{"report_id":"6d202ec2-6bc5-407b-be10-b9b3e22a4345","version":6,"status":"done","tags":["malicious","clickfix"],"date":"2026-01-27T02:29:12Z","url":{"schema":"http","addr":"christopheruntilpoint.com/e/evrgekpns0wv","fqdn":"christopheruntilpoint.com","domain":"christopheruntilpoint.com","tld":"com"},"ip":{"addr":"172.67.200.2","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"lauradaydo.com/e/evrgekpns0wv","fqdn":"lauradaydo.com","domain":"lauradaydo.com","tld":"com"},"title":"Watch Backcountry.2014.Truefrench.1080P.Amzn.Web.H264.mp4 - VOE | Content Delivery Network (CDN) \u0026 Video Cloud","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"christopheruntilpoint.com/e/evrgekpns0wv","fqdn":"christopheruntilpoint.com","domain":"christopheruntilpoint.com","tld":"com"},"ip":{"addr":"172.67.200.2","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-03T02:29:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"lauradaydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"crystaltreatmenteast.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"crystaltreatmenteast.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null},{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]},"summary":[{"fqdn":"christopheruntilpoint.com","ip":{"addr":"172.67.200.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-10","domain_rank":0,"first_seen":"2025-11-11T18:38:24.954978Z","last_seen":"2026-01-16T17:46:11.609809Z","alert_count":0,"request_count":1,"received_data":1303,"sent_data":508,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"walterprettytheir.com","ip":{"addr":"104.21.25.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-23","domain_rank":0,"first_seen":"2025-11-24T11:59:13.529916Z","last_seen":"2026-01-22T20:51:35.106985Z","alert_count":0,"request_count":1,"received_data":1302,"sent_data":504,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"entitlements.jwplayer.com","ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2007-09-17","domain_rank":18344,"first_seen":"2016-06-21T17:08:11Z","last_seen":"2026-01-21T16:13:45.528128Z","alert_count":0,"request_count":1,"received_data":577,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-25T22:14:35.458366Z","alert_count":0,"request_count":1,"received_data":20991,"sent_data":533,"comment":"","tags":null,"fingerprints":null},{"fqdn":"lauradaydo.com","ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-01-13","domain_rank":0,"first_seen":"2026-01-14T17:48:51.830163Z","last_seen":"2026-01-22T20:51:35.157421Z","alert_count":17,"request_count":16,"received_data":2090687,"sent_data":19751,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Twitter Ads","description":"Twitter Ads is an advertising platform for Twitter 'microblogging' system.","website":"https://ads.twitter.com","common_platform_enumeration":"","icon":"Twitter.svg","categories":["Advertising"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"gigglegrowlworrisome.com","ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-03-12","domain_rank":169112,"first_seen":"2025-03-20T06:34:20.068584Z","last_seen":"2026-01-25T16:05:13.650837Z","alert_count":0,"request_count":5,"received_data":112116,"sent_data":7085,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"imasdk.googleapis.com","ip":{"addr":"172.217.21.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3922,"first_seen":"2014-02-25T09:02:53Z","last_seen":"2026-01-21T11:07:48.757879Z","alert_count":0,"request_count":1,"received_data":467089,"sent_data":429,"comment":"","tags":null,"fingerprints":null},{"fqdn":"crystaltreatmenteast.com","ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-12-30","domain_rank":0,"first_seen":"2025-12-30T22:51:39.154515Z","last_seen":"2026-01-24T20:21:25.562958Z","alert_count":2,"request_count":1,"received_data":2406,"sent_data":507,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.pncloudfl.com","ip":{"addr":"172.66.165.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-04-20","domain_rank":95245,"first_seen":"2021-06-07T14:28:03Z","last_seen":"2026-01-24T13:37:57.69326Z","alert_count":0,"request_count":2,"received_data":11159,"sent_data":970,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-25T22:17:37.642954Z","alert_count":0,"request_count":1,"received_data":3194,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-01-25T22:25:20.721908Z","alert_count":0,"request_count":3,"received_data":176461,"sent_data":1352,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"lauradaydo.com/e/evrgekpns0wv","fqdn":"lauradaydo.com","domain":"lauradaydo.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"9e3ed1cfbb6595dcac5d2d7b6caef849","sha1":"491dbbc7e80a011cdf0702b17f9c186a7e80bf15","sha256":"bdd2359125aeb03aa4cff5a9b9a212c3ecf0005414050d6a2d1317793085ae11","sha512":"74c9d5259d3a46cda00caedb535e2594eb6f17687143c0a94ccd09233b044754a842e9d64e2e23b5ea23c889fb6b8770a8ac615233e4ab9b9e4330ef76e274a2","ssdeep":"","tlshash":"50e02be6d71447c8c2917150d169d84fa859721845b1dc71f19d9a345f8009274ce9c0","size":418,"data":"","first_seen":"2026-01-14T02:48:50.504168Z","last_seen":"2026-02-18T23:38:18.56213Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lauradaydo.com/e/evrgekpns0wv","fqdn":"lauradaydo.com","domain":"lauradaydo.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"f646a3bf6021cf9b091ce25e3e02accd","sha1":"fd5856375a2de55c233b98cea458dd45ad731b7f","sha256":"1e03159bafb1e8ba958c5ee6d609084aea470aaa24fe3a05f4da41c152ab6006","sha512":"20427da1608f13ed273d760ae7ba1c6e2603935c9b641b199c69174801bb1ea9683838f9f3196eee6e2eed213fd313235937f9e9b3087f99e8b0934744818bdb","ssdeep":"","tlshash":"3f811eae25f2207397a3707e8aaf9104b23791d7000dae553c4d97807f58a3997b6bd8","size":3938,"data":"","first_seen":"2024-01-10T02:44:29Z","last_seen":"2026-03-28T20:13:06.264568Z","times_seen":805,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vanilla-lazyload/10.17.0/lazyload.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"375e3e0688214ca1595fc28956430dd1","sha1":"09ba8de39859cd17c2701057352dd5b8bc3c07f6","sha256":"a052ce2a1bfa39fd0315ec22b7b123a0097dc99884a5b10c348931a2b0190b1f","sha512":"da84ce21b5de848227f5cc70b591805ab9228a4c796058480a8259378a0c0a8b36137b02310d950faa4440b27330ba0b21518404b2b974d6feb74556837f172e","ssdeep":"96:lncpq9Hqqq0ykOP6WUuBymFCxWPIu4WYdlnlb3W5d1wgip+Aip9DyB9tyqkXlQ9I:VpHlqeOSWU2cxWPElZjJi7DyB9tyFX2K","tlshash":"06b1420cb069b03f656bb036413f130b7236605678958498f578dae9cabc84e2433fbd","size":5124,"data":"","first_seen":"2023-03-10T00:45:43Z","last_seen":"2026-03-31T10:13:58.274048Z","times_seen":383,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-04-03T18:30:36.426534Z","times_seen":136051,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lauradaydo.com/e/evrgekpns0wv","fqdn":"lauradaydo.com","domain":"lauradaydo.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"2115494b641b4e1a14f34d2d64552b29","sha1":"fae5e680c19b68b4e43ced6a9d5b2e16908f6b32","sha256":"8b73c45b8b1af92c506986362978acead1583913f419776f6db2196ec46a3b15","sha512":"0e957317b3213fbc19dfff0d255d5396b7185d40021df708f394950c33cf86dc272a3ab58adf7f4592a499e12d3b48903fe306a451f74bcba78557075c111d33","ssdeep":"","tlshash":"e9e0611dde3edbc502b620d2b282d38aa23e101e95049d12225e80857b71edf49dd604","size":369,"data":"","first_seen":"2025-04-23T04:06:55.142043Z","last_seen":"2026-03-28T20:13:06.265384Z","times_seen":271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lauradaydo.com/js/loader.bc4a6543429.js","fqdn":"lauradaydo.com","domain":"lauradaydo.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"f43b942340f3e45d3ae53d0712b13256","sha1":"e11a4d4c3d7fff07ab752e7cb73342aa156dd66f","sha256":"32113f06d823097d0181fdc56d12e40e3ab7ca9d07609ce3f41c6d2c6b1846e2","sha512":"63a713372921c75df85848b0da2c35c14d12a8348b10263fa035090110417a141d1497edcb989a1f777d9addcc7a6843ce2d270f5e1be873f76cf1ccf2b8320a","ssdeep":"1536:+Im9L7Faw8G/1K+jpw8y5f0HMNz2szEe/XmC2:+Im9fww9Hw8y5f0HWEe/u","tlshash":"2a83c51c26d0b9590b8b9f36b72f28dcf5570e2f6d84c84bc605bc602579a1bede2532","size":83200,"data":"","first_seen":"2025-07-09T03:26:33.467529Z","last_seen":"2026-03-28T20:13:06.247323Z","times_seen":225,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gigglegrowlworrisome.com/check.html","fqdn":"gigglegrowlworrisome.com","domain":"gigglegrowlworrisome.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f2e0cd22b41fa7c9212af0b11f449d3","sha1":"6c552632a2eeaa712496444594c3e8c68eadbbb0","sha256":"d7ca5af269e02e5109a61ef55df0196e2206204d6c742daba5a153defc097fda","sha512":"c90bb9984fc0b2a5374129cb10fc509e937ba565063e2530578430fb0329f8058c145c914de139fa166d8530cfff9799a8c78aa1ad2752d9ec72e24c0fed477c","ssdeep":"","tlshash":"d201685934f5684d5127b630255b22182d32a40325cbd94efb2cdb301f825a7eca8aef","size":762,"data":"","first_seen":"2025-03-07T08:34:13.499254Z","last_seen":"2026-03-04T07:06:03.173543Z","times_seen":7245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lauradaydo.com/e/evrgekpns0wv","fqdn":"lauradaydo.com","domain":"lauradaydo.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"df2b5e52de60e369343479e91bb36b29","sha1":"f5d3d73c0ce0255d4899e6151e7a54aef1e26a7b","sha256":"5f82bdc3f3698939df748aa682bc49c5299d1cc25c6afbcc3e16ecf5fd0318f1","sha512":"e49f5ac5a73f8987a56f7adc538aeb1f8760b8e08261487c9f242b31a1fa00c520f658b5854fa265d7e95927641f6fb826d9805c8780a7569ce4205f3a643d4b","ssdeep":"","tlshash":"e811595f1682520844c879eb5e8310a5f134a991fa3da2e8a325a1107efbc1c97bb8cd","size":864,"data":"","first_seen":"2025-04-16T08:02:19.832585Z","last_seen":"2026-03-28T20:13:06.266215Z","times_seen":291,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lauradaydo.com/e/evrgekpns0wv","fqdn":"lauradaydo.com","domain":"lauradaydo.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"eventHandler","is_inline":false,"md5":"3e26c540737713ae1761eb98258f5df8","sha1":"6fe02275d481cd704633c54f2351b21cdbe06e90","sha256":"63a5b7d7b54fc202d1534c9d88ede526aa047b31047db536c3df0ed5667d6ea3","sha512":"d02bcd21454cdba85641ba1348d1b7724080f2d8439c8c41713b8c9476237fc914b3a5ae933b5cbccb27612330a4546d3fd281caa75c1d59c01dfc879032e56f","ssdeep":"","tlshash":"b65000000f003000000c03003c000000000000c0000000300c000000003c0003000c00","size":9,"data":"","first_seen":"2025-10-23T10:54:42.646136Z","last_seen":"2026-03-03T16:04:43.641686Z","times_seen":119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lauradaydo.com/e/evrgekpns0wv","fqdn":"lauradaydo.com","domain":"lauradaydo.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"ba04ce282da046cf55192a5e83149805","sha1":"c916ba55455060853a2531909c34c7a079efaa16","sha256":"6ff7bd06bf9aba3e4153d194ef4306ca57da5d933bc98c7c177b62678e97aa2a","sha512":"ad534e053d57453799833f095e6299891b3afe09ab31b9fe18c9149e227eee17c872ab4df2285e329a53acfc100d98d8d7557dcaea195b7438c6533c416f660e","ssdeep":"","tlshash":"3d70000a0802080208a0b80c2202220030003202803000800223a0203008283ac000c0","size":21,"data":"","first_seen":"2025-04-17T20:44:03.876522Z","last_seen":"2026-03-28T20:13:06.267171Z","times_seen":278,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gigglegrowlworrisome.com/get/2060453?id=2060453\u0026jp=_cllcvkrgiinwedhuwwxoah\u0026dr=102\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.7-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IoebI0ClwF_byRXWVsPCTpVIbFIUEQtsql-\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=K2SBqyIaHR0cHM6Ly9jcnlzdGFsdHJlYXRtZW50ZWFzdC5jb20v\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=Sz5ZbvsaHR0cHM6Ly9sYXVyYWRheWRvLmNvbS9lL2V2cmdla3BuczB3dg\u0026afid=6026939213154304\u0026eclog=0\u0026seu=Oz26hBfaHR0cHM6Ly9jcnlzdGFsdHJlYXRtZW50ZWFzdC5jb20v\u0026snc=0\u0026ssc=0\u0026vp=8\u0026pkw=0\u0026pload=1044\u0026rlp=%5B0%2C80%2C294%2C207%2C1720%2C1465%2C804%2C1465%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0\u0026freq=0","fqdn":"gigglegrowlworrisome.com","domain":"gigglegrowlworrisome.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fb6adf14c9c1e59dadc84e876c334e5","sha1":"13d8dcedad7453036b5e8cde00f4e0d8c070a5f9","sha256":"087fa6139eff2b0ce9a51e57111d7a445da083e3ea3ddc1ffc2164544a404659","sha512":"a1acd5da775c37b798d6d3df0cac891731c61bfeea3c7181677f1fe825b4a3b861b2c936257d03f39cf3107f171d73c63f61006a82592b775c0b19c1c529c9f0","ssdeep":"192:jS2GBMxyArTU/i7cDnhIbA0IyvsfIpCQFK:7GKDrci7ajyUAPK","tlshash":"34d16cc08823c055e1195d1a11f76c38684d87c375a235da94faebf92e8d03b6f97ca0","size":6550,"data":"","first_seen":"2026-01-27T02:29:17.523014Z","last_seen":"2026-01-27T02:29:17.523014Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lauradaydo.com/e/evrgekpns0wv","fqdn":"lauradaydo.com","domain":"lauradaydo.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"2473287449dac29c24f9e21a493d84cb","sha1":"186b060ec27efc615efdab5a95d84c24b9eb81d9","sha256":"e9ecf6af63d029d96093b7a6360260d087e6a1e59ea33e61dae3239e811c7080","sha512":"49d2958c7d0c9ad5419a79bc628bf9280c257b614765b221910a6615353184e7df0eb667dd10b29a6676639ee4c0ad7fe89d350d39eec1de27e9dff5c7104c83","ssdeep":"","tlshash":"df9002ea0d9640555b939bc936b2ed4e6555261c4479b548f032185405852625013451","size":56,"data":"","first_seen":"2026-01-14T02:48:50.52575Z","last_seen":"2026-02-18T23:38:18.567313Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lauradaydo.com/e/evrgekpns0wv","fqdn":"lauradaydo.com","domain":"lauradaydo.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"d2f25233d179f31f3114568eef0c5f99","sha1":"070074154952c6bed5f5fdb273ce33c6a9483d3a","sha256":"825a9f011261f702b54189607840eca03176926589751f97b4b0c14768c092f4","sha512":"4afcba45333ac9ae9a5cb1c4715a7f26d2b3c1377c1b10f9defb928f6591bee2b78f7ce312e47bb4d633a05bba853955d966119fce9ae7340bc0bafb4789246f","ssdeep":"","tlshash":"c521f1df134408740a8e26d6c797611931b210e9b90ee995986c8de01b14a2fc732acd","size":1146,"data":"","first_seen":"2026-01-14T02:48:50.532205Z","last_seen":"2026-02-18T23:38:18.568999Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.3/js/bootstrap.bundle.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","size":80721,"data":"","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-04-03T18:04:39.059692Z","times_seen":21813,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lauradaydo.com/jwplayer/8.40.2/jwpsrv.js","fqdn":"lauradaydo.com","domain":"lauradaydo.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7c09a238f43ba40002820079de36b91","sha1":"620bbc4b53e6fd80b6cd5c89271bc09973d51903","sha256":"be32622dbb1e238992fe4d24d3fd2aaf05b5a283f58f249790b673f04e64c24f","sha512":"41864f6164c9375d1a4abcfc0e831b453e963e0f6c109da0a74e34157b59714eb8b9b0ce2c63b59cade937acb560d38b4a328f0e51fe7ce9ec97df10d8a22686","ssdeep":"768:DiDjPSAlvbtXral8WKOR7pr1oJl92LCaA1YL9ncpgW:+nPlZral8WK+EJl92LCcLWpV","tlshash":"4463c78d3685b16a5a6770b8806fb546723d1dd6308dc250ea50eec93c3de5ee237b2c","size":67344,"data":"","first_seen":"2025-04-10T04:03:01.174964Z","last_seen":"2026-03-28T20:13:06.225335Z","times_seen":295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lauradaydo.com/e/evrgekpns0wv","fqdn":"lauradaydo.com","domain":"lauradaydo.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"49ff2300f43dca2ee8ad9e684f22aae9","sha1":"af3832931ea1cb6faf81664f356a2f7e7fd23ed9","sha256":"4668b1c4be37e700f7fa7f0514795b0e1dfd6c03eaf2d35e499cec8057bc1a01","sha512":"87ea65cc5a5458839efed99b98d2e6090c17dfffda9532d25163c7eac31800e66316b03a9920b954cdc5f7028aab674083198f700c166998233a1c38a852c3b1","ssdeep":"","tlshash":"b4b012fb65c040a83316b8922573dc8b5c0b46cfd9998410c87fe6e13c22219b5415c4","size":102,"data":"","first_seen":"2025-05-16T04:35:40.709687Z","last_seen":"2026-03-28T20:13:06.269895Z","times_seen":263,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lauradaydo.com/e/evrgekpns0wv","fqdn":"lauradaydo.com","domain":"lauradaydo.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"79c4b2feb2692e82764eead89e8c217a","sha1":"6a35e4598cb42e32159415467cc6f587eb3ec717","sha256":"4a552cd67e46dc9e97ff9d17e28ce29b9b091fbc08d63d373d03ff55d360e5e2","sha512":"4cacf8178256a152ac89cc4667665519f6bcedc399bade9c4b2857364fee458cba67d615f676e5e476e8c492891c220df5c8b3b97ecdc75beaafbe867d2e15f4","ssdeep":"1536:iI7Xxg0FsqC7bWLL072UQQP1XICsYt9GjV/yuif2+MfJa71ZPUT2rb9Z:t7h9FsqaWs7jZPxhVCvi+vAiT2H","tlshash":"c0a3c88939d6b84943b2e07501bf2ccbb5bb7d80700c9545c161e9b4fcf1aae91a3d6e","size":105516,"data":"","first_seen":"2026-01-14T02:48:50.537529Z","last_seen":"2026-03-08T17:56:12.880917Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lauradaydo.com/e/evrgekpns0wv","fqdn":"lauradaydo.com","domain":"lauradaydo.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"a281819718c5efc2622ad95797e0debb","sha1":"28af6ffb4c46ff9f66cb63785bc0ba9f47f5c5d3","sha256":"590631184ec567ca92dc03be575ccfc045e510903b327ec1d4a3f6dcc893b03a","sha512":"b7ee7809acdfb773880f0e3e27216eb68e5c43db289212fa708796f9671f979c3c3ed17fa579b5ce42df95d64569323c5a5afdb687b8b9850d33cfb8811a9e0c","ssdeep":"","tlshash":"08e0c27066ac027119461073321be10c433be64be8e3e5b0b59c90505f1d61e70aac83","size":394,"data":"","first_seen":"2026-01-27T02:29:17.534379Z","last_seen":"2026-01-27T02:29:17.534379Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lauradaydo.com/e/evrgekpns0wv","fqdn":"lauradaydo.com","domain":"lauradaydo.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"84484d3dd45c5c19372c633b64891868","sha1":"9cee34b57ae30b92b5299e32de281ae1a6d4dffe","sha256":"9d2e80ada7507e01801180baa69d25b7d0c3a20cc8f7b11e61f1afb8160d9c96","sha512":"a5ef5121307c32ef2e1e4f10611d1287f4f566d2184357c49809c8a47a5ebe520add6ecb22396969950bc158af5cafe4dec3361eb4df0942880584c9b7b20329","ssdeep":"","tlshash":"ff016d1f904a257de6f71a0b625bb4d93f1b1811b0d1f82a710c04507f2274722157d7","size":825,"data":"","first_seen":"2026-01-14T02:48:50.541724Z","last_seen":"2026-03-08T17:56:12.883335Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lauradaydo.com/e/evrgekpns0wv","fqdn":"lauradaydo.com","domain":"lauradaydo.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"2eeb7079f30878e372bc4cf00bfdb011","sha1":"05433a16d6407b8894fb553c8847941286b6df04","sha256":"ee314ab1bd53abd9c3bc733d94c39dbeff927ace9eeadab08f1d8e5a2b956c1e","sha512":"947edc02008a24e116f9b8edf2ac98e2236b20b09ada352cffbf8ce8efc8b17f6b578948813dd7c2280a5c0edd59abb96a5558d14229edc5c603626928d85060","ssdeep":"192:t07XDMJQIo3NTkI+Lz5NVFm4xd1Y6lwIHMxSsCGIf+8ak9cRSksr6aBvWDGC:tfJQIoZ6pNVFmiee7sxqGI3alRSkU6Zz","tlshash":"a80209b22152993d83a14dedd23d7d68f47a5a00304ac984f0eddda33c66a06d6b2d7e","size":8622,"data":"","first_seen":"2025-10-23T10:54:42.680889Z","last_seen":"2026-03-03T16:04:43.640689Z","times_seen":119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lauradaydo.com/e/evrgekpns0wv","fqdn":"lauradaydo.com","domain":"lauradaydo.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"0beac54daf16ad2d8235e5ae5b2a712a","sha1":"2c7dceda748b5be34b4b1cc057f8657ef986439f","sha256":"dae7da40b408a6e777d59a00838ae402f4abcf4be082be3b88a9068634a3fd8e","sha512":"ae7a9a036f48a4e1efcc0514710ba90854e26577569a600dbdb9063f92b52a82570523c89888d60b50e4c39b91beb974fc5d548db4c5a89392db1433c33f5373","ssdeep":"","tlshash":"48e0f102346d5660a4cb002f1a72223433a2359b3951885644cdc83b9ca0d44945d2e4","size":397,"data":"","first_seen":"2025-04-04T04:59:30.319262Z","last_seen":"2026-03-28T20:13:06.280826Z","times_seen":310,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lauradaydo.com/jwplayer/8.40.2/jwplayer.js","fqdn":"lauradaydo.com","domain":"lauradaydo.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab71ac1dcd8af52418dd47b063e1fea5","sha1":"9f8969841c13985a172abef1d9bb8b3b708bfd4e","sha256":"728e91f3484426f321c95403497abe5edd3a99981ec2a9af7416017d9640f766","sha512":"cbb9666c38ab783bb4b71ccae34a1b56656809a82e5f92cfd29db6398b8155d202fe54a8181fd450712b1a743e571a53c566c76bef801a66f091ca90fb04934b","ssdeep":"1536:nryFBl7p+VoAw2w7CyuJt4gDqG0HN1sztXdRsayfoYI3vKs75T3pEeyshA1639qS:yMwgYAN2rDP/UZGc7fdh3xNR","tlshash":"c5f34c9631c2f0b603f224dae47b4141f2790949344de9a4f66cecdb795a907a1b3fb8","size":159865,"data":"","first_seen":"2025-12-18T08:47:09.827925Z","last_seen":"2026-03-28T20:13:06.261399Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gigglegrowlworrisome.com/in.js","fqdn":"gigglegrowlworrisome.com","domain":"gigglegrowlworrisome.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d17e2e7bb0c334c06be39c6b93ac41a1","sha1":"78e4507bee4483245385b68fe7bc4f4801482843","sha256":"2e903dfe1d422c104e29e43899cf098c1de12e0577bc5e5c722bff6fb8db6b17","sha512":"efbc5a0cb2ad2c71cef2b8e0bcdc446c1eb8e47884e665df5721d0a17e4aab451b64b55bc90b1bbbaf9dba06084f3e72531a635ae55937ae0293236aeb42aefb","ssdeep":"1536:fnjnzZ5bdFBik45Gm+Be4Z3/Z1cLXKsp68H4CGZDQnO2Sh23F8xRmzBUvKg1+8Gr:jl9DYk3BSClxKBUvKgRO","tlshash":"d2a3c7a4b7d43405922380f8a3fb404dba362ce4b4be5559b592e4df1cf8c899723e79","size":99468,"data":"","first_seen":"2026-01-22T20:51:37.140155Z","last_seen":"2026-01-29T02:55:52.799089Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lauradaydo.com/build/assets/27-SABxh.js","fqdn":"lauradaydo.com","domain":"lauradaydo.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f8d196002a87042ea0937428f428732","sha1":"a51a5552c6d4ecd7cef5eaf692805ed2c63b80bb","sha256":"3b04c518e637741a9132153c76798ce7988d6b3d7062df0e34b639f8016815dd","sha512":"4579e32b820b00129bc56ed5f6b565f9a202bb129167fdbf3ea31e497954e0127a43d49a011b11355fdcf3326068b59384598c5ed9b3bf2965e9399d639ecece","ssdeep":"","tlshash":"9f31b85570f96631c1593859e37bb362b2e00d5b7d253c8160ad0b726e39cc2dd7af88","size":1756,"data":"","first_seen":"2025-07-09T03:26:33.454888Z","last_seen":"2026-03-28T20:13:06.224115Z","times_seen":225,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lauradaydo.com/s/js/site.min.js?fe1eebe79ae88e4bfa6ed669174fca9c","fqdn":"lauradaydo.com","domain":"lauradaydo.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"f221d7962c60ad362e2fbc5e1dacc9e6","sha1":"9e2a0ee15fec83034ee0eedfdc866d2d7472ecee","sha256":"efd0ced2b4c5c6490d8ac3462669df8c5aa143db9ef81fc947dc3ffc739d4088","sha512":"e9e7241c7676af5f648d91446425219f382a6b4b7ac63a47c011d61f0ba8f69f87c16489f7f5b0aa36adc1a7e45830a73f1cec4b5b554fbe46ce29be3c022cf9","ssdeep":"1536:Y2u4R3mNZRo3GiCNIUhxBsSU1UxYs5pfEzS:FRwLzybXotE+","tlshash":"bfa31829b314193252ffa2f7749b2a057336d526ca82c055b878c56c0ef9d8536e3f2e","size":102814,"data":"","first_seen":"2025-10-04T08:15:13.352918Z","last_seen":"2026-03-28T20:13:06.229441Z","times_seen":183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lauradaydo.com/jwplayer/8.40.2/provider.hlsjs.js","fqdn":"lauradaydo.com","domain":"lauradaydo.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"5795cb718d9d0a9d716999799da0990e","sha1":"39dfc1dc67400f1ed35b37be1d526b90c625eccb","sha256":"a18e421507aa3a429e819fe9ac171d805d0a163afc2043fce008021b37d70daf","sha512":"846263de872c61cada23c11d782608d32398846946e55693a9375d9095cb8b45ae67fae089eb6cc7a0738b1b505c461225b75cd02caff0aeda3c6231eefbf2db","ssdeep":"6144:3VpXg+qrsNOY9EUrGbjOnlPRmTVdPCad/euG/Bpq0xQiq0diAbWk7GDg87ASe/0j:GY97iEPo6Bpq0NGhN/","tlshash":"10c43bde3295a01683c2b1a5903f5617633e7d0a280cc16cfa2be9d76d79949b03bf74","size":574404,"data":"","first_seen":"2025-12-18T08:47:09.885285Z","last_seen":"2026-03-28T20:13:06.256375Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lauradaydo.com/jwplayer/8.40.2/jwplayer.core.controls.js","fqdn":"lauradaydo.com","domain":"lauradaydo.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"352b9b8158f02688e08c495846fe6d83","sha1":"b0efb960dc2c6bb1715cfc7a0e7bf8ddee1018b9","sha256":"d8ec185418f97c1bdc341ba4498df52e36c98d3ec06fe0bd4dcf2555868c0ea9","sha512":"5a3aa22a18fbd6cc9d949a44da99d051235b634d241fc3acaa24a28376464ed9288821c9895e1e1a16511ab89be8b8b6e7cf36a8f47fb4436dd95c05f200e5f0","ssdeep":"3072:XA7cFVlnleuCkCaPGvvrvYhNp1UIKt+JhIXKpkAWrLCdJ2r9Do5SCYG:XA4r4uCknevjAnkt+JhaLCdJ2hU5SCYG","tlshash":"187418322142123556e682da76614604b33a8485f506cfacff6ceddd4c6e9cb31fabb4","size":342899,"data":"","first_seen":"2025-12-18T08:47:09.880598Z","last_seen":"2026-03-28T20:13:06.23029Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/sdkloader/ima3.js","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.21.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a45ac543e78da7d9db58fa6cbd736d68","sha1":"1999daba310d44417e8e7774b1a71db96e203bfe","sha256":"2c92101adcc37a70b95b0e0daab08e8952704410bdc11d1bbf881d92a4174f59","sha512":"1501e11c35cba4f00bdf2d0f222a2d5aa0ec54d1d69d228120d05f9d98c78c3f43b7c1a340ec4263cc12cdb9f29e844318c97d54b765a18d28831fce07d46c55","ssdeep":"6144:R1kfDB+cn/mdpQCX93rbXyBcfiIAnZHPvPcKBBHv0/oPU/Z:0J/yQK93r+aKIQZXNv0/oPEZ","tlshash":"64a4facdb6a674629363f4b5403f014fb23bb866f408886cb249d9e26e749494277f7c","size":466375,"data":"","first_seen":"2026-01-27T02:29:17.513685Z","last_seen":"2026-01-27T11:33:49.03639Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"lauradaydo.com/s/css/site.min.css?cb42e55bbdab3f11540fa3b620a6e66e","fqdn":"lauradaydo.com","domain":"lauradaydo.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lauradaydo.com/e/evrgekpns0wv","date":"2026-01-27T02:28:50.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lauradaydo.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:28:02 GMT","end":"Mon, 13 Apr 2026 16:28:01 GMT"},"fingerprint":{"sha1":"F0:39:62:19:37:B3:B6:8E:92:E5:08:63:81:F8:F8:94:1A:CF:B5:6F","sha256":"B5:4B:1E:22:AA:A2:F3:C1:E8:61:7E:6E:78:76:65:11:AF:04:01:85:D7:F0:EB:74:B7:9B:C9:A1:5F:8D:54:7C"}}},"request":{"raw":"GET /s/css/site.min.css?cb42e55bbdab3f11540fa3b620a6e66e HTTP/1.1\r\nHost: lauradaydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lauradaydo.com/e/evrgekpns0wv\r\nCookie: __ddg8_=PjwJZ0xUKP4n98Rq; __ddg10_=1769480929; __ddg9_=91.90.42.154; __ddg1_=VAGlSAtt5adRmVZWYffF; XSRF-TOKEN=eyJpdiI6IlIxRUdweW1xZDlIdmV1Um1hMVVENWc9PSIsInZhbHVlIjoiSjlTMVZ1cHczY0RLckU1aU5SOU1SYldiODZKeGJJak0vYlM3SUx2ZTRUcWJyQjRlZGwvUUZQc1NMOE1jUnNyeFFhUUZCb1R6d2tGYzFBemgrc0JMaTZCRGhJUENFMWNPL2ovMGVQUXBkVE1ZZ2NuUEw4cUk2czZtYU5jbEZQSHAiLCJtYWMiOiJkNzMzMDgyNDBmMTM0M2JhYTdmZDRmNGY4YjdhODJlNjBkN2YyMzE2ZDg3MDI0NGFlMDUzODE5YTcyNTQxZGFjIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImVyTjZsY2RuZDh0YUltZTNTMlluOHc9PSIsInZhbHVlIjoiUXdiQTd4dnU1NjlBLzVlbGswN2U0cmovUURQd0h5MW5JL0cyUmc3OTAreDlkUTNVck5PdHluazk1QUY3NGV3dkNwRWt3bTVaRFlYWk4zejFBYVJCdEtaNC9WVVdXVHp1SUlDODBuaHNvYy9XNWxOcC9LUmxUVjlsTjdPenVtbUUiLCJtYWMiOiJjYTlmNmZjOWJlZmFjMWExMGY2N2FkMDg3YzZmOWM1NTczYjFmZmRjZmQ4YzhjNDY5ZDQwNzRlNDk4MTNkYTliIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Agj2gaxgdMyjjyzT; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\n__ddg10_=1769480930; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\n__ddg9_=91.90.42.154; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 13 Jan 2026 17:29:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 05 May 2025 16:07:50 GMT\r\netag: W/\"6818e256-42120\"\r\nexpires: Thu, 12 Feb 2026 17:29:16 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 1155574\r\ncontent-length: 36475\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":270624,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65271)","md5":"c71fa701386844028fe6595289427599","sha1":"8be981f11be9f5aab5fd100ee58b8a9332674382","sha256":"39710492ff4eb2fd207455f6edca3b9649b46fd2644021344afdf1d4c9a5ca11","sha512":"eb59d640b418acd5a06c791f80e3e98916cf53953477cdaab70b938c09a9d596ce18771910af42227e052d95251f5fce7c0ef1db0bcacc9b63c749d72ef29bf1","ssdeep":"3072:7nL9Df9J/RNOokVsdmrjY82oUXpPzfjzntD:7nL9Df9DN/vdmrjY82oUXpPzfjzntD","tlshash":"fb4492e6f9d0307d2c67c259a690fefd6a2ea545db120ea6f003672487c96d309739cc","first_seen":"2025-04-08T05:57:49.888306Z","last_seen":"2026-03-28T20:13:06.222842Z","times_seen":336,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"lauradaydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lauradaydo.com/e/evrgekpns0wv","date":"2026-01-27T02:28:50.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://lauradaydo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 02:28:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27446\r\ncf-ray: 9c44d1a4deb1783d-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"64ed75bb-6b36\"\r\nlast-modified: Tue, 29 Aug 2023 04:36:11 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1014854\r\nexpires: Sun, 17 Jan 2027 02:28:50 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QXTG1ZD7LgOYFQB2ggPOUFPUmWkfaxpoRQVMNGoGt%2Fx8zjEQ%2BwZzVhLHF6JXtY%2Ft43hMtyenR6diyQNJas78wzcDi6MoGrfYPRjAsBJqc3oRbAmd99q9Fz5cmYgWmM2jXvq4GESg\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-04-03T18:30:36.426534Z","times_seen":136051,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":6,"dns":0,"connect":1,"send":0,"wait":12,"receive":1,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lauradaydo.com/jwplayer/8.40.2/jwpsrv.js","fqdn":"lauradaydo.com","domain":"lauradaydo.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lauradaydo.com/e/evrgekpns0wv","date":"2026-01-27T02:28:50.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lauradaydo.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:28:02 GMT","end":"Mon, 13 Apr 2026 16:28:01 GMT"},"fingerprint":{"sha1":"F0:39:62:19:37:B3:B6:8E:92:E5:08:63:81:F8:F8:94:1A:CF:B5:6F","sha256":"B5:4B:1E:22:AA:A2:F3:C1:E8:61:7E:6E:78:76:65:11:AF:04:01:85:D7:F0:EB:74:B7:9B:C9:A1:5F:8D:54:7C"}}},"request":{"raw":"GET /jwplayer/8.40.2/jwpsrv.js HTTP/1.1\r\nHost: lauradaydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lauradaydo.com/e/evrgekpns0wv\r\nCookie: __ddg8_=HxoKZ5vfhuuAuVJH; __ddg10_=1769480930; __ddg9_=91.90.42.154; __ddg1_=VAGlSAtt5adRmVZWYffF; XSRF-TOKEN=eyJpdiI6IlIxRUdweW1xZDlIdmV1Um1hMVVENWc9PSIsInZhbHVlIjoiSjlTMVZ1cHczY0RLckU1aU5SOU1SYldiODZKeGJJak0vYlM3SUx2ZTRUcWJyQjRlZGwvUUZQc1NMOE1jUnNyeFFhUUZCb1R6d2tGYzFBemgrc0JMaTZCRGhJUENFMWNPL2ovMGVQUXBkVE1ZZ2NuUEw4cUk2czZtYU5jbEZQSHAiLCJtYWMiOiJkNzMzMDgyNDBmMTM0M2JhYTdmZDRmNGY4YjdhODJlNjBkN2YyMzE2ZDg3MDI0NGFlMDUzODE5YTcyNTQxZGFjIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImVyTjZsY2RuZDh0YUltZTNTMlluOHc9PSIsInZhbHVlIjoiUXdiQTd4dnU1NjlBLzVlbGswN2U0cmovUURQd0h5MW5JL0cyUmc3OTAreDlkUTNVck5PdHluazk1QUY3NGV3dkNwRWt3bTVaRFlYWk4zejFBYVJCdEtaNC9WVVdXVHp1SUlDODBuaHNvYy9XNWxOcC9LUmxUVjlsTjdPenVtbUUiLCJtYWMiOiJjYTlmNmZjOWJlZmFjMWExMGY2N2FkMDg3YzZmOWM1NTczYjFmZmRjZmQ4YzhjNDY5ZDQwNzRlNDk4MTNkYTliIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=NVnj6iwrfF9Hmqgg; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\n__ddg10_=1769480930; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\n__ddg9_=91.90.42.154; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 13 Jan 2026 17:29:17 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Dec 2025 21:42:03 GMT\r\netag: W/\"694323ab-10710\"\r\nexpires: Thu, 12 Feb 2026 17:29:17 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 1155573\r\ncontent-length: 19564\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67344,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b7c09a238f43ba40002820079de36b91","sha1":"620bbc4b53e6fd80b6cd5c89271bc09973d51903","sha256":"be32622dbb1e238992fe4d24d3fd2aaf05b5a283f58f249790b673f04e64c24f","sha512":"41864f6164c9375d1a4abcfc0e831b453e963e0f6c109da0a74e34157b59714eb8b9b0ce2c63b59cade937acb560d38b4a328f0e51fe7ce9ec97df10d8a22686","ssdeep":"768:DiDjPSAlvbtXral8WKOR7pr1oJl92LCaA1YL9ncpgW:+nPlZral8WK+EJl92LCcLWpV","tlshash":"4463c78d3685b16a5a6770b8806fb546723d1dd6308dc250ea50eec93c3de5ee237b2c","first_seen":"2025-04-10T04:03:01.174964Z","last_seen":"2026-03-28T20:13:06.225335Z","times_seen":295,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"lauradaydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lauradaydo.com/favicon-16x16.png","fqdn":"lauradaydo.com","domain":"lauradaydo.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lauradaydo.com/e/evrgekpns0wv","date":"2026-01-27T02:28:50.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lauradaydo.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:28:02 GMT","end":"Mon, 13 Apr 2026 16:28:01 GMT"},"fingerprint":{"sha1":"F0:39:62:19:37:B3:B6:8E:92:E5:08:63:81:F8:F8:94:1A:CF:B5:6F","sha256":"B5:4B:1E:22:AA:A2:F3:C1:E8:61:7E:6E:78:76:65:11:AF:04:01:85:D7:F0:EB:74:B7:9B:C9:A1:5F:8D:54:7C"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: lauradaydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lauradaydo.com/e/evrgekpns0wv\r\nCookie: __ddg8_=RXu76OUUfYnJA83I; __ddg10_=1769480930; __ddg9_=91.90.42.154; __ddg1_=VAGlSAtt5adRmVZWYffF; XSRF-TOKEN=eyJpdiI6IlIxRUdweW1xZDlIdmV1Um1hMVVENWc9PSIsInZhbHVlIjoiSjlTMVZ1cHczY0RLckU1aU5SOU1SYldiODZKeGJJak0vYlM3SUx2ZTRUcWJyQjRlZGwvUUZQc1NMOE1jUnNyeFFhUUZCb1R6d2tGYzFBemgrc0JMaTZCRGhJUENFMWNPL2ovMGVQUXBkVE1ZZ2NuUEw4cUk2czZtYU5jbEZQSHAiLCJtYWMiOiJkNzMzMDgyNDBmMTM0M2JhYTdmZDRmNGY4YjdhODJlNjBkN2YyMzE2ZDg3MDI0NGFlMDUzODE5YTcyNTQxZGFjIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImVyTjZsY2RuZDh0YUltZTNTMlluOHc9PSIsInZhbHVlIjoiUXdiQTd4dnU1NjlBLzVlbGswN2U0cmovUURQd0h5MW5JL0cyUmc3OTAreDlkUTNVck5PdHluazk1QUY3NGV3dkNwRWt3bTVaRFlYWk4zejFBYVJCdEtaNC9WVVdXVHp1SUlDODBuaHNvYy9XNWxOcC9LUmxUVjlsTjdPenVtbUUiLCJtYWMiOiJjYTlmNmZjOWJlZmFjMWExMGY2N2FkMDg3YzZmOWM1NTczYjFmZmRjZmQ4YzhjNDY5ZDQwNzRlNDk4MTNkYTliIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Jsz3vtE5e37XKosZ; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\n__ddg10_=1769480930; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\n__ddg9_=91.90.42.154; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 13 Jan 2026 17:29:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 533\r\nlast-modified: Mon, 05 May 2025 16:07:50 GMT\r\netag: \"6818e256-215\"\r\nexpires: Thu, 12 Feb 2026 17:29:47 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 1155543\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":533,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"4a1c219d978909f413ca1b9a39f7523d","sha1":"08859f796b01690ee81a13e4bcc0976f16c473ca","sha256":"dc91f3be29e28fa5aa027f4c3165a5df794424e66c1627b90a204482b470f0be","sha512":"898c1447a0dd59b40541b9720d28b191d01ce9e4e1d1c5e3ccae3e879a2249183fc74e752760f3ae0c16639c9dad6e8b5d00c627bbb4c5965c99aff1ec0aeada","ssdeep":"","tlshash":"fef020bc3323583cddcd9db641f51094a913d88c86c42d3cbec672ec44356a8c9e4036","first_seen":"2023-05-08T15:55:48Z","last_seen":"2026-03-31T11:51:25.297515Z","times_seen":918,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"lauradaydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lauradaydo.com/cache/evrgekpns0wv_storyboard_L0.jpg","fqdn":"lauradaydo.com","domain":"lauradaydo.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lauradaydo.com/e/evrgekpns0wv","date":"2026-01-27T02:28:51.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lauradaydo.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:28:02 GMT","end":"Mon, 13 Apr 2026 16:28:01 GMT"},"fingerprint":{"sha1":"F0:39:62:19:37:B3:B6:8E:92:E5:08:63:81:F8:F8:94:1A:CF:B5:6F","sha256":"B5:4B:1E:22:AA:A2:F3:C1:E8:61:7E:6E:78:76:65:11:AF:04:01:85:D7:F0:EB:74:B7:9B:C9:A1:5F:8D:54:7C"}}},"request":{"raw":"GET /cache/evrgekpns0wv_storyboard_L0.jpg HTTP/1.1\r\nHost: lauradaydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lauradaydo.com/e/evrgekpns0wv\r\nCookie: __ddg8_=wvykvDJTgXt6xmTf; __ddg10_=1769480930; __ddg9_=91.90.42.154; __ddg1_=VAGlSAtt5adRmVZWYffF; XSRF-TOKEN=eyJpdiI6ImpzckxIeHY0ZHoyWjIzMDhSTWlKVEE9PSIsInZhbHVlIjoiYndrUklWZ0puVUlZWXc5Nmw4YjN3L0UyZ0F3Z3ZFZ2xPbEk1MGMzVHp0ZVhJZjA2dUNHaEFrS2VmRVlVczJGaXhYSkNkMEo3ajJBM1Q0bEZCWCthREFDaVhXK0ZBc204R0tyTENrUjNPbHoyT2hnaXVSVHkzYktGbEgyMXVhV3AiLCJtYWMiOiI4MWRkNzRiMzY5NjRjYTAwNjkwZGJjNjcyMTM4OWVmNmQyYjljNmZlMGM5ZjlhNzc0Yjk4NDRjOTBiMjQzYWQyIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6IjFEMmVWQXJmZXB3SGwwN2xYU3RCTmc9PSIsInZhbHVlIjoiQVYrK1hzQXlYQVNFNGJGS3F5amE2R3FRUnVqTExBSjBpUEZsM1hJR05JaXpnZFJkdi9NMHhrYUY5OVZpZVVrcjV1a2ZnakcyMzJKRXpoQ3dFaWQzbGRzemphcE8wTGZQdHdqU3JaQ2licmcyMUV4cHVveThSQlVCZEY1cWxBZjMiLCJtYWMiOiIyZWViM2JmZjE4YjQ3ODI2YTY0MmY4ZGJjMTZkMjFjMDg1YTFhMjVhMjBjYTRkYTBmOTk5M2Y2ZDA0YTRhOWIzIiwidGFnIjoiIn0%3D; UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=UCeOdLIFvFBEwGto; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:51 GMT\n__ddg10_=1769480931; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:51 GMT\n__ddg9_=91.90.42.154; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:51 GMT\nXSRF-TOKEN=eyJpdiI6Iis0ekhta2NXZWJFdlhCOHRwYUh4eEE9PSIsInZhbHVlIjoieDBTaUNPdHhMSHVSdk1hdUIyUzhiSlY0aE1EdXoxRVEzVnE5ck5UaElab3d3MGExMW1EelZRNUVWMUZ3UkxzODcwanY3VzdMOWxyRU1ER1k2ajF5cmJ1bFdXT1V3RGpMK3VtdFdtWDNieXQwQzJSSzZ0M3dVT0VwWWdRdWRGdm8iLCJtYWMiOiIzMTM1NjZhMWY5NmFjOWY2OTUyNDJkODllNWI1Mzg3YmIwZmQ0NjJmNGI5OTBjN2FiMDgwNTFkZmRlNTQ0Yjg3IiwidGFnIjoiIn0%3D; expires=Tue, 27 Jan 2026 03:58:51 GMT; Max-Age=5400; path=/; secure; samesite=none; partitioned\nvoe_session=eyJpdiI6Im9OSmpycGt0cTVOY21HRXdyTHdPV2c9PSIsInZhbHVlIjoiUHhmekI3Z0pmeFRBbkd3MTdaSjZlM3JCODdvM21YWk9KeWZ0V2VBRXhlckQwQnhuZmVRb2UwdWxXU2ZDRlZ4VkNBb3JBcDArQnlUUVRkTkRKOUcvSTVnNmJLKzNiM1QwcmpnME0wSFU4d044MzBKclVqQUtpUmw3VHRiaFh3VHIiLCJtYWMiOiI0MGU3ZjA4MTVhYmIxZTA4ZWIwNDhjZWU0NGZiNDhhZmQzZTljZjY5NWEyZDczNjVjNTI2YTkyZjcxNjIzNWQ0IiwidGFnIjoiIn0%3D; expires=Tue, 27 Jan 2026 03:58:51 GMT; Max-Age=5400; path=/; secure; httponly; samesite=none; partitioned\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 27 Jan 2026 02:28:51 GMT\r\ncontent-type: image/jpeg; charset=utf-8\r\ncontent-length: 174700\r\ncache-control: max-age=2592000\r\nexpires: Thu, 26 Feb 2026 02:28:51 GMT\r\nlast-modified: Sun, 26 May 2024 21:30:25 GMT\r\netag: \"6653a9f1-2aa6c\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: cache-control, content-range, accept, origin, session-id, content-disposition, x-requested-with, content-type, content-description, referer, user-agent\r\nx-cache-status: MISS\r\nage: 0\r\nddg-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":174700,"size_decoded":0,"mime_type":"image/jpeg; charset=utf-8","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1250x700, components 3","md5":"86bf9c12b7ad894657fdf2cce9ef9b74","sha1":"ffd30f179aa405399584bbd02e70ab11df6c8325","sha256":"fe4f69801fe867ebe3a8a5e7255ac19a7345c71e568d92bd080f40ded3bd8a0c","sha512":"75b9776bd809070b36dd42a6bab8cf05c8fe98ef50bade3cebe191835f7e8fc117d20a088fab1e16887b6731df66e1210cb11243154843b6cbaa77e0cdc4124b","ssdeep":"3072:Kc4eETOAV0pPV43s5wlpseE2vxhesxu51WJU7dM7Iu2C65m9ubH2wu1O:biYdYZpseHn251LpXQuSBk","tlshash":"ba0412d15d90552d9aeb0cbcb05efd93e7a81580aab22dd506ab8fb807c4477f16c80b","first_seen":"2026-01-27T02:29:17.510819Z","last_seen":"2026-01-27T02:29:17.510819Z","times_seen":1,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":196,"receive":161,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"lauradaydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gigglegrowlworrisome.com/chicken.gif?z=2060453\u0026pb=7a63414330cdd23a37f9c26bd106c3171769488131\u0026pbc=CnLWVvKf4UUDP3hp\u0026pbi=jhhoLbWhYr8DP3hp\u0026pbu=kWVNXtFQthYDP3hp\u0026psp=egdSt9257mcOZsQuliu9-xY8Y8keeTwsWFl3DUvSqGCG3YECchqYTzL7IszJ9WyNvVS2hMrWXe-uLzyliKfIMiUzE1FRCZChfI3VuXcDr_YMJVG12ubxl5MMklQCWDRMaCWoYL7X-N5K0d_DtHKuhRsann0g1543Tk2qMC8Coapkpq77NadExLG03W0H-nvU63CcBdxZY694Sj0p0KuYStEXs2aEjaLgBXfphdMmBZQlfEuiVDXh23Sq7rJfAlcYkM1p_k38qJqWWu6lpesjgVJ5nNFXXmQcWD_tntXn3MxtUfTU9WKVCPl42l9ZWoR76Bf1aX86J0Q_-Iqu99DDOKY_i0jt2Hwkz_3PvUFBqyjIIzbwjHRY_PfKK9_mk5WiqZ5dPf4e5bloU0wFUFF-D0yTB2Dr5VpDSkR6a8O_5vgr1ShzQDcD4Zkf9sT0tzkZ2MR8kLzcw9dltXlRENsuRCL1Zaq9y8OkmI8IMxyi3oacZGlP3LEqcnOZ56r2Bvrg78XfD9-6V-uZWPki2UtN7rTya076QCmZTZ9qif5Hpf_90U2YH6xvdND9qes-_MI4TZ5uHguaDm_w1x0bEZ8iDLz6vuGYpwsNn1n08MNNphfMkmQFb295jf8Qq_q5fHGBXxy7i4gpZv53pQi36vHeCtr_AZMey-YCPm-4o0HYniS8EiLAUN8znNJe_t7hsgmflOp02cr3Xy7nU0qDh7zNQB8Di_8iIC-buKZiCoT3Epw3AynJ2WtyLxkUJgDbXvWuJY3XwthWvQnCRaV6bx_xcfB4ONQNsdyOLXuW5ZLUVlDkDzwYNymX4rysEjq1pv4ME5JU2BKAFmyyOXLeviLRj9qdtCxIrzbD2EiZqTa21RkTcVuRQxY7kVb5wYPsl5DgcxwCUMqiw6mhNpS6KVlZH-lyY5yNYYkHcck3CrcbCQFZvQ73diZ7OAUc2jVrDtlhNz9bytLKQVl5CEVJhgY4JYw_QknOKI7E4aup69CGAdlRw_vxTn6hz7BRiH6rRqAYztLxnrb69lZCwz5LkHJ02omoMkNkySvIkst2h4I8YM265KvGfqDfLz4T6TTzivYzP737e7ZG-ezRHQ==\u0026freq=0\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.7-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IoebI0ClwF_byRXWVsPCTpVIbFIUEQtsql-\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=K2SBqyIaHR0cHM6Ly9jcnlzdGFsdHJlYXRtZW50ZWFzdC5jb20v\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=WBNvsiIaHR0cHM6Ly9sYXVyYWRheWRvLmNvbS9lL2V2cmdla3BuczB3dg\u0026afid=8278739027129856\u0026caifrq=ADQJagAAAAAAAAABADQJaAAAAAAAAAAB\u0026eclog=0\u0026seu=Oz26hBfaHR0cHM6Ly9jcnlzdGFsdHJlYXRtZW50ZWFzdC5jb20v\u0026snc=0\u0026ssc=4\u0026tp=0\u0026vp=8\u0026pkw=0\u0026pload=1714\u0026rlp=%5B0%2C80%2C434%2C329%2C4959%2C3958%2C1737%2C3958%2C1%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5","fqdn":"gigglegrowlworrisome.com","domain":"gigglegrowlworrisome.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lauradaydo.com/e/evrgekpns0wv","date":"2026-01-27T02:28:54.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gigglegrowlworrisome.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:16:25 GMT","end":"Mon, 06 Apr 2026 14:16:24 GMT"},"fingerprint":{"sha1":"39:F9:9C:70:09:9C:A1:D9:31:C5:2E:A5:51:E0:62:70:35:EB:FC:E6","sha256":"99:E7:5A:9A:85:51:E7:6F:2E:9D:3C:4A:73:72:29:79:A6:8E:4E:B1:C2:EF:10:84:4C:52:15:D9:5D:C9:BB:D2"}}},"request":{"raw":"GET /chicken.gif?z=2060453\u0026pb=7a63414330cdd23a37f9c26bd106c3171769488131\u0026pbc=CnLWVvKf4UUDP3hp\u0026pbi=jhhoLbWhYr8DP3hp\u0026pbu=kWVNXtFQthYDP3hp\u0026psp=egdSt9257mcOZsQuliu9-xY8Y8keeTwsWFl3DUvSqGCG3YECchqYTzL7IszJ9WyNvVS2hMrWXe-uLzyliKfIMiUzE1FRCZChfI3VuXcDr_YMJVG12ubxl5MMklQCWDRMaCWoYL7X-N5K0d_DtHKuhRsann0g1543Tk2qMC8Coapkpq77NadExLG03W0H-nvU63CcBdxZY694Sj0p0KuYStEXs2aEjaLgBXfphdMmBZQlfEuiVDXh23Sq7rJfAlcYkM1p_k38qJqWWu6lpesjgVJ5nNFXXmQcWD_tntXn3MxtUfTU9WKVCPl42l9ZWoR76Bf1aX86J0Q_-Iqu99DDOKY_i0jt2Hwkz_3PvUFBqyjIIzbwjHRY_PfKK9_mk5WiqZ5dPf4e5bloU0wFUFF-D0yTB2Dr5VpDSkR6a8O_5vgr1ShzQDcD4Zkf9sT0tzkZ2MR8kLzcw9dltXlRENsuRCL1Zaq9y8OkmI8IMxyi3oacZGlP3LEqcnOZ56r2Bvrg78XfD9-6V-uZWPki2UtN7rTya076QCmZTZ9qif5Hpf_90U2YH6xvdND9qes-_MI4TZ5uHguaDm_w1x0bEZ8iDLz6vuGYpwsNn1n08MNNphfMkmQFb295jf8Qq_q5fHGBXxy7i4gpZv53pQi36vHeCtr_AZMey-YCPm-4o0HYniS8EiLAUN8znNJe_t7hsgmflOp02cr3Xy7nU0qDh7zNQB8Di_8iIC-buKZiCoT3Epw3AynJ2WtyLxkUJgDbXvWuJY3XwthWvQnCRaV6bx_xcfB4ONQNsdyOLXuW5ZLUVlDkDzwYNymX4rysEjq1pv4ME5JU2BKAFmyyOXLeviLRj9qdtCxIrzbD2EiZqTa21RkTcVuRQxY7kVb5wYPsl5DgcxwCUMqiw6mhNpS6KVlZH-lyY5yNYYkHcck3CrcbCQFZvQ73diZ7OAUc2jVrDtlhNz9bytLKQVl5CEVJhgY4JYw_QknOKI7E4aup69CGAdlRw_vxTn6hz7BRiH6rRqAYztLxnrb69lZCwz5LkHJ02omoMkNkySvIkst2h4I8YM265KvGfqDfLz4T6TTzivYzP737e7ZG-ezRHQ==\u0026freq=0\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.7-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IoebI0ClwF_byRXWVsPCTpVIbFIUEQtsql-\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=K2SBqyIaHR0cHM6Ly9jcnlzdGFsdHJlYXRtZW50ZWFzdC5jb20v\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=WBNvsiIaHR0cHM6Ly9sYXVyYWRheWRvLmNvbS9lL2V2cmdla3BuczB3dg\u0026afid=8278739027129856\u0026caifrq=ADQJagAAAAAAAAABADQJaAAAAAAAAAAB\u0026eclog=0\u0026seu=Oz26hBfaHR0cHM6Ly9jcnlzdGFsdHJlYXRtZW50ZWFzdC5jb20v\u0026snc=0\u0026ssc=4\u0026tp=0\u0026vp=8\u0026pkw=0\u0026pload=1714\u0026rlp=%5B0%2C80%2C434%2C329%2C4959%2C3958%2C1737%2C3958%2C1%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5 HTTP/1.1\r\nHost: gigglegrowlworrisome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cart=1; cart_p=2; UID=26012621287b7d60e5073a4f71901e9b9e51; CHCK=1; PTS=; OACICAP=ADQJagAAAAAAAAAB; OACIBLOCK=ADQJagAAAABpd52Q; BCAI=ADQJagAAAAAAAAAB; BMI=AEaGLQAAAAAAAAAB; BCRI=yZAw3wAAAAAAAAAB; IMC_102=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 27 Jan 2026 02:28:54 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-route-id: stats.impression\r\nset-cookie: OACICAP=ADQJagAAAAAAAAABADQJaAAAAAAAAAAB; Path=/; Expires=Thu, 26 Feb 2026 02:28:54 GMT; Secure; SameSite=None\nOACIBLOCK=ADQJagAAAABpd52QADQJaAAAAABpd52Q; Path=/; Expires=Thu, 26 Feb 2026 02:28:54 GMT; Secure; SameSite=None\nBCAI=ADQJagAAAAAAAAABADQJaAAAAAAAAAAB; Path=/; Expires=Wed, 28 Jan 2026 02:28:54 GMT; Secure; SameSite=None\nBMI=AEaGLQAAAAAAAAABAEaGKwAAAAAAAAAB; Path=/; Expires=Wed, 28 Jan 2026 02:28:54 GMT; Secure; SameSite=None\nBCRI=yZAw3wAAAAAAAAABcM9GzAAAAAAAAAAB; Path=/; Expires=Wed, 28 Jan 2026 02:28:54 GMT; Secure; SameSite=None\nIMC_102=2; Path=/; Expires=Wed, 28 Jan 2026 02:28:54 GMT; Secure; SameSite=None\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28e463819a210071de3b45ebe7633613","sha1":"6dccd571828ec0912629119cf7eabfea9f33ddbc","sha256":"44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84","sha512":"8a82ac5a7883cd9b74bdb561cf825ce86474e259ad8c445e538d697b0003e3f2b1d6edcd3dc6512f4ad16e9074da204a79938257c457ecf68f4329eac0182e67","ssdeep":"","tlshash":"04900003e280e082c3a0c0300e0ccb802b88a2308a28030fb0fc2baefc3a3a20c23000","first_seen":"2023-04-05T09:26:54Z","last_seen":"2026-04-03T17:42:01.641175Z","times_seen":20416,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lauradaydo.com/s/images/logos/voe-logo-2.svg","fqdn":"lauradaydo.com","domain":"lauradaydo.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lauradaydo.com/e/evrgekpns0wv","date":"2026-01-27T02:28:50.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lauradaydo.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:28:02 GMT","end":"Mon, 13 Apr 2026 16:28:01 GMT"},"fingerprint":{"sha1":"F0:39:62:19:37:B3:B6:8E:92:E5:08:63:81:F8:F8:94:1A:CF:B5:6F","sha256":"B5:4B:1E:22:AA:A2:F3:C1:E8:61:7E:6E:78:76:65:11:AF:04:01:85:D7:F0:EB:74:B7:9B:C9:A1:5F:8D:54:7C"}}},"request":{"raw":"GET /s/images/logos/voe-logo-2.svg HTTP/1.1\r\nHost: lauradaydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lauradaydo.com/e/evrgekpns0wv\r\nCookie: __ddg8_=HxoKZ5vfhuuAuVJH; __ddg10_=1769480930; __ddg9_=91.90.42.154; __ddg1_=VAGlSAtt5adRmVZWYffF; XSRF-TOKEN=eyJpdiI6IlIxRUdweW1xZDlIdmV1Um1hMVVENWc9PSIsInZhbHVlIjoiSjlTMVZ1cHczY0RLckU1aU5SOU1SYldiODZKeGJJak0vYlM3SUx2ZTRUcWJyQjRlZGwvUUZQc1NMOE1jUnNyeFFhUUZCb1R6d2tGYzFBemgrc0JMaTZCRGhJUENFMWNPL2ovMGVQUXBkVE1ZZ2NuUEw4cUk2czZtYU5jbEZQSHAiLCJtYWMiOiJkNzMzMDgyNDBmMTM0M2JhYTdmZDRmNGY4YjdhODJlNjBkN2YyMzE2ZDg3MDI0NGFlMDUzODE5YTcyNTQxZGFjIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImVyTjZsY2RuZDh0YUltZTNTMlluOHc9PSIsInZhbHVlIjoiUXdiQTd4dnU1NjlBLzVlbGswN2U0cmovUURQd0h5MW5JL0cyUmc3OTAreDlkUTNVck5PdHluazk1QUY3NGV3dkNwRWt3bTVaRFlYWk4zejFBYVJCdEtaNC9WVVdXVHp1SUlDODBuaHNvYy9XNWxOcC9LUmxUVjlsTjdPenVtbUUiLCJtYWMiOiJjYTlmNmZjOWJlZmFjMWExMGY2N2FkMDg3YzZmOWM1NTczYjFmZmRjZmQ4YzhjNDY5ZDQwNzRlNDk4MTNkYTliIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=jSVAnzxESicjOjZt; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\n__ddg10_=1769480930; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\n__ddg9_=91.90.42.154; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 13 Jan 2026 17:29:17 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 05 May 2025 16:07:51 GMT\r\netag: W/\"6818e257-193\"\r\nexpires: Thu, 12 Feb 2026 17:29:17 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 1155573\r\ncontent-length: 221\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":403,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a638d0dfa6feb7ce4b90e7c91c5b0df4","sha1":"7a0a86f47b51781f48bb9f232f05193936490027","sha256":"38b49bc67e053e96441e62f8423a9ed0e907ef768a0ffbba4370128760f814dc","sha512":"d0d5823062954b3398a974322a7f848f71ba602c2369c79ee16868904c2e66ff1a10152a221bf68d4d0f2abb167c730bacecd0855743c7c3b521523dac0edf54","ssdeep":"","tlshash":"abe06871d4aedc054640cb2ca3e7719124bd911233c03fece7b48e263e43a36512c2b8","first_seen":"2025-04-27T22:01:48.046871Z","last_seen":"2026-03-28T20:13:06.249152Z","times_seen":295,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"lauradaydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"christopheruntilpoint.com/e/evrgekpns0wv","fqdn":"christopheruntilpoint.com","domain":"christopheruntilpoint.com","tld":"com"},"ip":{"addr":"172.67.200.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-27T02:28:49.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"christopheruntilpoint.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 17:39:46 GMT","end":"Wed, 08 Apr 2026 18:37:26 GMT"},"fingerprint":{"sha1":"05:21:3A:A6:0A:D4:ED:03:C4:1D:16:95:3F:74:E4:DD:F8:DA:5F:FF","sha256":"E2:F0:B6:4B:52:17:77:98:44:27:29:26:F0:E4:7C:3D:FE:45:BC:AC:CE:8A:70:A8:47:9F:17:2F:6B:9F:72:08"}}},"request":{"raw":"GET /e/evrgekpns0wv HTTP/1.1\r\nHost: christopheruntilpoint.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 27 Jan 2026 02:28:49 GMT\r\ncontent-length: 0\r\nlocation: https://walterprettytheir.com/e/evrgekpns0wv\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B%2BLXR6SACRUkkY2HEn4wTT%2FxYsSCXdmftE4rHfUnNdv%2BZQV37xsOsLjIEXHBeWmpa2%2BBL6%2FbdsqUuEm21xpSC9ftp9VEetZT2u2o6nWGXOylKciBTOwe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9c44d1a008875684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":739,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T18:31:03.533086Z","times_seen":13299059,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":55,"dns":39,"connect":1,"send":0,"wait":5,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walterprettytheir.com/e/evrgekpns0wv","fqdn":"walterprettytheir.com","domain":"walterprettytheir.com","tld":"com"},"ip":{"addr":"104.21.25.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-27T02:28:49.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walterprettytheir.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 17:19:10 GMT","end":"Tue, 21 Apr 2026 18:17:42 GMT"},"fingerprint":{"sha1":"47:C7:D0:3E:2C:E3:6E:1C:8A:D0:B9:B3:53:78:52:08:C8:78:3A:4D","sha256":"DA:43:74:68:57:5D:0C:7D:FE:F5:31:21:BC:FC:9C:D5:67:30:04:FF:E3:D0:E9:3C:AE:EE:9F:D5:BF:5A:26:22"}}},"request":{"raw":"GET /e/evrgekpns0wv HTTP/1.1\r\nHost: walterprettytheir.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 27 Jan 2026 02:28:49 GMT\r\ncontent-length: 0\r\nlocation: https://crystaltreatmenteast.com/e/evrgekpns0wv\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z6UmpwwXaZNBERNKMeieLiSOa0XYZDOSe7jJm88B22SViyY47wIPEyE43BiuKaK31ybP394cTukYkgwEICZKZoR8gnTbX%2Fro8JmQqPN9PesEVBiW8Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9c44d1a05d5f76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":739,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T18:31:03.533086Z","times_seen":13299059,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":35,"dns":19,"connect":1,"send":0,"wait":3,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/sdkloader/ima3.js","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.21.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lauradaydo.com/e/evrgekpns0wv","date":"2026-01-27T02:28:50.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:24 GMT","end":"Mon, 23 Mar 2026 19:52:23 GMT"},"fingerprint":{"sha1":"43:39:AF:0A:74:F9:2F:1B:C0:1E:4E:89:21:30:C2:28:EC:9F:6C:67","sha256":"EA:F1:0E:C7:36:18:F3:9D:D1:D5:34:23:44:7D:6F:9D:2F:61:C7:81:09:9E:E9:C8:02:C8:F2:2C:0A:83:B3:A5"}}},"request":{"raw":"GET /js/sdkloader/ima3.js HTTP/1.1\r\nHost: imasdk.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lauradaydo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ndate: Tue, 27 Jan 2026 02:28:50 GMT\r\nexpires: Tue, 27 Jan 2026 02:28:50 GMT\r\ncache-control: private, max-age=900, stale-while-revalidate=3600\r\ncontent-type: text/javascript; charset=UTF-8\r\netag: 8940928660552666875\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: br\r\nserver: cafe\r\ncontent-length: 146624\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":466375,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2831)","md5":"a45ac543e78da7d9db58fa6cbd736d68","sha1":"1999daba310d44417e8e7774b1a71db96e203bfe","sha256":"2c92101adcc37a70b95b0e0daab08e8952704410bdc11d1bbf881d92a4174f59","sha512":"1501e11c35cba4f00bdf2d0f222a2d5aa0ec54d1d69d228120d05f9d98c78c3f43b7c1a340ec4263cc12cdb9f29e844318c97d54b765a18d28831fce07d46c55","ssdeep":"6144:R1kfDB+cn/mdpQCX93rbXyBcfiIAnZHPvPcKBBHv0/oPU/Z:0J/yQK93r+aKIQZXNv0/oPEZ","tlshash":"64a4facdb6a674629363f4b5403f014fb23bb866f408886cb249d9e26e749494277f7c","first_seen":"2026-01-27T02:29:17.513685Z","last_seen":"2026-01-27T11:33:49.03639Z","times_seen":3,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":42,"dns":28,"connect":21,"send":0,"wait":55,"receive":63,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crystaltreatmenteast.com/e/evrgekpns0wv","fqdn":"crystaltreatmenteast.com","domain":"crystaltreatmenteast.com","tld":"com"},"ip":{"addr":"186.2.163.224","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-27T02:28:49.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crystaltreatmenteast.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 11:33:10 GMT","end":"Mon, 30 Mar 2026 11:33:09 GMT"},"fingerprint":{"sha1":"1F:D6:C7:27:69:E1:DA:C8:BE:B1:D4:81:06:CD:7D:E6:FD:FC:F8:EE","sha256":"12:93:67:1F:BB:70:71:59:84:52:D1:AA:F6:64:4A:E0:78:10:C4:87:1A:7D:AE:1D:03:0C:80:DC:85:D0:C1:6E"}}},"request":{"raw":"GET /e/evrgekpns0wv HTTP/1.1\r\nHost: crystaltreatmenteast.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=FxNbLzId1wzvrpMo; Domain=.crystaltreatmenteast.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:49 GMT\n__ddg10_=1769480929; Domain=.crystaltreatmenteast.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:49 GMT\n__ddg9_=91.90.42.154; Domain=.crystaltreatmenteast.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:49 GMT\n__ddg1_=lLKD1HgSRa4Pd8EQymuU; Domain=.crystaltreatmenteast.com; HttpOnly; Path=/; Expires=Wed, 27-Jan-2027 02:28:49 GMT\nXSRF-TOKEN=eyJpdiI6IkRCQW1MUU5lVnJmNW5PeTFMU0pFeVE9PSIsInZhbHVlIjoiOFVmVi9wblROYzFXVDdYS1NYR3JuV0ozaVJiYTdjWUVBVGIxYUZ1UmZSZlIyclcxRXlnQ0lnU3VBQkdTZ3djZEJsK2NieUl3bXRqRE5NZnNJcWl3TGY1dGpwNktrWVE1SWx3MzRGd1VFa29SaFkwa1B0SCs1c3BXUEI0bVpES0MiLCJtYWMiOiJlYzA2NTkyNGEwZTBlZTUzY2Y3MzczZTNiYTY3ODQyMzE1YWM2MmM4MjFjYjVmMWJjODIwNDJlMmJmOWQ1ZjU0IiwidGFnIjoiIn0%3D; expires=Tue, 27 Jan 2026 03:58:49 GMT; Max-Age=5400; path=/; secure; samesite=none; partitioned\nvoe_session=eyJpdiI6ImZnSDVrWjlodmZGVjlJVnNSd2RLdkE9PSIsInZhbHVlIjoiRjJNNDJVdm1La0x1dGg3MmFJYjFKZW8vSmF4M0xFcWlYNnlMc0tkcTNpUDNiRzRGdEIrTk5ERnE5aW9zdksyVHg5SEJXTlpESC9BaWJQY3IvZzNKRkxNaWpKYzNDYy9IY0x0VElPTHh4RXRERHQ3Y21SelhYZHdCYVhubHBCOTciLCJtYWMiOiJhNGU0M2I3ZGI4YmE5OTQ1NTQwOTkwMWMxNDAyNDNhNDY0Y2Y2NmIxNjkyNDdmZjhkNzAzYzNmMWVlZmMzNDNhIiwidGFnIjoiIn0%3D; expires=Tue, 27 Jan 2026 03:58:49 GMT; Max-Age=5400; path=/; secure; httponly; samesite=none; partitioned\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Tue, 27 Jan 2026 02:28:49 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":739,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"c57538e65bf145674e2af18b47e7f402","sha1":"5b5713aedcc1c9ca6912927d4626f621b782dfce","sha256":"ef4ccc865246adaa12c6de26f92c88d1f767ba079d13612e9d6414f0c93ba268","sha512":"9492aaf229797c848119efcc0b88829ed5272168af8bff4fd6dc0abeabc09470ba155b7e0875c440c4c502c4cf656cbb2fdf305b0b5715a1222551c6d9eb30b9","ssdeep":"","tlshash":"4301498d08b312b051eb12664fcfb208a9a311ab346cd941ba4d92019f8e74f8663bcc","first_seen":"2026-01-27T02:29:17.514574Z","last_seen":"2026-01-27T02:29:17.514574Z","times_seen":1,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":101,"dns":34,"connect":29,"send":0,"wait":102,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"crystaltreatmenteast.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"crystaltreatmenteast.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lauradaydo.com/jwplayer/8.40.2/jwplayer.core.controls.js","fqdn":"lauradaydo.com","domain":"lauradaydo.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lauradaydo.com/e/evrgekpns0wv","date":"2026-01-27T02:28:50.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lauradaydo.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:28:02 GMT","end":"Mon, 13 Apr 2026 16:28:01 GMT"},"fingerprint":{"sha1":"F0:39:62:19:37:B3:B6:8E:92:E5:08:63:81:F8:F8:94:1A:CF:B5:6F","sha256":"B5:4B:1E:22:AA:A2:F3:C1:E8:61:7E:6E:78:76:65:11:AF:04:01:85:D7:F0:EB:74:B7:9B:C9:A1:5F:8D:54:7C"}}},"request":{"raw":"GET /jwplayer/8.40.2/jwplayer.core.controls.js HTTP/1.1\r\nHost: lauradaydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lauradaydo.com/e/evrgekpns0wv\r\nCookie: __ddg8_=HxoKZ5vfhuuAuVJH; __ddg10_=1769480930; __ddg9_=91.90.42.154; __ddg1_=VAGlSAtt5adRmVZWYffF; XSRF-TOKEN=eyJpdiI6IlIxRUdweW1xZDlIdmV1Um1hMVVENWc9PSIsInZhbHVlIjoiSjlTMVZ1cHczY0RLckU1aU5SOU1SYldiODZKeGJJak0vYlM3SUx2ZTRUcWJyQjRlZGwvUUZQc1NMOE1jUnNyeFFhUUZCb1R6d2tGYzFBemgrc0JMaTZCRGhJUENFMWNPL2ovMGVQUXBkVE1ZZ2NuUEw4cUk2czZtYU5jbEZQSHAiLCJtYWMiOiJkNzMzMDgyNDBmMTM0M2JhYTdmZDRmNGY4YjdhODJlNjBkN2YyMzE2ZDg3MDI0NGFlMDUzODE5YTcyNTQxZGFjIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImVyTjZsY2RuZDh0YUltZTNTMlluOHc9PSIsInZhbHVlIjoiUXdiQTd4dnU1NjlBLzVlbGswN2U0cmovUURQd0h5MW5JL0cyUmc3OTAreDlkUTNVck5PdHluazk1QUY3NGV3dkNwRWt3bTVaRFlYWk4zejFBYVJCdEtaNC9WVVdXVHp1SUlDODBuaHNvYy9XNWxOcC9LUmxUVjlsTjdPenVtbUUiLCJtYWMiOiJjYTlmNmZjOWJlZmFjMWExMGY2N2FkMDg3YzZmOWM1NTczYjFmZmRjZmQ4YzhjNDY5ZDQwNzRlNDk4MTNkYTliIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=aYRDVooUvKNhPyRc; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\n__ddg10_=1769480930; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\n__ddg9_=91.90.42.154; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 13 Jan 2026 17:29:17 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Dec 2025 21:42:03 GMT\r\netag: W/\"694323ab-53b73\"\r\nexpires: Thu, 12 Feb 2026 17:29:17 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 1155573\r\ncontent-length: 86965\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":342899,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"352b9b8158f02688e08c495846fe6d83","sha1":"b0efb960dc2c6bb1715cfc7a0e7bf8ddee1018b9","sha256":"d8ec185418f97c1bdc341ba4498df52e36c98d3ec06fe0bd4dcf2555868c0ea9","sha512":"5a3aa22a18fbd6cc9d949a44da99d051235b634d241fc3acaa24a28376464ed9288821c9895e1e1a16511ab89be8b8b6e7cf36a8f47fb4436dd95c05f200e5f0","ssdeep":"3072:XA7cFVlnleuCkCaPGvvrvYhNp1UIKt+JhIXKpkAWrLCdJ2r9Do5SCYG:XA4r4uCknevjAnkt+JhaLCdJ2hU5SCYG","tlshash":"187418322142123556e682da76614604b33a8485f506cfacff6ceddd4c6e9cb31fabb4","first_seen":"2025-12-18T08:47:09.880598Z","last_seen":"2026-03-28T20:13:06.23029Z","times_seen":84,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"lauradaydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.pncloudfl.com/pn/d6c/303/169/d6c303169f16834659ea448f5470aa514aadce6b.png","fqdn":"cdn.pncloudfl.com","domain":"pncloudfl.com","tld":"com"},"ip":{"addr":"172.66.165.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lauradaydo.com/e/evrgekpns0wv","date":"2026-01-27T02:28:51.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.pncloudfl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Dec 2025 15:15:13 GMT","end":"Tue, 10 Mar 2026 16:15:09 GMT"},"fingerprint":{"sha1":"69:FC:7A:1D:92:39:0C:46:9A:C6:8A:01:99:0A:3F:46:9B:07:6E:1C","sha256":"7A:9B:C4:27:F6:F6:B3:AA:70:FE:EF:72:89:DC:CC:4F:73:D7:05:64:8C:E7:64:2F:FE:BE:08:DB:0E:62:B6:14"}}},"request":{"raw":"GET /pn/d6c/303/169/d6c303169f16834659ea448f5470aa514aadce6b.png HTTP/1.1\r\nHost: cdn.pncloudfl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lauradaydo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 02:28:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5260\r\nx-amz-id-2: R7nINslBagciMSaa/wFfY0Uijjx0xV2ExSeKAxfImIdQ5I/7bbQ5UMArXtFZJ5CjFEVHD+gYxR0=\r\nx-amz-request-id: KAYRQCWDPAE9C46D\r\nlast-modified: Tue, 09 Sep 2025 13:37:27 GMT\r\netag: \"740d9fea030595dd1e18d974a02f7d43\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-polished: ok\r\naccess-control-allow-origin: *\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4;i=?0,cf-chb=(89;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nage: 5245\r\ncache-control: max-age=432000\r\ncf-cache-status: HIT\r\ncf-ray: 9c44d1abee1f568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":5260,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1a89154d8c855a43ad74a931f364d13d","sha1":"a61e8e7484ed282d54abe2b03fe5cc4b6cde65ab","sha256":"6b514acba7c666e4c3ba6b0d7086873bee53ef3cf2ce4c0c61cfef21b284cd69","sha512":"ecf79b1319c78674b9948554ca186f6ceda09e44377ef9813e026e56945d76fdb66153c5a3519d5b55cde1e645c4fc83367d6237f35b4ee2e4b7882e4f49c3e5","ssdeep":"96:LuaJKPL7YblTfO2c2vozm8IdrXE+k5hmz01yebyGV2nwH51KM7Q3W2nVqKV3:LpMoblTfX1ozodrX2hmAQeWG0U5sWqqW","tlshash":"39b19d002515087e70c31fbf9022836e695182f5a3889e3527dba0496e30bdf96bf69e","first_seen":"2025-03-30T05:58:45.7759Z","last_seen":"2026-04-01T22:37:47.809914Z","times_seen":81,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":71,"dns":52,"connect":1,"send":0,"wait":7,"receive":1,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gigglegrowlworrisome.com/chicken.gif?z=2060453\u0026pb=7a63414330cdd23a37f9c26bd106c3171769488131\u0026pbc=CnLWVvKf4UUDP3hp\u0026pbi=jhhoLbWhYr8DP3hp\u0026pbu=kWVNXtFQthYDP3hp\u0026psp=EHoq0hGWYbv4109UtMiXtUTiBqel3V6CYtFnFnejemdBZgc9BfIrY01cT7fCcO7q-gDqUpX0849kzJvN_F5b4r7wYuHLoH7fUXG9ULf1B34pLt6QJk-06lOOK2XJMTJ9igMb4A4fRY7_v6gS0y-sSpXdsMgDDScr0Ha-z7iOjMi0IW3yOsfenkadboiJ05dnvwMvjXhPfLMJqWmdSuRdCMBKH7AxPr0tLy0tKam8i3-CC4_-ej3JON1cCB8c9ttwFxUs2cXTICYZCuGu15MysKJVOWYuFjRjU7dZstr8KOR7SOuUEzWWYAhv4uG197WKXVHO1iB_M2nbQgdhwY-yHTSI45G0YRzh0My53cOcsWX1aoZcLNZZ25_3Hx7KrKw7dWKGs2Krwd-nqUoIrL6IUYDsExbsp3EGtVTQmEEia5_SZ_2V4ny2JZmVamSolkZ8JQESN2wKS2wtZFFkghMp0aYGiPWGMK-iGqAchxvAuGEEfk0eo8CXPp01O4uEr7sW5dnYdSQ32boJifAY08jQTlt3rNrpT8Pxv7u5EEcMqxCuHINGYSFKPk0xeqEQhyZc5ISMsLj4S3OLj22-L8eVytVMPvdQikNyYyAkdTyZxaexwJExuOD64MR32KRbgvq4-ZD-eWA-B5Qx3s4_v--ZfZbQdrXCzaa7exJ0TitK1y-Bq6HeK-_mC5wAGq1HZndIAbaP7gm4BZ9WcTphBxZQ8PsgjgTEV8PasHvDGZD5rsAl6JiFKsN4yOYJ5Ld6rI4zK24Dayt5ZFmjMCfmTjJ8UpuuGG3bh2Vd5xsHefmeK0yUg2T40rrvCLcrWFWqfKKKTMFb88DVF6rg8K1JB4Q5E_EwTkuvsCcQu0K7M2bXkxo2S45HPhBLnXlfeCL71WessaTNVUFIcWaeFYzT6Gx6HETvBv3stTSlxQ26DdBWIZvuobZPFwSht4y-7xY7C4qBbaWA_H0lHH-pC-b4exD9n3XUCFna9JP4bf0tuWg7055oWmHYyTnfydIqen_y2Z2QR7Wu0CaAz7hdzI1B7WNmGOjv74vjjMJB66iJroWHN-T3ssiIAOi8BS7NLpL9QxCXDuqLD_Wu6rnu5Q==\u0026freq=0\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.7-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IoebI0ClwF_byRXWVsPCTpVIbFIUEQtsql-\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=K2SBqyIaHR0cHM6Ly9jcnlzdGFsdHJlYXRtZW50ZWFzdC5jb20v\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=pl4S5NoaHR0cHM6Ly9sYXVyYWRheWRvLmNvbS9lL2V2cmdla3BuczB3dg\u0026afid=7997264050345984\u0026caifrq=ADQJagAAAAAAAAAB\u0026eclog=0\u0026seu=Oz26hBfaHR0cHM6Ly9jcnlzdGFsdHJlYXRtZW50ZWFzdC5jb20v\u0026snc=0\u0026ssc=3\u0026tp=0\u0026vp=8\u0026pkw=0\u0026pload=1714\u0026rlp=%5B0%2C80%2C434%2C329%2C4959%2C3958%2C1737%2C3958%2C1%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5","fqdn":"gigglegrowlworrisome.com","domain":"gigglegrowlworrisome.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lauradaydo.com/e/evrgekpns0wv","date":"2026-01-27T02:28:53.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gigglegrowlworrisome.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:16:25 GMT","end":"Mon, 06 Apr 2026 14:16:24 GMT"},"fingerprint":{"sha1":"39:F9:9C:70:09:9C:A1:D9:31:C5:2E:A5:51:E0:62:70:35:EB:FC:E6","sha256":"99:E7:5A:9A:85:51:E7:6F:2E:9D:3C:4A:73:72:29:79:A6:8E:4E:B1:C2:EF:10:84:4C:52:15:D9:5D:C9:BB:D2"}}},"request":{"raw":"GET /chicken.gif?z=2060453\u0026pb=7a63414330cdd23a37f9c26bd106c3171769488131\u0026pbc=CnLWVvKf4UUDP3hp\u0026pbi=jhhoLbWhYr8DP3hp\u0026pbu=kWVNXtFQthYDP3hp\u0026psp=EHoq0hGWYbv4109UtMiXtUTiBqel3V6CYtFnFnejemdBZgc9BfIrY01cT7fCcO7q-gDqUpX0849kzJvN_F5b4r7wYuHLoH7fUXG9ULf1B34pLt6QJk-06lOOK2XJMTJ9igMb4A4fRY7_v6gS0y-sSpXdsMgDDScr0Ha-z7iOjMi0IW3yOsfenkadboiJ05dnvwMvjXhPfLMJqWmdSuRdCMBKH7AxPr0tLy0tKam8i3-CC4_-ej3JON1cCB8c9ttwFxUs2cXTICYZCuGu15MysKJVOWYuFjRjU7dZstr8KOR7SOuUEzWWYAhv4uG197WKXVHO1iB_M2nbQgdhwY-yHTSI45G0YRzh0My53cOcsWX1aoZcLNZZ25_3Hx7KrKw7dWKGs2Krwd-nqUoIrL6IUYDsExbsp3EGtVTQmEEia5_SZ_2V4ny2JZmVamSolkZ8JQESN2wKS2wtZFFkghMp0aYGiPWGMK-iGqAchxvAuGEEfk0eo8CXPp01O4uEr7sW5dnYdSQ32boJifAY08jQTlt3rNrpT8Pxv7u5EEcMqxCuHINGYSFKPk0xeqEQhyZc5ISMsLj4S3OLj22-L8eVytVMPvdQikNyYyAkdTyZxaexwJExuOD64MR32KRbgvq4-ZD-eWA-B5Qx3s4_v--ZfZbQdrXCzaa7exJ0TitK1y-Bq6HeK-_mC5wAGq1HZndIAbaP7gm4BZ9WcTphBxZQ8PsgjgTEV8PasHvDGZD5rsAl6JiFKsN4yOYJ5Ld6rI4zK24Dayt5ZFmjMCfmTjJ8UpuuGG3bh2Vd5xsHefmeK0yUg2T40rrvCLcrWFWqfKKKTMFb88DVF6rg8K1JB4Q5E_EwTkuvsCcQu0K7M2bXkxo2S45HPhBLnXlfeCL71WessaTNVUFIcWaeFYzT6Gx6HETvBv3stTSlxQ26DdBWIZvuobZPFwSht4y-7xY7C4qBbaWA_H0lHH-pC-b4exD9n3XUCFna9JP4bf0tuWg7055oWmHYyTnfydIqen_y2Z2QR7Wu0CaAz7hdzI1B7WNmGOjv74vjjMJB66iJroWHN-T3ssiIAOi8BS7NLpL9QxCXDuqLD_Wu6rnu5Q==\u0026freq=0\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.7-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IoebI0ClwF_byRXWVsPCTpVIbFIUEQtsql-\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=K2SBqyIaHR0cHM6Ly9jcnlzdGFsdHJlYXRtZW50ZWFzdC5jb20v\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=pl4S5NoaHR0cHM6Ly9sYXVyYWRheWRvLmNvbS9lL2V2cmdla3BuczB3dg\u0026afid=7997264050345984\u0026caifrq=ADQJagAAAAAAAAAB\u0026eclog=0\u0026seu=Oz26hBfaHR0cHM6Ly9jcnlzdGFsdHJlYXRtZW50ZWFzdC5jb20v\u0026snc=0\u0026ssc=3\u0026tp=0\u0026vp=8\u0026pkw=0\u0026pload=1714\u0026rlp=%5B0%2C80%2C434%2C329%2C4959%2C3958%2C1737%2C3958%2C1%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5 HTTP/1.1\r\nHost: gigglegrowlworrisome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cart=1; cart_p=2; UID=26012621287b7d60e5073a4f71901e9b9e51; CHCK=1; PTS=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 27 Jan 2026 02:28:53 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-route-id: stats.impression\r\nset-cookie: OACICAP=ADQJagAAAAAAAAAB; Path=/; Expires=Thu, 26 Feb 2026 02:28:53 GMT; Secure; SameSite=None\nOACIBLOCK=ADQJagAAAABpd52Q; Path=/; Expires=Thu, 26 Feb 2026 02:28:53 GMT; Secure; SameSite=None\nBCAI=ADQJagAAAAAAAAAB; Path=/; Expires=Wed, 28 Jan 2026 02:28:53 GMT; Secure; SameSite=None\nBMI=AEaGLQAAAAAAAAAB; Path=/; Expires=Wed, 28 Jan 2026 02:28:53 GMT; Secure; SameSite=None\nBCRI=yZAw3wAAAAAAAAAB; Path=/; Expires=Wed, 28 Jan 2026 02:28:53 GMT; Secure; SameSite=None\nIMC_102=1; Path=/; Expires=Wed, 28 Jan 2026 02:28:53 GMT; Secure; SameSite=None\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28e463819a210071de3b45ebe7633613","sha1":"6dccd571828ec0912629119cf7eabfea9f33ddbc","sha256":"44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84","sha512":"8a82ac5a7883cd9b74bdb561cf825ce86474e259ad8c445e538d697b0003e3f2b1d6edcd3dc6512f4ad16e9074da204a79938257c457ecf68f4329eac0182e67","ssdeep":"","tlshash":"04900003e280e082c3a0c0300e0ccb802b88a2308a28030fb0fc2baefc3a3a20c23000","first_seen":"2023-04-05T09:26:54Z","last_seen":"2026-04-03T17:42:01.641175Z","times_seen":20416,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lauradaydo.com/jwplayer/8.40.2/jwplayer.js","fqdn":"lauradaydo.com","domain":"lauradaydo.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lauradaydo.com/e/evrgekpns0wv","date":"2026-01-27T02:28:50.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lauradaydo.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:28:02 GMT","end":"Mon, 13 Apr 2026 16:28:01 GMT"},"fingerprint":{"sha1":"F0:39:62:19:37:B3:B6:8E:92:E5:08:63:81:F8:F8:94:1A:CF:B5:6F","sha256":"B5:4B:1E:22:AA:A2:F3:C1:E8:61:7E:6E:78:76:65:11:AF:04:01:85:D7:F0:EB:74:B7:9B:C9:A1:5F:8D:54:7C"}}},"request":{"raw":"GET /jwplayer/8.40.2/jwplayer.js HTTP/1.1\r\nHost: lauradaydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lauradaydo.com/e/evrgekpns0wv\r\nCookie: __ddg8_=PjwJZ0xUKP4n98Rq; __ddg10_=1769480929; __ddg9_=91.90.42.154; __ddg1_=VAGlSAtt5adRmVZWYffF; XSRF-TOKEN=eyJpdiI6IlIxRUdweW1xZDlIdmV1Um1hMVVENWc9PSIsInZhbHVlIjoiSjlTMVZ1cHczY0RLckU1aU5SOU1SYldiODZKeGJJak0vYlM3SUx2ZTRUcWJyQjRlZGwvUUZQc1NMOE1jUnNyeFFhUUZCb1R6d2tGYzFBemgrc0JMaTZCRGhJUENFMWNPL2ovMGVQUXBkVE1ZZ2NuUEw4cUk2czZtYU5jbEZQSHAiLCJtYWMiOiJkNzMzMDgyNDBmMTM0M2JhYTdmZDRmNGY4YjdhODJlNjBkN2YyMzE2ZDg3MDI0NGFlMDUzODE5YTcyNTQxZGFjIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImVyTjZsY2RuZDh0YUltZTNTMlluOHc9PSIsInZhbHVlIjoiUXdiQTd4dnU1NjlBLzVlbGswN2U0cmovUURQd0h5MW5JL0cyUmc3OTAreDlkUTNVck5PdHluazk1QUY3NGV3dkNwRWt3bTVaRFlYWk4zejFBYVJCdEtaNC9WVVdXVHp1SUlDODBuaHNvYy9XNWxOcC9LUmxUVjlsTjdPenVtbUUiLCJtYWMiOiJjYTlmNmZjOWJlZmFjMWExMGY2N2FkMDg3YzZmOWM1NTczYjFmZmRjZmQ4YzhjNDY5ZDQwNzRlNDk4MTNkYTliIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=YLhu1M6auooFugcY; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\n__ddg10_=1769480930; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\n__ddg9_=91.90.42.154; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 13 Jan 2026 17:29:17 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Dec 2025 21:42:03 GMT\r\netag: W/\"694323ab-27079\"\r\nexpires: Thu, 12 Feb 2026 17:29:17 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 1155573\r\ncontent-length: 55032\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":159865,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ab71ac1dcd8af52418dd47b063e1fea5","sha1":"9f8969841c13985a172abef1d9bb8b3b708bfd4e","sha256":"728e91f3484426f321c95403497abe5edd3a99981ec2a9af7416017d9640f766","sha512":"cbb9666c38ab783bb4b71ccae34a1b56656809a82e5f92cfd29db6398b8155d202fe54a8181fd450712b1a743e571a53c566c76bef801a66f091ca90fb04934b","ssdeep":"1536:nryFBl7p+VoAw2w7CyuJt4gDqG0HN1sztXdRsayfoYI3vKs75T3pEeyshA1639qS:yMwgYAN2rDP/UZGc7fdh3xNR","tlshash":"c5f34c9631c2f0b603f224dae47b4141f2790949344de9a4f66cecdb795a907a1b3fb8","first_seen":"2025-12-18T08:47:09.827925Z","last_seen":"2026-03-28T20:13:06.261399Z","times_seen":84,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"lauradaydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gigglegrowlworrisome.com/in.js","fqdn":"gigglegrowlworrisome.com","domain":"gigglegrowlworrisome.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lauradaydo.com/e/evrgekpns0wv","date":"2026-01-27T02:28:50.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gigglegrowlworrisome.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:16:25 GMT","end":"Mon, 06 Apr 2026 14:16:24 GMT"},"fingerprint":{"sha1":"39:F9:9C:70:09:9C:A1:D9:31:C5:2E:A5:51:E0:62:70:35:EB:FC:E6","sha256":"99:E7:5A:9A:85:51:E7:6F:2E:9D:3C:4A:73:72:29:79:A6:8E:4E:B1:C2:EF:10:84:4C:52:15:D9:5D:C9:BB:D2"}}},"request":{"raw":"GET /in.js HTTP/1.1\r\nHost: gigglegrowlworrisome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lauradaydo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 27 Jan 2026 02:28:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 22 Jan 2026 12:09:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69721390-1848d\"\r\nexpires: Tue, 03 Feb 2026 02:28:50 GMT\r\ncache-control: max-age=604800\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":99469,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65520), with no line terminators","md5":"d17e2e7bb0c334c06be39c6b93ac41a1","sha1":"78e4507bee4483245385b68fe7bc4f4801482843","sha256":"2e903dfe1d422c104e29e43899cf098c1de12e0577bc5e5c722bff6fb8db6b17","sha512":"efbc5a0cb2ad2c71cef2b8e0bcdc446c1eb8e47884e665df5721d0a17e4aab451b64b55bc90b1bbbaf9dba06084f3e72531a635ae55937ae0293236aeb42aefb","ssdeep":"1536:fnjnzZ5bdFBik45Gm+Be4Z3/Z1cLXKsp68H4CGZDQnO2Sh23F8xRmzBUvKg1+8Gr:jl9DYk3BSClxKBUvKgRO","tlshash":"d2a3c7a4b7d43405922380f8a3fb404dba362ce4b4be5559b592e4df1cf8c899723e79","first_seen":"2026-01-22T20:51:37.140155Z","last_seen":"2026-01-29T02:55:52.799089Z","times_seen":21,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":60,"dns":32,"connect":17,"send":0,"wait":20,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lauradaydo.com/s/js/site.min.js?fe1eebe79ae88e4bfa6ed669174fca9c","fqdn":"lauradaydo.com","domain":"lauradaydo.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lauradaydo.com/e/evrgekpns0wv","date":"2026-01-27T02:28:50.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lauradaydo.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:28:02 GMT","end":"Mon, 13 Apr 2026 16:28:01 GMT"},"fingerprint":{"sha1":"F0:39:62:19:37:B3:B6:8E:92:E5:08:63:81:F8:F8:94:1A:CF:B5:6F","sha256":"B5:4B:1E:22:AA:A2:F3:C1:E8:61:7E:6E:78:76:65:11:AF:04:01:85:D7:F0:EB:74:B7:9B:C9:A1:5F:8D:54:7C"}}},"request":{"raw":"GET /s/js/site.min.js?fe1eebe79ae88e4bfa6ed669174fca9c HTTP/1.1\r\nHost: lauradaydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lauradaydo.com/e/evrgekpns0wv\r\nCookie: __ddg8_=PjwJZ0xUKP4n98Rq; __ddg10_=1769480929; __ddg9_=91.90.42.154; __ddg1_=VAGlSAtt5adRmVZWYffF; XSRF-TOKEN=eyJpdiI6IlIxRUdweW1xZDlIdmV1Um1hMVVENWc9PSIsInZhbHVlIjoiSjlTMVZ1cHczY0RLckU1aU5SOU1SYldiODZKeGJJak0vYlM3SUx2ZTRUcWJyQjRlZGwvUUZQc1NMOE1jUnNyeFFhUUZCb1R6d2tGYzFBemgrc0JMaTZCRGhJUENFMWNPL2ovMGVQUXBkVE1ZZ2NuUEw4cUk2czZtYU5jbEZQSHAiLCJtYWMiOiJkNzMzMDgyNDBmMTM0M2JhYTdmZDRmNGY4YjdhODJlNjBkN2YyMzE2ZDg3MDI0NGFlMDUzODE5YTcyNTQxZGFjIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImVyTjZsY2RuZDh0YUltZTNTMlluOHc9PSIsInZhbHVlIjoiUXdiQTd4dnU1NjlBLzVlbGswN2U0cmovUURQd0h5MW5JL0cyUmc3OTAreDlkUTNVck5PdHluazk1QUY3NGV3dkNwRWt3bTVaRFlYWk4zejFBYVJCdEtaNC9WVVdXVHp1SUlDODBuaHNvYy9XNWxOcC9LUmxUVjlsTjdPenVtbUUiLCJtYWMiOiJjYTlmNmZjOWJlZmFjMWExMGY2N2FkMDg3YzZmOWM1NTczYjFmZmRjZmQ4YzhjNDY5ZDQwNzRlNDk4MTNkYTliIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=HxoKZ5vfhuuAuVJH; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\n__ddg10_=1769480930; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\n__ddg9_=91.90.42.154; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 13 Jan 2026 17:29:17 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Oct 2025 21:05:04 GMT\r\netag: W/\"68e03a80-1919e\"\r\nexpires: Thu, 12 Feb 2026 17:29:17 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 1155573\r\ncontent-length: 23373\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":102814,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (52119)","md5":"f221d7962c60ad362e2fbc5e1dacc9e6","sha1":"9e2a0ee15fec83034ee0eedfdc866d2d7472ecee","sha256":"efd0ced2b4c5c6490d8ac3462669df8c5aa143db9ef81fc947dc3ffc739d4088","sha512":"e9e7241c7676af5f648d91446425219f382a6b4b7ac63a47c011d61f0ba8f69f87c16489f7f5b0aa36adc1a7e45830a73f1cec4b5b554fbe46ce29be3c022cf9","ssdeep":"1536:Y2u4R3mNZRo3GiCNIUhxBsSU1UxYs5pfEzS:FRwLzybXotE+","tlshash":"bfa31829b314193252ffa2f7749b2a057336d526ca82c055b878c56c0ef9d8536e3f2e","first_seen":"2025-10-04T08:15:13.352918Z","last_seen":"2026-03-28T20:13:06.229441Z","times_seen":183,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"lauradaydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]}},{"url":{"schema":"https","addr":"entitlements.jwplayer.com/SDtULpKyEeWwxnBWgb9+iQ.json","fqdn":"entitlements.jwplayer.com","domain":"jwplayer.com","tld":"com"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lauradaydo.com/e/evrgekpns0wv","date":"2026-01-27T02:28:50.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwplayer.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Fri, 19 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2F:FF:B9:03:44:93:31:3C:BF:52:A9:11:31:A1:70:35:48:94:BE:70","sha256":"CA:81:AC:A9:1D:64:33:27:CA:C6:60:1F:4D:67:17:E5:1E:D1:A2:16:8B:32:F1:E5:01:83:5F:8C:7E:54:4F:67"}}},"request":{"raw":"GET /SDtULpKyEeWwxnBWgb9+iQ.json HTTP/1.1\r\nHost: entitlements.jwplayer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://lauradaydo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lauradaydo.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nserver: nginx\r\ndate: Tue, 27 Jan 2026 01:59:05 GMT\r\ncache-control: max-age=1800, s-maxage=8760\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b5699d1b7e44f0e87927693889ab2666.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: XKhaS5uPdRnNss_5Ybt7JAmGgQTH4I28TdeoNiUlJ75CEuSKW26e4w==\r\nage: 1785\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":126,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8f5da2cd33e5fd33ada22ee4ad8a8e50","sha1":"f101c9b357c3bc40d4cea081b8c444df7a3401c2","sha256":"940996b83acb5c949885587e9cf87fc23b3227fa685ad6956113f4348e6e470e","sha512":"bb992b18dead636880a109166ae38257848f0a89c4269af791bd53810fa32dd1794c7b83a79d5c0e47bd9d030109a6540c13658481193fff8484a872b6bd84c7","ssdeep":"","tlshash":"b3b09222fecad47d82e231599203b2008f6142c28618442ae048a8a2b22973b2e90a88","first_seen":"2025-10-04T08:15:13.354344Z","last_seen":"2026-03-28T20:13:06.248156Z","times_seen":188,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":64,"dns":57,"connect":1,"send":0,"wait":1,"receive":0,"ssl":5},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lauradaydo.com/e/evrgekpns0wv","fqdn":"lauradaydo.com","domain":"lauradaydo.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-27T02:28:49.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lauradaydo.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:28:02 GMT","end":"Mon, 13 Apr 2026 16:28:01 GMT"},"fingerprint":{"sha1":"F0:39:62:19:37:B3:B6:8E:92:E5:08:63:81:F8:F8:94:1A:CF:B5:6F","sha256":"B5:4B:1E:22:AA:A2:F3:C1:E8:61:7E:6E:78:76:65:11:AF:04:01:85:D7:F0:EB:74:B7:9B:C9:A1:5F:8D:54:7C"}}},"request":{"raw":"GET /e/evrgekpns0wv HTTP/1.1\r\nHost: lauradaydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crystaltreatmenteast.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=PjwJZ0xUKP4n98Rq; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:49 GMT\n__ddg10_=1769480929; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:49 GMT\n__ddg9_=91.90.42.154; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:49 GMT\n__ddg1_=VAGlSAtt5adRmVZWYffF; Domain=.lauradaydo.com; HttpOnly; Path=/; Expires=Wed, 27-Jan-2027 02:28:49 GMT\nXSRF-TOKEN=eyJpdiI6IlIxRUdweW1xZDlIdmV1Um1hMVVENWc9PSIsInZhbHVlIjoiSjlTMVZ1cHczY0RLckU1aU5SOU1SYldiODZKeGJJak0vYlM3SUx2ZTRUcWJyQjRlZGwvUUZQc1NMOE1jUnNyeFFhUUZCb1R6d2tGYzFBemgrc0JMaTZCRGhJUENFMWNPL2ovMGVQUXBkVE1ZZ2NuUEw4cUk2czZtYU5jbEZQSHAiLCJtYWMiOiJkNzMzMDgyNDBmMTM0M2JhYTdmZDRmNGY4YjdhODJlNjBkN2YyMzE2ZDg3MDI0NGFlMDUzODE5YTcyNTQxZGFjIiwidGFnIjoiIn0%3D; expires=Tue, 27 Jan 2026 03:58:49 GMT; Max-Age=5400; path=/; secure; samesite=none; partitioned\nvoe_session=eyJpdiI6ImVyTjZsY2RuZDh0YUltZTNTMlluOHc9PSIsInZhbHVlIjoiUXdiQTd4dnU1NjlBLzVlbGswN2U0cmovUURQd0h5MW5JL0cyUmc3OTAreDlkUTNVck5PdHluazk1QUY3NGV3dkNwRWt3bTVaRFlYWk4zejFBYVJCdEtaNC9WVVdXVHp1SUlDODBuaHNvYy9XNWxOcC9LUmxUVjlsTjdPenVtbUUiLCJtYWMiOiJjYTlmNmZjOWJlZmFjMWExMGY2N2FkMDg3YzZmOWM1NTczYjFmZmRjZmQ4YzhjNDY5ZDQwNzRlNDk4MTNkYTliIiwidGFnIjoiIn0%3D; expires=Tue, 27 Jan 2026 03:58:49 GMT; Max-Age=5400; path=/; secure; httponly; samesite=none; partitioned\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Tue, 27 Jan 2026 02:28:49 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Twitter Ads","description":"Twitter Ads is an advertising platform for Twitter 'microblogging' system.","website":"https://ads.twitter.com","common_platform_enumeration":"","icon":"Twitter.svg","categories":["Advertising"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":133318,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (48691)","md5":"b61c8ff9dfb1f7cd9c9f66abae5984dc","sha1":"465a29a14d462424f3acfb95cc2c9ad5f88de37a","sha256":"984b246aa1d81e70947afd55e19007aea034925633d263e4c5f7d941a0988f3f","sha512":"fe30ff7bf35dfa2ab4559b3b7998a6bc7ef8c7a516588efb4a6e3bfdbc26ebcf3e5a2bf4493155932ab1182fd0950d596c44845410d71a33eea2894966536879","ssdeep":"3072:x7hXxSUa7h9FsqaWs7jZPxhVCvi+vAiT27++PlYHiW:Vi7laWs7lP2i+v87++Pi","tlshash":"3fd3fa9935d2b85903b2d0b541bf28cfb5bb7c80700c9844f16dd9b4bfb1aaa9163c6d","first_seen":"2026-01-27T02:29:17.518885Z","last_seen":"2026-01-27T02:29:17.518885Z","times_seen":1,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":77,"dns":19,"connect":28,"send":0,"wait":113,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"lauradaydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lauradaydo.com/build/assets/DQJFgy2Q.css","fqdn":"lauradaydo.com","domain":"lauradaydo.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lauradaydo.com/e/evrgekpns0wv","date":"2026-01-27T02:28:50.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lauradaydo.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:28:02 GMT","end":"Mon, 13 Apr 2026 16:28:01 GMT"},"fingerprint":{"sha1":"F0:39:62:19:37:B3:B6:8E:92:E5:08:63:81:F8:F8:94:1A:CF:B5:6F","sha256":"B5:4B:1E:22:AA:A2:F3:C1:E8:61:7E:6E:78:76:65:11:AF:04:01:85:D7:F0:EB:74:B7:9B:C9:A1:5F:8D:54:7C"}}},"request":{"raw":"GET /build/assets/DQJFgy2Q.css HTTP/1.1\r\nHost: lauradaydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lauradaydo.com/e/evrgekpns0wv\r\nCookie: __ddg8_=PjwJZ0xUKP4n98Rq; __ddg10_=1769480929; __ddg9_=91.90.42.154; __ddg1_=VAGlSAtt5adRmVZWYffF; XSRF-TOKEN=eyJpdiI6IlIxRUdweW1xZDlIdmV1Um1hMVVENWc9PSIsInZhbHVlIjoiSjlTMVZ1cHczY0RLckU1aU5SOU1SYldiODZKeGJJak0vYlM3SUx2ZTRUcWJyQjRlZGwvUUZQc1NMOE1jUnNyeFFhUUZCb1R6d2tGYzFBemgrc0JMaTZCRGhJUENFMWNPL2ovMGVQUXBkVE1ZZ2NuUEw4cUk2czZtYU5jbEZQSHAiLCJtYWMiOiJkNzMzMDgyNDBmMTM0M2JhYTdmZDRmNGY4YjdhODJlNjBkN2YyMzE2ZDg3MDI0NGFlMDUzODE5YTcyNTQxZGFjIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImVyTjZsY2RuZDh0YUltZTNTMlluOHc9PSIsInZhbHVlIjoiUXdiQTd4dnU1NjlBLzVlbGswN2U0cmovUURQd0h5MW5JL0cyUmc3OTAreDlkUTNVck5PdHluazk1QUY3NGV3dkNwRWt3bTVaRFlYWk4zejFBYVJCdEtaNC9WVVdXVHp1SUlDODBuaHNvYy9XNWxOcC9LUmxUVjlsTjdPenVtbUUiLCJtYWMiOiJjYTlmNmZjOWJlZmFjMWExMGY2N2FkMDg3YzZmOWM1NTczYjFmZmRjZmQ4YzhjNDY5ZDQwNzRlNDk4MTNkYTliIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=ne0LmdKdrLrUDCbo; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\n__ddg10_=1769480930; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\n__ddg9_=91.90.42.154; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 13 Jan 2026 17:29:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 08 Jul 2025 18:22:04 GMT\r\netag: W/\"686d61cc-15e1\"\r\nexpires: Thu, 12 Feb 2026 17:29:16 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 1155574\r\ncontent-length: 1496\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5601,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5600)","md5":"2848a360d8364b7e046a9a5c8e9571c2","sha1":"c8a8a30bbfc66dd82043a720be753726eea3b2cd","sha256":"974c1546dbd5dab88bef845d52eebec9ff7dd471e0f87aa776f03f3c04e17410","sha512":"6e92d7ac1b7052ff55c3d4b6b8999b84298433333cc1265fb12a0278484313da19b91e982f65513bee6b6293ed22bb63e48274079f151b4d30688472eca50474","ssdeep":"96:3+Egyn5WZTllol4lXuZx2AhlFlplXAB1CIDTI:uEgDlol4lXu72ADPrwHCIDTI","tlshash":"a6c12317e741501c7d63c16f62a1a7c9372bd4c2fb726f7efab1e062d69229920e3241","first_seen":"2025-07-09T03:26:33.460144Z","last_seen":"2026-03-28T20:13:06.22856Z","times_seen":225,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"lauradaydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.3/js/bootstrap.bundle.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lauradaydo.com/e/evrgekpns0wv","date":"2026-01-27T02:28:50.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/bootstrap/5.3.3/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://lauradaydo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 02:28:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 21170\r\ncf-ray: 9c44d1a51edc783d-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65d4c5f6-52b2\"\r\nlast-modified: Tue, 20 Feb 2024 15:32:06 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 443224\r\nexpires: Sun, 17 Jan 2027 02:28:50 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=tbTD7zbVJdjH0C0Kv2h28C%2BVcTMcP%2FcW7T7GmQntzpcQ3YZiRgkmVWfYPyndv2UyI6V4IpWP54a25Mt%2FT6kZ%2Fyc4rBeoJuQizhyP8Gh6JtEIiN2Z32d8%2BxYbDSosPCMXMGj8gvSW\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80721,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-04-03T18:04:39.059692Z","times_seen":21813,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lauradaydo.com/cache/evrgekpns0wv_storyboard_L2.jpg","fqdn":"lauradaydo.com","domain":"lauradaydo.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lauradaydo.com/e/evrgekpns0wv","date":"2026-01-27T02:28:50.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lauradaydo.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:28:02 GMT","end":"Mon, 13 Apr 2026 16:28:01 GMT"},"fingerprint":{"sha1":"F0:39:62:19:37:B3:B6:8E:92:E5:08:63:81:F8:F8:94:1A:CF:B5:6F","sha256":"B5:4B:1E:22:AA:A2:F3:C1:E8:61:7E:6E:78:76:65:11:AF:04:01:85:D7:F0:EB:74:B7:9B:C9:A1:5F:8D:54:7C"}}},"request":{"raw":"GET /cache/evrgekpns0wv_storyboard_L2.jpg HTTP/1.1\r\nHost: lauradaydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lauradaydo.com/e/evrgekpns0wv\r\nCookie: __ddg8_=H05IsTOGfxRtXv4O; __ddg10_=1769480930; __ddg9_=91.90.42.154; __ddg1_=VAGlSAtt5adRmVZWYffF; XSRF-TOKEN=eyJpdiI6IlIxRUdweW1xZDlIdmV1Um1hMVVENWc9PSIsInZhbHVlIjoiSjlTMVZ1cHczY0RLckU1aU5SOU1SYldiODZKeGJJak0vYlM3SUx2ZTRUcWJyQjRlZGwvUUZQc1NMOE1jUnNyeFFhUUZCb1R6d2tGYzFBemgrc0JMaTZCRGhJUENFMWNPL2ovMGVQUXBkVE1ZZ2NuUEw4cUk2czZtYU5jbEZQSHAiLCJtYWMiOiJkNzMzMDgyNDBmMTM0M2JhYTdmZDRmNGY4YjdhODJlNjBkN2YyMzE2ZDg3MDI0NGFlMDUzODE5YTcyNTQxZGFjIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImVyTjZsY2RuZDh0YUltZTNTMlluOHc9PSIsInZhbHVlIjoiUXdiQTd4dnU1NjlBLzVlbGswN2U0cmovUURQd0h5MW5JL0cyUmc3OTAreDlkUTNVck5PdHluazk1QUY3NGV3dkNwRWt3bTVaRFlYWk4zejFBYVJCdEtaNC9WVVdXVHp1SUlDODBuaHNvYy9XNWxOcC9LUmxUVjlsTjdPenVtbUUiLCJtYWMiOiJjYTlmNmZjOWJlZmFjMWExMGY2N2FkMDg3YzZmOWM1NTczYjFmZmRjZmQ4YzhjNDY5ZDQwNzRlNDk4MTNkYTliIiwidGFnIjoiIn0%3D; UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=wvykvDJTgXt6xmTf; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\n__ddg10_=1769480930; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\n__ddg9_=91.90.42.154; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\nXSRF-TOKEN=eyJpdiI6ImpzckxIeHY0ZHoyWjIzMDhSTWlKVEE9PSIsInZhbHVlIjoiYndrUklWZ0puVUlZWXc5Nmw4YjN3L0UyZ0F3Z3ZFZ2xPbEk1MGMzVHp0ZVhJZjA2dUNHaEFrS2VmRVlVczJGaXhYSkNkMEo3ajJBM1Q0bEZCWCthREFDaVhXK0ZBc204R0tyTENrUjNPbHoyT2hnaXVSVHkzYktGbEgyMXVhV3AiLCJtYWMiOiI4MWRkNzRiMzY5NjRjYTAwNjkwZGJjNjcyMTM4OWVmNmQyYjljNmZlMGM5ZjlhNzc0Yjk4NDRjOTBiMjQzYWQyIiwidGFnIjoiIn0%3D; expires=Tue, 27 Jan 2026 03:58:50 GMT; Max-Age=5400; path=/; secure; samesite=none; partitioned\nvoe_session=eyJpdiI6IjFEMmVWQXJmZXB3SGwwN2xYU3RCTmc9PSIsInZhbHVlIjoiQVYrK1hzQXlYQVNFNGJGS3F5amE2R3FRUnVqTExBSjBpUEZsM1hJR05JaXpnZFJkdi9NMHhrYUY5OVZpZVVrcjV1a2ZnakcyMzJKRXpoQ3dFaWQzbGRzemphcE8wTGZQdHdqU3JaQ2licmcyMUV4cHVveThSQlVCZEY1cWxBZjMiLCJtYWMiOiIyZWViM2JmZjE4YjQ3ODI2YTY0MmY4ZGJjMTZkMjFjMDg1YTFhMjVhMjBjYTRkYTBmOTk5M2Y2ZDA0YTRhOWIzIiwidGFnIjoiIn0%3D; expires=Tue, 27 Jan 2026 03:58:50 GMT; Max-Age=5400; path=/; secure; httponly; samesite=none; partitioned\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 27 Jan 2026 02:28:51 GMT\r\ncontent-type: image/jpeg; charset=utf-8\r\ncontent-length: 138367\r\ncache-control: max-age=2592000\r\nexpires: Thu, 26 Feb 2026 02:28:51 GMT\r\nlast-modified: Sun, 26 May 2024 21:30:11 GMT\r\netag: \"6653a9e3-21c7f\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: cache-control, content-range, accept, origin, session-id, content-disposition, x-requested-with, content-type, content-description, referer, user-agent\r\nx-cache-status: MISS\r\nage: 1\r\nddg-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":138367,"size_decoded":0,"mime_type":"image/jpeg; charset=utf-8","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1279x723, components 3","md5":"e96d62845f209731fe2d55e68890b0e9","sha1":"afd73502693fa6a70a07972db1ee3a7c9790977c","sha256":"3bb2ea2f105031e475c1a68df75bcf9502ba25cc1ada1a96835afb4f8ab2641c","sha512":"ca079eb49a7a57a07a6ceb00751e7d23724fd9cf02d95506e9736370fd44b9035156f4e42cbac3280564cf2ae97d7d7e084218fe2a96087019219f5bbc377c85","ssdeep":"3072:JlkX4Xf9/mkaFjokN9vHUtmdGinNHzRDhtvA7jWJ+5XErw:YX+e9EkC2jBzRY3B","tlshash":"76d30247ad2cb705913452e9ff031d3c2b1a2a2c469b39bff4570eeb1ab0949ad4911d","first_seen":"2026-01-27T02:29:17.520907Z","last_seen":"2026-01-27T02:29:17.520907Z","times_seen":1,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":167,"receive":154,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"lauradaydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lauradaydo.com/engine/storyboard/evrgekpns0wv?t=0","fqdn":"lauradaydo.com","domain":"lauradaydo.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lauradaydo.com/e/evrgekpns0wv","date":"2026-01-27T02:28:50.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lauradaydo.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:28:02 GMT","end":"Mon, 13 Apr 2026 16:28:01 GMT"},"fingerprint":{"sha1":"F0:39:62:19:37:B3:B6:8E:92:E5:08:63:81:F8:F8:94:1A:CF:B5:6F","sha256":"B5:4B:1E:22:AA:A2:F3:C1:E8:61:7E:6E:78:76:65:11:AF:04:01:85:D7:F0:EB:74:B7:9B:C9:A1:5F:8D:54:7C"}}},"request":{"raw":"GET /engine/storyboard/evrgekpns0wv?t=0 HTTP/1.1\r\nHost: lauradaydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lauradaydo.com/e/evrgekpns0wv\r\nCookie: __ddg8_=H05IsTOGfxRtXv4O; __ddg10_=1769480930; __ddg9_=91.90.42.154; __ddg1_=VAGlSAtt5adRmVZWYffF; XSRF-TOKEN=eyJpdiI6IlIxRUdweW1xZDlIdmV1Um1hMVVENWc9PSIsInZhbHVlIjoiSjlTMVZ1cHczY0RLckU1aU5SOU1SYldiODZKeGJJak0vYlM3SUx2ZTRUcWJyQjRlZGwvUUZQc1NMOE1jUnNyeFFhUUZCb1R6d2tGYzFBemgrc0JMaTZCRGhJUENFMWNPL2ovMGVQUXBkVE1ZZ2NuUEw4cUk2czZtYU5jbEZQSHAiLCJtYWMiOiJkNzMzMDgyNDBmMTM0M2JhYTdmZDRmNGY4YjdhODJlNjBkN2YyMzE2ZDg3MDI0NGFlMDUzODE5YTcyNTQxZGFjIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImVyTjZsY2RuZDh0YUltZTNTMlluOHc9PSIsInZhbHVlIjoiUXdiQTd4dnU1NjlBLzVlbGswN2U0cmovUURQd0h5MW5JL0cyUmc3OTAreDlkUTNVck5PdHluazk1QUY3NGV3dkNwRWt3bTVaRFlYWk4zejFBYVJCdEtaNC9WVVdXVHp1SUlDODBuaHNvYy9XNWxOcC9LUmxUVjlsTjdPenVtbUUiLCJtYWMiOiJjYTlmNmZjOWJlZmFjMWExMGY2N2FkMDg3YzZmOWM1NTczYjFmZmRjZmQ4YzhjNDY5ZDQwNzRlNDk4MTNkYTliIiwidGFnIjoiIn0%3D; UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=N3YEAQBjTibsf9iF; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\n__ddg10_=1769480930; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\n__ddg9_=91.90.42.154; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\nXSRF-TOKEN=eyJpdiI6ImJvT1BidEpBOWNSNkdpaXNPUTVCU1E9PSIsInZhbHVlIjoiNUk0YW9sUFhDS3o5bmt6aU51ZVl1aTZsYnZlbktFSzVDdnFIZWw1U3FzbkxIM1RXQmJsVEYxUkFnUm8vRCtPZkp6cnJBZjE5SjNML3ZZYnp6SjlzZVJlS0xoeXc5cUVFVmJxZVl0cUp6dVRhNTZWRFJROW1walNKZnA2VTlFblMiLCJtYWMiOiI0MWJiODcxZjJmNzgyYjBjM2NlYjI2MjQ4ODUyMzgyMDZiMWM0NGM2YTA2YmZjNjAwYzgyMjMwMGM4MzFjZThiIiwidGFnIjoiIn0%3D; expires=Tue, 27 Jan 2026 03:58:50 GMT; Max-Age=5400; path=/; secure; samesite=none; partitioned\nvoe_session=eyJpdiI6IlExWlRNZTBJakNDVVNSWWJHdFhjOEE9PSIsInZhbHVlIjoiUHBRRXFJQlEveFltL1J5bkRuMWJwN29WTGlMVWtaeEpKOEFOWU1XNGlSUVNXZjFOY3VJVHZWODRPV290dU1XQzFtZmRrK2xrZS9jRDQ0cTVBeWpqTEIxeklWNWV1WkEvWU5QK2pOVzE4SmM2bUhydmhKVmZCOUMyMm93bCs0cHciLCJtYWMiOiI2MDI4YzU0YTc0YmMzYzE4ZjU3M2IwZTZiNzg5YjAzZTI2YjAxODgwN2FlNmMxYjU0MzUzMzRkYmM1NTJmMWE0IiwidGFnIjoiIn0%3D; expires=Tue, 27 Jan 2026 03:58:50 GMT; Max-Age=5400; path=/; secure; httponly; samesite=none; partitioned\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/vtt; charset=utf-8\r\ncache-control: no-cache, private\r\ndate: Tue, 27 Jan 2026 02:28:50 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":11370,"size_decoded":0,"mime_type":"text/vtt; charset=utf-8","magic":"WebVTT subtitles, ASCII text","md5":"7c4da642535af2fc05e6da0cfd54dac8","sha1":"ed37bcd103b9ff210ae7d5f0ba3db40bc8a2c1fc","sha256":"7a8df5a00fa386ba1da8d0db9bd704dc8355512e9f24073ec35ace44d6845042","sha512":"7d37e5f0d9d12a49e2f83c61c31bd368450250543da2e21591b1f6d3de5d5317ce894a38c252c3562fed2994d6f216ce99289f8f8f8856540891b086e9cb0acd","ssdeep":"96:LVo0pjY/FjGlJQPN2RaVDtVOL5pk27zF611OpxXdTaiWkJTQBBAYt6lM9cVHfs7W:RLQf1tECQVzAVhk1zYEoEVJnHA5N4","tlshash":"5132c4e5839d64d98ed406a0e6f0bf4e4221c2cf8ff8e4d17a8a66955d974630f3bc01","first_seen":"2026-01-27T02:29:17.521873Z","last_seen":"2026-01-27T02:29:17.521873Z","times_seen":1,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"lauradaydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gigglegrowlworrisome.com/get/2060453?id=2060453\u0026jp=_cllcvkrgiinwedhuwwxoah\u0026dr=102\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.7-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IoebI0ClwF_byRXWVsPCTpVIbFIUEQtsql-\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=K2SBqyIaHR0cHM6Ly9jcnlzdGFsdHJlYXRtZW50ZWFzdC5jb20v\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=Sz5ZbvsaHR0cHM6Ly9sYXVyYWRheWRvLmNvbS9lL2V2cmdla3BuczB3dg\u0026afid=6026939213154304\u0026eclog=0\u0026seu=Oz26hBfaHR0cHM6Ly9jcnlzdGFsdHJlYXRtZW50ZWFzdC5jb20v\u0026snc=0\u0026ssc=0\u0026vp=8\u0026pkw=0\u0026pload=1044\u0026rlp=%5B0%2C80%2C294%2C207%2C1720%2C1465%2C804%2C1465%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0\u0026freq=0","fqdn":"gigglegrowlworrisome.com","domain":"gigglegrowlworrisome.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lauradaydo.com/e/evrgekpns0wv","date":"2026-01-27T02:28:51.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gigglegrowlworrisome.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:16:25 GMT","end":"Mon, 06 Apr 2026 14:16:24 GMT"},"fingerprint":{"sha1":"39:F9:9C:70:09:9C:A1:D9:31:C5:2E:A5:51:E0:62:70:35:EB:FC:E6","sha256":"99:E7:5A:9A:85:51:E7:6F:2E:9D:3C:4A:73:72:29:79:A6:8E:4E:B1:C2:EF:10:84:4C:52:15:D9:5D:C9:BB:D2"}}},"request":{"raw":"GET /get/2060453?id=2060453\u0026jp=_cllcvkrgiinwedhuwwxoah\u0026dr=102\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.7-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IoebI0ClwF_byRXWVsPCTpVIbFIUEQtsql-\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=K2SBqyIaHR0cHM6Ly9jcnlzdGFsdHJlYXRtZW50ZWFzdC5jb20v\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=Sz5ZbvsaHR0cHM6Ly9sYXVyYWRheWRvLmNvbS9lL2V2cmdla3BuczB3dg\u0026afid=6026939213154304\u0026eclog=0\u0026seu=Oz26hBfaHR0cHM6Ly9jcnlzdGFsdHJlYXRtZW50ZWFzdC5jb20v\u0026snc=0\u0026ssc=0\u0026vp=8\u0026pkw=0\u0026pload=1044\u0026rlp=%5B0%2C80%2C294%2C207%2C1720%2C1465%2C804%2C1465%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: gigglegrowlworrisome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lauradaydo.com/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 27 Jan 2026 02:28:51 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: UID=26012621287b7d60e5073a4f71901e9b9e51; Path=/; Expires=Tue, 02 Mar 2027 02:28:51 GMT; Secure; SameSite=None\nCHCK=1; Path=/; Expires=Tue, 02 Mar 2027 02:28:51 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Tue, 02 Mar 2027 02:28:51 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6550,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (6550), with no line terminators","md5":"1fb6adf14c9c1e59dadc84e876c334e5","sha1":"13d8dcedad7453036b5e8cde00f4e0d8c070a5f9","sha256":"087fa6139eff2b0ce9a51e57111d7a445da083e3ea3ddc1ffc2164544a404659","sha512":"a1acd5da775c37b798d6d3df0cac891731c61bfeea3c7181677f1fe825b4a3b861b2c936257d03f39cf3107f171d73c63f61006a82592b775c0b19c1c529c9f0","ssdeep":"192:jS2GBMxyArTU/i7cDnhIbA0IyvsfIpCQFK:7GKDrci7ajyUAPK","tlshash":"34d16cc08823c055e1195d1a11f76c38684d87c375a235da94faebf92e8d03b6f97ca0","first_seen":"2026-01-27T02:29:17.523014Z","last_seen":"2026-01-27T02:29:17.523014Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lauradaydo.com/build/assets/27-SABxh.js","fqdn":"lauradaydo.com","domain":"lauradaydo.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lauradaydo.com/e/evrgekpns0wv","date":"2026-01-27T02:28:50.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lauradaydo.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:28:02 GMT","end":"Mon, 13 Apr 2026 16:28:01 GMT"},"fingerprint":{"sha1":"F0:39:62:19:37:B3:B6:8E:92:E5:08:63:81:F8:F8:94:1A:CF:B5:6F","sha256":"B5:4B:1E:22:AA:A2:F3:C1:E8:61:7E:6E:78:76:65:11:AF:04:01:85:D7:F0:EB:74:B7:9B:C9:A1:5F:8D:54:7C"}}},"request":{"raw":"GET /build/assets/27-SABxh.js HTTP/1.1\r\nHost: lauradaydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lauradaydo.com/e/evrgekpns0wv\r\nCookie: __ddg8_=PjwJZ0xUKP4n98Rq; __ddg10_=1769480929; __ddg9_=91.90.42.154; __ddg1_=VAGlSAtt5adRmVZWYffF; XSRF-TOKEN=eyJpdiI6IlIxRUdweW1xZDlIdmV1Um1hMVVENWc9PSIsInZhbHVlIjoiSjlTMVZ1cHczY0RLckU1aU5SOU1SYldiODZKeGJJak0vYlM3SUx2ZTRUcWJyQjRlZGwvUUZQc1NMOE1jUnNyeFFhUUZCb1R6d2tGYzFBemgrc0JMaTZCRGhJUENFMWNPL2ovMGVQUXBkVE1ZZ2NuUEw4cUk2czZtYU5jbEZQSHAiLCJtYWMiOiJkNzMzMDgyNDBmMTM0M2JhYTdmZDRmNGY4YjdhODJlNjBkN2YyMzE2ZDg3MDI0NGFlMDUzODE5YTcyNTQxZGFjIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImVyTjZsY2RuZDh0YUltZTNTMlluOHc9PSIsInZhbHVlIjoiUXdiQTd4dnU1NjlBLzVlbGswN2U0cmovUURQd0h5MW5JL0cyUmc3OTAreDlkUTNVck5PdHluazk1QUY3NGV3dkNwRWt3bTVaRFlYWk4zejFBYVJCdEtaNC9WVVdXVHp1SUlDODBuaHNvYy9XNWxOcC9LUmxUVjlsTjdPenVtbUUiLCJtYWMiOiJjYTlmNmZjOWJlZmFjMWExMGY2N2FkMDg3YzZmOWM1NTczYjFmZmRjZmQ4YzhjNDY5ZDQwNzRlNDk4MTNkYTliIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=kyjmIo99PQdeT9GP; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\n__ddg10_=1769480930; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\n__ddg9_=91.90.42.154; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 13 Jan 2026 17:29:18 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 08 Jul 2025 18:22:04 GMT\r\netag: W/\"686d61cc-6dc\"\r\nexpires: Thu, 12 Feb 2026 17:29:18 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 1155572\r\ncontent-length: 743\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1756,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1755)","md5":"0f8d196002a87042ea0937428f428732","sha1":"a51a5552c6d4ecd7cef5eaf692805ed2c63b80bb","sha256":"3b04c518e637741a9132153c76798ce7988d6b3d7062df0e34b639f8016815dd","sha512":"4579e32b820b00129bc56ed5f6b565f9a202bb129167fdbf3ea31e497954e0127a43d49a011b11355fdcf3326068b59384598c5ed9b3bf2965e9399d639ecece","ssdeep":"","tlshash":"9f31b85570f96631c1593859e37bb362b2e00d5b7d253c8160ad0b726e39cc2dd7af88","first_seen":"2025-07-09T03:26:33.454888Z","last_seen":"2026-03-28T20:13:06.224115Z","times_seen":225,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"lauradaydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/figtree/v9/_Xms-HUzqDCFdgfMm4S9DQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lauradaydo.com/e/evrgekpns0wv","date":"2026-01-27T02:28:50.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:29 GMT","end":"Mon, 23 Mar 2026 19:52:28 GMT"},"fingerprint":{"sha1":"D2:3B:6C:71:A7:BD:CB:B5:56:D1:90:EE:91:17:19:0F:24:02:E5:93","sha256":"DE:C3:87:EA:0D:EF:DF:B6:5C:9C:CE:F8:48:EB:2C:CE:06:FC:22:FD:3A:57:71:FF:23:81:1F:16:8F:67:66:B6"}}},"request":{"raw":"GET /s/figtree/v9/_Xms-HUzqDCFdgfMm4S9DQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://lauradaydo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20156\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 22 Jan 2026 17:11:29 GMT\r\nexpires: Fri, 22 Jan 2027 17:11:29 GMT\r\ncache-control: public, max-age=31536000\r\nage: 379041\r\nlast-modified: Wed, 10 Sep 2025 17:04:00 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20156,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20156, version 1.0","md5":"202cfb54d4e66d1702404ade49339ceb","sha1":"57fd1acf8d9651d9c38c0d4af7b78bc399be0652","sha256":"4ba7d3d096695818fe0686be4f1e82c6b05134e18a22260336130335027462dd","sha512":"2b323bc185114cbb7b0e2d92b7daf844d5dbe1e79f65d5b358f50bdf973ea60e8303e45ce7af23ce09b5e64149402065f0194f795e22dcd55c86ce1e05a11451","ssdeep":"384:gqwJbbuIcjx0eifRE1S0B1FbjeXpvgwFU2F5TfB3Qj0UWAB3XZ/ol:SJrK+hqvBjbyXpvgMUuVFHdK3p/Q","tlshash":"0e92e0eb83b3abc474ccb2a1349002e960e3524213b79df0c59375f0e9bd7da1a8522d","first_seen":"2025-05-14T03:12:47.210807Z","last_seen":"2026-04-03T18:14:52.072927Z","times_seen":4211,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":137,"dns":0,"connect":15,"send":0,"wait":16,"receive":5,"ssl":122},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vanilla-lazyload/10.17.0/lazyload.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lauradaydo.com/e/evrgekpns0wv","date":"2026-01-27T02:28:50.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/vanilla-lazyload/10.17.0/lazyload.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lauradaydo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 02:28:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1810\r\ncf-ray: 9c44d1a848745ebd-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb04017-1404\"\r\nlast-modified: Mon, 04 May 2020 16:17:27 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1107934\r\nexpires: Sun, 17 Jan 2027 02:28:50 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=sRaEb6DwHHHOjNPum%2FHDpcjUa%2BnTU87qXURl35ckJj47e%2FApnD3zBBC2xXby2uhulUKcoHTSLoGjcXoLPqHSmKqz%2BJyqqwmsQVw7hAdGF2HQUbN0GHge8vcZB10TA5gb0J8il0Yx\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5124,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5082)","md5":"375e3e0688214ca1595fc28956430dd1","sha1":"09ba8de39859cd17c2701057352dd5b8bc3c07f6","sha256":"a052ce2a1bfa39fd0315ec22b7b123a0097dc99884a5b10c348931a2b0190b1f","sha512":"da84ce21b5de848227f5cc70b591805ab9228a4c796058480a8259378a0c0a8b36137b02310d950faa4440b27330ba0b21518404b2b974d6feb74556837f172e","ssdeep":"96:lncpq9Hqqq0ykOP6WUuBymFCxWPIu4WYdlnlb3W5d1wgip+Aip9DyB9tyqkXlQ9I:VpHlqeOSWU2cxWPElZjJi7DyB9tyFX2K","tlshash":"06b1420cb069b03f656bb036413f130b7236605678958498f578dae9cabc84e2433fbd","first_seen":"2023-03-10T00:45:43Z","last_seen":"2026-03-31T10:13:58.274048Z","times_seen":383,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gigglegrowlworrisome.com/check.html","fqdn":"gigglegrowlworrisome.com","domain":"gigglegrowlworrisome.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://lauradaydo.com/e/evrgekpns0wv","date":"2026-01-27T02:28:50.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gigglegrowlworrisome.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:16:25 GMT","end":"Mon, 06 Apr 2026 14:16:24 GMT"},"fingerprint":{"sha1":"39:F9:9C:70:09:9C:A1:D9:31:C5:2E:A5:51:E0:62:70:35:EB:FC:E6","sha256":"99:E7:5A:9A:85:51:E7:6F:2E:9D:3C:4A:73:72:29:79:A6:8E:4E:B1:C2:EF:10:84:4C:52:15:D9:5D:C9:BB:D2"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: gigglegrowlworrisome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lauradaydo.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 27 Jan 2026 02:28:50 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Thu, 25 Dec 2025 09:04:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694cfe32-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Figtree:wght@400;600;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lauradaydo.com/e/evrgekpns0wv","date":"2026-01-27T02:28:50.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:24 GMT","end":"Mon, 23 Mar 2026 19:52:23 GMT"},"fingerprint":{"sha1":"43:39:AF:0A:74:F9:2F:1B:C0:1E:4E:89:21:30:C2:28:EC:9F:6C:67","sha256":"EA:F1:0E:C7:36:18:F3:9D:D1:D5:34:23:44:7D:6F:9D:2F:61:C7:81:09:9E:E9:C8:02:C8:F2:2C:0A:83:B3:A5"}}},"request":{"raw":"GET /css2?family=Figtree:wght@400;600;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lauradaydo.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 27 Jan 2026 02:28:50 GMT\r\ndate: Tue, 27 Jan 2026 02:28:50 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2508,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3aa2ab6d0fb8d300056983c0ffb25f19","sha1":"b991567dda2fc5ff930ee96daf48ff4344436144","sha256":"1243dafebfbffbba4c76b4c374ba4ca071e8b3e951b9944962e78822c13e2770","sha512":"2610f46796da1f3821906bbb194acab4f6f18b33487695c0d341405fba6cd953e2f344d6fc20764d2d485e7c286d5a1ce41a285ad4956364816ce700d2248cd3","ssdeep":"","tlshash":"4951ce81086ba504df930dc152cd7e33ef5ea390684599349efe189cacead675312b4d","first_seen":"2025-09-12T16:05:45.649556Z","last_seen":"2026-03-28T20:13:06.227657Z","times_seen":193,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":102,"dns":1,"connect":8,"send":0,"wait":19,"receive":0,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lauradaydo.com/js/loader.bc4a6543429.js","fqdn":"lauradaydo.com","domain":"lauradaydo.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lauradaydo.com/e/evrgekpns0wv","date":"2026-01-27T02:28:50.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lauradaydo.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:28:02 GMT","end":"Mon, 13 Apr 2026 16:28:01 GMT"},"fingerprint":{"sha1":"F0:39:62:19:37:B3:B6:8E:92:E5:08:63:81:F8:F8:94:1A:CF:B5:6F","sha256":"B5:4B:1E:22:AA:A2:F3:C1:E8:61:7E:6E:78:76:65:11:AF:04:01:85:D7:F0:EB:74:B7:9B:C9:A1:5F:8D:54:7C"}}},"request":{"raw":"GET /js/loader.bc4a6543429.js HTTP/1.1\r\nHost: lauradaydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lauradaydo.com/e/evrgekpns0wv\r\nCookie: __ddg8_=PjwJZ0xUKP4n98Rq; __ddg10_=1769480929; __ddg9_=91.90.42.154; __ddg1_=VAGlSAtt5adRmVZWYffF; XSRF-TOKEN=eyJpdiI6IlIxRUdweW1xZDlIdmV1Um1hMVVENWc9PSIsInZhbHVlIjoiSjlTMVZ1cHczY0RLckU1aU5SOU1SYldiODZKeGJJak0vYlM3SUx2ZTRUcWJyQjRlZGwvUUZQc1NMOE1jUnNyeFFhUUZCb1R6d2tGYzFBemgrc0JMaTZCRGhJUENFMWNPL2ovMGVQUXBkVE1ZZ2NuUEw4cUk2czZtYU5jbEZQSHAiLCJtYWMiOiJkNzMzMDgyNDBmMTM0M2JhYTdmZDRmNGY4YjdhODJlNjBkN2YyMzE2ZDg3MDI0NGFlMDUzODE5YTcyNTQxZGFjIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImVyTjZsY2RuZDh0YUltZTNTMlluOHc9PSIsInZhbHVlIjoiUXdiQTd4dnU1NjlBLzVlbGswN2U0cmovUURQd0h5MW5JL0cyUmc3OTAreDlkUTNVck5PdHluazk1QUY3NGV3dkNwRWt3bTVaRFlYWk4zejFBYVJCdEtaNC9WVVdXVHp1SUlDODBuaHNvYy9XNWxOcC9LUmxUVjlsTjdPenVtbUUiLCJtYWMiOiJjYTlmNmZjOWJlZmFjMWExMGY2N2FkMDg3YzZmOWM1NTczYjFmZmRjZmQ4YzhjNDY5ZDQwNzRlNDk4MTNkYTliIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=WJQqDImq8nHCfE59; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\n__ddg10_=1769480930; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\n__ddg9_=91.90.42.154; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 13 Jan 2026 17:29:17 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 08 Jul 2025 18:22:04 GMT\r\netag: W/\"686d61cc-14500\"\r\nexpires: Thu, 12 Feb 2026 17:29:17 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 1155573\r\ncontent-length: 26634\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":83200,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f43b942340f3e45d3ae53d0712b13256","sha1":"e11a4d4c3d7fff07ab752e7cb73342aa156dd66f","sha256":"32113f06d823097d0181fdc56d12e40e3ab7ca9d07609ce3f41c6d2c6b1846e2","sha512":"63a713372921c75df85848b0da2c35c14d12a8348b10263fa035090110417a141d1497edcb989a1f777d9addcc7a6843ce2d270f5e1be873f76cf1ccf2b8320a","ssdeep":"1536:+Im9L7Faw8G/1K+jpw8y5f0HMNz2szEe/XmC2:+Im9fww9Hw8y5f0HWEe/u","tlshash":"2a83c51c26d0b9590b8b9f36b72f28dcf5570e2f6d84c84bc605bc602579a1bede2532","first_seen":"2025-07-09T03:26:33.467529Z","last_seen":"2026-03-28T20:13:06.247323Z","times_seen":225,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"lauradaydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lauradaydo.com/jwplayer/8.40.2/provider.hlsjs.js","fqdn":"lauradaydo.com","domain":"lauradaydo.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lauradaydo.com/e/evrgekpns0wv","date":"2026-01-27T02:28:50.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lauradaydo.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:28:02 GMT","end":"Mon, 13 Apr 2026 16:28:01 GMT"},"fingerprint":{"sha1":"F0:39:62:19:37:B3:B6:8E:92:E5:08:63:81:F8:F8:94:1A:CF:B5:6F","sha256":"B5:4B:1E:22:AA:A2:F3:C1:E8:61:7E:6E:78:76:65:11:AF:04:01:85:D7:F0:EB:74:B7:9B:C9:A1:5F:8D:54:7C"}}},"request":{"raw":"GET /jwplayer/8.40.2/provider.hlsjs.js HTTP/1.1\r\nHost: lauradaydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lauradaydo.com/e/evrgekpns0wv\r\nCookie: __ddg8_=HxoKZ5vfhuuAuVJH; __ddg10_=1769480930; __ddg9_=91.90.42.154; __ddg1_=VAGlSAtt5adRmVZWYffF; XSRF-TOKEN=eyJpdiI6IlIxRUdweW1xZDlIdmV1Um1hMVVENWc9PSIsInZhbHVlIjoiSjlTMVZ1cHczY0RLckU1aU5SOU1SYldiODZKeGJJak0vYlM3SUx2ZTRUcWJyQjRlZGwvUUZQc1NMOE1jUnNyeFFhUUZCb1R6d2tGYzFBemgrc0JMaTZCRGhJUENFMWNPL2ovMGVQUXBkVE1ZZ2NuUEw4cUk2czZtYU5jbEZQSHAiLCJtYWMiOiJkNzMzMDgyNDBmMTM0M2JhYTdmZDRmNGY4YjdhODJlNjBkN2YyMzE2ZDg3MDI0NGFlMDUzODE5YTcyNTQxZGFjIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImVyTjZsY2RuZDh0YUltZTNTMlluOHc9PSIsInZhbHVlIjoiUXdiQTd4dnU1NjlBLzVlbGswN2U0cmovUURQd0h5MW5JL0cyUmc3OTAreDlkUTNVck5PdHluazk1QUY3NGV3dkNwRWt3bTVaRFlYWk4zejFBYVJCdEtaNC9WVVdXVHp1SUlDODBuaHNvYy9XNWxOcC9LUmxUVjlsTjdPenVtbUUiLCJtYWMiOiJjYTlmNmZjOWJlZmFjMWExMGY2N2FkMDg3YzZmOWM1NTczYjFmZmRjZmQ4YzhjNDY5ZDQwNzRlNDk4MTNkYTliIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=RXu76OUUfYnJA83I; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\n__ddg10_=1769480930; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\n__ddg9_=91.90.42.154; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 13 Jan 2026 17:29:17 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 17 Dec 2025 21:42:03 GMT\r\netag: W/\"694323ab-8c3c4\"\r\nexpires: Thu, 12 Feb 2026 17:29:17 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 1155573\r\ncontent-length: 161752\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":574404,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5795cb718d9d0a9d716999799da0990e","sha1":"39dfc1dc67400f1ed35b37be1d526b90c625eccb","sha256":"a18e421507aa3a429e819fe9ac171d805d0a163afc2043fce008021b37d70daf","sha512":"846263de872c61cada23c11d782608d32398846946e55693a9375d9095cb8b45ae67fae089eb6cc7a0738b1b505c461225b75cd02caff0aeda3c6231eefbf2db","ssdeep":"6144:3VpXg+qrsNOY9EUrGbjOnlPRmTVdPCad/euG/Bpq0xQiq0diAbWk7GDg87ASe/0j:GY97iEPo6Bpq0NGhN/","tlshash":"10c43bde3295a01683c2b1a5903f5617633e7d0a280cc16cfa2be9d76d79949b03bf74","first_seen":"2025-12-18T08:47:09.885285Z","last_seen":"2026-03-28T20:13:06.256375Z","times_seen":84,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"lauradaydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lauradaydo.com/android-icon-192x192.png","fqdn":"lauradaydo.com","domain":"lauradaydo.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lauradaydo.com/e/evrgekpns0wv","date":"2026-01-27T02:28:50.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lauradaydo.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 13 Jan 2026 16:28:02 GMT","end":"Mon, 13 Apr 2026 16:28:01 GMT"},"fingerprint":{"sha1":"F0:39:62:19:37:B3:B6:8E:92:E5:08:63:81:F8:F8:94:1A:CF:B5:6F","sha256":"B5:4B:1E:22:AA:A2:F3:C1:E8:61:7E:6E:78:76:65:11:AF:04:01:85:D7:F0:EB:74:B7:9B:C9:A1:5F:8D:54:7C"}}},"request":{"raw":"GET /android-icon-192x192.png HTTP/1.1\r\nHost: lauradaydo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lauradaydo.com/e/evrgekpns0wv\r\nCookie: __ddg8_=RXu76OUUfYnJA83I; __ddg10_=1769480930; __ddg9_=91.90.42.154; __ddg1_=VAGlSAtt5adRmVZWYffF; XSRF-TOKEN=eyJpdiI6IlIxRUdweW1xZDlIdmV1Um1hMVVENWc9PSIsInZhbHVlIjoiSjlTMVZ1cHczY0RLckU1aU5SOU1SYldiODZKeGJJak0vYlM3SUx2ZTRUcWJyQjRlZGwvUUZQc1NMOE1jUnNyeFFhUUZCb1R6d2tGYzFBemgrc0JMaTZCRGhJUENFMWNPL2ovMGVQUXBkVE1ZZ2NuUEw4cUk2czZtYU5jbEZQSHAiLCJtYWMiOiJkNzMzMDgyNDBmMTM0M2JhYTdmZDRmNGY4YjdhODJlNjBkN2YyMzE2ZDg3MDI0NGFlMDUzODE5YTcyNTQxZGFjIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImVyTjZsY2RuZDh0YUltZTNTMlluOHc9PSIsInZhbHVlIjoiUXdiQTd4dnU1NjlBLzVlbGswN2U0cmovUURQd0h5MW5JL0cyUmc3OTAreDlkUTNVck5PdHluazk1QUY3NGV3dkNwRWt3bTVaRFlYWk4zejFBYVJCdEtaNC9WVVdXVHp1SUlDODBuaHNvYy9XNWxOcC9LUmxUVjlsTjdPenVtbUUiLCJtYWMiOiJjYTlmNmZjOWJlZmFjMWExMGY2N2FkMDg3YzZmOWM1NTczYjFmZmRjZmQ4YzhjNDY5ZDQwNzRlNDk4MTNkYTliIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=H05IsTOGfxRtXv4O; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\n__ddg10_=1769480930; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\n__ddg9_=91.90.42.154; Domain=.lauradaydo.com; Path=/; Expires=Tue, 27-Jan-2026 02:48:50 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 13 Jan 2026 17:29:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 7068\r\nlast-modified: Mon, 20 May 2024 13:32:00 GMT\r\netag: \"664b50d0-1b9c\"\r\nexpires: Thu, 12 Feb 2026 17:29:32 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 1155558\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":7068,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"6e09fa5e43f9f169c8b65bdba9683b46","sha1":"e986e9353a404b28a522b85dc0b7afb480b6cb27","sha256":"7940cbb7ef222596bef1a1d1db04e8a1b745dfdeb769ff9a46f4e3717396af0b","sha512":"877c8c593b415b7ee70c698c429bde02a0448c94a1500f202ea9f6c0c54ac4fa36c3bfc0d449d0dcd1b00802e494464ca38d45b98ce21c9829fec1d90806af8f","ssdeep":"192:0l+appIc5YmxlmChBC6QOANGVZQcyefhMD0Jdg5FadQzf:0lFpjFAeGGVRyS5S0K","tlshash":"ffe1aed7100650cc4e7f96dfe5af84c0672702ae4d6a1ab3047c23359b291ea9e19628","first_seen":"2023-05-08T15:55:48Z","last_seen":"2026-03-28T20:13:06.226555Z","times_seen":894,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"lauradaydo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.pncloudfl.com/pn/818/552/0c9/8185520c9182e6dfced11aef85e3b8e48d64cea7.gif","fqdn":"cdn.pncloudfl.com","domain":"pncloudfl.com","tld":"com"},"ip":{"addr":"172.66.165.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lauradaydo.com/e/evrgekpns0wv","date":"2026-01-27T02:28:51.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.pncloudfl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Dec 2025 15:15:13 GMT","end":"Tue, 10 Mar 2026 16:15:09 GMT"},"fingerprint":{"sha1":"69:FC:7A:1D:92:39:0C:46:9A:C6:8A:01:99:0A:3F:46:9B:07:6E:1C","sha256":"7A:9B:C4:27:F6:F6:B3:AA:70:FE:EF:72:89:DC:CC:4F:73:D7:05:64:8C:E7:64:2F:FE:BE:08:DB:0E:62:B6:14"}}},"request":{"raw":"GET /pn/818/552/0c9/8185520c9182e6dfced11aef85e3b8e48d64cea7.gif HTTP/1.1\r\nHost: cdn.pncloudfl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lauradaydo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 02:28:51 GMT\r\ncontent-type: image/gif\r\ncontent-length: 4523\r\nx-amz-id-2: nlcpkqoTJlWq4xg08eTHWBjFB+9NN+GIgn6dcYmK/+HK0Dqe4d/LUtb82broimc+07AIO8GK6Gw=\r\nx-amz-request-id: CAR67MDDCDZBAM3Z\r\nlast-modified: Fri, 29 Aug 2025 14:18:31 GMT\r\netag: \"064f0f1a98bb893124bbca8ba622b944\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(462;u=3;i=?0 4521;u=5;i=?0)\r\ncf-polished: ok\r\naccess-control-allow-origin: *\r\nage: 7179\r\ncache-control: max-age=432000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 9c44d1abee21568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4523,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 192 x 192","md5":"064f0f1a98bb893124bbca8ba622b944","sha1":"8185520c9182e6dfced11aef85e3b8e48d64cea7","sha256":"65894e5688d8d318f4389346030147818e7c65dd30078358c9618582df08f313","sha512":"63e24666b2b4e02e1be2c63de05df78eee85f5b3f95dec598669d5869bfcaf7431cc59be3e0ea47cf1d4c476fab434fc0c98838c834818ad18d511d1ecea920f","ssdeep":"96:3Ol8k+qf3yDgcCqkI9PPx0uPnNp8fREKxiZEJc1xpW9r6NOgcm2n:08k+q6DguZPx0GKxg1znOgct","tlshash":"69917cac55f83865c59bb57318eb8b8ea94a1d0848b304ff64a4d7aeb3407d704098b6","first_seen":"2025-07-03T06:02:24.624908Z","last_seen":"2026-03-03T16:04:43.615504Z","times_seen":98,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":70,"dns":49,"connect":1,"send":0,"wait":6,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}