W2qRQUqIOr0ul%2FMTgWUxeFywhEDJf9sL6FCtBfAoemt%2Bc2tGsnIS09KJFvsaozFf0q4PiZIfXJCwGsSB45NcXkNYGvzJMSY2XnTNm196V7%2BzLRcYEzUKipfHxoS2bhNJVkd\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c85af270a50-AMS\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":246,"size_decoded":246,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"22cbc710f09edaaadbd5519bc8451e47","sha1":"9665b26dc3d76751f300e7fc958274163fba81b5","sha256":"a40edddc27c3227d494bedbff1edd93ed51eb6dfc05f9c5edc89588cef38b668","sha512":"407984af65e0ce0aa63fdf1ef90523cbfde21f997fcfe6eba19ba5f4b5e97d7cc661eef6b7d5bcdcdd6c013c85c58df2395a4cb08af0ca2efe2a31a1aaf694bb","ssdeep":"","tlshash":"a9d02ebf5c08b206090049e868b2b36e36179a0828f43024f188862bc8d0780c833be0","first_seen":"2023-08-02T15:19:22Z","last_seen":"2024-10-11T09:19:30.989621Z","times_seen":44,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adflyer.media/redirect?feed=542697\u0026auth=HDsoD3\u0026subid=adf1\u0026query=adf1\u0026url=adflyer.media","fqdn":"xml.adflyer.media","domain":"adflyer.media","tld":"media"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.156Z","timestamp":1727198862156,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=542697\u0026auth=HDsoD3\u0026subid=adf1\u0026query=adf1\u0026url=adflyer.media HTTP/1.1\r\nHost: xml.adflyer.media\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":938,"timings":{"blocked":926,"dns":12,"connect":96,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redirect3.online/flurryad.html","fqdn":"redirect3.online","domain":"redirect3.online","tld":"online"},"ip":{"addr":"104.21.55.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:36.884Z","timestamp":1727198856884,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redirect3.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Sep 2024 16:21:21 GMT","end":"Mon, 02 Dec 2024 16:21:20 GMT"},"fingerprint":{"sha1":"46:1D:B0:17:F7:A5:4C:43:98:0F:A7:F0:E3:13:1A:C5:65:27:15:AD","sha256":"69:65:AB:BA:8F:55:4D:8C:ED:7A:0B:18:55:8C:05:31:E5:C9:2F:37:39:0B:7F:BF:99:F9:58:33:1B:42:6C:CF"}}},"request":{"raw":"GET /flurryad.html HTTP/1.1\r\nHost: redirect3.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 40314\r\nlast-modified: Tue, 24 Sep 2024 06:15:42 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=J5aM0K3%2F20gn0yTz2ElvrJF61yEyVT%2FEpKXaggkJEOkJqQprmQz9FX%2BF9ZFVxboobwK4jjwQfm6GDVCBBosQbWioTeyiIvWxjFTG6iE7lM6qpt2vFLziTyBMjTwnP7BFJ1px\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c782d1862ba-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":246,"size_decoded":246,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"badfdbfc6c9c987ee0c8570c170817d6","sha1":"1e7e42a9f37ed057753df1a5e99caf847a4ef2a5","sha256":"c9d9ed3437cf33785da1b5eeed073bd7858f5c2ec0b535a64f702ffe05d252a0","sha512":"4a2d2ab2c8884ac24601100fb11fb79f7d9c5d2b11fbfc09018c64ff1c310b927f6b9bb4f075a0c75c0627ffcbf8db8bd4a0352959fcdd9f752bbcbab3b5e9a8","ssdeep":"","tlshash":"efd05ebe6d8cb409baa508d41bb5a29c385a918438277075f1c8522e94c56d5dc733d0","first_seen":"2023-05-08T16:02:00Z","last_seen":"2024-10-06T09:49:22.714494Z","times_seen":44,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":91,"dns":15,"connect":30,"send":0,"wait":37,"receive":0,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryingforthemoo.info/redirect?tid=1060206","fqdn":"cryingforthemoo.info","domain":"cryingforthemoo.info","tld":"info"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:42.349Z","timestamp":1727198862349,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?tid=1060206 HTTP/1.1\r\nHost: cryingforthemoo.info\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":8,"connect":1,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.flurryad.com/redirect?feed=480556\u0026auth=7VgrMJ\u0026subid=flurryad1\u0026query=flurryad1\u0026url=flurryad.com","fqdn":"xml.flurryad.com","domain":"flurryad.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.034Z","timestamp":1727198862034,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=480556\u0026auth=7VgrMJ\u0026subid=flurryad1\u0026query=flurryad1\u0026url=flurryad.com HTTP/1.1\r\nHost: xml.flurryad.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":960,"timings":{"blocked":947,"dns":13,"connect":97,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"click.mediacpc.com/redirect?feed=599083\u0026auth=0OICJo\u0026subid=adult1\u0026query=adult1\u0026url=adult1.com","fqdn":"click.mediacpc.com","domain":"mediacpc.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.066Z","timestamp":1727198862066,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=599083\u0026auth=0OICJo\u0026subid=adult1\u0026query=adult1\u0026url=adult1.com HTTP/1.1\r\nHost: click.mediacpc.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":161,"dns":1,"connect":94,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.clickmi.net/redirect?feed=487260\u0026auth=AaB5ql\u0026subid=clickmia\u0026query=clickmia\u0026url=clickmi.net","fqdn":"xml.clickmi.net","domain":"clickmi.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.170Z","timestamp":1727198862170,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=487260\u0026auth=AaB5ql\u0026subid=clickmia\u0026query=clickmia\u0026url=clickmi.net HTTP/1.1\r\nHost: xml.clickmi.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":519,"timings":{"blocked":518,"dns":1,"connect":91,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sub.votreimc.com/main.html","fqdn":"sub.votreimc.com","domain":"votreimc.com","tld":"com"},"ip":{"addr":"172.67.222.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:37.124Z","timestamp":1727198857124,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votreimc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Sep 2024 02:12:01 GMT","end":"Sat, 14 Dec 2024 02:12:00 GMT"},"fingerprint":{"sha1":"AF:56:A8:13:7B:6E:27:2B:03:40:18:37:A2:8B:CA:0F:2F:6D:E0:FA","sha256":"44:AD:5E:CF:7E:DE:B0:30:21:4D:10:85:AA:65:B9:AC:F4:EA:F9:DA:BC:84:CE:A6:39:8C:B9:24:E9:77:43:4A"}}},"request":{"raw":"GET /main.html HTTP/1.1\r\nHost: sub.votreimc.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nx-iplb-request-id: A29ECA9B:55CC_91EF25A2:0050_66EAF660_377C2:7066\r\nx-iplb-instance: 52335\r\ncf-cache-status: HIT\r\nage: 524329\r\nlast-modified: Wed, 18 Sep 2024 15:48:48 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=yrSJfMeKQxG6AAMsyrLen5geN3dw32zPlx10z2zm4qIYXQJEa48ZqWJTVRb4kEoJuC0QYJJ3RD388aJ0QJgGoO%2FW5IJ5ecvNPLloafEbeU6fZiHZomktLUoUYAvrzjVcAXOn\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c78cff062b8-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":244,"size_decoded":244,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"db08b4d62091e5aa5c0ef38f4af0e957","sha1":"c547427feb242ff02ef0133973b68a3324e4c5e2","sha256":"52a42e3df8a8b1e9575507c7bb21e0d0c74545da19c06950027b40c45b2972cf","sha512":"020e69823556c599a2475d1bc075d580e772ff159c8fa7ecb25ead1647e8cc84d0fbd14cf7d02e7aa11aa541877c602e3a43c7cf897b6456020e4d7b2edad4ad","ssdeep":"","tlshash":"80d05bae1d589011055447e41775b3dc255590550476f1a4e5c5412665c87c6ed337e0","first_seen":"2023-05-12T09:55:27Z","last_seen":"2024-10-11T09:19:31.039133Z","times_seen":37,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":62,"connect":15,"send":0,"wait":46,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/clickmi1.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:38.768Z","timestamp":1727198858768,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /clickmi1.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww1.good-trading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 449827\r\nlast-modified: Thu, 19 Sep 2024 12:30:30 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=pJ7fpnFAH%2FCOfrSElLCCYgpUxQdo89ztdz3TtmABC5%2Fu9UljdVNMDUD4kKbNRjgELPHQZLBoXRajMvU9kzzBg6ruZnkRN2PkkZfrICkE5rP72ByPX6eR1LSn%2FkcvkCd%2BRtpa\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c7c2f19726c-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":249,"size_decoded":249,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"58a24473c9ecdb643b559836486f5865","sha1":"41cde5d1e57da1f26fea073f950db62beafbe817","sha256":"39f5f1d02a96173709d90316e42a6ffcb1550d1ea504600e23471debd655d75c","sha512":"105c191f7d5a436658f3e3a75ef544cf2c25f3b6fcc6cd4d839b3e4b0cb08dc1a580d3845c39a4fccef09c470d7627864ef296ed14b8b6d73806cb9995ad6137","ssdeep":"","tlshash":"ebd02ebe1f08f0012510699818b0327d2666a00a3eba2058e1c88e2ac4ccbc9ddf27e0","first_seen":"2024-09-14T06:59:37Z","last_seen":"2024-10-11T09:19:31.001162Z","times_seen":23,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/adtu2.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.842Z","timestamp":1727198859842,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /adtu2.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww-7.good-trading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 449838\r\nlast-modified: Thu, 19 Sep 2024 12:30:21 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=GTMIVkn%2BnKDlw88q7wY%2FmZphKGOQLw2EZruY%2BZ2K0z8aGjF5pCFh2jklfFP0j2bvf7NFeZnhlnKYhlA%2Fnj1BNUtUP7SBFYJZLsqv%2FPPf0QD6Kd2FtDNdAfwQYg9st%2FqxnbBB\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c85af220a50-AMS\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":260,"size_decoded":260,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"3003b48144f86da375ba22f24a2ab080","sha1":"9360365acf5416742708bdf6c682602a97297e80","sha256":"928d0b584f26f5e71dcaa7c5a379f3db78ad4e857c8106d5cf1295c31673e517","sha512":"e4b9d99e4213d21e2ee89417c5d6c00f52dde01b26884af69db596060ca457634f3c9c1a4d0c319676d67a0863dccbf9d0ece927802767f9bb2b4570462d5876","ssdeep":"","tlshash":"71d02bbf6c08f1161d0144f96972736d2656964838b02838f988871bc4e07c0c833fe0","first_seen":"2023-08-05T18:45:40Z","last_seen":"2024-10-11T09:19:30.979545Z","times_seen":42,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.infinity-info.com/redirect?feed=441159\u0026auth=kCy2hF\u0026subid=infinityad\u0026query=infinityad\u0026url=infinity-info.com","fqdn":"xml.infinity-info.com","domain":"infinity-info.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.090Z","timestamp":1727198862090,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=441159\u0026auth=kCy2hF\u0026subid=infinityad\u0026query=infinityad\u0026url=infinity-info.com HTTP/1.1\r\nHost: xml.infinity-info.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":430,"timings":{"blocked":-1,"dns":430,"connect":105,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"click.mediacpc.com/redirect?feed=599083\u0026auth=0OICJo\u0026subid=adult1\u0026query=adult1\u0026url=adult1.com","fqdn":"click.mediacpc.com","domain":"mediacpc.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:42.224Z","timestamp":1727198862224,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=599083\u0026auth=0OICJo\u0026subid=adult1\u0026query=adult1\u0026url=adult1.com HTTP/1.1\r\nHost: click.mediacpc.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":725,"timings":{"blocked":718,"dns":7,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c99574de6f.dd4ef151bb.com/a4e1b43c5d53bd1e8bddee9a1e579f61.js","fqdn":"c99574de6f.dd4ef151bb.com","domain":"dd4ef151bb.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.eroticporns.com/porn/upskirt-videos/","date":"2024-09-24T17:27:34.148Z","timestamp":1727198854148,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c99574de6f.dd4ef151bb.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Sep 2024 02:21:50 GMT","end":"Fri, 20 Dec 2024 02:21:49 GMT"},"fingerprint":{"sha1":"7D:86:0E:F7:5B:A4:C6:6D:AF:2D:39:08:2C:F3:1A:6E:B2:A9:F9:A0","sha256":"54:A2:8A:6F:67:B8:4A:D8:37:E2:26:62:0E:92:F3:A3:0F:D7:24:25:0E:25:BF:E1:80:01:D4:5C:25:0D:09:BB"}}},"request":{"raw":"GET /a4e1b43c5d53bd1e8bddee9a1e579f61.js HTTP/1.1\r\nHost: c99574de6f.dd4ef151bb.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.eroticporns.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:34 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Fri, 06 Sep 2024 08:13:58 GMT\r\netag: W/\"66dab9c6-19207\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 24 Sep 2024 17:32:34 GMT\r\ncache-control: max-age=300\r\nx-proxy-cache: HIT\r\nx-cdn-host-id: ds9225\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102919,"size_decoded":102919,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/adf2.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:38.671Z","timestamp":1727198858671,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /adf2.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww1.good-trading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 449827\r\nlast-modified: Thu, 19 Sep 2024 12:30:30 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Vrny6lCz0iCdv6sAZ6KgdkYZ2hxXFEB8j7135cEo4A9yxRn%2BbatQLknPbW91IDcRuINU%2BaIjculaSoIkde1%2FE%2Bsz7M7V9kbCRg7GRXumenNPU7SLyCvTUJLAPFHC7XMnE6Du\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c7bde70726c-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":246,"size_decoded":246,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"16554a2bcd94dc7134fb7c019b04fe40","sha1":"554850a75fe7859f6ec2d58248ae8a8a1fe40489","sha256":"1c4521dbd8a1f2645769fe05c773e7036d632569cbe7f5394d9136699bc16805","sha512":"79a8099c0013ba4a3d11e3bfc5f83e0d1f627f8392e82cfb932e68a312803820a6cebcd8e7e15bafa2ca0b695597a956aaeaef99ad8db3499f074e4609d02ca9","ssdeep":"","tlshash":"80d02bbedd08f016110157a0587172fc6617640872b1a005b288c21bccd07c0d873be0","first_seen":"2023-05-15T13:33:44Z","last_seen":"2024-10-11T09:19:31.006924Z","times_seen":37,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.flurryad.com/redirect?feed=437642\u0026auth=qKgbOv\u0026subid=flurryad\u0026query=flurryad\u0026url=flurryad.com","fqdn":"xml.flurryad.com","domain":"flurryad.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:41.224Z","timestamp":1727198861224,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flurryad.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Sep 2024 06:45:11 GMT","end":"Sun, 01 Dec 2024 06:45:10 GMT"},"fingerprint":{"sha1":"43:38:58:0A:B2:FA:EA:1A:BB:BC:1E:FD:BD:D6:84:BD:55:18:6F:F5","sha256":"92:1A:E9:14:4A:62:EC:D7:C5:1B:84:DE:BA:FB:13:36:B8:1F:8E:B9:A0:67:BA:CE:9C:E9:00:F3:3B:04:A7:34"}}},"request":{"raw":"GET /redirect?feed=437642\u0026auth=qKgbOv\u0026subid=flurryad\u0026query=flurryad\u0026url=flurryad.com HTTP/1.1\r\nHost: xml.flurryad.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":2220,"timings":{"blocked":-1,"dns":33,"connect":119,"send":0,"wait":0,"receive":0,"ssl":2067},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sub.votreimc.com/eximdigitalm.html","fqdn":"sub.votreimc.com","domain":"votreimc.com","tld":"com"},"ip":{"addr":"172.67.222.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:37.618Z","timestamp":1727198857618,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"votreimc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Sep 2024 02:12:01 GMT","end":"Sat, 14 Dec 2024 02:12:00 GMT"},"fingerprint":{"sha1":"AF:56:A8:13:7B:6E:27:2B:03:40:18:37:A2:8B:CA:0F:2F:6D:E0:FA","sha256":"44:AD:5E:CF:7E:DE:B0:30:21:4D:10:85:AA:65:B9:AC:F4:EA:F9:DA:BC:84:CE:A6:39:8C:B9:24:E9:77:43:4A"}}},"request":{"raw":"GET /eximdigitalm.html HTTP/1.1\r\nHost: sub.votreimc.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\nx-iplb-request-id: A29ECA26:AC10_91EF25A2:0050_66EAF62F_270F0:7066\r\nx-iplb-instance: 52335\r\ncf-cache-status: HIT\r\nage: 524378\r\nlast-modified: Wed, 18 Sep 2024 15:47:59 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=wRGxOLuEZqM4bBIi41s%2FAvvbSTy3B9yQkJXOh8c%2BeEZCk%2Bi6qiOloY%2FMT376P66ZBSoyh504khqwVpnzOZg1Pg45lIhvlTeSxf4Sq9AmJiMQsyDshkVfzvySvbuo4rC6oX8T\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c78d81c62b8-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":266,"size_decoded":266,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"fdbd993bd0042172f38e90d0e52cfede","sha1":"461203823fe1f98d14a5408b886daa385d00c4a1","sha256":"2d841296f9c6c64cee93a96aa13abc6d04d14c6fa6312578adce771484aa237e","sha512":"c9d450c0d6f2fc0d0ffad0ee82a5c41266f5080bebd914f327862dbd0256dbe9e9964abc497c6c2cad59ea5f1c3dba3addcd133888e34dc618841013a14330b6","ssdeep":"","tlshash":"d0d0c2ef2c4c90010f6014d0a7b27b5c6432d424041878a4d1c50266c5c0a9cc8a27e8","first_seen":"2023-05-03T22:30:24Z","last_seen":"2024-10-06T19:12:51.522222Z","times_seen":41,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/adfa1.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:38.670Z","timestamp":1727198858670,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /adfa1.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww1.good-trading.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 449827\r\nlast-modified: Thu, 19 Sep 2024 12:30:30 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RlbjJKs3B94YTDTEb86S6nSzMWZSChS6Fno8B%2BoMk7zvFZ2utdB22Lsi9HDNh8q7Z7NsMQi1vvFHXIy4OaSLWtoo3g1xoudiv%2FB4CAm4qdG2lB2XEHdgS%2BehEgbQnE285jjG\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c7bde6a726c-HAM\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":250,"size_decoded":250,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"969729c58d5430327cc15790a7848844","sha1":"e08d56b856761d5bfcf8f43dc5f3ac50f7604d4d","sha256":"40f3364c2d76eff4509797e6f2c5cd84e6b1e4a7f53cb1e7c0b01d38e9c4f2f0","sha512":"be1b2886bd2ff4ca4387625fa7bc46b3fd80104fd57ffbb790ef0ff5616b8a222b82d6b7bfab9fe0af2918ba3738cd78240234e5f99bafc3903ea2fa1eec0708","ssdeep":"","tlshash":"09d02bbe5d08f145054046b458b173fca653780575f0a414b2898216ccc0fc0dc73be0","first_seen":"2023-05-08T16:02:00Z","last_seen":"2024-10-11T09:19:30.980813Z","times_seen":37,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thenetwork18.net/zentrix1.html","fqdn":"thenetwork18.net","domain":"thenetwork18.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.369Z","timestamp":1727198859369,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thenetwork18.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Sep 2024 06:40:44 GMT","end":"Fri, 13 Dec 2024 06:40:43 GMT"},"fingerprint":{"sha1":"29:EC:4B:A6:A0:51:10:27:BE:ED:CF:0F:F8:B7:DA:71:AD:44:80:EF","sha256":"4D:5C:3D:CB:C0:9F:B2:9A:F6:99:49:02:79:B4:A2:44:53:F6:B5:C8:14:C2:86:69:F1:F4:29:30:6D:99:7E:72"}}},"request":{"raw":"GET /zentrix1.html HTTP/1.1\r\nHost: thenetwork18.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 449835\r\nlast-modified: Thu, 19 Sep 2024 12:30:24 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=wkcAi%2FL00EPTQA1DfLQtpFrBCu2YuYL9IFEEC%2B83JeocJDTlcjnvuiQvLwEVGyc1WFfbt8910CBEHgy7ZhN4cRLRel2H8Ep58IJLDDTjy%2BHp8vpPGjQ9zuWqx2HT908nbd1%2B\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c852e230a50-AMS\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":263,"size_decoded":263,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"50eae21b2bbe97f465bb3ed386af46b0","sha1":"8ee14387efae990f6af8ae42f01ec0ddcba5ab5d","sha256":"b85458bf01055272355a520e4a597d7d7e3556b57d0f832dec4930e5899a0e2c","sha512":"029e3cdb68960bafb2f4e47a679a7351c9547d7aa93db3a48d9882504bab4ada49df939331115bd4a6fc8dd6456cd66ea190125da4b348fb3dc383a4dd883703","ssdeep":"","tlshash":"47d0c2af1d08b211094108e40971b19e635b510420b1a390918d422ac4c8a82dc233e0","first_seen":"2024-09-20T04:00:01Z","last_seen":"2024-10-11T09:19:30.986121Z","times_seen":31,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redirect3.online/flurry2.html","fqdn":"redirect3.online","domain":"redirect3.online","tld":"online"},"ip":{"addr":"104.21.55.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:39.350Z","timestamp":1727198859350,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redirect3.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Sep 2024 16:21:21 GMT","end":"Mon, 02 Dec 2024 16:21:20 GMT"},"fingerprint":{"sha1":"46:1D:B0:17:F7:A5:4C:43:98:0F:A7:F0:E3:13:1A:C5:65:27:15:AD","sha256":"69:65:AB:BA:8F:55:4D:8C:ED:7A:0B:18:55:8C:05:31:E5:C9:2F:37:39:0B:7F:BF:99:F9:58:33:1B:42:6C:CF"}}},"request":{"raw":"GET /flurry2.html HTTP/1.1\r\nHost: redirect3.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 42309\r\nlast-modified: Tue, 24 Sep 2024 05:42:30 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=E3uN3AatqJ2mNfcxuL4Yo2o%2F0f13nRpZDFuMAJaXDwe43%2FCCOoD0yEK5pmMtglXsu4vFeBv5wFyePiKwisUxV4OhjDmYTIoTTN875Wjd1KDUisF6EBR7axRztqpDZnzBjciE\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c851801b7b5-AMS\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":245,"size_decoded":245,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"11d51bc2ac0c933f66dd94161ae7a68d","sha1":"b93c0f6e94c87464e2091a8adc23edd817ab4a94","sha256":"e2bcc38b9ca7f71c6707ddc83dd8e9e8247bc3d37eedd18aac2f9d042558a15a","sha512":"445e6bea0e237f189ffb6bb75342a87d85388a8e96da3a500daf52ff8dc239e1c4fb0d97ed586d72331d4e436a65d5c761f881083075204b4d09315b6625912e","ssdeep":"","tlshash":"1ad02bae1d18b009759008d01770b9ac385ad0443425b074f5c4022f48c02c58c333d0","first_seen":"2023-05-08T16:02:00Z","last_seen":"2024-10-11T09:19:31.019179Z","times_seen":45,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.eximdigital.com/redirect?feed=553310\u0026auth=LU3rE4\u0026subid=eximdigital\u0026query=eximdigital\u0026url=eximdigital.com","fqdn":"xml.eximdigital.com","domain":"eximdigital.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww-7.good-trading.com/?good-e","date":"2024-09-24T17:27:42.081Z","timestamp":1727198862081,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=553310\u0026auth=LU3rE4\u0026subid=eximdigital\u0026query=eximdigital\u0026url=eximdigital.com HTTP/1.1\r\nHost: xml.eximdigital.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":981,"timings":{"blocked":953,"dns":28,"connect":101,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cgb.news24.media/?d","fqdn":"cgb.news24.media","domain":"news24.media","tld":"media"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://w7.eurosptp.com/page.php?fr\u0026countrycode=coutry","date":"2024-09-24T17:27:36.284Z","timestamp":1727198856284,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"news24.media","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Aug 2024 23:13:48 GMT","end":"Thu, 07 Nov 2024 23:13:47 GMT"},"fingerprint":{"sha1":"C7:D5:FC:A4:F6:85:4C:62:EB:B9:66:9D:B6:09:11:F2:DC:EA:42:F6","sha256":"01:F4:2C:9E:A7:9D:5B:CE:F6:1B:36:4B:26:4F:58:07:3D:A6:AE:36:F5:07:06:1F:C7:E6:6A:03:BB:92:AA:41"}}},"request":{"raw":"GET /?d HTTP/1.1\r\nHost: cgb.news24.media\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:36 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/7.1\r\nreferrer-policy: origin\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3L3bbXnf8G4KCXPlmb8j0cVwU0FXDg3aXJRyhN1zqy78LaL2F9x0NKcoDHxZ6p2HUkIv5P4JIYJKALNye2j9O56c%2F44LaP2tmVMI2LvD9YTBgR8n5Mg%2BdhGPdapLGlN0rsEK\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c751f6d6610-AMS\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4181,"size_decoded":4181,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (4431), with no line terminators","md5":"03c3246abbbf5d016c3b5efe4f5ce889","sha1":"29cb2eac23b2bc57783b114201452a8628c0d111","sha256":"09c26f2aa26cb0d3855c43db5eed544a52ef841fb564c49d1eaedc74fc250afa","sha512":"34dbc9db55742b242c5e186c6547b8e20b75a7552e87087065a851dd51e33338df221d0027425a9fc7a06b16a65b0a49937a13083beb7dc527f232ccbe9ad5a6","ssdeep":"96:TogKtR9K/KWvEjzp5aDobwCfsROVJfX4YsCfsROVJfX4Yd:MgKtR9K/KWvE8U4YZ4Yd","tlshash":"a5914431fe6b333a1e129194678aa54c110bd48fd614946eaba65814cff07edec78873","first_seen":"2024-09-28T07:59:48.756702Z","last_seen":"2024-09-28T07:59:48.756702Z","times_seen":1,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":30,"connect":27,"send":0,"wait":63,"receive":0,"ssl":141},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redirect3.online/flurryn1.html","fqdn":"redirect3.online","domain":"redirect3.online","tld":"online"},"ip":{"addr":"104.21.55.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:37.011Z","timestamp":1727198857011,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redirect3.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Sep 2024 16:21:21 GMT","end":"Mon, 02 Dec 2024 16:21:20 GMT"},"fingerprint":{"sha1":"46:1D:B0:17:F7:A5:4C:43:98:0F:A7:F0:E3:13:1A:C5:65:27:15:AD","sha256":"69:65:AB:BA:8F:55:4D:8C:ED:7A:0B:18:55:8C:05:31:E5:C9:2F:37:39:0B:7F:BF:99:F9:58:33:1B:42:6C:CF"}}},"request":{"raw":"GET /flurryn1.html HTTP/1.1\r\nHost: redirect3.online\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Sep 2024 17:27:36 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=604800\r\ncf-cache-status: HIT\r\nage: 40308\r\nlast-modified: Tue, 24 Sep 2024 06:15:48 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XEUdb5puc00o3qTnbnkYfKQTGqE%2B1DVO99FMLROFHE%2FDjSQX0MYD1wioPJ%2BS3wo%2BNcceY9qylEcI%2BXGVJZ27pBdD9M6BRaEfG1OM8aylWHFgMvoEFgSyp9un6VfjG2%2BX0EL%2B\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8c847c781d0c62ba-HAM\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":247,"size_decoded":247,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"f40ce66e2552aded08420b10779c681f","sha1":"e68b9378502459f5cf43995706913acace1339dd","sha256":"3f0f6061362432681354ebf5fb3783e08a73083ad36dd22a7078ddac66a7d22c","sha512":"e78ab58035cfb5071b23166a487ff708e4c82149ecb5092b8bbbb3173f137bdde71baece1184f4acc39230ee68bb8c261ac01164f2e81b28c9f4474e57c8f17a","ssdeep":"","tlshash":"c0d05eee2e58b50dba9548d417b1a2ac381a91453865b079f6cc466e88c46ea9cb33d0","first_seen":"2024-05-17T09:36:37Z","last_seen":"2024-10-11T09:19:30.985607Z","times_seen":41,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.flurryad.com/redirect?feed=647220\u0026auth=1c6u8H\u0026subid=flurryn2\u0026query=flurryn2\u0026url=flurryadn.com","fqdn":"xml.flurryad.com","domain":"flurryad.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:41.236Z","timestamp":1727198861236,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flurryad.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Sep 2024 06:45:11 GMT","end":"Sun, 01 Dec 2024 06:45:10 GMT"},"fingerprint":{"sha1":"43:38:58:0A:B2:FA:EA:1A:BB:BC:1E:FD:BD:D6:84:BD:55:18:6F:F5","sha256":"92:1A:E9:14:4A:62:EC:D7:C5:1B:84:DE:BA:FB:13:36:B8:1F:8E:B9:A0:67:BA:CE:9C:E9:00:F3:3B:04:A7:34"}}},"request":{"raw":"GET /redirect?feed=647220\u0026auth=1c6u8H\u0026subid=flurryn2\u0026query=flurryn2\u0026url=flurryadn.com HTTP/1.1\r\nHost: xml.flurryad.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":2185,"timings":{"blocked":-1,"dns":4,"connect":93,"send":0,"wait":0,"receive":0,"ssl":2086},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xml.adflyer.media/redirect?feed=474231\u0026auth=YyannI\u0026subid=adf\u0026query=adf\u0026url=adflyer.media","fqdn":"xml.adflyer.media","domain":"adflyer.media","tld":"media"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.good-trading.com/?good-e","date":"2024-09-24T17:27:41.725Z","timestamp":1727198861725,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /redirect?feed=474231\u0026auth=YyannI\u0026subid=adf\u0026query=adf\u0026url=adflyer.media HTTP/1.1\r\nHost: xml.adflyer.media\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T23:47:04.105988Z","times_seen":13351467,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":40,"connect":104,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}