{"report_id":"7621bb59-0ab4-49ad-950c-67e86abc61f7","version":6,"status":"done","tags":[],"date":"2025-09-28T09:50:50Z","url":{"schema":"http","addr":"unblockyoutube.co/","fqdn":"unblockyoutube.co","domain":"unblockyoutube.co","tld":"co"},"ip":{"addr":"172.67.128.156","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.unblockyoutube.co/?__cpo=1","fqdn":"www.unblockyoutube.co","domain":"unblockyoutube.co","tld":"co"},"title":"Unblock YouTube with Ease: Use Our Free Web Proxy Now! | Unblock YouTube"},"submit":{"url":{"schema":"http","addr":"unblockyoutube.co/","fqdn":"unblockyoutube.co","domain":"unblockyoutube.co","tld":"co"},"ip":{"addr":"172.67.128.156","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-02T09:50:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"www.unblockyoutube.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"servecontent.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"servecontent.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"unblockyoutube.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-09-21T22:12:58.000435Z","alert_count":0,"request_count":1,"received_data":1195983,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-21T22:11:31.798564Z","alert_count":0,"request_count":1,"received_data":1099,"sent_data":464,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"unblockyoutube.co","ip":{"addr":"104.21.2.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-03-09","domain_rank":2164408,"first_seen":"2025-07-31T03:57:53.978966Z","last_seen":"2025-07-31T03:57:53.978966Z","alert_count":1,"request_count":1,"received_data":277828,"sent_data":486,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-09-21T22:11:31.014241Z","alert_count":0,"request_count":1,"received_data":28975,"sent_data":547,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.unblockyoutube.co","ip":{"addr":"104.21.2.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-03-09","domain_rank":0,"first_seen":"2025-07-31T03:57:53.980238Z","last_seen":"2025-07-31T03:57:53.980238Z","alert_count":4,"request_count":4,"received_data":1843714,"sent_data":2369,"comment":"","tags":null,"fingerprints":[{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-09-21T22:11:31.071214Z","alert_count":0,"request_count":5,"received_data":1964176,"sent_data":2242,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"servecontent.net","ip":{"addr":"149.56.254.131","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"domain_registered":"2012-12-31","domain_rank":1818286,"first_seen":"2013-07-20T06:32:27Z","last_seen":"2025-08-23T11:44:02.418497Z","alert_count":8,"request_count":4,"received_data":45518,"sent_data":2512,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-6595789CR3","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d007a7e9d8a2177cea864164465e3c34","sha1":"ec1e64921fbab1f3feabe5c7153422c6d581e361","sha256":"606f7c4ed008450955222617040bd81076c22d1073cd4d16ec4b355a3e6310fc","sha512":"0b56cb9d7588fbc3cd8bf4c7f796dbbc38a6a37332a4e908154e369793e44c4843ec501208d2e878dde1370c05e938da20141c8ed1a0413135c6affb01e429f2","ssdeep":"6144:zYpmM2/RNpvYqkD1g1/9G1SvuVc/D3WBj:6mLRYly/Lo","tlshash":"b67419cd73c674265392a478907f018bb5bb6892f44cc899f186dce42e74a9a4237f7c","size":367985,"data":"","first_seen":"2025-09-28T09:50:55.431871Z","last_seen":"2025-09-28T09:50:55.431871Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-6595789CR3\u0026cx=c\u0026gtm=4e59n2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0cf10258ff1e04ca94ea1ddbe17871b5","sha1":"59500c4a3413993bc12728d2d80912a4a49dcb54","sha256":"56fdfce3b0592d3eb25135a9e17c84456e3dd4bdd2d09a326e4997190391d69f","sha512":"3f9f67b450f7d8175acaa3e09bcca37c9dacc07eded614288722a7ee35e6d8c94313d8a2e47d0c77f8f8284d37ec787f712862e27d924d4ebc6a8a7299ccba9d","ssdeep":"6144:zZpmM2/RNpvYqkD1g1/9G1SvuVc/D3WBA:HmLRYly/Lv","tlshash":"f77419cd73c674265392a478907f018bb5bb6892f44cc899f186dce42e74a9a4237f7c","size":368004,"data":"","first_seen":"2025-09-28T09:50:55.458081Z","last_seen":"2025-09-28T09:50:55.458081Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.unblockyoutube.co/?__cpo=1","fqdn":"www.unblockyoutube.co","domain":"unblockyoutube.co","tld":"co"},"ip":{"addr":"104.21.2.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"baadba74a80ea4976d1bd92beedc3333","sha1":"6ab5a7f25ec98a8247bd6f88a6908b24c90be4a9","sha256":"efba79ae4eca6d21fd8b87046a8378fc65532fe64bd30ee4fcaef001c4ab2ad0","sha512":"479aa04f3bdb1dc518be1bfb09ae145529a60c50e94e1d2dee60588d6c66fe19e41f29202fd26b490970999c674f03c75cbb5e0c948b83f9841e2bfe5a098da3","ssdeep":"1536:OkA6dgOVGGfebVw06JhI1uJTODXVVsc5W:OkWOZfhSbsc4","tlshash":"5f93886b362e269fa40d7e4559493b9ac924c1409d83dbc59fe103fa387e419f8f438b","size":94137,"data":"","first_seen":"2025-09-28T09:50:55.468934Z","last_seen":"2026-01-04T02:59:26.158412Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.1/js/all.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e1e1bd25a94741b7828800b758b88df","sha1":"c4198f8a39a892ba4dfd85b7a228e03b77e36a04","sha256":"20a3ef6979bbe5e4de1afaecc703e1d34cbc5e3ceab36d378539506327692d72","sha512":"179413941a9996fb8112cf4b40fa9cd6266fd943317155decdb1f3a26cd2e837f83193029607bff3e817acac367e5e72b1d938ad68d1d2f292ecd3647f299a05","ssdeep":"6144:4yompD5cEYjS2sDVW4o3ch/V2Dnio/NULo9tRtKerVs3O3seX/YJF2S8eK8wDKSh:lD5cEJh/wtRw/3O3l0I","tlshash":"1c45d578d7a4a3bc9d8687b5c62110747a8f90be71a09328937dc6f0b2575dcc2dacc9","size":1194960,"data":"","first_seen":"2023-03-07T01:15:28Z","last_seen":"2026-04-03T11:02:17.332555Z","times_seen":1289,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-FZZM73M15D","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b9af4d137c367b95bbd58fe9d5accdf6","sha1":"fbb9c8911f6777cfd27898ba0924de9b54984a6a","sha256":"9df8dfc4ea86031e8673abaaa0529b272086524027bb64a3a995a001af9923d1","sha512":"d69075ced3d70057c8d5e5eae66b4158a5660559c38897c4f93f3a326179c973fb31b2fca7ab83c30e7973ea0f7f613cb0393969418b70782388fd4fcbb2182d","ssdeep":"6144:qKspmM2/RepvYqkD1g1/9G1SvuVcHN+23WBr:qKymLQYly/LgT","tlshash":"10941bce73d674265396b478903f018ba5bb28a2f44cc899f189dce42d74a9a4137f7c","size":415369,"data":"","first_seen":"2025-09-28T09:50:55.455284Z","last_seen":"2025-09-28T09:50:55.455284Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.unblockyoutube.co/?__cpo=1","fqdn":"www.unblockyoutube.co","domain":"unblockyoutube.co","tld":"co"},"ip":{"addr":"104.21.2.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f77daa1a1481d470e4dc1a8fffd01962","sha1":"77df21f8a9308945992ab9c24f37e02cd38c865b","sha256":"060e92bfbcd7e1b24acf3ad1ea5f565b8225245a0b5792d09192dece91806fd9","sha512":"572cb30e7bec7b72f999d24274e90ef6235e41d9a135c1909839ae6f86cab9d52d6a850356ae860f68d1670f6d99d8261cfd5434a7272227213e7503b25432f6","ssdeep":"","tlshash":"28c02bcc221a1c7041fb27408b3fb600b002761494d06e32494d63445d30e13d744850","size":153,"data":"","first_seen":"2023-03-12T07:06:00Z","last_seen":"2026-03-05T08:51:10.27537Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.unblockyoutube.co/assets/__cpa.mainAsync.js?dummy=0ffa481f6df20ff05daadc7a7bd5dbe1","fqdn":"www.unblockyoutube.co","domain":"unblockyoutube.co","tld":"co"},"ip":{"addr":"104.21.2.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ffa481f6df20ff05daadc7a7bd5dbe1","sha1":"03df2e34a18b5d1ae556aecb0f71e6f2e57d582d","sha256":"2b2b352ee00e3a25f240981cb07c08604116c16dd576cb3a0ecc133b2e56bbd1","sha512":"1d3fc3e63d4b5dfe9f5fde4a3820790021f461e4144c55b6893476f3aff08dd60345e4ac4b607f203ac2927c6b3d3f56b47ac875320b67e3b76cc656a5ba6335","ssdeep":"6144:RdYpX33gz00TrSAouQ6suhSLzXY12RVxrMm1OWhMymyGqgtvgKxDvwQ+oy+:RdYpX33x0qC12RPvphD+gKBwQhy+","tlshash":"7825886b366e66afa00d7e5599493edac920c0409d53cbc49fe103f6387e41ae5f438b","size":1018052,"data":"","first_seen":"2025-09-28T09:50:55.452256Z","last_seen":"2026-01-04T02:59:26.154463Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.unblockyoutube.co/?__cpo=1","fqdn":"www.unblockyoutube.co","domain":"unblockyoutube.co","tld":"co"},"ip":{"addr":"104.21.2.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"777027742aa602aefb7552582eb015de","sha1":"e9f51ee7d221273d75b07bc383e756ee267c5cd1","sha256":"d66fcc46fc370d8dd4db23cc030557078354fc47d60123b431377f975911a9f7","sha512":"40405bce0a8874bbfeebd675ebe48619fefe063a7fe3f8201cea63afb10c5327f8efbdee51142f90ea0074bcc987480a15a485d855ac290721b1f57ee9feee31","ssdeep":"6144:4kkzaiVKUN35CbhGgDZB8koNdrwySepLhsWWMbZBNPc5gocjrk65SwVrCGjxia5q:vilKUNIzFWkodRLhsWWMbZBNPc5gocji","tlshash":"c38497507fc0b849178b5fba731bf0dae49a0cae3889448be151bc90a6d9717f9f5831","size":381664,"data":"","first_seen":"2025-09-28T09:50:55.479343Z","last_seen":"2026-01-04T02:59:26.161083Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-HH9SMJM3KQ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"18a0427b28e10e3cf5a0e201b13fef44","sha1":"54d79feec2d8d7ac9591e906300c45f119571072","sha256":"ce9cfc43ecf3167ffee447e8ac04ca608391fcd48cd1c8b6e859d9bed5cac32c","sha512":"c53aefc3e7bd169cff947569edee9b62ceaa6728e760a67179374329533c71409d168fb1042b1cae7dced8a6e4328a322d75f9e85a1156127a61fbc59c108b7d","ssdeep":"6144:5apmM2/RepvYqkD1g1/9G1SvuVciG23WBP:5wmLQYly/LL3","tlshash":"7f841acd73c674265396b478907f018ba5bb28a2f44cc899f189dce42d74a9a4237f7c","size":394450,"data":"","first_seen":"2025-09-28T09:50:55.425549Z","last_seen":"2025-09-28T09:50:55.425549Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-FZZM73M15D\u0026cx=c\u0026gtm=4e59n2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0b51bc193180fdcce14bb4fd169d071","sha1":"6d33cebb4e6f71e3c361404d0ed0ec858c599e33","sha256":"5cfa924d4d1d48241e78bf046f21bfe6eac7d9ca74978901b7d62ca454cba3c4","sha512":"387dbdcf8bd2f12d08ba646cb95c3df8bd149e6c0e8b9deeb388d540a6df7e85ee7ab38017ab64ee6d8be6d6134d7ec913f382e886d77f28a41db5b2477a4e61","ssdeep":"6144:qK5pmM2/RepvYqkD1g1/9G1SvuVcHN+23WBY:qKjmLQYly/Lgw","tlshash":"67941bce73d674265396b478903f018ba5bb28a2f44cc899f189dce42d74a9a4137f7c","size":415388,"data":"","first_seen":"2025-09-28T09:50:55.465967Z","last_seen":"2025-09-28T09:50:55.465967Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"servecontent.net/content/www/d/asyncjs.php","fqdn":"servecontent.net","domain":"servecontent.net","tld":"net"},"ip":{"addr":"149.56.254.131","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"50b366c2f8bc4917080b489849f73fb8","sha1":"5683e84bcadcd9f4fcc623c9dd7f02a4448a6183","sha256":"a1512623c011fc58a2760873813f0b3119e8a4950054aa7fd4dd9c86b0599027","sha512":"d39c1744a87ffa00e718a1b87cb118ccce58ce07e9cff1c8531dd5f6932daecefac958b1ae0d3d1a1db106d05b55c72ae5764696dd44f9704d5fc7d146b96c0d","ssdeep":"96:7UqMhha0gB+BBOo0P+XqDJWuWfvVSiVmzIPziHCZ5Y7DNAP:7ugBAOoLIJXZhzI7ii7","tlshash":"d791e7f233c63afa49d7d038269fb3053126a4a6a91880495b25dc814abcfc91876f7c","size":4433,"data":"","first_seen":"2025-09-28T09:50:55.428698Z","last_seen":"2025-10-12T12:45:55.761065Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.unblockyoutube.co/?__cpo=1","fqdn":"www.unblockyoutube.co","domain":"unblockyoutube.co","tld":"co"},"ip":{"addr":"104.21.2.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b012302509ae243fc2adb9e4e346ec70","sha1":"54fb36efd655e0bae10ac43601c0244b17650996","sha256":"e27e17ea6ea746d885a5a3ef477224f981c1ee921e247c73ce4382cc58c7b7f1","sha512":"ef0c788f00c98e77f72f64ede0fb63194f881ee32264d169d8bc685385560dbeb53a25e4efa7865732a60dbefc18a8120bf40cc09a0087c70809d05ba7c78797","ssdeep":"768:2jZD6UoFS4EGZqoW4fQmI6DaVOcAASjbjKLvDsP46b2VZ6sNefrBYuJFm+GCHaOC:292XD04TVDyAL2i8T","tlshash":"75f2b8507694a47613b7af6b7236e2e6e11b495d185808cfc30caf701599a17ffe2e30","size":35188,"data":"","first_seen":"2025-09-28T09:50:55.49045Z","last_seen":"2026-01-04T02:59:26.157528Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.unblockyoutube.co/?__cpo=1","fqdn":"www.unblockyoutube.co","domain":"unblockyoutube.co","tld":"co"},"ip":{"addr":"104.21.2.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"88730af13986c56511a45e8d062db559","sha1":"e51c7482614dd45e4a84076b7a6302ce2a6a18f8","sha256":"d446b43f49d06f372a77e14d07625b80dc7b31982aa6ff4252a794dbd5924af0","sha512":"e49116d5448cc004623ab5df7bac23a0798427be37c7b5545e57a8a3735f1c160f2175bc5981fdf1d31e5cb52b5274674df5f20e92e2de92bfe65d5ff3fe45a4","ssdeep":"","tlshash":"09c08c88220b4c7082bb2a054b3fb200b0463212a4a09920290aa3048f21e03d784924","size":160,"data":"","first_seen":"2023-03-14T06:44:15Z","last_seen":"2026-04-01T18:06:55.475853Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.unblockyoutube.co/?__cpo=1","fqdn":"www.unblockyoutube.co","domain":"unblockyoutube.co","tld":"co"},"ip":{"addr":"104.21.2.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"88498f1cb31f6d65112a29fbaa695598","sha1":"b5ae598d50c28b0dad416ff37a4488b4b25b3c26","sha256":"9e1375538a77a3a4f6ddeddff1bad657de66e9dfef99e801e733ca1299446a06","sha512":"206951c71b91b65aee3cb73dbda19010bf75d66fd2dff915b6641e1b03957c2c600514257bb7afe712626225093d063fa060103c9b9ba4275b23b87af9c23f6c","ssdeep":"","tlshash":"1ec02b8c320a0cb051f72b008b7fbb04b0123214d4e06d31482a23485d30e13e744814","size":153,"data":"","first_seen":"2025-09-28T09:50:55.505523Z","last_seen":"2025-09-28T09:50:55.505523Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/carterone/v18/q5uCsoe5IOB2-pXv9UcNExN8hA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.unblockyoutube.co/?__cpo=1","date":"2025-09-28T09:50:28.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/carterone/v18/q5uCsoe5IOB2-pXv9UcNExN8hA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.unblockyoutube.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28140\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 24 Sep 2025 17:56:14 GMT\r\nexpires: Thu, 24 Sep 2026 17:56:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 316454\r\nlast-modified: Tue, 09 Sep 2025 17:08:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28140,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28140, version 1.0","md5":"06d0e8d3273a1ee7885885f199607eb8","sha1":"99229516b6258f8a406b0f2798ded9cfbc9d9d1a","sha256":"275ea25e088288d582f9ea08a342098b4e8dbabdfd9ba2c6e888dd826ffbd22f","sha512":"d313f9e4f3baf6fd111b594d782ca963d05b8796d15232af706910e47b1a81b80e7da2fc6956f1880c1834252feac78968ac1ac5989e4e2104b8106a68305b2f","ssdeep":"384:v5cyTZ0x74qAQFKT5AHv6Gqn8cB50qiaGb0aR5FM3RYdJe1IVna+CCm:vu4Z0nGA/q7LiPRa0I1I4+CCm","tlshash":"45c2e022366bd231db3e1c71cdb5085b06607668202a903c765df416fb6b9d0fda72d9","first_seen":"2025-09-22T07:52:50.804725Z","last_seen":"2026-03-31T21:41:07.631378Z","times_seen":138,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":77,"dns":0,"connect":16,"send":0,"wait":16,"receive":15,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.unblockyoutube.co/?__cpo=1","fqdn":"www.unblockyoutube.co","domain":"unblockyoutube.co","tld":"co"},"ip":{"addr":"104.21.2.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-28T09:50:27.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unblockyoutube.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 04:42:19 GMT","end":"Sat, 27 Dec 2025 05:40:48 GMT"},"fingerprint":{"sha1":"E8:ED:7F:8F:58:22:99:19:68:DA:E3:12:7F:EC:42:7F:B2:B6:3E:6C","sha256":"90:48:F9:5D:C2:72:56:21:41:E4:FD:2E:6B:68:30:05:E9:7C:1E:31:2F:C5:35:F8:B4:E9:67:CA:9D:40:FF:55"}}},"request":{"raw":"GET /?__cpo=1 HTTP/1.1\r\nHost: www.unblockyoutube.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 09:50:27 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: no-store, no-cache, max-age=0\r\nlast-modified: Sunday, 28-Sep-2025 09:45:27 UTC\r\naccess-control-allow-origin: https://www.unblockyoutube.co\r\nstrict-transport-security: max-age=0\r\nx-xss-protection: 1\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src https: data: 'unsafe-eval' 'unsafe-inline'; object-src https:; frame-src http: https: data:; upgrade-insecure-requests\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KWqP48dvIowY5FAZcckikS79qWK9ddPUcUXn%2BMjsuYDIsm2XoWkOXrL%2BKaRRXryCCOWLoVjbyG3WNG5evjPFVBNakUp1d33CISOmoYiIxrSzD5c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9862562f4c2956b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]}],"data":{"size":277153,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (51350)","md5":"f3fcded06893719f21dd5f30488e8888","sha1":"33db5c2c333e7391b84474bab3964715dcccaa9b","sha256":"e377f0b3f6cf6d3f79964e3261e9453aba5d6019fffd75aab7ffc7c7b2e60951","sha512":"a87ca30ceb37c516d8d8a53912d1ad1e8070a03f1196955bb2200c82880da0da39a1b4c51d877ecbd309daf77973173c6865b8a1b31862af9e5c774314469f86","ssdeep":"1536:3rw/TdBDNHt16VBHcR6QD2QsmU/sJkn64WbAwOoOoWg6YK4kA6dgOVGGfebVw06I:3c8RMU/G4WbAwHWsbkWOZfhSbscG5cn1","tlshash":"5244f762711931dfb10aea0575847f8a9614c042d903cfe6fbde13f86f6a489a4f1b4b","first_seen":"2025-09-28T09:50:55.42235Z","last_seen":"2025-09-28T09:50:55.42235Z","times_seen":1,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"www.unblockyoutube.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-HH9SMJM3KQ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.unblockyoutube.co/?__cpo=1","date":"2025-09-28T09:50:27.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"DF:7E:8A:F9:1C:B5:DC:9E:90:E3:71:A7:92:85:2C:8F:2B:B4:42:8E","sha256":"3A:65:11:10:B9:58:2F:E1:BF:38:98:8D:2E:3E:A2:01:9D:C6:BE:69:5B:AD:F7:99:53:F9:AB:A6:6B:82:47:F1"}}},"request":{"raw":"GET /gtag/js?id=G-HH9SMJM3KQ HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.unblockyoutube.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 28 Sep 2025 09:50:28 GMT\r\nexpires: Sun, 28 Sep 2025 09:50:28 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 134512\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":394450,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"18a0427b28e10e3cf5a0e201b13fef44","sha1":"54d79feec2d8d7ac9591e906300c45f119571072","sha256":"ce9cfc43ecf3167ffee447e8ac04ca608391fcd48cd1c8b6e859d9bed5cac32c","sha512":"c53aefc3e7bd169cff947569edee9b62ceaa6728e760a67179374329533c71409d168fb1042b1cae7dced8a6e4328a322d75f9e85a1156127a61fbc59c108b7d","ssdeep":"6144:5apmM2/RepvYqkD1g1/9G1SvuVciG23WBP:5wmLQYly/LL3","tlshash":"7f841acd73c674265396b478907f018ba5bb28a2f44cc899f189dce42d74a9a4237f7c","first_seen":"2025-09-28T09:50:55.425549Z","last_seen":"2025-09-28T09:50:55.425549Z","times_seen":1,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":105,"dns":0,"connect":15,"send":0,"wait":43,"receive":46,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"servecontent.net/content/www/d/asyncjs.php","fqdn":"servecontent.net","domain":"servecontent.net","tld":"net"},"ip":{"addr":"149.56.254.131","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.unblockyoutube.co/?__cpo=1","date":"2025-09-28T09:50:27.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.servecontent.net","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 06:35:54 GMT","end":"Mon, 17 Nov 2025 06:35:53 GMT"},"fingerprint":{"sha1":"70:A6:CE:44:AD:8D:3E:6A:32:1E:89:08:62:70:7A:2B:4F:BB:BC:E3","sha256":"67:AC:A9:82:C5:84:ED:D3:D2:63:3C:45:19:CC:8B:BD:7B:11:E4:B2:70:DE:02:28:1E:8C:B5:92:2C:63:86:27"}}},"request":{"raw":"GET /content/www/d/asyncjs.php HTTP/1.1\r\nHost: servecontent.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.unblockyoutube.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 28 Sep 2025 09:50:28 GMT\r\nServer: Apache\r\nX-Powered-By: PHP/8.0.30\r\nExpire: Sun, 28 Sep 2025 10:50:28 GMT\r\nCache-Control: private, max-age=3600\r\nP3P: CP=\"CUR ADM OUR NOR STA NID\"\r\nSet-Cookie: OAGEO=2%7CNO%7CEU%7C%7COslo%7C0566%7C59.9133%7C10.7389%7C5%7CEurope%2FOslo%7C%7C03%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C; path=/; secure; SameSite=none\r\nETag: 0358a01ac0a87757e047c3b55aef9bff\r\nKeep-Alive: timeout=1, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/javascript;charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":4433,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4433), with no line terminators","md5":"50b366c2f8bc4917080b489849f73fb8","sha1":"5683e84bcadcd9f4fcc623c9dd7f02a4448a6183","sha256":"a1512623c011fc58a2760873813f0b3119e8a4950054aa7fd4dd9c86b0599027","sha512":"d39c1744a87ffa00e718a1b87cb118ccce58ce07e9cff1c8531dd5f6932daecefac958b1ae0d3d1a1db106d05b55c72ae5764696dd44f9704d5fc7d146b96c0d","ssdeep":"96:7UqMhha0gB+BBOo0P+XqDJWuWfvVSiVmzIPziHCZ5Y7DNAP:7ugBAOoLIJXZhzI7ii7","tlshash":"d791e7f233c63afa49d7d038269fb3053126a4a6a91880495b25dc814abcfc91876f7c","first_seen":"2025-09-28T09:50:55.428698Z","last_seen":"2025-10-12T12:45:55.761065Z","times_seen":2,"resource_available":true,"data":null}},"time_used":804,"timings":{"blocked":344,"dns":119,"connect":111,"send":0,"wait":113,"receive":0,"ssl":116},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"servecontent.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"servecontent.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-6595789CR3","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.unblockyoutube.co/?__cpo=1","date":"2025-09-28T09:50:27.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"DF:7E:8A:F9:1C:B5:DC:9E:90:E3:71:A7:92:85:2C:8F:2B:B4:42:8E","sha256":"3A:65:11:10:B9:58:2F:E1:BF:38:98:8D:2E:3E:A2:01:9D:C6:BE:69:5B:AD:F7:99:53:F9:AB:A6:6B:82:47:F1"}}},"request":{"raw":"GET /gtag/js?id=G-6595789CR3 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.unblockyoutube.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 28 Sep 2025 09:50:28 GMT\r\nexpires: Sun, 28 Sep 2025 09:50:28 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 128146\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":367985,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"d007a7e9d8a2177cea864164465e3c34","sha1":"ec1e64921fbab1f3feabe5c7153422c6d581e361","sha256":"606f7c4ed008450955222617040bd81076c22d1073cd4d16ec4b355a3e6310fc","sha512":"0b56cb9d7588fbc3cd8bf4c7f796dbbc38a6a37332a4e908154e369793e44c4843ec501208d2e878dde1370c05e938da20141c8ed1a0413135c6affb01e429f2","ssdeep":"6144:zYpmM2/RNpvYqkD1g1/9G1SvuVc/D3WBj:6mLRYly/Lo","tlshash":"b67419cd73c674265392a478907f018bb5bb6892f44cc899f186dce42e74a9a4237f7c","first_seen":"2025-09-28T09:50:55.431871Z","last_seen":"2025-09-28T09:50:55.431871Z","times_seen":1,"resource_available":true,"data":null}},"time_used":427,"timings":{"blocked":167,"dns":0,"connect":15,"send":0,"wait":50,"receive":39,"ssl":154},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.unblockyoutube.co/favicon-host.png","fqdn":"www.unblockyoutube.co","domain":"unblockyoutube.co","tld":"co"},"ip":{"addr":"104.21.2.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.unblockyoutube.co/?__cpo=1","date":"2025-09-28T09:50:28.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unblockyoutube.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 04:42:19 GMT","end":"Sat, 27 Dec 2025 05:40:48 GMT"},"fingerprint":{"sha1":"E8:ED:7F:8F:58:22:99:19:68:DA:E3:12:7F:EC:42:7F:B2:B6:3E:6C","sha256":"90:48:F9:5D:C2:72:56:21:41:E4:FD:2E:6B:68:30:05:E9:7C:1E:31:2F:C5:35:F8:B4:E9:67:CA:9D:40:FF:55"}}},"request":{"raw":"GET /favicon-host.png HTTP/1.1\r\nHost: www.unblockyoutube.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.unblockyoutube.co/?__cpo=1\r\nCookie: _ga_HH9SMJM3KQ=GS2.1.s1759053028$o1$g0$t1759053028$j60$l0$h0; _ga=GA1.1.870404208.1759053028; _ga_6595789CR3=GS2.1.s1759053028$o1$g0$t1759053028$j60$l0$h0; _ga_FZZM73M15D=GS2.1.s1759053028$o1$g0$t1759053028$j60$l0$h0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 09:50:28 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nlast-modified: Sunday, 28-Sep-2025 09:42:53 UTC\r\naccess-control-allow-origin: https://www.unblockyoutube.co\r\nstrict-transport-security: max-age=0\r\nx-xss-protection: 1\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src https: data: 'unsafe-eval' 'unsafe-inline'; object-src https:; frame-src http: https: data:; upgrade-insecure-requests\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pvrT1RKg1jQ4qmWz%2FMYUaQdu25ZFvP6RsQk5D29LYcwu5CEjoT0IRsToSU2wwc%2FSfNCeonYJYkZE798gbBFbHRnEQ3coeytply9DKH%2F44t6XnOM%3D\"}]}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 98625633cf665693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":272464,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (51650)","md5":"e4e2fb7bd3c8343f07cb3ebfa110dd8d","sha1":"10acf7af96513805188609cd4c509b3f10f81b84","sha256":"9f36d97f13a93660b16c9fcb2425535a2106d8d08011c8626626abbbc4c409c5","sha512":"6bbcb713b6589c44a9efd34297984cf585feb01f9b7c71ad28019510ce40dbfe84737fd0bcebce56682eb73ef545e8fdae78debf866bf119138f921688fc99da","ssdeep":"1536:fnw/TdBDNHt16VBHcR6QD2QsmU/sJkn64WbAwOoOoWg6YK4kA6dgOVGGfebVw06o:fI8RMU/G4WbAwHWsbkWOZfhSbscG5c7","tlshash":"c644f762711931dfb10aea0575847f8a9714c042d903cfe6fbdb13f86e6a489a4f1b1b","first_seen":"2025-09-28T09:50:55.434853Z","last_seen":"2025-09-28T09:50:55.434853Z","times_seen":1,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"www.unblockyoutube.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"servecontent.net/content/www/d/noah.php?bannerid=88\u0026campaignid=15\u0026zoneid=35\u0026loc=https%3A%2F%2Fwww.unblockyoutube.co%2F%3F__cpo%3D1\u0026cb=d1f86a5530","fqdn":"servecontent.net","domain":"servecontent.net","tld":"net"},"ip":{"addr":"149.56.254.131","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.unblockyoutube.co/?__cpo=1","date":"2025-09-28T09:50:28.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.servecontent.net","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 06:35:54 GMT","end":"Mon, 17 Nov 2025 06:35:53 GMT"},"fingerprint":{"sha1":"70:A6:CE:44:AD:8D:3E:6A:32:1E:89:08:62:70:7A:2B:4F:BB:BC:E3","sha256":"67:AC:A9:82:C5:84:ED:D3:D2:63:3C:45:19:CC:8B:BD:7B:11:E4:B2:70:DE:02:28:1E:8C:B5:92:2C:63:86:27"}}},"request":{"raw":"GET /content/www/d/noah.php?bannerid=88\u0026campaignid=15\u0026zoneid=35\u0026loc=https%3A%2F%2Fwww.unblockyoutube.co%2F%3F__cpo%3D1\u0026cb=d1f86a5530 HTTP/1.1\r\nHost: servecontent.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.unblockyoutube.co/\r\nCookie: OAGEO=2%7CNO%7CEU%7C%7COslo%7C0566%7C59.9133%7C10.7389%7C5%7CEurope%2FOslo%7C%7C03%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C; OAID=01000111010001000101000001010010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 28 Sep 2025 09:50:28 GMT\r\nServer: Apache\r\nX-Powered-By: PHP/8.0.30\r\nPragma: no-cache\r\nCache-Control: no-cache, no-store, must-revalidate\r\nExpires: 0\r\nAccess-Control-Allow-Origin: *\r\nP3P: CP=\"CUR ADM OUR NOR STA NID\"\r\nSet-Cookie: OAID=01000111010001000101000001010010; expires=Mon, 28-Sep-2026 09:50:28 GMT; Max-Age=31536000; path=/; secure; SameSite=none\r\nKeep-Alive: timeout=1, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: image/gif\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4491705564909da7f9eaf749dbbfbb1","sha1":"279315d507855c6a4351e1e2c2f39dd9cd2fccd8","sha256":"4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49","sha512":"b8d82d64ec656c63570b82215564929adad167e61643fd72283b94f3e448ef8ab0ad42202f3537a0da89960bbdc69498608fc6ec89502c6c338b6226c8bf5e14","ssdeep":"","tlshash":"c5900403d140d041c351c0300d0cc740174471304514030f70fc175dfc353510c13000","first_seen":"2023-04-05T09:54:56Z","last_seen":"2026-04-03T21:32:24.566251Z","times_seen":96321,"resource_available":true,"data":null}},"time_used":571,"timings":{"blocked":226,"dns":0,"connect":112,"send":0,"wait":118,"receive":0,"ssl":114},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"servecontent.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"servecontent.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"servecontent.net/images/b4120daecbb9782613a2a19c6d3232ae.png","fqdn":"servecontent.net","domain":"servecontent.net","tld":"net"},"ip":{"addr":"149.56.254.131","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.unblockyoutube.co/?__cpo=1","date":"2025-09-28T09:50:28.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.servecontent.net","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 06:35:54 GMT","end":"Mon, 17 Nov 2025 06:35:53 GMT"},"fingerprint":{"sha1":"70:A6:CE:44:AD:8D:3E:6A:32:1E:89:08:62:70:7A:2B:4F:BB:BC:E3","sha256":"67:AC:A9:82:C5:84:ED:D3:D2:63:3C:45:19:CC:8B:BD:7B:11:E4:B2:70:DE:02:28:1E:8C:B5:92:2C:63:86:27"}}},"request":{"raw":"GET /images/b4120daecbb9782613a2a19c6d3232ae.png HTTP/1.1\r\nHost: servecontent.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.unblockyoutube.co/\r\nCookie: OAGEO=2%7CNO%7CEU%7C%7COslo%7C0566%7C59.9133%7C10.7389%7C5%7CEurope%2FOslo%7C%7C03%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C; OAID=01000111010001000101000001010010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 28 Sep 2025 09:50:28 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 18 Sep 2025 11:28:35 GMT\r\nETag: \"9597-63f11a75e5ba1\"\r\nAccept-Ranges: bytes\r\nContent-Length: 38295\r\nKeep-Alive: timeout=1, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":38295,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 728 x 90, 8-bit/color RGBA, non-interlaced","md5":"b4120daecbb9782613a2a19c6d3232ae","sha1":"242b661ed7ccee9166c8a5ce45d37ef176e14459","sha256":"1e5f9df237d9a21ac7601747ff20fff426ec9a7ebbccc1f4ab0e4f2c0df43287","sha512":"33b3e96786f48dcfd27e50afc9f1c8b9fdb3e7beb553a4cb53e711441b3fc390627836060e9caf3305200498e13b4be8e84949ef37f94a14f6fd9f3b3fda4771","ssdeep":"768:mUnHC6MvPSh+KBxzLpLopNkgiLtzVeiCCiAhcSFHKrA+RbPGh:q6o6cK1MNkXZVTCCioQZbPGh","tlshash":"8b030288b594023f5de0fbb9574fef19e9fb50b339ac49b5529d513c872c20bda08941","first_seen":"2025-09-28T09:50:55.440164Z","last_seen":"2026-01-05T02:09:28.749318Z","times_seen":2,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":111,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"servecontent.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"servecontent.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.1/js/all.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.unblockyoutube.co/?__cpo=1","date":"2025-09-28T09:50:27.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.15.1/js/all.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.unblockyoutube.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.unblockyoutube.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 09:50:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 362308\r\ncf-ray: 98625630ea5e3181-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5f7b5b5f-123bd0\"\r\nlast-modified: Mon, 05 Oct 2020 17:43:59 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1649625\r\nexpires: Fri, 18 Sep 2026 09:50:28 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=bkMkLlEYflUg0GuSOjTImKqih9%2BOYfb4z9d9sfg7oIz%2FXilek%2FDgoDE24y146ZYCtNOdCPRC3JOPElKkCAKzD2iADlAYy7iX44hZo3B8S2jwPTV7YN2UGv681c3E9sveG1AAC%2Bi3\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1194960,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65350)","md5":"0b3d07c23cc7567baa0c6d47fb823b5f","sha1":"60558496c0368b324cc2f779e926b864619b8e35","sha256":"ca4f1199d69eab689af6b8bee52f2311c6fb260f0b1112d381f0484d939f8df5","sha512":"cdc62ac8ca72e271485d62b51bfe407145743530be88c1b4ef8808a18908d7fa89eb13305d5f6dc1ea9088cd183de6ef1c33aaae223c5178b47740043566a0e1","ssdeep":"6144:4yompD5cEYjS2sDVW4o3ch/V2Dnio/NULo9tRtKerVs3O3seX/YJF2S85:lD5cEJh/wtRw/3O3l7","tlshash":"fb25c578d7a4a3bc9d8687b9c62110747a8f90be71a09328937dc6f0b2575dcc2d9cc9","first_seen":"2025-08-01T01:05:53.614475Z","last_seen":"2026-04-03T11:02:17.318127Z","times_seen":389,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":5,"dns":0,"connect":1,"send":0,"wait":19,"receive":6,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Carter+One\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.unblockyoutube.co/?__cpo=1","date":"2025-09-28T09:50:27.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:49 GMT","end":"Mon, 01 Dec 2025 08:36:48 GMT"},"fingerprint":{"sha1":"9E:38:51:02:B6:22:9C:08:6B:24:B8:A0:EB:DB:60:D9:27:B2:68:90","sha256":"67:AF:7E:56:AB:8D:96:FB:D0:75:CA:28:6D:16:B6:67:FD:7F:58:6F:CC:AA:78:B5:01:13:76:2C:AB:BE:80:4E"}}},"request":{"raw":"GET /css2?family=Carter+One\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.unblockyoutube.co/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 28 Sep 2025 09:50:28 GMT\r\ndate: Sun, 28 Sep 2025 09:50:28 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":413,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9b0ca385ae9f050ba739f284c7b9b5b7","sha1":"4e4f251e41a3d87d10ad04ee3390bd2b9367cf2c","sha256":"9bfb8c2a88aaf5e5c8831cf9ce5d7801aac88faf571f0ddc40fc8a4bf0ec6e48","sha512":"9229e54a37517eff40263186dd972db3d75c976b86b112fb27f26ddc1f1098084d256437a4565dbac3be0e23ed129128574eabd0f1b617fdce3b8ab9f6d9eec6","ssdeep":"","tlshash":"92e0f1410c3ba900e7a30cd001dd7a75ee0ea0085404da649bfb28c8fc43d221312b0d","first_seen":"2025-09-22T07:52:51.026342Z","last_seen":"2026-03-31T16:10:48.785559Z","times_seen":73,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":168,"dns":0,"connect":17,"send":0,"wait":37,"receive":0,"ssl":153},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"servecontent.net/content/www/d/asyncspc.php?zones=35\u0026prefix=revive-0-\u0026loc=https%3A%2F%2Fwww.unblockyoutube.co%2F%3F__cpo%3D1","fqdn":"servecontent.net","domain":"servecontent.net","tld":"net"},"ip":{"addr":"149.56.254.131","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.unblockyoutube.co/?__cpo=1","date":"2025-09-28T09:50:28.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.servecontent.net","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 06:35:54 GMT","end":"Mon, 17 Nov 2025 06:35:53 GMT"},"fingerprint":{"sha1":"70:A6:CE:44:AD:8D:3E:6A:32:1E:89:08:62:70:7A:2B:4F:BB:BC:E3","sha256":"67:AC:A9:82:C5:84:ED:D3:D2:63:3C:45:19:CC:8B:BD:7B:11:E4:B2:70:DE:02:28:1E:8C:B5:92:2C:63:86:27"}}},"request":{"raw":"GET /content/www/d/asyncspc.php?zones=35\u0026prefix=revive-0-\u0026loc=https%3A%2F%2Fwww.unblockyoutube.co%2F%3F__cpo%3D1 HTTP/1.1\r\nHost: servecontent.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.unblockyoutube.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.unblockyoutube.co/\r\nCookie: OAGEO=2%7CNO%7CEU%7C%7COslo%7C0566%7C59.9133%7C10.7389%7C5%7CEurope%2FOslo%7C%7C03%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 28 Sep 2025 09:50:28 GMT\r\nServer: Apache\r\nX-Powered-By: PHP/8.0.30\r\nPragma: no-cache\r\nCache-Control: no-cache, no-store, must-revalidate\r\nExpires: 0\r\nP3P: CP=\"CUR ADM OUR NOR STA NID\"\r\nAccess-Control-Allow-Origin: https://www.unblockyoutube.co\r\nAccess-Control-Allow-Credentials: true\r\nSet-Cookie: OAID=01000111010001000101000001010010; expires=Mon, 28-Sep-2026 09:50:28 GMT; Max-Age=31536000; path=/; secure; SameSite=none\r\nKeep-Alive: timeout=1, max=99\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: application/json\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":861,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e654dd46c448a462ce3b85d4efea24b7","sha1":"fa42f9e29257399ff12823ce95ebb02677b8fe80","sha256":"01d5d1e9681360f6c6529708503325e27657ed99be9c80a67fe6c97598940696","sha512":"369bece35b0519267f348a0da91f8e08381cc1e3497c4f56c934edb4e9f99ef3594aa4f2afd70352a4087de7e34fe7fba16cf372b9caa46871ff7b9673303fc1","ssdeep":"","tlshash":"3911efb2528655afb0aeb1c5d80d755c3227b68e7e0140509f6e268cd1dd22b9be123a","first_seen":"2025-09-28T09:50:55.449393Z","last_seen":"2025-09-28T09:50:55.449393Z","times_seen":1,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"servecontent.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"servecontent.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.unblockyoutube.co/assets/__cpa.mainAsync.js?dummy=0ffa481f6df20ff05daadc7a7bd5dbe1","fqdn":"www.unblockyoutube.co","domain":"unblockyoutube.co","tld":"co"},"ip":{"addr":"104.21.2.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.unblockyoutube.co/?__cpo=1","date":"2025-09-28T09:50:27.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unblockyoutube.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 04:42:19 GMT","end":"Sat, 27 Dec 2025 05:40:48 GMT"},"fingerprint":{"sha1":"E8:ED:7F:8F:58:22:99:19:68:DA:E3:12:7F:EC:42:7F:B2:B6:3E:6C","sha256":"90:48:F9:5D:C2:72:56:21:41:E4:FD:2E:6B:68:30:05:E9:7C:1E:31:2F:C5:35:F8:B4:E9:67:CA:9D:40:FF:55"}}},"request":{"raw":"GET /assets/__cpa.mainAsync.js?dummy=0ffa481f6df20ff05daadc7a7bd5dbe1 HTTP/1.1\r\nHost: www.unblockyoutube.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.unblockyoutube.co/?__cpo=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 09:50:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 12 Sep 2025 14:33:52 GMT\r\nvary: Accept-Encoding\r\netag: \"68c42f50-f88c4\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pVCU%2FaNclE%2BzRftn4hcdXXAPzEUKm9BO7ZxbWE0PGkN7XUeIsG5shm%2FIT2aude8OEFLvABJ4%2B1mEEgfX8AsCTP9dH35wFmY7bY%2FiqLR8quK7BH0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 98625630df525693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1018052,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65309)","md5":"0ffa481f6df20ff05daadc7a7bd5dbe1","sha1":"03df2e34a18b5d1ae556aecb0f71e6f2e57d582d","sha256":"2b2b352ee00e3a25f240981cb07c08604116c16dd576cb3a0ecc133b2e56bbd1","sha512":"1d3fc3e63d4b5dfe9f5fde4a3820790021f461e4144c55b6893476f3aff08dd60345e4ac4b607f203ac2927c6b3d3f56b47ac875320b67e3b76cc656a5ba6335","ssdeep":"6144:RdYpX33gz00TrSAouQ6suhSLzXY12RVxrMm1OWhMymyGqgtvgKxDvwQ+oy+:RdYpX33x0qC12RPvphD+gKBwQhy+","tlshash":"7825886b366e66afa00d7e5599493edac920c0409d53cbc49fe103f6387e41ae5f438b","first_seen":"2025-09-28T09:50:55.452256Z","last_seen":"2026-01-04T02:59:26.154463Z","times_seen":10,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"www.unblockyoutube.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-FZZM73M15D","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.unblockyoutube.co/?__cpo=1","date":"2025-09-28T09:50:27.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"DF:7E:8A:F9:1C:B5:DC:9E:90:E3:71:A7:92:85:2C:8F:2B:B4:42:8E","sha256":"3A:65:11:10:B9:58:2F:E1:BF:38:98:8D:2E:3E:A2:01:9D:C6:BE:69:5B:AD:F7:99:53:F9:AB:A6:6B:82:47:F1"}}},"request":{"raw":"GET /gtag/js?id=G-FZZM73M15D HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.unblockyoutube.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 28 Sep 2025 09:50:28 GMT\r\nexpires: Sun, 28 Sep 2025 09:50:28 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 138966\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":415369,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"b9af4d137c367b95bbd58fe9d5accdf6","sha1":"fbb9c8911f6777cfd27898ba0924de9b54984a6a","sha256":"9df8dfc4ea86031e8673abaaa0529b272086524027bb64a3a995a001af9923d1","sha512":"d69075ced3d70057c8d5e5eae66b4158a5660559c38897c4f93f3a326179c973fb31b2fca7ab83c30e7973ea0f7f613cb0393969418b70782388fd4fcbb2182d","ssdeep":"6144:qKspmM2/RepvYqkD1g1/9G1SvuVcHN+23WBr:qKymLQYly/LgT","tlshash":"10941bce73d674265396b478903f018ba5bb28a2f44cc899f189dce42d74a9a4137f7c","first_seen":"2025-09-28T09:50:55.455284Z","last_seen":"2025-09-28T09:50:55.455284Z","times_seen":1,"resource_available":true,"data":null}},"time_used":428,"timings":{"blocked":163,"dns":0,"connect":16,"send":0,"wait":58,"receive":42,"ssl":147},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-6595789CR3\u0026cx=c\u0026gtm=4e59n2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.unblockyoutube.co/?__cpo=1","date":"2025-09-28T09:50:28.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"DF:7E:8A:F9:1C:B5:DC:9E:90:E3:71:A7:92:85:2C:8F:2B:B4:42:8E","sha256":"3A:65:11:10:B9:58:2F:E1:BF:38:98:8D:2E:3E:A2:01:9D:C6:BE:69:5B:AD:F7:99:53:F9:AB:A6:6B:82:47:F1"}}},"request":{"raw":"GET /gtag/js?id=G-6595789CR3\u0026cx=c\u0026gtm=4e59n2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.unblockyoutube.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 28 Sep 2025 09:50:28 GMT\r\nexpires: Sun, 28 Sep 2025 09:50:28 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 128048\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":368004,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"0cf10258ff1e04ca94ea1ddbe17871b5","sha1":"59500c4a3413993bc12728d2d80912a4a49dcb54","sha256":"56fdfce3b0592d3eb25135a9e17c84456e3dd4bdd2d09a326e4997190391d69f","sha512":"3f9f67b450f7d8175acaa3e09bcca37c9dacc07eded614288722a7ee35e6d8c94313d8a2e47d0c77f8f8284d37ec787f712862e27d924d4ebc6a8a7299ccba9d","ssdeep":"6144:zZpmM2/RNpvYqkD1g1/9G1SvuVc/D3WBA:HmLRYly/Lv","tlshash":"f77419cd73c674265392a478907f018bb5bb6892f44cc899f186dce42e74a9a4237f7c","first_seen":"2025-09-28T09:50:55.458081Z","last_seen":"2025-09-28T09:50:55.458081Z","times_seen":1,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.unblockyoutube.co/favicon-host-apple.png","fqdn":"www.unblockyoutube.co","domain":"unblockyoutube.co","tld":"co"},"ip":{"addr":"104.21.2.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.unblockyoutube.co/?__cpo=1","date":"2025-09-28T09:50:28.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unblockyoutube.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 04:42:19 GMT","end":"Sat, 27 Dec 2025 05:40:48 GMT"},"fingerprint":{"sha1":"E8:ED:7F:8F:58:22:99:19:68:DA:E3:12:7F:EC:42:7F:B2:B6:3E:6C","sha256":"90:48:F9:5D:C2:72:56:21:41:E4:FD:2E:6B:68:30:05:E9:7C:1E:31:2F:C5:35:F8:B4:E9:67:CA:9D:40:FF:55"}}},"request":{"raw":"GET /favicon-host-apple.png HTTP/1.1\r\nHost: www.unblockyoutube.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.unblockyoutube.co/?__cpo=1\r\nCookie: _ga_HH9SMJM3KQ=GS2.1.s1759053028$o1$g0$t1759053028$j60$l0$h0; _ga=GA1.1.870404208.1759053028; _ga_6595789CR3=GS2.1.s1759053028$o1$g0$t1759053028$j60$l0$h0; _ga_FZZM73M15D=GS2.1.s1759053028$o1$g0$t1759053028$j60$l0$h0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 09:50:28 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nlast-modified: Sunday, 28-Sep-2025 09:45:28 UTC\r\naccess-control-allow-origin: https://www.unblockyoutube.co\r\nstrict-transport-security: max-age=0\r\nx-xss-protection: 1\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src https: data: 'unsafe-eval' 'unsafe-inline'; object-src https:; frame-src http: https: data:; upgrade-insecure-requests\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mi60WSMaPWwEQwYmRw1EkbiEEJxDgMonfJfG%2BhWuVFblz7YwNq8MIsH4it155aqFahP%2BOpQZjOEYY%2FUE8K3rBf%2BPrdMdWQSCsGN6KPLdOtVDq3Q%3D\"}]}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncf-ray: 98625633cf655693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":272464,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (51650)","md5":"05f2fa22efd6bbcb9a3b7c12522949b0","sha1":"a64c18abfb1c020976df826632a3336a2f6ad817","sha256":"dfa0767fbc231a82229a459bdeb53e082f2dbee57eb4758ff87df3a5b9eb6879","sha512":"b92ab63a67e04dce05f54bfb59bc3badd9b0aec213118c33bbfcf27ba92f1050151dc90882727baea7edf7798121e70698c735aba5f9c485ec0aff404f5cbaac","ssdeep":"1536:fzw/TdBDNHt16VBHcR6QD2QsmU/sJkn64WbAwOoOoWg6YK4kA6dgOVGGfebVw06b:fE8RMU/G4WbAwHWsbkWOZfhSbscG5cI","tlshash":"1344f762711931dfb10aea0575847f8a9714c042d903cfe6fbdb13f86e6a489a4f1b1b","first_seen":"2025-09-28T09:50:55.460954Z","last_seen":"2025-09-28T09:50:55.460954Z","times_seen":1,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"www.unblockyoutube.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unblockyoutube.co/","fqdn":"unblockyoutube.co","domain":"unblockyoutube.co","tld":"co"},"ip":{"addr":"104.21.2.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-28T09:50:27.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unblockyoutube.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 04:42:19 GMT","end":"Sat, 27 Dec 2025 05:40:48 GMT"},"fingerprint":{"sha1":"E8:ED:7F:8F:58:22:99:19:68:DA:E3:12:7F:EC:42:7F:B2:B6:3E:6C","sha256":"90:48:F9:5D:C2:72:56:21:41:E4:FD:2E:6B:68:30:05:E9:7C:1E:31:2F:C5:35:F8:B4:E9:67:CA:9D:40:FF:55"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: unblockyoutube.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 28 Sep 2025 09:50:27 GMT\r\nlocation: https://www.unblockyoutube.co/?__cpo=1\r\ncache-control: no-store, must-revalidate, no-cache, max-age=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sR5cbruXboAluDyywX3xd0u6Ad%2FAzo5EGVkWbXL26S5YNTdICzrNhljlX9CrwqVaGKCLwynB33gV1ii6TZDsG5NP2bTQUKRh9sbHXN2VSA%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9862562e0b3456b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":277153,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T21:31:01.969645Z","times_seen":13304312,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":12,"dns":0,"connect":2,"send":0,"wait":199,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"unblockyoutube.co","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-FZZM73M15D\u0026cx=c\u0026gtm=4e59n2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.unblockyoutube.co/?__cpo=1","date":"2025-09-28T09:50:28.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"DF:7E:8A:F9:1C:B5:DC:9E:90:E3:71:A7:92:85:2C:8F:2B:B4:42:8E","sha256":"3A:65:11:10:B9:58:2F:E1:BF:38:98:8D:2E:3E:A2:01:9D:C6:BE:69:5B:AD:F7:99:53:F9:AB:A6:6B:82:47:F1"}}},"request":{"raw":"GET /gtag/js?id=G-FZZM73M15D\u0026cx=c\u0026gtm=4e59n2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.unblockyoutube.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 28 Sep 2025 09:50:28 GMT\r\nexpires: Sun, 28 Sep 2025 09:50:28 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 138848\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":415388,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"e0b51bc193180fdcce14bb4fd169d071","sha1":"6d33cebb4e6f71e3c361404d0ed0ec858c599e33","sha256":"5cfa924d4d1d48241e78bf046f21bfe6eac7d9ca74978901b7d62ca454cba3c4","sha512":"387dbdcf8bd2f12d08ba646cb95c3df8bd149e6c0e8b9deeb388d540a6df7e85ee7ab38017ab64ee6d8be6d6134d7ec913f382e886d77f28a41db5b2477a4e61","ssdeep":"6144:qK5pmM2/RepvYqkD1g1/9G1SvuVcHN+23WBY:qKjmLQYly/Lgw","tlshash":"67941bce73d674265396b478903f018ba5bb28a2f44cc899f189dce42d74a9a4137f7c","first_seen":"2025-09-28T09:50:55.465967Z","last_seen":"2025-09-28T09:50:55.465967Z","times_seen":1,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}