{"report_id":"7c6878d3-1dff-42cf-88ca-10e92d69c132","version":6,"status":"done","tags":[],"date":"2025-11-03T03:54:20Z","url":{"schema":"http","addr":"www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","fqdn":"www.streamlinkttw.com","domain":"streamlinkttw.com","tld":"com"},"ip":{"addr":"104.21.33.244","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","fqdn":"www.streamlinkttw.com","domain":"streamlinkttw.com","tld":"com"},"title":"streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","dom":{"size":7952,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (500)","md5":"fa66f5d601edbc7f20305aab539b51f4","sha1":"f2ffa2cfde23fac7fc26e40583171408a46a00a5","sha256":"c6b2694154d08cfb379a2aa4721fbb5e5da7d89cdd452dc29ec01edb8f27242a","sha512":"0c1bd8a9158e627f33f771e2dfaa5a11cd6cbe6719dc78a35a6b463e3ec783f22cf1709ae39344c04282b0b3f696541e6ce71b6151ec1b1bb11f9658cc6e1f07","ssdeep":"96:rIPfVVutARPy48S8k45USz+45RaIkata89+RzydNAYt9+kex8KdRonI7B1g/M:rIlYeRPyfS8LUSZRa2b9wmtI98IT","tlshash":"2bf162a822fa0a2b819386ed38db7409b911d297d35c24e5bf6e44f10fc7d61980f19b","dom_hash":"domhashc59d69afccb598c37df8c553a509577e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":"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"}},"submit":{"url":{"schema":"http","addr":"www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","fqdn":"www.streamlinkttw.com","domain":"streamlinkttw.com","tld":"com"},"ip":{"addr":"104.21.33.244","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-08T03:54:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":13}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-02","alert":"Sinkholed","trigger":"a.labadena.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-02","alert":"Sinkholed","trigger":"x3os.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-02","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-02","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"cdn.atechp.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-02","alert":"Sinkholed","trigger":"cdn.tapioni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"ur.foretopheaved.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"ur.foretopheaved.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"js.capndr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-02","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"c558b1f93b.d6468dab54.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-02","alert":"Sinkholed","trigger":"js.wpadmngr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-02","alert":"Sinkholed","trigger":"na.nawpush.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"js.capndr.com","ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2021-08-30","domain_rank":156902,"first_seen":"2021-08-30T12:51:01Z","last_seen":"2025-10-27T23:52:18.028634Z","alert_count":2,"request_count":2,"received_data":94754,"sent_data":859,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"accuratephrase.com","ip":{"addr":"188.72.219.35","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-08-07","domain_rank":440697,"first_seen":"2024-08-17T02:04:15Z","last_seen":"2025-10-30T14:32:14.308834Z","alert_count":0,"request_count":1,"received_data":668,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ntvpforever.com","ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2021-11-18","domain_rank":18811,"first_seen":"2021-11-19T01:49:18Z","last_seen":"2025-10-27T08:06:03.822022Z","alert_count":0,"request_count":2,"received_data":681,"sent_data":1060,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"29369034-36946-ex.uncocleypercha.com","ip":{"addr":"88.208.22.3","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-08-28","domain_rank":0,"first_seen":"2025-11-03T03:54:23.021091Z","last_seen":"2025-11-03T03:54:23.021091Z","alert_count":0,"request_count":1,"received_data":2443,"sent_data":1416,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"js.wpadmngr.com","ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2021-06-02","domain_rank":77954,"first_seen":"2021-06-02T14:43:46Z","last_seen":"2025-10-27T17:16:36.466608Z","alert_count":1,"request_count":1,"received_data":149980,"sent_data":429,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"na.nawpush.com","ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2020-12-21","domain_rank":175362,"first_seen":"2020-12-23T08:18:12Z","last_seen":"2025-10-27T17:16:36.513215Z","alert_count":1,"request_count":1,"received_data":1620,"sent_data":499,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.tapioni.com","ip":{"addr":"172.66.163.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-05-27","domain_rank":177570,"first_seen":"2021-07-01T10:46:55Z","last_seen":"2025-10-27T09:39:10.672368Z","alert_count":7,"request_count":7,"received_data":853098,"sent_data":2942,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ur.foretopheaved.com","ip":{"addr":"172.241.53.110","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-10","domain_rank":0,"first_seen":"2025-08-13T14:30:31.596497Z","last_seen":"2025-10-27T06:02:50.285601Z","alert_count":2,"request_count":1,"received_data":1426,"sent_data":436,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bvtpk.com","ip":{"addr":"172.67.154.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-03-16","domain_rank":37068,"first_seen":"2025-05-21T11:34:02.786268Z","last_seen":"2025-10-29T01:47:24.902139Z","alert_count":0,"request_count":1,"received_data":111236,"sent_data":414,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"my.rtmark.net","ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-29","domain_rank":43911,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2025-11-03T01:32:26.393286Z","alert_count":0,"request_count":1,"received_data":844,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"a.labadena.com","ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"2020-01-21","domain_rank":266368,"first_seen":"2020-05-24T00:28:49Z","last_seen":"2025-10-29T07:29:04.744034Z","alert_count":8,"request_count":8,"received_data":6355,"sent_data":4958,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"qweqwr.lixstreaming.com","ip":{"addr":"47.252.40.106","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"domain_registered":"2025-04-21","domain_rank":0,"first_seen":"2025-08-11T04:39:43.986796Z","last_seen":"2025-11-02T18:06:35.814186Z","alert_count":0,"request_count":4,"received_data":1126,"sent_data":2470,"comment":"","tags":null,"fingerprints":null},{"fqdn":"x3os.com","ip":{"addr":"139.45.196.64","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2021-03-18","domain_rank":19468,"first_seen":"2025-04-24T02:39:31.647355Z","last_seen":"2025-10-30T18:05:11.310638Z","alert_count":1,"request_count":1,"received_data":836,"sent_data":610,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"nereserv.com","ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2020-12-21","domain_rank":17097,"first_seen":"2020-12-21T11:07:56Z","last_seen":"2025-10-27T08:06:03.809049Z","alert_count":4,"request_count":2,"received_data":644,"sent_data":1146,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"bereave.onelinevideo.com","ip":{"addr":"47.253.93.134","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"domain_registered":"2025-04-21","domain_rank":486265,"first_seen":"2025-06-06T00:49:08.421363Z","last_seen":"2025-10-31T08:54:13.052202Z","alert_count":0,"request_count":2,"received_data":492,"sent_data":1074,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-11-02T22:13:40.433865Z","alert_count":0,"request_count":1,"received_data":428257,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.lixstreamingcaio.com","ip":{"addr":"172.67.200.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-29","domain_rank":492115,"first_seen":"2025-06-01T10:17:55.903035Z","last_seen":"2025-10-31T08:54:12.656432Z","alert_count":0,"request_count":7,"received_data":11239,"sent_data":3967,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"lz.faenasturbit.com","ip":{"addr":"23.109.253.230","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-06-20","domain_rank":0,"first_seen":"2025-09-26T02:41:00.932867Z","last_seen":"2025-10-30T14:32:15.141895Z","alert_count":0,"request_count":1,"received_data":1492,"sent_data":437,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"c558b1f93b.d6468dab54.com","ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2025-10-04","domain_rank":0,"first_seen":"2025-11-03T00:56:19.900604Z","last_seen":"2025-11-03T00:56:19.900604Z","alert_count":1,"request_count":1,"received_data":345,"sent_data":853,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"enrtx.com","ip":{"addr":"94.130.197.239","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2024-10-07","domain_rank":18023,"first_seen":"2024-11-04T09:19:58Z","last_seen":"2025-10-27T09:13:28.338121Z","alert_count":0,"request_count":1,"received_data":9706,"sent_data":506,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.16.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.atechp.space","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2025-10-23","domain_rank":0,"first_seen":"2025-10-31T08:54:12.17233Z","last_seen":"2025-10-31T08:54:12.17233Z","alert_count":1,"request_count":1,"received_data":7258,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"ads.google.com","ip":{"addr":"142.250.178.46","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":2062,"first_seen":"2013-08-25T13:03:13Z","last_seen":"2025-10-28T23:47:23.526706Z","alert_count":0,"request_count":1,"received_data":208,"sent_data":409,"comment":"","tags":null,"fingerprints":null},{"fqdn":"storage.multstorage.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2023-09-22","domain_rank":101055,"first_seen":"2023-09-22T12:56:00Z","last_seen":"2025-10-27T08:06:03.662099Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":545,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-11-02T22:15:46.374949Z","alert_count":0,"request_count":1,"received_data":18929,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fp.metricswpsh.com","ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2021-10-29","domain_rank":154722,"first_seen":"2022-04-22T11:20:32Z","last_seen":"2025-10-27T08:06:03.692147Z","alert_count":2,"request_count":2,"received_data":831,"sent_data":1084,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"accounts.google.com","ip":{"addr":"173.194.221.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":103,"first_seen":"2012-05-23T06:57:57Z","last_seen":"2025-11-02T22:34:17.470238Z","alert_count":0,"request_count":3,"received_data":6929,"sent_data":1782,"comment":"","tags":null,"fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]}]},{"fqdn":"sm.videqqwuieyui.com","ip":{"addr":"34.126.238.65","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2025-08-11","domain_rank":0,"first_seen":"2025-10-25T09:37:06.805519Z","last_seen":"2025-11-01T18:19:36.151298Z","alert_count":0,"request_count":1,"received_data":166345,"sent_data":537,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"36946.phidonatome.com","ip":{"addr":"88.208.22.3","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-08-24","domain_rank":0,"first_seen":"2025-10-25T22:33:45.251193Z","last_seen":"2025-11-02T10:11:24.579715Z","alert_count":0,"request_count":1,"received_data":32111,"sent_data":427,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.streamlinkttw.com","ip":{"addr":"172.67.194.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-26","domain_rank":0,"first_seen":"2025-10-27T19:17:53.494897Z","last_seen":"2025-10-27T19:17:53.494897Z","alert_count":0,"request_count":12,"received_data":3143011,"sent_data":6725,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"lz.faenasturbit.com/sSB8ld39qI9j8pgT/130607","fqdn":"lz.faenasturbit.com","domain":"faenasturbit.com","tld":"com"},"ip":{"addr":"23.109.253.230","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7a2939527fd9e68723da600e96d76bd","sha1":"a9e717b6364d2895ee0a716050db32ca0ef1bb42","sha256":"d810f5146f4cd1517512a6e31946e764a73c58fb01427aae88d42cc2ae28718a","sha512":"e6956ec633c76eb3ebc408528f950b81373238cd1d5b9fff5ddd97089ea14a1ff5934f23769bac5d93cc4cdb6a1fbc4ce69baebfb940a55d8a7a89caccaf92b5","ssdeep":"","tlshash":"ec300000003000000000000000000000000c0000000000000000000000000c00000000","size":5,"data":"","first_seen":"2023-03-07T01:14:39Z","last_seen":"2026-04-19T01:40:25.792285Z","times_seen":13960,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/adgpt.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"172.66.163.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"015dff1be39d3ec37ce390f017ff6b9a","sha1":"7b397ec97bf8eb426b25a427c20197da7a63647a","sha256":"584cd4f6e3ebe9034d90a8494dcba42d20fae20c542f442d6d8ab585610fadd9","sha512":"4d523d91a0b053487640e0b6f5eca01bdfa7d4d878f2cbe2333ceb89b67519b7667f35f66567aa16fe60fd4696820113f738263731742bffb9f986bb5530757d","ssdeep":"","tlshash":"a441f2ee25a0fda0079a714c602b580ef1bc35e0e3ace9c69fb984b47d3d6445111aed","size":2367,"data":"","first_seen":"2025-11-01T11:36:13.444431Z","last_seen":"2025-11-10T06:49:17.603835Z","times_seen":108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","fqdn":"www.streamlinkttw.com","domain":"streamlinkttw.com","tld":"com"},"ip":{"addr":"172.67.194.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"20c32381f2958704dbda31cb9899e749","sha1":"0d1f76bf765e0b54db0c3b4c5e52a593c00122d2","sha256":"289167e4f6166260213381fc3fcdabb568382bd426fb4774a2bd57fc4469cbef","sha512":"a0f4ae95a388456981c5f0b99af0f6fea7f1bd845a413b3ab910ba2c7dac1e9f4d3eec0f542a28a8034ea6bb849a466ad2d22beb0abdf5f0955400a37d99e7dc","ssdeep":"","tlshash":"b4c022b465a89030001800a9307bc6ad3830300865927084889d781c9a70ed30452c64","size":188,"data":"","first_seen":"2025-10-30T14:32:25.979508Z","last_seen":"2025-11-19T23:14:59.414178Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","fqdn":"www.streamlinkttw.com","domain":"streamlinkttw.com","tld":"com"},"ip":{"addr":"172.67.194.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c4b39905819a02943aab42aaa3ace049","sha1":"397c25ba91f8946c07fcd15b85dde33073d13cc0","sha256":"56b98849a8c00948afc8281671da6d0955145a28b9cab57cb3f3cb67803dc520","sha512":"45185272dd93386022e633bba5581ebd898db3eae1dac640eaab69d546c0f1037b10c423e2b94e8383cf196255c6fa96b4374e9ecad48cd30475491950b1e7c9","ssdeep":"","tlshash":"10c08ca82aab4c7110f73a428fbf21057016a3132090cd313e0eb6848f34e2bda94808","size":190,"data":"","first_seen":"2025-08-29T08:56:06.9123Z","last_seen":"2026-02-02T17:50:52.010918Z","times_seen":319,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-FZ6E2FXG92","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"14acbdd144a7f285d9e20b87bcfa7dc7","sha1":"89c8692ddb7ac9a9bbebb56f93764070d3bd7dae","sha256":"5b5a4701a02e3fa03f93c62bc76e053487a3a7fb3737e57ed9e475d34f727efd","sha512":"2ce8f381fb12f7e8b154244af5e1555d7bbbeb4d328858d3c40d1dbb8be88b236bbb3ddbf989358b90a1faa2963baf9f7ddf72694d1e9d986d389ac06cf08563","ssdeep":"6144:X4Bm5HIy2n8fud75KGq6A0RI6TLiYYg/FOY9ftLHAJpaAmn/xS2GqH:XWiHITiud75KGq6hvLiYlAJ6D","tlshash":"e69419ce73c670269396f078503f118ba47b29a2b45cc896f189cce42d74a9a4277f7c","size":427653,"data":"","first_seen":"2025-11-03T03:54:29.502285Z","last_seen":"2025-11-03T03:56:15.089678Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.streamlinkttw.com/assets/vendor-chunks-CgHQ0NgR-1761876578022.js","fqdn":"www.streamlinkttw.com","domain":"streamlinkttw.com","tld":"com"},"ip":{"addr":"172.67.194.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8898d7931d9c840ef747b6707c8ba138","sha1":"683e4eb9ac2e703943a19b19778f4598cea97f4d","sha256":"a6b40cbde6c5d3cf597006e29703e1b7f056b6b3055753d979235056c204a704","sha512":"8d78d0bbf5821f32fe7b023b27d13d476b00a5675e34c8cc26b0b0b7cc0c3fc8eb6368d896a4d8bf91a9ef6a1e63a01add3260e919247ef4a6d1543a5e1226ec","ssdeep":"24576:TLgcTD3IaDerXpsBbIZ58O6gJ2dSG6MIIsPGiUcWFYMKduqCw:TscTD3IaDerXpsBbIZ58O6gq6MIIsPGg","tlshash":"04454cd972a67062879361a4503f1207723a7d16248cc05cf63bf9ea2eb8d09647bf7d","size":1269720,"data":"","first_seen":"2025-10-22T18:26:11.434592Z","last_seen":"2025-11-03T03:56:15.096326Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/postscribe/2.0.8/postscribe.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"12dd498bf90c536803c2aad708b66c2b","sha1":"5f9363d39a405d1c94328cf2303ff4a05c0ad163","sha256":"c4e20f53f5ef0ed44b783437aa3f4638a9a56cc4aa29ae83ed9212eb2807052a","sha512":"ec593a501ebf74c092e564a1aaf0b477d3da6813c9a88f29d0d2a0db8143bdf19718ba4e6b13f64295b077ca5cb9c13460c30f9f2f35982a82597b22f79ffdd1","ssdeep":"192:l3GySZoj5oOg8pu564aEzn5nVMnyk3sBakk3cx7x0IlQV0Hf1b5SwU+ahpfex/W9:lWytjU64auV0ISjyW5RAe","tlshash":"6f82b38cb295f0b553d710b5403f910fe2366928654ec4d8f288d5ea2c7899d663bf3d","size":17908,"data":"","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-04-18T22:28:19.312374Z","times_seen":7104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","fqdn":"www.streamlinkttw.com","domain":"streamlinkttw.com","tld":"com"},"ip":{"addr":"172.67.194.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"21c18bdf0b85cac648181b0fda8c2f35","sha1":"ac5e740cd3011e645d4d92f117699d743b819acb","sha256":"264638badeb5ca45bdabf7ea2e8407322bd8e210d07745d0fcee6b3a5aff3b69","sha512":"7ed4d29f1178a5f105a4ebd39f646fdbe9cfb5e467c6e271661e2b8a8d3a1bb97afaaf988136ec3531a181b422271ae43b0c99178447974fb9c4d602b153d143","ssdeep":"","tlshash":"33e06f9a0c025060865b607b833d8b0cb022a1038435d040b4ace04f3f20fca9c2ff78","size":383,"data":"","first_seen":"2025-10-30T14:32:25.97671Z","last_seen":"2025-11-16T06:53:30.779829Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/asg_embed.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"172.66.163.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4148a431a904c15a718bd575d8f2df4","sha1":"4b3610268643c3c7926a86bdbf8f8c379d686685","sha256":"60d30f1b1f15f68897e1fcfe376e9546eced233f4ebccfa87d2fa2c07d2b8da8","sha512":"ff421c50418c21c04607166c697609f4e2abcb9fe134a1084eedbbe728a1792960002c299d881f4b78455fdd29c368ec54f3f21d028de2cdf6c26eba152bfdf9","ssdeep":"6144:wOdFsYyeZUc5e8ypGgNAiUV5dPXAEcooCEfEIGR+7vCEklM71m2v7YPn+zCWuGow:NyMUcAfJZ","tlshash":"3534c889b6c1b0f402e3a1b4052f551af17bb944744ec5c1f729d9c1aeb9a0e9a27f3c","size":245328,"data":"","first_seen":"2025-11-01T11:36:13.471579Z","last_seen":"2025-11-10T06:49:17.648661Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ur.foretopheaved.com/r4xjjmZUr51mvyQ/RNklR","fqdn":"ur.foretopheaved.com","domain":"foretopheaved.com","tld":"com"},"ip":{"addr":"172.241.53.110","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"848667c49f5d3aef59cd65ed276cd7ae","sha1":"bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763","sha256":"cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8","sha512":"4248ad0e684224ba8503b1e73517aae6ffe4431cd16b7633d2ccbf4b96f845e318dbee175d19cd4676ca37353f53add2231ed167ad6c4aa0d9fe185f7359238c","ssdeep":"","tlshash":"f23000000000000000cc00000000000000000000c000000000000000000000003c0000","size":5,"data":"","first_seen":"2025-04-24T10:17:49.831301Z","last_seen":"2026-04-19T02:41:50.612518Z","times_seen":15618,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.streamlinkttw.com/assets/main-tpBAxgc7-1761876578022.js","fqdn":"www.streamlinkttw.com","domain":"streamlinkttw.com","tld":"com"},"ip":{"addr":"172.67.194.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9732921fecae56e195d4183252df3d90","sha1":"fb087d139de1d4a467bdecb4051138d47f371144","sha256":"22a73609dfb698b0f9149a0578dfb141a3392de31783ea091bd553ccdd84322c","sha512":"789be83fd00caefb2b67f1d654ec163ee991633881b73959e08e4c2538a334821527a3292f6824192c6ca30d2b44f529d2cca37c4a142dd46db4f92416f137c8","ssdeep":"1536:0ZmjlhTPFrZ0nCfjxGAoasHq8Ff9lRjgmbggq/qUF1FsLOFSR3q4elaWQV1SW:0Ijl9FrZ0mU1HmmfkA3q4elkeW","tlshash":"06a37eeda02d8f3cf86109c5783ea5347429366bf918c8a1f0bd3c015b94dc5a5aa7de","size":101014,"data":"","first_seen":"2025-10-31T08:54:22.77886Z","last_seen":"2025-11-03T03:56:15.069301Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bvtpk.com/tag.min.js","fqdn":"bvtpk.com","domain":"bvtpk.com","tld":"com"},"ip":{"addr":"172.67.154.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e24b4f4813f3b1f187e124e1c08f6ff","sha1":"dac5a5ff8bf288a9b86ee4ae2ec7d70e6b6f87f7","sha256":"599b25732e5bc3f3d935133aa9d48a51a1e6b2210ff506084eec48e821d788f0","sha512":"08bc95dfe879b3fc600f1478c1e509109e837a29e48343938e1ff3ce4ff18925f3b37e97c9f4e6611b485c0c6f0e17d71c56f388cc68e770d395899a2038fd65","ssdeep":"1536:40cn7KYaJnZkNaD4NLaZkqCOsyW8Az0SYAKQ4+DIVV7BUK+g:DcwJZkNa8mkqCOK0SYTz39UKz","tlshash":"06b32bd62269241612be8034446bdd1eb5aecd8100cdcdb8e0e6bc762d78b16d3f7bd9","size":110046,"data":"","first_seen":"2025-11-01T18:33:38.67089Z","last_seen":"2025-11-03T10:30:31.637443Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"36946.phidonatome.com/4/js/260941","fqdn":"36946.phidonatome.com","domain":"phidonatome.com","tld":"com"},"ip":{"addr":"88.208.22.3","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"25360da07208d4d4da51640e61fe6009","sha1":"febb214d17ab863112aacad4e9e2af672bc85ba9","sha256":"a242b00249274117201ad44010f86a813d2326255c152b5250f40c8d70e30b69","sha512":"ad83e8561d3e8c5b76ba16efd75c9b8a1299cc2ec1d1390ff4d24e70521723e0420988c5a00d1afccba9bd2b8839a2ef2b29a6cc2f84d9fa9889e5c11289a89f","ssdeep":"768:Hkmbr/4nqZVnyTPxVC2/R3hMwsZwJmvnDY87bBZzBPZvzXRb7iGqj:ZyxnufF3qj","tlshash":"8ee22a95f996703043f7187a403f511af3361a94789e8460da2b99c22c66f8b837bf7d","size":31409,"data":"","first_seen":"2025-11-03T03:54:29.497893Z","last_seen":"2025-11-03T03:54:29.497893Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c90d1ef9543d7d56a6869ed4be6f7847","sha1":"6ff159593c9698ad541e6d3c149847b110c3deb6","sha256":"e7e748a324a548da8ce1ccc081a1339bf22142939106758ba1803fabafc42b2e","sha512":"8ac7ce5a0c7bc4daabb49051583a693f53e9d884f8deb32158c604abe682bfd2969dc1ac4e6ea8c50c0e63684ddd7424770fa0d7fbaf42c113e8118e981f0dbc","ssdeep":"1536:Z2c1pgoXEptQy9RixdpOkxQKf7YbK2Ec+tskajUOPVKIZujAB5R1pKKfVf3dnCjH:eRizplOK8mvDtsjbnujATLQ3+da","tlshash":"64e33ac9b2d2b47407e75099d43f1206f33a1a16b80c9058f6a6e9c17878ddb9237f7a","size":149592,"data":"","first_seen":"2025-10-20T14:02:56.309645Z","last_seen":"2025-11-06T12:09:31.49625Z","times_seen":392,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.capndr.com/popunder-admanager/build.m.js","fqdn":"js.capndr.com","domain":"capndr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe23e1a8a696b659233f77fcd18d2979","sha1":"f3a4c47079ff0d14e04ac8ee63a136b40eeccb96","sha256":"8768abbe325b1118891d7d3fa6f498b1fce4e919a50b4e23abfcebdc555b536c","sha512":"3393d54030ca57de50021b86b94b6007cd5eab10075a59dce8f054e38906afe0d463e3fe2c06c38695a5792190689ed3546549dce3c32018e972bf09eafdc838","ssdeep":"768:ubVWcprgLsdOKoT++mtPNVM6lHAclc8JnU2ePJ3XS0tcq3TO9s9sUG2FIU4dkUxu:WYmOKEycD8JgfhkjkdZL","tlshash":"609318cdb7d2707042a7a4ba902f051ab33f2d097849442cb969d9d138add4fa327f79","size":93967,"data":"","first_seen":"2025-10-31T09:03:57.002853Z","last_seen":"2025-11-06T12:09:31.385543Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/ip-push.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"172.66.163.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e82a15e614f3111f8e8e00bda2bc3e6","sha1":"9b84f3d2aba8d8c59b174b2fbb5e6735f32891a9","sha256":"3532d1a8af90a5e5d6c3de650d9873b05ebf2dc6730d4b921f5545dc5e38da1c","sha512":"5eec13db4cf1fa29362fc902a69058db6ae0028c7407525f1ceaf8410b59bb521c60acd6a86e3da87640bc27ffe7b25eaaa9eb9ebfd832b5c325e82f8a34579d","ssdeep":"1536:gWP2K5GnQEjPV3WzBJbr37jkl07cOZUgi7qRa16NP4M8wxQ48C:/P2K5GnFV3WzBJTuOZTT","tlshash":"76d3628cbac1b5a106a37074023f540af2b73a54748fc8c0fa69d5e06e7e94f6167e6d","size":134654,"data":"","first_seen":"2025-11-01T11:36:13.452182Z","last_seen":"2025-11-09T19:57:12.212817Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/asg-iframe.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"172.66.163.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"120812baeb20fe5dbd662dcdb1fb7746","sha1":"37b61a554b2e9dc0a48581836c84ab2521fea021","sha256":"87077b6acbbac5380f45864c2266025b022106fe30cb2646059434e301f59629","sha512":"b046efa59e036f6b1593414756f663a57715b269297c5c38618552d9476077071bd7600c027723e02a4b05a6962352447b62e437a9327a7366cfd2c464314ee1","ssdeep":"1536:gEHNF1uit1UkmBZmmZEmaRuSeNMJ+CH3G457fH:lHNF1uyDmBZm0jRe8CW45jH","tlshash":"daa3928cf6c2b05607e37574422f600af27b6a54b45f8481e62ad5d07dba94fa03bf2d","size":105854,"data":"","first_seen":"2025-11-01T11:36:13.482133Z","last_seen":"2025-11-09T16:02:25.88711Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.labadena.com/api/spots/494334?s1=1923286547889786882\u0026fs1=1\u0026i=1\u0026url=https%3A%2F%2Fwww.streamlinkttw.com%2Fs%2FSoJiEP5A%3Flv1%3Ddoodbd.com\u0026sid=542eeb91-a3e0-4769-a553-035d2839afe7","fqdn":"a.labadena.com","domain":"labadena.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ecfe3c43a264472baced2fcf65f619a","sha1":"94804e23b47b43f4aa4728087233e19e8e0457d1","sha256":"081a27c935080bc371400dfa08f67b2bcd2b64eefd0f7273f18f6ccc86081ffb","sha512":"a88237e56f59c34b381ed0d2d8de05da4e0617c1e6ccdfd46d155ebfa1334d9e728a950dabc10384d38b0e7d3bdb2ea831f242ff6d99441d25c1f6d0b79dd2fc","ssdeep":"","tlshash":"97518684d6f86216f62710b0dd7acb9f555ea14193198075eff726aac3cc64c06712ce","size":2572,"data":"","first_seen":"2025-11-03T03:54:29.470817Z","last_seen":"2025-11-03T03:54:29.470817Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/vast-im.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"172.66.163.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9b6b66b925f17ebaa44fd3b1dd1ed5b","sha1":"37cf359bd3dbe89d61121853f032252db72f83b7","sha256":"f2b87c9be987a4b3a8ddb910627af7025442309e38e0dc1f464227dff22c1d06","sha512":"83a8b52a9b740c31108ca7aaf766be6c282e53634b9cd6d5cf4bdc195701fb4a8f2551fc520f0e012c361b5e9b845651541353a3c8560029a7d80650541698c6","ssdeep":"6144:IdF7uRr+IF37fshy/sVjCdkbSce8t1ufL:Ou1+IF37fshy/AjCdkOj8t1ufL","tlshash":"2464a4c9b6c6b0a543e7b1b8403f520ef276a945b44ac9c0e266e9d1ac7c94e5037f7c","size":315912,"data":"","first_seen":"2025-11-01T10:16:39.235138Z","last_seen":"2025-11-10T07:18:44.854193Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"javascriptURL","is_inline":false,"md5":"68934a3e9455fa72420237eb05902327","sha1":"7cb6efb98ba5972a9b5090dc2e517fe14d12cb04","sha256":"fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa","sha512":"719fa67eef49c4b2a2b83f0c62bddd88c106aaadb7e21ae057c8802b700e36f81fe3f144812d8b05d66dc663d908b25645e153262cf6d457aa34e684af9e328d","ssdeep":"","tlshash":"aa3000000000000c000000000000000000000000000000000000000030000000000000","size":5,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-19T02:31:47.225707Z","times_seen":68594,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"a.labadena.com/api/spots/494334?s1=1923286547889786882\u0026fs1=1\u0026i=1\u0026url=https%3A%2F%2Fwww.streamlinkttw.com%2Fs%2FSoJiEP5A%3Flv1%3Ddoodbd.com\u0026sid=542eeb91-a3e0-4769-a553-035d2839afe7","fqdn":"a.labadena.com","domain":"labadena.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:02.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.labadena.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 23:28:42 GMT","end":"Sun, 07 Dec 2025 23:28:41 GMT"},"fingerprint":{"sha1":"75:0C:2C:D1:88:D9:87:78:0A:96:30:7B:67:42:16:4C:38:3E:51:6C","sha256":"2D:C0:E0:B0:44:25:E2:6F:08:EA:D5:19:60:6E:39:05:4F:0A:AC:38:FA:D8:9F:D6:B8:A1:C4:6F:3B:67:51:37"}}},"request":{"raw":"GET /api/spots/494334?s1=1923286547889786882\u0026fs1=1\u0026i=1\u0026url=https%3A%2F%2Fwww.streamlinkttw.com%2Fs%2FSoJiEP5A%3Flv1%3Ddoodbd.com\u0026sid=542eeb91-a3e0-4769-a553-035d2839afe7 HTTP/1.1\r\nHost: a.labadena.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/\r\nCookie: nauid=K3KRUWAvBTZccZ7U0aVG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 03:54:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2572,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2071)","md5":"8ecfe3c43a264472baced2fcf65f619a","sha1":"94804e23b47b43f4aa4728087233e19e8e0457d1","sha256":"081a27c935080bc371400dfa08f67b2bcd2b64eefd0f7273f18f6ccc86081ffb","sha512":"a88237e56f59c34b381ed0d2d8de05da4e0617c1e6ccdfd46d155ebfa1334d9e728a950dabc10384d38b0e7d3bdb2ea831f242ff6d99441d25c1f6d0b79dd2fc","ssdeep":"","tlshash":"97518684d6f86216f62710b0dd7acb9f555ea14193198075eff726aac3cc64c06712ce","first_seen":"2025-11-03T03:54:29.470817Z","last_seen":"2025-11-03T03:54:29.470817Z","times_seen":1,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-02","alert":"Sinkholed","trigger":"a.labadena.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qweqwr.lixstreaming.com/api/wood?mirror=88b37cf56c614021897c4cf1d185ebc2","fqdn":"qweqwr.lixstreaming.com","domain":"lixstreaming.com","tld":"com"},"ip":{"addr":"47.252.40.106","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:03.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"qweqwr.lixstreaming.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BA:A3:0B:A1:14:DD:5E:F0:4E:74:8F:87:B8:38:0F:ED:57:EF:D0:81","sha256":"A1:9C:AF:B4:73:B5:83:CA:D2:9A:D3:EA:DA:FE:13:CA:A0:3E:F9:8E:97:11:13:9A:31:68:13:5C:ED:D0:EF:E6"}}},"request":{"raw":"OPTIONS /api/wood?mirror=88b37cf56c614021897c4cf1d185ebc2 HTTP/1.1\r\nHost: qweqwr.lixstreaming.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: coffee,content-type,pizza,text,truth\r\nReferer: https://www.streamlinkttw.com/\r\nOrigin: https://www.streamlinkttw.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 03 Nov 2025 03:54:03 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type,truth,feature,pizza,text,senior,coffee\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T02:23:19.368905Z","times_seen":13918819,"resource_available":true,"data":null}},"time_used":885,"timings":{"blocked":393,"dns":71,"connect":103,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x3os.com/5/10111173/?oo=1\u0026js_build=iclick-v1.1607.0-rc\u0026userId=080276feeea04d4eef1b9a38d7ef91b4\u0026dmn=bvtpk.com\u0026tt=2\u0026ix=0","fqdn":"x3os.com","domain":"x3os.com","tld":"com"},"ip":{"addr":"139.45.196.64","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:04.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"x3os.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Sep 2025 05:23:11 GMT","end":"Sun, 28 Dec 2025 05:23:10 GMT"},"fingerprint":{"sha1":"4C:6E:3B:CA:38:7D:B2:00:EF:B4:4F:88:9B:3E:29:55:91:FE:AF:0E","sha256":"D2:5C:87:BC:0F:B8:02:33:A0:8D:AD:46:BB:C5:BC:CF:EF:1B:AA:A6:7C:F2:DE:D3:6F:DC:A2:89:AC:97:C0:87"}}},"request":{"raw":"POST /5/10111173/?oo=1\u0026js_build=iclick-v1.1607.0-rc\u0026userId=080276feeea04d4eef1b9a38d7ef91b4\u0026dmn=bvtpk.com\u0026tt=2\u0026ix=0 HTTP/1.1\r\nHost: x3os.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2643\r\nOrigin: https://www.streamlinkttw.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 03:54:04 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://www.streamlinkttw.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\npragma: no-cache, no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T02:23:19.368905Z","times_seen":13918819,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":102,"dns":11,"connect":26,"send":0,"wait":29,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-02","alert":"Sinkholed","trigger":"x3os.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nereserv.com/in/dip?event_id=d788cb35-e55e-4d32-992c-74d85bfd274b\u0026subid=1450210302\u0026spot_id=1457063\u0026created_at=2025-11-03\u0026timezone=0\u0026ver=1.168.30","fqdn":"nereserv.com","domain":"nereserv.com","tld":"com"},"ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:04.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 02:00:40 GMT","end":"Sat, 24 Jan 2026 02:00:39 GMT"},"fingerprint":{"sha1":"2B:72:A9:3F:14:00:92:B9:05:AC:BC:3B:22:CB:D9:87:80:23:C8:3D","sha256":"60:5B:BA:7E:5F:7A:B1:E0:55:4D:4C:29:EA:C7:21:68:37:AF:03:5B:A7:3D:15:98:F1:65:96:AB:4A:3E:17:3B"}}},"request":{"raw":"GET /in/dip?event_id=d788cb35-e55e-4d32-992c-74d85bfd274b\u0026subid=1450210302\u0026spot_id=1457063\u0026created_at=2025-11-03\u0026timezone=0\u0026ver=1.168.30 HTTP/1.1\r\nHost: nereserv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.streamlinkttw.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Mon, 03 Nov 2025 03:54:04 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T02:23:19.368905Z","times_seen":13918819,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-02","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-02","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.lixstreamingcaio.com/v1/user/gray/rules/check","fqdn":"api.lixstreamingcaio.com","domain":"lixstreamingcaio.com","tld":"com"},"ip":{"addr":"172.67.200.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:03.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lixstreamingcaio.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 09:33:43 GMT","end":"Wed, 21 Jan 2026 10:32:28 GMT"},"fingerprint":{"sha1":"4B:56:A4:B4:FD:CC:C3:10:87:7C:9D:AF:AA:DD:15:76:A6:A6:24:82","sha256":"47:9F:6B:6B:87:90:3E:BD:D7:80:43:FF:15:2C:13:C1:55:79:08:46:0A:9F:49:69:9F:4A:06:B8:50:C5:B3:3A"}}},"request":{"raw":"POST /v1/user/gray/rules/check HTTP/1.1\r\nHost: api.lixstreamingcaio.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 259\r\nOrigin: https://www.streamlinkttw.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 03 Nov 2025 03:54:03 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ocds%2B4w5l9qkoKt8PZH2PtO9EJGkMU8C238M%2Fc5Mp1BnsC04lmsZwqg%2ByFJiCI%2Bzqhc56X1ddPRua2EBF%2BYsUjle8InJnPbNGIuUn2fhMIJ0VwQFkHAeGg%3D%3D\"}]}\r\ncontent-encoding: br\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.streamlinkttw.com\r\naccess-control-expose-headers: X-Error-Code\r\naccess-control-allow-credentials: true\r\nx-xbox-platform: streaming\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9988ed9ada895ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":281,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a3ccdf4f5cc8da7a6c2caa521331e46a","sha1":"dfe98614ee3b455bca14db2eef682f1338580a8a","sha256":"017e430f25345405c1b0bfeb89dce3a8f2be65237a718e8ad7563b2e977d9b5f","sha512":"afacf3e0a96434042d8417442f5a16ed1642ffb0e964552926b6ef374bfd2cd4e2a270fd66ee6fa906a67a47e750c72731cbcae88c0189c0a51c7a0f3bbe1b24","ssdeep":"","tlshash":"34d05e7d297154ad14985152d651e9c9f78058aabf58b750c423c11f34eb0c8723d2b7","first_seen":"2025-10-16T16:52:07.242118Z","last_seen":"2025-11-20T22:31:42.767036Z","times_seen":72,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.streamlinkttw.com/assets/icon-L3kzdSYP-1761876578022.png","fqdn":"www.streamlinkttw.com","domain":"streamlinkttw.com","tld":"com"},"ip":{"addr":"172.67.194.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:01.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"streamlinkttw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 06:04:57 GMT","end":"Thu, 25 Dec 2025 07:02:21 GMT"},"fingerprint":{"sha1":"53:BB:BB:1F:BB:55:14:9A:0A:B7:E3:FB:B4:39:A8:68:66:94:99:0C","sha256":"3E:EB:CF:6B:A8:E0:86:DD:A6:7D:62:C2:87:34:84:1D:45:DF:9A:A2:E7:33:EF:C2:45:2F:18:8B:62:AD:33:4E"}}},"request":{"raw":"GET /assets/icon-L3kzdSYP-1761876578022.png HTTP/1.1\r\nHost: www.streamlinkttw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com\r\nCookie: _ga_FZ6E2FXG92=GS2.1.s1762142039$o1$g0$t1762142039$j60$l0$h0; _ga=GA1.1.768762269.1762142040\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 03 Nov 2025 03:54:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 12350\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k4z8Nl6RR3rMG%2Bu%2FM6Bd%2BtFn%2Bm18%2BW6PVLWjgxZgpWZP%2Fcb2MCBA%2FsfMQ3ccwga5Z3B8bkze51ujagCOifojhURd%2BjQevy%2Fm43QxODDXsBhhQ4FNWA%3D%3D\"}]}\r\nserver: cloudflare\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\ncloudservicediscount: CDN\r\nx-amz-request-id: 0000019A38080B68B1932EDA54FDB8EE\r\netag: \"37e3e456df677e380ab34f5e0043db7d\"\r\nlast-modified: Fri, 31 Oct 2025 02:09:48 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nx-ccdn-expires: 2591965\r\nvia: EA-SGP-EDGE7-CACHE5[2],EA-SGP-EDGE7-CACHE4[0,TCP_HIT,1],EA-SGP-GLOBAL1-CACHE15[2],EA-SGP-GLOBAL1-CACHE9[0,TCP_HIT,1]\r\nx-hcs-proxy-type: 1\r\nx-ccdn-cachettl: 2592000\r\nx-ccdn-req-id-46b1: 6583fb1257decf6001c939544b63d054\r\nage: 0\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9988ed8dcf82120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":12350,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGB, non-interlaced","md5":"37e3e456df677e380ab34f5e0043db7d","sha1":"64ad1b4cca68328e5d987582f76ae59ea79a2d63","sha256":"0d8d6d6357c54934d059569ec6bd54e03b1f0ebad04ace58f8af20a88c2ea8a1","sha512":"7850cd6a4b9fe0cf8b0f1c07851fa283d4929e8d03e2c860470d89b621fbc3147a83812facd7f6b51b2fcc1bafb3cafabae9694077b9497bf7570c83983a273e","ssdeep":"192:whxxxL8uzJHxhnGn6dm0rrkV5Hm1qjDbPU6tbNi/esZtkcJ7Pzx0Xqh8:whxxxlRxhI6Zy5G1uDA+bNetvhVc08","tlshash":"dc429df7d9287f5827e17b23bad19a22f0ed40ae92056004f5da45b757393c8c046e93","first_seen":"2025-06-18T09:39:56.944198Z","last_seen":"2026-02-27T13:27:16.34167Z","times_seen":398,"resource_available":false,"data":null}},"time_used":463,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":448,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.atechp.space/assets/js/pp.min.js","fqdn":"cdn.atechp.space","domain":"atechp.space","tld":"space"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:53:59.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.atechp.space","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Oct 2025 11:13:14 GMT","end":"Sun, 25 Jan 2026 11:13:13 GMT"},"fingerprint":{"sha1":"7A:4F:02:A1:46:C2:84:4C:0D:F0:62:06:40:6E:41:22:8E:51:69:86","sha256":"73:7A:3D:45:A9:45:C7:C7:1D:89:F2:B9:E5:9B:45:21:EA:93:34:51:A9:72:8B:34:17:7E:11:12:B0:72:C2:9B"}}},"request":{"raw":"GET /assets/js/pp.min.js HTTP/1.1\r\nHost: cdn.atechp.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 03 Nov 2025 03:53:59 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 3203764\r\ncdn-uid: a1203d8f-8e5a-4276-ad23-e4c1946d8290\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=180\r\ncontent-encoding: br\r\netag: \"6903bbb2-1872\"\r\nlast-modified: Thu, 30 Oct 2025 19:25:38 GMT\r\ncdn-storageserver: DE-1021\r\ncdn-fileserver: 1004\r\ncdn-proxyver: 1.39\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/30/2025 19:26:06\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 22d9fa56b8ed6225f1e8f39a6a63977d\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":6258,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6216), with no line terminators","md5":"99ca1b32b7ba6d78c435a04828c629bc","sha1":"cb3b4c3383a749da7252c45d570c2dbec2cd12dd","sha256":"8c39185fd5d8c241422cc699ec3c31ce5d3412a9ed306483bf378439a26e9e75","sha512":"7137f8774cadb43f7039dcb9d9a196a64798a2aeed1081044fc2b4095199543d07913867d9fb070c5a76c1ba9198e6b1dc435c8206c40fb3686dee2d80b80282","ssdeep":"96:2Wz1832PwDEOLEheWz1I4v2fGpZUZmK57oNKH+K7M/yZpryWLdtuzY0M4n7Zn6Iy:2Wz180wD7LJWz1I4vdDMuZKxIlb7lm","tlshash":"b7d1f7a277b371b90fa781fa67b053098b35291535cf94b8f07c1aa93f90685ea3c570","first_seen":"2025-10-31T08:54:22.785791Z","last_seen":"2025-11-03T03:56:15.09029Z","times_seen":13,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":59,"dns":52,"connect":1,"send":0,"wait":1,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"cdn.atechp.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.streamlinkttw.com/assets/main-ehS-YqyT-1761876578022.css","fqdn":"www.streamlinkttw.com","domain":"streamlinkttw.com","tld":"com"},"ip":{"addr":"172.67.194.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:53:59.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"streamlinkttw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 06:04:57 GMT","end":"Thu, 25 Dec 2025 07:02:21 GMT"},"fingerprint":{"sha1":"53:BB:BB:1F:BB:55:14:9A:0A:B7:E3:FB:B4:39:A8:68:66:94:99:0C","sha256":"3E:EB:CF:6B:A8:E0:86:DD:A6:7D:62:C2:87:34:84:1D:45:DF:9A:A2:E7:33:EF:C2:45:2F:18:8B:62:AD:33:4E"}}},"request":{"raw":"GET /assets/main-ehS-YqyT-1761876578022.css HTTP/1.1\r\nHost: www.streamlinkttw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 03 Nov 2025 03:54:00 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\ncloudservicediscount: CDN\r\nx-amz-request-id: 0000019A380818E8B11C0A60AC95CD21\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 31 Oct 2025 02:09:48 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: EU-FRA-marseille-EDGE3-CACHE11[3],EU-FRA-marseille-EDGE3-CACHE11[0,TCP_HIT,2],EU-IRL-dublin-GLOBAL1-CACHE12[1],EU-IRL-dublin-GLOBAL1-CACHE20[0,TCP_HIT,0]\r\nx-hcs-proxy-type: 1\r\nx-ccdn-cachettl: 2592000\r\nx-ccdn-req-id-46b1: 38e1c1fd59bd717f7e98cd034cdefb0b\r\nnginx-hit: 1\r\nage: 2945\r\nx-ccdn-expires: 2589055\r\netag: W/\"c15d1bf65c9a7f508f07cb21e8fa881b\"\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OnEv2XOfnvM8NIiY4qVXavTj0TKQCVOgzZiEQ1ravbFQQa8eqA4cnZNTmlMvyNcDMhLMJvXMRfyqh0FE%2BCryayJlnh2N2bavAQfYI78M2LxNj0zYZA%3D%3D\"}]}\r\ncf-ray: 9988ed824f2f120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":62847,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (62846)","md5":"c15d1bf65c9a7f508f07cb21e8fa881b","sha1":"7ab34e54bf1b4bba56b3eaea9fc56e68695e1a81","sha256":"f01e3aa36de448f9442640ef5e75e8b7a5fc213fda42ddf8065f27f6b47bbba6","sha512":"91af09a22feea828dffffff8639f91b2376355ff64aa4275792eb13667982451d84c0c486a96cffb82d553a2fe23aea27b787d59b809b4da0d11dd1c96563db8","ssdeep":"1536:PSMWKxZ2v1/YdP5cgQ5qNsmbHDXEfSCZDfhTwDzfTK2HnO0iyAoP7GitdtmnyWlO:YKxZ2vmdh7Q5qNsmbHDXEfpDfhTwDzff","tlshash":"5c538321b6178129b833b9e6e5d4e65e31349d0ec922d7def601b52dcece391243722e","first_seen":"2025-10-31T08:54:22.774593Z","last_seen":"2025-11-03T03:56:15.090808Z","times_seen":13,"resource_available":false,"data":null}},"time_used":992,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":990,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.streamlinkttw.com/assets/vendor-chunks-CgHQ0NgR-1761876578022.js","fqdn":"www.streamlinkttw.com","domain":"streamlinkttw.com","tld":"com"},"ip":{"addr":"172.67.194.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:01.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"streamlinkttw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 06:04:57 GMT","end":"Thu, 25 Dec 2025 07:02:21 GMT"},"fingerprint":{"sha1":"53:BB:BB:1F:BB:55:14:9A:0A:B7:E3:FB:B4:39:A8:68:66:94:99:0C","sha256":"3E:EB:CF:6B:A8:E0:86:DD:A6:7D:62:C2:87:34:84:1D:45:DF:9A:A2:E7:33:EF:C2:45:2F:18:8B:62:AD:33:4E"}}},"request":{"raw":"GET /assets/vendor-chunks-CgHQ0NgR-1761876578022.js HTTP/1.1\r\nHost: www.streamlinkttw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 03 Nov 2025 03:54:01 GMT\r\ncontent-type: application/x-javascript\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\ncloudservicediscount: CDN\r\nx-amz-request-id: 0000019A380806D3B0D697F5D4504B04\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 31 Oct 2025 02:09:49 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: EA-SGP-EDGE3-CACHE3[5],EA-SGP-EDGE3-CACHE4[0,TCP_HIT,4],EA-SGP-GLOBAL1-CACHE13[2],EA-SGP-GLOBAL1-CACHE14[0,TCP_HIT,2]\r\nx-hcs-proxy-type: 1\r\nx-ccdn-cachettl: 2592000\r\nx-ccdn-req-id-46b1: 0f653a2f7ff51160167446926a2033f0\r\nnginx-hit: 1\r\nage: 0\r\nx-ccdn-expires: 2534758\r\netag: W/\"8898d7931d9c840ef747b6707c8ba138\"\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sqHrYquyb%2FFckmXlxvVNw9I81FeQ17PpIycWJ0Ba0yjcA6OCHFkgVVfloQfHEVJQtD8kiSFzpMuKl389gJwpqRJ%2BW59Ad%2BNR%2B24gNBCsxXFPG6SRwg%3D%3D\"}]}\r\ncf-ray: 9988ed8d4f7e120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1269720,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (37925)","md5":"1f7f489abd21ebc22f4dfe364f33ceaa","sha1":"1ab7f4413e1f48775ea949987258fd45c8ab0c90","sha256":"94a78da6f81d7a55d6d78786f431c1bb6c929dee2b530a49edca4a8d301869ca","sha512":"fc7fc8a33e1b274e0ca43255a88b4abc0349ac63f47cf3d28e138f2c2c31d100901e0c55489751114acde08b7215b3f218912008e379955d0e138439ff17569c","ssdeep":"24576:TLgcTD3IaDerXpsBbIZ58O6gJ2dSG6MIIsPGiUcWFYMKduqCq:TscTD3IaDerXpsBbIZ58O6gq6MIIsPGa","tlshash":"28254bd932a6706287d361a4503f5207723a7d16248cc45cf63af9ea2eb8d09647bf7c","first_seen":"2025-10-22T18:26:11.322422Z","last_seen":"2025-11-03T03:56:15.081511Z","times_seen":30,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.streamlinkttw.com/assets/main-tpBAxgc7-1761876578022.js","fqdn":"www.streamlinkttw.com","domain":"streamlinkttw.com","tld":"com"},"ip":{"addr":"172.67.194.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:53:59.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"streamlinkttw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 06:04:57 GMT","end":"Thu, 25 Dec 2025 07:02:21 GMT"},"fingerprint":{"sha1":"53:BB:BB:1F:BB:55:14:9A:0A:B7:E3:FB:B4:39:A8:68:66:94:99:0C","sha256":"3E:EB:CF:6B:A8:E0:86:DD:A6:7D:62:C2:87:34:84:1D:45:DF:9A:A2:E7:33:EF:C2:45:2F:18:8B:62:AD:33:4E"}}},"request":{"raw":"GET /assets/main-tpBAxgc7-1761876578022.js HTTP/1.1\r\nHost: www.streamlinkttw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 03 Nov 2025 03:54:00 GMT\r\ncontent-type: application/x-javascript\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\ncloudservicediscount: CDN\r\nx-amz-request-id: 0000019A38082322B196E22B8091B02D\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 31 Oct 2025 02:09:48 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: EU-FRA-marseille-EDGE3-CACHE15[3],EU-FRA-marseille-EDGE3-CACHE17[0,TCP_HIT,1],EU-IRL-dublin-GLOBAL1-CACHE1[545],EU-IRL-dublin-GLOBAL1-CACHE16[365,TCP_MISS,543]\r\nx-hcs-proxy-type: 1\r\nx-ccdn-cachettl: 2592000\r\nx-ccdn-req-id-46b1: 700bbfbd42dec7d5123bf0905f6074ba\r\nnginx-hit: 1\r\nage: 2945\r\nx-ccdn-expires: 2589055\r\netag: W/\"9732921fecae56e195d4183252df3d90\"\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tO%2FfBzF6HRUdqXlxEupUOun11DRXwvdRCtdgP4VwW7zLmeLnJl7s9BuR3yisbt0YH9Pc005z2T1JTBRh9dk1NWVWzKqwjx7zqiNRIUVt5%2FixpJzZRQ%3D%3D\"}]}\r\ncf-ray: 9988ed823f2d120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":101014,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14304)","md5":"9732921fecae56e195d4183252df3d90","sha1":"fb087d139de1d4a467bdecb4051138d47f371144","sha256":"22a73609dfb698b0f9149a0578dfb141a3392de31783ea091bd553ccdd84322c","sha512":"789be83fd00caefb2b67f1d654ec163ee991633881b73959e08e4c2538a334821527a3292f6824192c6ca30d2b44f529d2cca37c4a142dd46db4f92416f137c8","ssdeep":"1536:0ZmjlhTPFrZ0nCfjxGAoasHq8Ff9lRjgmbggq/qUF1FsLOFSR3q4elaWQV1SW:0Ijl9FrZ0mU1HmmfkA3q4elkeW","tlshash":"06a37eeda02d8f3cf86109c5783ea5347429366bf918c8a1f0bd3c015b94dc5a5aa7de","first_seen":"2025-10-31T08:54:22.77886Z","last_seen":"2025-11-03T03:56:15.069301Z","times_seen":13,"resource_available":true,"data":null}},"time_used":1080,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1078,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bereave.onelinevideo.com/moire/calibre/eclipse","fqdn":"bereave.onelinevideo.com","domain":"onelinevideo.com","tld":"com"},"ip":{"addr":"47.253.93.134","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:02.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bereave.onelinevideo.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 21 Apr 2025 00:00:00 GMT","end":"Mon, 20 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:8E:3E:B2:04:D3:F1:8E:24:9D:86:3A:9E:82:A4:F5:45:3F:D1:AD","sha256":"92:99:82:77:56:12:E5:7A:6F:E4:9E:E1:33:D0:ED:6E:11:A4:AF:65:E4:1A:60:B9:75:F8:9B:59:74:D7:01:8B"}}},"request":{"raw":"POST /moire/calibre/eclipse HTTP/1.1\r\nHost: bereave.onelinevideo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.streamlinkttw.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 920\r\nOrigin: https://www.streamlinkttw.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 03 Nov 2025 03:54:02 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"f471d2488be92cc0c4e43aba0e38ce20","sha1":"51bbe820f542fd30244e9bb026f19886c9a757a9","sha256":"6bb947373860a7203390938aea8519312dbc3159d6b691b4b7f4150ce0c33fd8","sha512":"eff7e94f58e6211b55bf28d03b693fff244054fa7034b8c806d821c2a2a4ec58f3ddaafe61bed7b2359cc7cedf15571172ed876ca0886dfd501af1d2f5b17f8f","ssdeep":"","tlshash":"8a8000e82020c2b83b82320aabca20b0088a3808082e820c3ccf2200c80e82e8288380","first_seen":"2025-11-03T03:54:29.477881Z","last_seen":"2025-11-03T03:54:29.477881Z","times_seen":1,"resource_available":false,"data":null}},"time_used":936,"timings":{"blocked":414,"dns":90,"connect":104,"send":0,"wait":107,"receive":0,"ssl":218},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/ip-push.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"172.66.163.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:02.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tapioni.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 10:12:45 GMT","end":"Tue, 16 Dec 2025 11:12:39 GMT"},"fingerprint":{"sha1":"53:EE:30:9F:D0:82:6E:D3:05:D7:06:C0:89:A1:7F:95:D2:E2:01:7E","sha256":"21:58:AE:A3:46:B3:6B:EB:5F:82:88:D2:99:DE:87:F2:60:5D:36:27:10:AC:28:89:4F:06:F7:18:18:B4:95:23"}}},"request":{"raw":"GET /ip-push.js HTTP/1.1\r\nHost: cdn.tapioni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 03 Nov 2025 03:54:02 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 41305\r\nserver: cloudflare\r\nlast-modified: Sat, 01 Nov 2025 08:15:49 GMT\r\nvary: Accept-Encoding\r\netag: \"6905c1b5-a159\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\nage: 156947\r\ncf-cache-status: HIT\r\ncf-ray: 9988ed95ad4dc272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":134654,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65498), with no line terminators","md5":"2e82a15e614f3111f8e8e00bda2bc3e6","sha1":"9b84f3d2aba8d8c59b174b2fbb5e6735f32891a9","sha256":"3532d1a8af90a5e5d6c3de650d9873b05ebf2dc6730d4b921f5545dc5e38da1c","sha512":"5eec13db4cf1fa29362fc902a69058db6ae0028c7407525f1ceaf8410b59bb521c60acd6a86e3da87640bc27ffe7b25eaaa9eb9ebfd832b5c325e82f8a34579d","ssdeep":"1536:gWP2K5GnQEjPV3WzBJbr37jkl07cOZUgi7qRa16NP4M8wxQ48C:/P2K5GnFV3WzBJTuOZTT","tlshash":"76d3628cbac1b5a106a37074023f540af2b73a54748fc8c0fa69d5e06e7e94f6167e6d","first_seen":"2025-11-01T11:36:13.452182Z","last_seen":"2025-11-09T19:57:12.212817Z","times_seen":54,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":34,"dns":6,"connect":1,"send":0,"wait":6,"receive":2,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-02","alert":"Sinkholed","trigger":"cdn.tapioni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a.labadena.com/api/users/494331?v2=1\u0026fill=0\u0026s1=1923286547889786882\u0026fs1=1\u0026i=1\u0026url=https%3A%2F%2Fwww.streamlinkttw.com%2Fs%2FSoJiEP5A%3Flv1%3Ddoodbd.com\u0026sid=542eeb91-a3e0-4769-a553-035d2839afe7","fqdn":"a.labadena.com","domain":"labadena.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:02.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.labadena.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 23:28:42 GMT","end":"Sun, 07 Dec 2025 23:28:41 GMT"},"fingerprint":{"sha1":"75:0C:2C:D1:88:D9:87:78:0A:96:30:7B:67:42:16:4C:38:3E:51:6C","sha256":"2D:C0:E0:B0:44:25:E2:6F:08:EA:D5:19:60:6E:39:05:4F:0A:AC:38:FA:D8:9F:D6:B8:A1:C4:6F:3B:67:51:37"}}},"request":{"raw":"GET /api/users/494331?v2=1\u0026fill=0\u0026s1=1923286547889786882\u0026fs1=1\u0026i=1\u0026url=https%3A%2F%2Fwww.streamlinkttw.com%2Fs%2FSoJiEP5A%3Flv1%3Ddoodbd.com\u0026sid=542eeb91-a3e0-4769-a553-035d2839afe7 HTTP/1.1\r\nHost: a.labadena.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.streamlinkttw.com/\r\nOrigin: https://www.streamlinkttw.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: nauid=K3KRUWAvBTZccZ7U0aVG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 03:54:02 GMT\r\ncontent-type: text/xml\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.streamlinkttw.com\r\naccess-control-expose-headers: X-Asg-Config, X-t\r\nx-robots-tag: noindex, nofollow\r\nx-t: 0\r\ncache-control: private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96,"size_decoded":0,"mime_type":"text/xml","magic":"XML 1.0 document, ASCII text","md5":"73d174f378b492e8958d14c2e6a9a4ec","sha1":"7d699dc411131a000b55c5e3808d6c75b443a25f","sha256":"c6f441dbb28602e988f9ae260f3f9c8556ac8d11eac13a6f997c04519267a621","sha512":"dd3c103c5a448e2e3df63dd51379b0f2225bbe5ce804402f5b13d102bd64500652eff4a136f311426d152d0068f4e9d0ce036e054b567246fb9e1a4156c0d195","ssdeep":"","tlshash":"e0b012867301b43305f16f135b24c01513783b85089d588ce8f30ad01e6440c03481ce","first_seen":"2025-09-24T04:41:31.323262Z","last_seen":"2025-11-20T22:31:42.782605Z","times_seen":115,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-02","alert":"Sinkholed","trigger":"a.labadena.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a.labadena.com/api/v2/items/497054?ev=407\u0026s1=1923286547889786882\u0026fs1=1\u0026sid=542eeb91-a3e0-4769-a553-035d2839afe7\u0026i=1\u0026ab=0\u0026ww=1280\u0026wh=1024\u0026url=https%3A%2F%2Fwww.streamlinkttw.com%2Fs%2FSoJiEP5A%3Flv1%3Ddoodbd.com","fqdn":"a.labadena.com","domain":"labadena.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:02.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.labadena.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 23:28:42 GMT","end":"Sun, 07 Dec 2025 23:28:41 GMT"},"fingerprint":{"sha1":"75:0C:2C:D1:88:D9:87:78:0A:96:30:7B:67:42:16:4C:38:3E:51:6C","sha256":"2D:C0:E0:B0:44:25:E2:6F:08:EA:D5:19:60:6E:39:05:4F:0A:AC:38:FA:D8:9F:D6:B8:A1:C4:6F:3B:67:51:37"}}},"request":{"raw":"GET /api/v2/items/497054?ev=407\u0026s1=1923286547889786882\u0026fs1=1\u0026sid=542eeb91-a3e0-4769-a553-035d2839afe7\u0026i=1\u0026ab=0\u0026ww=1280\u0026wh=1024\u0026url=https%3A%2F%2Fwww.streamlinkttw.com%2Fs%2FSoJiEP5A%3Flv1%3Ddoodbd.com HTTP/1.1\r\nHost: a.labadena.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.streamlinkttw.com/\r\nOrigin: https://www.streamlinkttw.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 03:54:02 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.streamlinkttw.com\r\nset-cookie: nauid=weMtORkaOxqDnyUGgJNs; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"4e490eb5a9812448282559ab4799326c","sha1":"1b8e43d56da6182c6907b4a4ee086dc09f500ba8","sha256":"bbff686348c2122bb8eef24939b5f5ef8ee3f94100bd094712a9125d6730bf0e","sha512":"2cb4de4ec21e17b47fdd59d969beeed96a404e4a5c000777f6200e07134c6efff26a5950073a825fe0eb0f143ef68897d7b052eafe840d989d0d829fcb5034c9","ssdeep":"","tlshash":"31a002f934f8355081502982ace077632dde06f479c151553ae2263b39e0b6c9e00219","first_seen":"2025-07-24T01:13:53.524787Z","last_seen":"2025-11-17T08:56:43.636831Z","times_seen":35,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-02","alert":"Sinkholed","trigger":"a.labadena.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/asg_embed.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"172.66.163.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:03.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tapioni.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 10:12:45 GMT","end":"Tue, 16 Dec 2025 11:12:39 GMT"},"fingerprint":{"sha1":"53:EE:30:9F:D0:82:6E:D3:05:D7:06:C0:89:A1:7F:95:D2:E2:01:7E","sha256":"21:58:AE:A3:46:B3:6B:EB:5F:82:88:D2:99:DE:87:F2:60:5D:36:27:10:AC:28:89:4F:06:F7:18:18:B4:95:23"}}},"request":{"raw":"GET /asg_embed.js HTTP/1.1\r\nHost: cdn.tapioni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 03 Nov 2025 03:54:03 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 76978\r\nserver: cloudflare\r\nlast-modified: Sat, 01 Nov 2025 08:15:49 GMT\r\nvary: Accept-Encoding\r\netag: \"6905c1b5-12cb2\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\nage: 156956\r\ncf-cache-status: HIT\r\ncf-ray: 9988ed9d1bdbc272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":245328,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65503), with no line terminators","md5":"d4148a431a904c15a718bd575d8f2df4","sha1":"4b3610268643c3c7926a86bdbf8f8c379d686685","sha256":"60d30f1b1f15f68897e1fcfe376e9546eced233f4ebccfa87d2fa2c07d2b8da8","sha512":"ff421c50418c21c04607166c697609f4e2abcb9fe134a1084eedbbe728a1792960002c299d881f4b78455fdd29c368ec54f3f21d028de2cdf6c26eba152bfdf9","ssdeep":"6144:wOdFsYyeZUc5e8ypGgNAiUV5dPXAEcooCEfEIGR+7vCEklM71m2v7YPn+zCWuGow:NyMUcAfJZ","tlshash":"3534c889b6c1b0f402e3a1b4052f551af17bb944744ec5c1f729d9c1aeb9a0e9a27f3c","first_seen":"2025-11-01T11:36:13.471579Z","last_seen":"2025-11-10T06:49:17.648661Z","times_seen":96,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-02","alert":"Sinkholed","trigger":"cdn.tapioni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/adgpt.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"172.66.163.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:03.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tapioni.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 10:12:45 GMT","end":"Tue, 16 Dec 2025 11:12:39 GMT"},"fingerprint":{"sha1":"53:EE:30:9F:D0:82:6E:D3:05:D7:06:C0:89:A1:7F:95:D2:E2:01:7E","sha256":"21:58:AE:A3:46:B3:6B:EB:5F:82:88:D2:99:DE:87:F2:60:5D:36:27:10:AC:28:89:4F:06:F7:18:18:B4:95:23"}}},"request":{"raw":"GET /adgpt.js HTTP/1.1\r\nHost: cdn.tapioni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 03 Nov 2025 03:54:03 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 870\r\nserver: cloudflare\r\nlast-modified: Sat, 01 Nov 2025 08:15:49 GMT\r\nvary: Accept-Encoding\r\netag: \"6905c1b5-366\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\nage: 156957\r\ncf-cache-status: HIT\r\ncf-ray: 9988ed9e3ca1c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2367,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2367), with no line terminators","md5":"015dff1be39d3ec37ce390f017ff6b9a","sha1":"7b397ec97bf8eb426b25a427c20197da7a63647a","sha256":"584cd4f6e3ebe9034d90a8494dcba42d20fae20c542f442d6d8ab585610fadd9","sha512":"4d523d91a0b053487640e0b6f5eca01bdfa7d4d878f2cbe2333ceb89b67519b7667f35f66567aa16fe60fd4696820113f738263731742bffb9f986bb5530757d","ssdeep":"","tlshash":"a441f2ee25a0fda0079a714c602b580ef1bc35e0e3ace9c69fb984b47d3d6445111aed","first_seen":"2025-11-01T11:36:13.444431Z","last_seen":"2025-11-10T06:49:17.603835Z","times_seen":108,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-02","alert":"Sinkholed","trigger":"cdn.tapioni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S-886561334:1762142045058751\u0026ifkv=ARESoU3A0UVywQ304Yj-L6v-Gy9QT678eEmh-xwwE8E561uIIFYix4243Bv4ARuslUIWIwTzM9jA","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.221.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:05.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:39:49 GMT","end":"Mon, 05 Jan 2026 08:39:48 GMT"},"fingerprint":{"sha1":"00:1E:AE:67:BB:25:41:AD:21:F2:16:82:FE:7C:79:27:80:DB:D9:9D","sha256":"69:46:2C:32:2B:8C:37:3A:EC:D5:1E:DF:4E:0A:3D:1A:AD:70:5B:07:77:3B:6B:59:E3:84:19:E2:3E:F1:42:0F"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S-886561334:1762142045058751\u0026ifkv=ARESoU3A0UVywQ304Yj-L6v-Gy9QT678eEmh-xwwE8E561uIIFYix4243Bv4ARuslUIWIwTzM9jA HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:_Ge2gcALRvyDEUdEHRcnQ1TVV8NN3g:VrhViiU5kDg3HU5e;Path=/;Expires=Wed, 03-Nov-2027 03:54:05 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 03 Nov 2025 03:54:05 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026dsh=S-886561334%3A1762142045058751\u0026hl=en\u0026ifkv=ARESoU1wVQiFZ83FeJyEAy2-Z3qTWf_huIMyqIcFr97h6dzDr4MdrxSJGkzhOq7eXns6_SsGB03j\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-6QN4l0Fqy-ijYZjQ74lpKA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 417\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T02:23:19.368905Z","times_seen":13918819,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ur.foretopheaved.com/r4xjjmZUr51mvyQ/RNklR","fqdn":"ur.foretopheaved.com","domain":"foretopheaved.com","tld":"com"},"ip":{"addr":"172.241.53.110","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:03.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ur.foretopheaved.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 09:56:09 GMT","end":"Sat, 13 Dec 2025 09:56:08 GMT"},"fingerprint":{"sha1":"91:AA:F1:1B:14:24:36:CD:6B:51:31:6E:5E:C4:CF:18:8E:A6:40:19","sha256":"C9:CD:6B:8D:1D:0B:25:5F:FC:34:0D:27:E0:29:A6:64:DE:36:11:67:88:AF:25:45:05:AA:32:99:35:95:94:EE"}}},"request":{"raw":"GET /r4xjjmZUr51mvyQ/RNklR HTTP/1.1\r\nHost: ur.foretopheaved.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 03:54:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.streamlinkttw.com\r\naccess-control-allow-headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\naccess-control-max-age: 600\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nset-cookie: GL_UI4=eJw9jc1OhDAcB%2FkGddnkl%2FAA%2BwgtUtKrF1%2FBI2npn7UKdFMqq28v8eBtDjOZKIqSpka8FyekX0rgwrnsZSdaybpRqlZr2feCaSEZb8U0CTzYbQhKzxQyVNuifBjCniHXXq2mRr44Q3ONUnt338g3KbJVLYTy1Xqa3PdhqA%2FnkfLn7mC7HhwzJG5r0nOF8s2u5ijPj0g4O5%2BKCE%2B3WYXJ%2BWWwpoiRX70yhPgF1agCXZ3%2FQWlo%2BwzuBrjZDP%2F%2B3zi9c4bC0G5HQu7CO%2FlfoWNCFg%3D%3D; expires=Tue, 04-Nov-2025 03:54:03 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJwViD0LglAYRu99ESGS4gGHRpdW0VLBJSTndGhoaBILEcRXrtrH1F9pb4r%2BVWtTWzacA%2BcIIcicgsoGRujaoWN7C9v1PcgClKSgvIaesDpnV0gFcpYgVWOcthVbMfd1N%2Fwc2r8hS0zWVXmxtlz1Xcl1CxoYxawaVll3hGx0Cer47%2FZgCsiTPgNVmRFtPu9Xcf8OwUY0vz33u9UD1LTQHD8IfrcSKq4%3D; expires=Tue, 04-Nov-2025 03:54:03 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"848667c49f5d3aef59cd65ed276cd7ae","sha1":"bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763","sha256":"cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8","sha512":"4248ad0e684224ba8503b1e73517aae6ffe4431cd16b7633d2ccbf4b96f845e318dbee175d19cd4676ca37353f53add2231ed167ad6c4aa0d9fe185f7359238c","ssdeep":"","tlshash":"f23000000000000000cc00000000000000000000c000000000000000000000003c0000","first_seen":"2025-04-24T10:17:49.831301Z","last_seen":"2026-04-19T02:41:50.612518Z","times_seen":15618,"resource_available":true,"data":null}},"time_used":354,"timings":{"blocked":166,"dns":49,"connect":18,"send":0,"wait":22,"receive":0,"ssl":95},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"ur.foretopheaved.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"ur.foretopheaved.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ads.google.com/","fqdn":"ads.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.46","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:04.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adwords.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:58 GMT","end":"Mon, 05 Jan 2026 08:38:57 GMT"},"fingerprint":{"sha1":"C2:C2:45:F5:DA:18:CC:36:49:98:D2:09:7B:7D:55:47:90:1B:BD:52","sha256":"B2:67:77:54:3D:79:42:D5:7A:1D:BF:68:0A:9A:58:53:7E:AA:26:4E:DF:16:73:34:BD:73:3C:57:90:00:49:C1"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: ads.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.streamlinkttw.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 429 Too Many Requests\r\ncontent-length: 1103\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 03 Nov 2025 03:54:05 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T02:23:19.368905Z","times_seen":13918819,"resource_available":true,"data":null}},"time_used":677,"timings":{"blocked":74,"dns":0,"connect":15,"send":0,"wait":529,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.streamlinkttw.com/assets/vendor-chunks-CgHQ0NgR-1761876578022.js","fqdn":"www.streamlinkttw.com","domain":"streamlinkttw.com","tld":"com"},"ip":{"addr":"172.67.194.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:00.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"streamlinkttw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 06:04:57 GMT","end":"Thu, 25 Dec 2025 07:02:21 GMT"},"fingerprint":{"sha1":"53:BB:BB:1F:BB:55:14:9A:0A:B7:E3:FB:B4:39:A8:68:66:94:99:0C","sha256":"3E:EB:CF:6B:A8:E0:86:DD:A6:7D:62:C2:87:34:84:1D:45:DF:9A:A2:E7:33:EF:C2:45:2F:18:8B:62:AD:33:4E"}}},"request":{"raw":"GET /assets/vendor-chunks-CgHQ0NgR-1761876578022.js HTTP/1.1\r\nHost: www.streamlinkttw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/assets/main-tpBAxgc7-1761876578022.js\r\nCookie: _ga_FZ6E2FXG92=GS2.1.s1762142039$o1$g0$t1762142039$j60$l0$h0; _ga=GA1.1.768762269.1762142040\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 03 Nov 2025 03:54:00 GMT\r\ncontent-type: application/x-javascript\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\ncloudservicediscount: CDN\r\nx-amz-request-id: 0000019A380806D3B0D697F5D4504B04\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 31 Oct 2025 02:09:49 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: EA-SGP-EDGE3-CACHE3[5],EA-SGP-EDGE3-CACHE4[0,TCP_HIT,4],EA-SGP-GLOBAL1-CACHE13[2],EA-SGP-GLOBAL1-CACHE14[0,TCP_HIT,2]\r\nx-hcs-proxy-type: 1\r\nx-ccdn-cachettl: 2592000\r\nx-ccdn-req-id-46b1: 0f653a2f7ff51160167446926a2033f0\r\nnginx-hit: 1\r\nage: 57242\r\nx-ccdn-expires: 2534758\r\netag: W/\"8898d7931d9c840ef747b6707c8ba138\"\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oKDsK8iKOOMnKHrtT8PzEL30XEs9xF7eDn71UXVsfHmhUVYAX9IIzJmSmeLNrHFSQcGOSIWpcFzDyE8Ahi9sXrE3CvPT4ecvpQOcQUVvjsTPwwRv8w%3D%3D\"}]}\r\ncf-ray: 9988ed891f6c120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1269720,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (37925)","md5":"1f7f489abd21ebc22f4dfe364f33ceaa","sha1":"1ab7f4413e1f48775ea949987258fd45c8ab0c90","sha256":"94a78da6f81d7a55d6d78786f431c1bb6c929dee2b530a49edca4a8d301869ca","sha512":"fc7fc8a33e1b274e0ca43255a88b4abc0349ac63f47cf3d28e138f2c2c31d100901e0c55489751114acde08b7215b3f218912008e379955d0e138439ff17569c","ssdeep":"24576:TLgcTD3IaDerXpsBbIZ58O6gJ2dSG6MIIsPGiUcWFYMKduqCq:TscTD3IaDerXpsBbIZ58O6gq6MIIsPGa","tlshash":"28254bd932a6706287d361a4503f5207723a7d16248cc45cf63af9ea2eb8d09647bf7c","first_seen":"2025-10-22T18:26:11.322422Z","last_seen":"2025-11-03T03:56:15.081511Z","times_seen":30,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":460,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.lixstreamingcaio.com/v2/s/home/resources/SoJiEP5A","fqdn":"api.lixstreamingcaio.com","domain":"lixstreamingcaio.com","tld":"com"},"ip":{"addr":"172.67.200.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:01.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lixstreamingcaio.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 09:33:43 GMT","end":"Wed, 21 Jan 2026 10:32:28 GMT"},"fingerprint":{"sha1":"4B:56:A4:B4:FD:CC:C3:10:87:7C:9D:AF:AA:DD:15:76:A6:A6:24:82","sha256":"47:9F:6B:6B:87:90:3E:BD:D7:80:43:FF:15:2C:13:C1:55:79:08:46:0A:9F:49:69:9F:4A:06:B8:50:C5:B3:3A"}}},"request":{"raw":"OPTIONS /v2/s/home/resources/SoJiEP5A HTTP/1.1\r\nHost: api.lixstreamingcaio.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-stream-l1\r\nReferer: https://www.streamlinkttw.com/\r\nOrigin: https://www.streamlinkttw.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 03 Nov 2025 03:54:02 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.streamlinkttw.com\r\naccess-control-allow-methods: OPTIONS,GET,POST,PUT,DELETE\r\naccess-control-allow-headers: content-type, x-stream-l1\r\naccess-control-expose-headers: X-Error-Code\r\naccess-control-allow-credentials: true\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tQrRsj3rfcrl%2FZeJpSBbWyGbO5wV1QnWUJ%2B9y2wfJuNgUCAZTgV98Si0Ckhx%2Fjo40FREcOEl33oXwrp7mVUrqh4hg6zsaZ6DOxYg7x%2FIeRIL%2ByORJQk%3D\"}]}\r\ncf-ray: 9988ed8e7b70b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T02:23:19.368905Z","times_seen":13918819,"resource_available":true,"data":null}},"time_used":891,"timings":{"blocked":24,"dns":6,"connect":1,"send":0,"wait":841,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/vast-im.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"172.66.163.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:02.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tapioni.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 10:12:45 GMT","end":"Tue, 16 Dec 2025 11:12:39 GMT"},"fingerprint":{"sha1":"53:EE:30:9F:D0:82:6E:D3:05:D7:06:C0:89:A1:7F:95:D2:E2:01:7E","sha256":"21:58:AE:A3:46:B3:6B:EB:5F:82:88:D2:99:DE:87:F2:60:5D:36:27:10:AC:28:89:4F:06:F7:18:18:B4:95:23"}}},"request":{"raw":"GET /vast-im.js HTTP/1.1\r\nHost: cdn.tapioni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 03 Nov 2025 03:54:02 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 89045\r\nserver: cloudflare\r\nlast-modified: Sat, 01 Nov 2025 08:15:49 GMT\r\nvary: Accept-Encoding\r\netag: \"6905c1b5-15bd5\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\nage: 156955\r\ncf-cache-status: HIT\r\ncf-ray: 9988ed95bd5cc272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":315912,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65503), with no line terminators","md5":"d9b6b66b925f17ebaa44fd3b1dd1ed5b","sha1":"37cf359bd3dbe89d61121853f032252db72f83b7","sha256":"f2b87c9be987a4b3a8ddb910627af7025442309e38e0dc1f464227dff22c1d06","sha512":"83a8b52a9b740c31108ca7aaf766be6c282e53634b9cd6d5cf4bdc195701fb4a8f2551fc520f0e012c361b5e9b845651541353a3c8560029a7d80650541698c6","ssdeep":"6144:IdF7uRr+IF37fshy/sVjCdkbSce8t1ufL:Ou1+IF37fshy/AjCdkOj8t1ufL","tlshash":"2464a4c9b6c6b0a543e7b1b8403f520ef276a945b44ac9c0e266e9d1ac7c94e5037f7c","first_seen":"2025-11-01T10:16:39.235138Z","last_seen":"2025-11-10T07:18:44.854193Z","times_seen":95,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":41,"dns":1,"connect":4,"send":0,"wait":4,"receive":3,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-02","alert":"Sinkholed","trigger":"cdn.tapioni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a.labadena.com/api/settings/494334","fqdn":"a.labadena.com","domain":"labadena.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:02.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.labadena.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 23:28:42 GMT","end":"Sun, 07 Dec 2025 23:28:41 GMT"},"fingerprint":{"sha1":"75:0C:2C:D1:88:D9:87:78:0A:96:30:7B:67:42:16:4C:38:3E:51:6C","sha256":"2D:C0:E0:B0:44:25:E2:6F:08:EA:D5:19:60:6E:39:05:4F:0A:AC:38:FA:D8:9F:D6:B8:A1:C4:6F:3B:67:51:37"}}},"request":{"raw":"GET /api/settings/494334 HTTP/1.1\r\nHost: a.labadena.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.streamlinkttw.com/\r\nOrigin: https://www.streamlinkttw.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 03:54:02 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1be64b6d6652effba7dcf744e90def6a","sha1":"d9fbc7d1fa49fa4733f90a3739882d63972c2352","sha256":"72d79d0ad9a70ef53c1bab65c588d44bffb1a1b5aba0eb2f9f6a886c4c3aec4f","sha512":"ff1aee5b5d4ba25f4f78a0ddc80cd878856815c1ded88b32370c72bff242e73522e6aefb60fa5e53c434f10d2611dab7679152edf9321edc2b656e0265ef7006","ssdeep":"","tlshash":"408004c00dc1545410c010f4434043150103140f535c3304d41d1701147f4d17030150","first_seen":"2023-04-06T10:58:14Z","last_seen":"2026-04-18T20:33:08.465506Z","times_seen":7281,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":30,"dns":1,"connect":13,"send":0,"wait":13,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-02","alert":"Sinkholed","trigger":"a.labadena.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/adgpt.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"172.66.163.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:02.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tapioni.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 10:12:45 GMT","end":"Tue, 16 Dec 2025 11:12:39 GMT"},"fingerprint":{"sha1":"53:EE:30:9F:D0:82:6E:D3:05:D7:06:C0:89:A1:7F:95:D2:E2:01:7E","sha256":"21:58:AE:A3:46:B3:6B:EB:5F:82:88:D2:99:DE:87:F2:60:5D:36:27:10:AC:28:89:4F:06:F7:18:18:B4:95:23"}}},"request":{"raw":"GET /adgpt.js HTTP/1.1\r\nHost: cdn.tapioni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.streamlinkttw.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 03 Nov 2025 03:54:02 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 870\r\nserver: cloudflare\r\nlast-modified: Sat, 01 Nov 2025 08:15:49 GMT\r\nvary: Accept-Encoding\r\netag: \"6905c1b5-366\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\nage: 156956\r\ncf-cache-status: HIT\r\ncf-ray: 9988ed967df8c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2367,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2367), with no line terminators","md5":"015dff1be39d3ec37ce390f017ff6b9a","sha1":"7b397ec97bf8eb426b25a427c20197da7a63647a","sha256":"584cd4f6e3ebe9034d90a8494dcba42d20fae20c542f442d6d8ab585610fadd9","sha512":"4d523d91a0b053487640e0b6f5eca01bdfa7d4d878f2cbe2333ceb89b67519b7667f35f66567aa16fe60fd4696820113f738263731742bffb9f986bb5530757d","ssdeep":"","tlshash":"a441f2ee25a0fda0079a714c602b580ef1bc35e0e3ace9c69fb984b47d3d6445111aed","first_seen":"2025-11-01T11:36:13.444431Z","last_seen":"2025-11-10T06:49:17.603835Z","times_seen":108,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-02","alert":"Sinkholed","trigger":"cdn.tapioni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lz.faenasturbit.com/sSB8ld39qI9j8pgT/130607","fqdn":"lz.faenasturbit.com","domain":"faenasturbit.com","tld":"com"},"ip":{"addr":"23.109.253.230","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:02.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lz.faenasturbit.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 21:32:56 GMT","end":"Wed, 28 Jan 2026 21:32:55 GMT"},"fingerprint":{"sha1":"D6:1B:84:26:55:A1:83:01:23:8C:CD:42:C8:38:30:73:F4:D6:EF:57","sha256":"53:E3:FE:81:08:0E:DC:4F:44:48:DE:93:85:98:37:CB:86:0A:DE:F4:21:AF:D8:5D:C9:7D:40:12:D9:C0:72:E7"}}},"request":{"raw":"GET /sSB8ld39qI9j8pgT/130607 HTTP/1.1\r\nHost: lz.faenasturbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 03:54:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 5\r\nvary: Origin\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Megageocheckolololo, X-Forwarded-For, X-Requested-With, Cache-Control, Pragma, Expires, Credentials\r\naccess-control-allow-methods: GET, HEAD, POST, PUT, OPTIONS\r\naccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\nset-cookie: GGI10=G/oAAMTPn1PZ5ukSnmw8bfFluN+NzXY8UNxgu2vRX1kBBUFRI0khkN4mIl6+sph1ZvUL+3+QLmPYQQgMNdBV21QNx4aMrtlAiGKwleH+ntQGAmTEmCDoFqnJiHnepJOR3v59EG8FIwaOdobz8JLu23zdp8CQsTYiK/UGYXW5Ny4h28/t9QY9BoGM1KWZOetFAxnyVyaG5gTZMngvluyDhYW+4JZLLNyzdOH/Bw==; max-age=3600000; path=/; secure; SameSite=None\nGUI42=G1EDAGRzTeWjR7p6Qu3mU4YH9Pm/d8f/s18Bwh2ttYAWSICBJJLv1p7hISgwsLmvbx6l1gny/4B8HjAzIAA9j+CKoejWQE7Q1BwPyagP3EDzrQkKAFxCMsFpubg+UtqnIlX8zN9T+7IO1X2MMktWiYNbyuVNiRJnf7wfUIbm+H7AEgzQyUwzPGiPsMTAVKsDJfFwD4xfforJPYXioCIf2lWxUYhhKoQ7HRcZYY50oYzyqxv9qsGaDbWD1wCyt75hKpW3uB8gHqUhyEoTSk1RxkUr1lwWVmkJtMRDLDKRhK6JKZeSpVJNYZhr9NBIY1zkqp1pIcXRmpOuXZbnZmrK1GQprh3FhAWw37LLQmbTCH66VE33X9bD3yqgSeP7AeXr1OsuO6qcJayqp9VMtT1A/4JTwT1AkJZzjPhTkAfWGyG/j8JzziRG0P/cNw==; max-age=3600000; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"f7a2939527fd9e68723da600e96d76bd","sha1":"a9e717b6364d2895ee0a716050db32ca0ef1bb42","sha256":"d810f5146f4cd1517512a6e31946e764a73c58fb01427aae88d42cc2ae28718a","sha512":"e6956ec633c76eb3ebc408528f950b81373238cd1d5b9fff5ddd97089ea14a1ff5934f23769bac5d93cc4cdb6a1fbc4ce69baebfb940a55d8a7a89caccaf92b5","ssdeep":"","tlshash":"ec300000003000000000000000000000000c0000000000000000000000000c00000000","first_seen":"2023-03-07T01:14:39Z","last_seen":"2026-04-19T01:40:25.792285Z","times_seen":13960,"resource_available":true,"data":null}},"time_used":317,"timings":{"blocked":149,"dns":105,"connect":17,"send":0,"wait":19,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ntvpforever.com/keywords","fqdn":"ntvpforever.com","domain":"ntvpforever.com","tld":"com"},"ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:04.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 02:00:40 GMT","end":"Sat, 24 Jan 2026 02:00:39 GMT"},"fingerprint":{"sha1":"2B:72:A9:3F:14:00:92:B9:05:AC:BC:3B:22:CB:D9:87:80:23:C8:3D","sha256":"60:5B:BA:7E:5F:7A:B1:E0:55:4D:4C:29:EA:C7:21:68:37:AF:03:5B:A7:3D:15:98:F1:65:96:AB:4A:3E:17:3B"}}},"request":{"raw":"OPTIONS /keywords HTTP/1.1\r\nHost: ntvpforever.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.streamlinkttw.com/\r\nOrigin: https://www.streamlinkttw.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.24.0\r\ndate: Mon, 03 Nov 2025 03:54:04 GMT\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T02:23:19.368905Z","times_seen":13918819,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":60,"dns":4,"connect":29,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.streamlinkttw.com/assets/vendor-chunks-DoTr35U9-1761876578022.css","fqdn":"www.streamlinkttw.com","domain":"streamlinkttw.com","tld":"com"},"ip":{"addr":"172.67.194.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:53:59.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"streamlinkttw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 06:04:57 GMT","end":"Thu, 25 Dec 2025 07:02:21 GMT"},"fingerprint":{"sha1":"53:BB:BB:1F:BB:55:14:9A:0A:B7:E3:FB:B4:39:A8:68:66:94:99:0C","sha256":"3E:EB:CF:6B:A8:E0:86:DD:A6:7D:62:C2:87:34:84:1D:45:DF:9A:A2:E7:33:EF:C2:45:2F:18:8B:62:AD:33:4E"}}},"request":{"raw":"GET /assets/vendor-chunks-DoTr35U9-1761876578022.css HTTP/1.1\r\nHost: www.streamlinkttw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 03 Nov 2025 03:54:00 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\ncloudservicediscount: CDN\r\nx-amz-request-id: 0000019A3808066AB0DDAC44CA80BE90\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 31 Oct 2025 02:09:49 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nx-ccdn-expires: 2589389\r\nvia: EA-IDN-jakarta-AREA1-CACHE19[4],EA-IDN-jakarta-AREA1-CACHE9[0,TCP_HIT,3],EA-IDN-kabbekasi-GLOBAL1-CACHE5[168],EA-IDN-kabbekasi-GLOBAL1-CACHE24[165,TCP_MISS,166],EA-SGP-GLOBAL1-CACHE28[5],EA-SGP-GLOBAL1-CACHE7[0,TCP_HIT,4]\r\nx-hcs-proxy-type: 1\r\nx-ccdn-cachettl: 2592000\r\nx-ccdn-req-id-46b1: 41484742516845c4280b5c1033cd0f41\r\nnginx-hit: 1\r\nage: 2611\r\netag: W/\"583c695c76766d48b720411106e87599\"\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HN%2BSELfw8VgZMXsUz8fK%2BoauMneJXZx6c5Uohuq5u%2B6cOT3Iaqt9DwdOSjHxQD%2Fzd6c6FmrVf5qzcZGEU8VAJ%2FndAvn2uM%2F8D1lUWR75oUrmvtYsxQ%3D%3D\"}]}\r\ncf-ray: 9988ed823f2e120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":161718,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"583c695c76766d48b720411106e87599","sha1":"e7e75b7ea87593b675eac8f4937a1af7db66f102","sha256":"3f61af115313bbfe92c14794125043e3c53029cc5be9de758ce7a6a4e503275d","sha512":"a9c008b55f23c2460d6650529750b10d9ff30b66cdeb90ca7ad75ec21bb350c619593ae0e01975bacf784d013e08795f40f95c365deeaa4e594a6aa3785e2756","ssdeep":"768:eK4kaqXtxtd5+NuoRbV/es4idulogKFjY3xkjS5nz1miiJykXEK1rBw0OBp6EnUp:eKLvTdw7tejDxkjS5nzK8BTpZaKjpi","tlshash":"58f39569ea10a27de91faf259bc49f8ca224e881cd311af7f685610c4dc3bf115e274d","first_seen":"2025-06-14T07:01:13.355089Z","last_seen":"2026-02-27T13:27:16.333567Z","times_seen":523,"resource_available":false,"data":null}},"time_used":869,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":862,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/postscribe/2.0.8/postscribe.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:02.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/postscribe/2.0.8/postscribe.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 03 Nov 2025 03:54:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 5117\r\ncf-ray: 9988ed976b5576ef-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03faa-45f4\"\r\nlast-modified: Mon, 04 May 2020 16:15:38 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1042580\r\nexpires: Sat, 24 Oct 2026 03:54:02 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=yoAVcFFJNLo4qxCeOjk7i0eC2OeqIAIFv4%2F40nNKg6lbFfQqb9ayXGGnuN99MdY5UnNHKWDF4wKSjYXmfeY53%2BygeMolx%2B8H%2FcEnqlKqdvMWC7vXyJW3fAYl5H%2BkHtbVPq9JL6SB\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17908,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (17660)","md5":"12dd498bf90c536803c2aad708b66c2b","sha1":"5f9363d39a405d1c94328cf2303ff4a05c0ad163","sha256":"c4e20f53f5ef0ed44b783437aa3f4638a9a56cc4aa29ae83ed9212eb2807052a","sha512":"ec593a501ebf74c092e564a1aaf0b477d3da6813c9a88f29d0d2a0db8143bdf19718ba4e6b13f64295b077ca5cb9c13460c30f9f2f35982a82597b22f79ffdd1","ssdeep":"192:l3GySZoj5oOg8pu564aEzn5nVMnyk3sBakk3cx7x0IlQV0Hf1b5SwU+ahpfex/W9:lWytjU64auV0ISjyW5RAe","tlshash":"6f82b38cb295f0b553d710b5403f910fe2366928654ec4d8f288d5ea2c7899d663bf3d","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-04-18T22:28:19.312374Z","times_seen":7104,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":22,"dns":2,"connect":1,"send":0,"wait":9,"receive":1,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.capndr.com/popunder-admanager/build.m.js","fqdn":"js.capndr.com","domain":"capndr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:04.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.capndr.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Oct 2025 02:32:03 GMT","end":"Sun, 11 Jan 2026 02:32:02 GMT"},"fingerprint":{"sha1":"4F:91:E2:5E:A1:B1:4D:7F:49:01:1E:73:C6:07:EB:0A:BE:44:4C:44","sha256":"7B:0D:8E:03:0E:6E:23:65:30:3D:E8:FC:0C:E7:66:46:E2:5B:7F:FA:FD:D2:FF:61:4C:A4:18:08:24:70:51:6B"}}},"request":{"raw":"GET /popunder-admanager/build.m.js HTTP/1.1\r\nHost: js.capndr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 03 Nov 2025 03:54:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Fri, 31 Oct 2025 08:55:40 GMT\r\netag: W/\"6904798c-16f0f\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 03 Nov 2025 03:59:04 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1747\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93967,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"fe23e1a8a696b659233f77fcd18d2979","sha1":"f3a4c47079ff0d14e04ac8ee63a136b40eeccb96","sha256":"8768abbe325b1118891d7d3fa6f498b1fce4e919a50b4e23abfcebdc555b536c","sha512":"3393d54030ca57de50021b86b94b6007cd5eab10075a59dce8f054e38906afe0d463e3fe2c06c38695a5792190689ed3546549dce3c32018e972bf09eafdc838","ssdeep":"768:ubVWcprgLsdOKoT++mtPNVM6lHAclc8JnU2ePJ3XS0tcq3TO9s9sUG2FIU4dkUxu:WYmOKEycD8JgfhkjkdZL","tlshash":"609318cdb7d2707042a7a4ba902f051ab33f2d097849442cb969d9d138add4fa327f79","first_seen":"2025-10-31T09:03:57.002853Z","last_seen":"2025-11-06T12:09:31.385543Z","times_seen":126,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"js.capndr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"29369034-36946-ex.uncocleypercha.com/iC1PCIM5NAzpZtczvVjDLi9Mktk7qIvcL_RSM8OdG5MSMpqTpt9X8MqIVd9rbZHeztkLK6Qiha69FenlHea5aULCk6eXuLnWeAARGO8ke3phtcxwxrWpRx9dzbMxkIby5Ns71pAnPfJ4HLdrq-LBAHGQGbwEnBYW?kws=\u0026pageUri=https%3A%2F%2Fwww.streamlinkttw.com%2Fs%2FSoJiEP5A%3Flv1%3Ddoodbd.com\u0026referer=\u0026bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Win32%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Mon%20Nov%2003%202025%2003%3A54%3A03%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%223%22%2C%22false%22%2C%22%5B%5D%22%5D\u0026btdb=0\u0026prsl=1","fqdn":"29369034-36946-ex.uncocleypercha.com","domain":"uncocleypercha.com","tld":"com"},"ip":{"addr":"88.208.22.3","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:07.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.uncocleypercha.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 Aug 2025 13:23:39 GMT","end":"Wed, 26 Nov 2025 13:23:38 GMT"},"fingerprint":{"sha1":"22:8A:CB:BF:F6:C8:BB:63:3B:40:60:50:E5:68:99:7F:9B:12:0F:74","sha256":"D1:A4:E0:CC:A1:89:9F:AB:A7:F6:82:AB:E0:1A:43:E1:74:3B:AA:F3:D3:9C:2F:D7:6A:20:6D:23:3C:ED:D7:6A"}}},"request":{"raw":"GET /iC1PCIM5NAzpZtczvVjDLi9Mktk7qIvcL_RSM8OdG5MSMpqTpt9X8MqIVd9rbZHeztkLK6Qiha69FenlHea5aULCk6eXuLnWeAARGO8ke3phtcxwxrWpRx9dzbMxkIby5Ns71pAnPfJ4HLdrq-LBAHGQGbwEnBYW?kws=\u0026pageUri=https%3A%2F%2Fwww.streamlinkttw.com%2Fs%2FSoJiEP5A%3Flv1%3Ddoodbd.com\u0026referer=\u0026bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22false%22%2C%22Win32%22%2C%22llvmpipe%22%2C%22Mozilla%22%2C%22llvmpipe%22%2C%22Mesa%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%22false%22%2C%221%22%2C%2248%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Mon%20Nov%2003%202025%2003%3A54%3A03%20GMT%2B0000%20(GMT)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22true%22%2C%22781877177%22%2C%222697903995%22%2C%223%22%2C%22false%22%2C%22%5B%5D%22%5D\u0026btdb=0\u0026prsl=1 HTTP/1.1\r\nHost: 29369034-36946-ex.uncocleypercha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.streamlinkttw.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 03:54:07 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://www.streamlinkttw.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nreferrer-policy: unsafe-url\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory\r\naccept-ch-lifetime: 31536000\r\np3p: CP=\"NOI DEVa TAIa OUR BUS UNI STA\"\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nlast-modified: Mon, 03 Nov 2025 03:54:07 UTC\r\nexpires: Mon, 03 Nov 2025 03:54:07 UTC\r\nset-cookie: _ccid=5891197467516507798; expires=Fri, 03 Nov 2028 03:54:07 GMT; domain=uncocleypercha.com; path=/; HttpOnly; secure; SameSite=None\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1505,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (1505), with no line terminators","md5":"90eb9308971b929cfde95eab9f692ce8","sha1":"1d2a096396326b91f28a2b922d4db2757327b0dd","sha256":"0914ccdaa9c9001f006aee090165d1ffed267d395082ded7e007f407c0fc01da","sha512":"6a991baa7b3c1aaca236ce78c8b01e670c88f3dce61e551af43a800195e3de31cc822d0fb43c589880b6e8e0836c533602f977a1411cc8f975b8f0e2501aacda","ssdeep":"","tlshash":"3531c9f3f48146c739f5bb2beee7351ab0046ce5dbec458243aa3199e4739295184e21","first_seen":"2025-11-03T03:54:29.486686Z","last_seen":"2025-11-03T03:54:29.486686Z","times_seen":1,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":64,"dns":6,"connect":17,"send":0,"wait":120,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.lixstreamingcaio.com/v2/s/home/resources/SoJiEP5A","fqdn":"api.lixstreamingcaio.com","domain":"lixstreamingcaio.com","tld":"com"},"ip":{"addr":"172.67.200.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:02.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lixstreamingcaio.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 09:33:43 GMT","end":"Wed, 21 Jan 2026 10:32:28 GMT"},"fingerprint":{"sha1":"4B:56:A4:B4:FD:CC:C3:10:87:7C:9D:AF:AA:DD:15:76:A6:A6:24:82","sha256":"47:9F:6B:6B:87:90:3E:BD:D7:80:43:FF:15:2C:13:C1:55:79:08:46:0A:9F:49:69:9F:4A:06:B8:50:C5:B3:3A"}}},"request":{"raw":"POST /v2/s/home/resources/SoJiEP5A HTTP/1.1\r\nHost: api.lixstreamingcaio.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.streamlinkttw.com/\r\nContent-Type: application/json\r\nX-Stream-L1: doodbd.com\r\nOrigin: https://www.streamlinkttw.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 03 Nov 2025 03:54:02 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.streamlinkttw.com\r\naccess-control-expose-headers: X-Error-Code\r\naccess-control-allow-credentials: true\r\nx-xbox-platform: streaming\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OWVxQgRSYC0jY0PGmOtWHJZJrlgNYFxdnOj2mYtmJ9%2FlHczDb3r6zZC8c1OZRGvfz14WheYt3mwI0jvWQQdXyZ6Izjt2OcOD9O62QWvx4xLXe8n2BLQ%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9988ed93bc7bb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":557,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d92cfc836c216b2493421b71307e071c","sha1":"2e31f94f69b5d6bbd433ac31329e4217c75ef1c2","sha256":"ad117926f3ed0616d33c639efa2cef8c96e46381c6ceeeb501390747d9437f07","sha512":"23d5277477f0526599223e36f295fff7df3af81a5d6b809c45d47175e22c6aa2f4afb8eb38877a9e8e1746d2138f6b05edc31c55a68240c42f5d1730a26d4430","ssdeep":"","tlshash":"72f081f14010e5fc62522a8cb865590e8021e01acdf7240ecaa24e59c0d4c6019a82e9","first_seen":"2025-11-03T03:54:29.487551Z","last_seen":"2025-11-03T03:54:29.487551Z","times_seen":1,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.lixstreamingcaio.com/v2/s/assets/f?id=85b84332-6ce0-4799-a56e-06c86b520e39\u0026uid=1923286547889786882","fqdn":"api.lixstreamingcaio.com","domain":"lixstreamingcaio.com","tld":"com"},"ip":{"addr":"172.67.200.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:02.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lixstreamingcaio.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 09:33:43 GMT","end":"Wed, 21 Jan 2026 10:32:28 GMT"},"fingerprint":{"sha1":"4B:56:A4:B4:FD:CC:C3:10:87:7C:9D:AF:AA:DD:15:76:A6:A6:24:82","sha256":"47:9F:6B:6B:87:90:3E:BD:D7:80:43:FF:15:2C:13:C1:55:79:08:46:0A:9F:49:69:9F:4A:06:B8:50:C5:B3:3A"}}},"request":{"raw":"OPTIONS /v2/s/assets/f?id=85b84332-6ce0-4799-a56e-06c86b520e39\u0026uid=1923286547889786882 HTTP/1.1\r\nHost: api.lixstreamingcaio.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.streamlinkttw.com/\r\nOrigin: https://www.streamlinkttw.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 03 Nov 2025 03:54:02 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.streamlinkttw.com\r\naccess-control-allow-methods: OPTIONS,GET,POST,PUT,DELETE\r\naccess-control-allow-headers: content-type\r\naccess-control-expose-headers: X-Error-Code\r\naccess-control-allow-credentials: true\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WjolpAhcG5Yzz0KzcmeIOzbe%2BJ4sf1TKcTm1afhDGi7IgWb8FoijwgkH2uVX23wpZCcnC4bgjrCnEG9%2FgtaHOpZaM4NUqyXu0fHMl5LneaxMjTBYTSQ%3D\"}]}\r\ncf-ray: 9988ed952cd4b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T02:23:19.368905Z","times_seen":13918819,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.labadena.com/api/v2/items/497057?ev=407\u0026s1=1923286547889786882\u0026fs1=1\u0026sid=542eeb91-a3e0-4769-a553-035d2839afe7\u0026i=1\u0026ab=0\u0026ww=1280\u0026wh=1024\u0026url=https%3A%2F%2Fwww.streamlinkttw.com%2Fs%2FSoJiEP5A%3Flv1%3Ddoodbd.com","fqdn":"a.labadena.com","domain":"labadena.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:02.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.labadena.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 23:28:42 GMT","end":"Sun, 07 Dec 2025 23:28:41 GMT"},"fingerprint":{"sha1":"75:0C:2C:D1:88:D9:87:78:0A:96:30:7B:67:42:16:4C:38:3E:51:6C","sha256":"2D:C0:E0:B0:44:25:E2:6F:08:EA:D5:19:60:6E:39:05:4F:0A:AC:38:FA:D8:9F:D6:B8:A1:C4:6F:3B:67:51:37"}}},"request":{"raw":"GET /api/v2/items/497057?ev=407\u0026s1=1923286547889786882\u0026fs1=1\u0026sid=542eeb91-a3e0-4769-a553-035d2839afe7\u0026i=1\u0026ab=0\u0026ww=1280\u0026wh=1024\u0026url=https%3A%2F%2Fwww.streamlinkttw.com%2Fs%2FSoJiEP5A%3Flv1%3Ddoodbd.com HTTP/1.1\r\nHost: a.labadena.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.streamlinkttw.com/\r\nOrigin: https://www.streamlinkttw.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 03:54:02 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.streamlinkttw.com\r\nset-cookie: nauid=c6xj2zG1UOSBjSL0BTK2; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"2073a0d64110211332eb7aa923d396f5","sha1":"dcc4d8bcf55696ae1c21d99688676d7384ce0238","sha256":"45875545655957b8ee5258067968372f262ef09d8ceb5bb060fc594165ee0d01","sha512":"cd791b4de02ed54ce019067cb72aac014eb4fb64e5ef940106607c5e6aad20c7481f21645c98832dcaa3788aa057a19b44a1df42b74f0e1353c0bebf705d361c","ssdeep":"","tlshash":"7fa002f934b83550c1546982ade033662dde0af469c1525539f1263b39e0b2c9d01219","first_seen":"2025-07-24T01:13:53.488169Z","last_seen":"2025-11-17T08:56:43.627379Z","times_seen":34,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-02","alert":"Sinkholed","trigger":"a.labadena.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qweqwr.lixstreaming.com/api/wood?mirror=88b37cf56c614021897c4cf1d185ebc2","fqdn":"qweqwr.lixstreaming.com","domain":"lixstreaming.com","tld":"com"},"ip":{"addr":"47.252.40.106","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:04.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"qweqwr.lixstreaming.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BA:A3:0B:A1:14:DD:5E:F0:4E:74:8F:87:B8:38:0F:ED:57:EF:D0:81","sha256":"A1:9C:AF:B4:73:B5:83:CA:D2:9A:D3:EA:DA:FE:13:CA:A0:3E:F9:8E:97:11:13:9A:31:68:13:5C:ED:D0:EF:E6"}}},"request":{"raw":"GET /api/wood?mirror=88b37cf56c614021897c4cf1d185ebc2 HTTP/1.1\r\nHost: qweqwr.lixstreaming.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.streamlinkttw.com/\r\nContent-Type: application/json\r\ntruth: lixstreaming.com\r\npizza: 0082daa5-e46c-4599-ae39-524f90cde47b\r\ntext: US\r\ncoffee: 2\r\nOrigin: https://www.streamlinkttw.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Mon, 03 Nov 2025 03:54:04 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type,truth,feature,pizza,text,senior,coffee\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T02:23:19.368905Z","times_seen":13918819,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=349919","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:04.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 02:47:45 GMT","end":"Thu, 13 Nov 2025 02:47:44 GMT"},"fingerprint":{"sha1":"F4:AD:2A:0D:F1:0A:AB:04:F2:6F:6F:72:39:99:7F:4B:E4:5B:2E:4C","sha256":"12:8C:54:04:9B:26:0A:7E:35:D0:23:72:4F:A8:FC:52:77:D0:9D:FA:F5:AC:FE:2F:D2:49:97:F4:24:B6:72:0A"}}},"request":{"raw":"OPTIONS /fp?tag_id=349919 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.streamlinkttw.com/\r\nOrigin: https://www.streamlinkttw.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.20.1\r\nDate: Mon, 03 Nov 2025 03:54:04 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nAccess-Control-Allow-Origin: https://www.streamlinkttw.com\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T02:23:19.368905Z","times_seen":13918819,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":85,"dns":1,"connect":27,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-02","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=349919","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:04.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 Aug 2025 02:47:45 GMT","end":"Thu, 13 Nov 2025 02:47:44 GMT"},"fingerprint":{"sha1":"F4:AD:2A:0D:F1:0A:AB:04:F2:6F:6F:72:39:99:7F:4B:E4:5B:2E:4C","sha256":"12:8C:54:04:9B:26:0A:7E:35:D0:23:72:4F:A8:FC:52:77:D0:9D:FA:F5:AC:FE:2F:D2:49:97:F4:24:B6:72:0A"}}},"request":{"raw":"POST /fp?tag_id=349919 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 1971\r\nOrigin: https://www.streamlinkttw.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Mon, 03 Nov 2025 03:54:04 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nContent-Length: 58\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://www.streamlinkttw.com\r\nSet-Cookie: id=813942916908831326; Expires=Tue, 03 Nov 2026 03:54:04 GMT; Secure; SameSite=None\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c4efc1d6d16235d9433cd2565d887460","sha1":"22d069a5f536640e46122475c79db933e82d7f2e","sha256":"f0a6b8c736b7d8c5d3304a9ccd10d2114a0f25f2ba946cce62204df3384a131f","sha512":"af1cfe529f3173efdc7f4aff67355529095e775d8edb38d8a7c9565e09807aff470a465ffdf89ef6555f06cc88efa675823becc942896c63fa64a3140858f539","ssdeep":"","tlshash":"5ba00294c5c00e3c80200c3a73cf901628e4d304120217880ca66b5108822abe333c91","first_seen":"2025-07-26T17:44:43.174102Z","last_seen":"2026-04-19T01:23:10.688117Z","times_seen":6280,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":24,"send":0,"wait":25,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-02","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","fqdn":"www.streamlinkttw.com","domain":"streamlinkttw.com","tld":"com"},"ip":{"addr":"172.67.194.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-03T03:53:57.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"streamlinkttw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 06:04:57 GMT","end":"Thu, 25 Dec 2025 07:02:21 GMT"},"fingerprint":{"sha1":"53:BB:BB:1F:BB:55:14:9A:0A:B7:E3:FB:B4:39:A8:68:66:94:99:0C","sha256":"3E:EB:CF:6B:A8:E0:86:DD:A6:7D:62:C2:87:34:84:1D:45:DF:9A:A2:E7:33:EF:C2:45:2F:18:8B:62:AD:33:4E"}}},"request":{"raw":"GET /s/SoJiEP5A?lv1=doodbd.com HTTP/1.1\r\nHost: www.streamlinkttw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 03 Nov 2025 03:53:59 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\ncloudservicediscount: CDN\r\nx-amz-request-id: 0000019A3808053CB0D835C95F931FBC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Xg5wggWYFnoBoxvSOWBRKJ5Nf9KMhbaRz2R9Amik6kyf7id9dIA0CiM3GhZ96vfDW4Dsnqp7giODY8%2BacVfYe6XtgfXbHUeiU4pyw7Bo9QZ%2BoV%2F0g%3D%3D\"}]}\r\nlast-modified: Fri, 31 Oct 2025 02:09:49 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: EA-IDN-kabbekasi-EDGE4-CACHE2[4],EA-IDN-kabbekasi-EDGE4-CACHE6[0,TCP_HIT,3],EA-SGP-GLOBAL1-CACHE10[2],EA-SGP-GLOBAL1-CACHE16[0,TCP_HIT,1]\r\nx-hcs-proxy-type: 1\r\nx-ccdn-cachettl: 2592000\r\nx-ccdn-req-id-46b1: 40b62df5308039ac317381ef5a4e8bb7\r\nnginx-hit: 1\r\nage: 265365\r\nx-ccdn-expires: 2326635\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9988ed759f330883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2553,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"6747cecf1cb0de463948f9fb568795bd","sha1":"124537b85b4dc3acdc862a10fb2ba73ecc51f2d8","sha256":"e311256d0855bd331fb56949a8ed7e63062aae58e2105ed9d04ba1ecf0faa407","sha512":"a799a69898ae29c1c15f9e2d1ccad75edbcbcccd616e10bdaf102c86021f65f35deba41b96f10f1e73ec099011ac731b30173daf3e47dad426fc32cd15f5093c","ssdeep":"","tlshash":"1b51630b2ef38815652189596fe7f11c6e55a2032b1aec4435dd6178df85f83cdc3aa4","first_seen":"2025-10-31T08:54:22.789414Z","last_seen":"2025-11-03T03:56:15.065216Z","times_seen":13,"resource_available":false,"data":null}},"time_used":2246,"timings":{"blocked":196,"dns":6,"connect":1,"send":0,"wait":1853,"receive":0,"ssl":187},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bereave.onelinevideo.com/moire/calibre/eclipse","fqdn":"bereave.onelinevideo.com","domain":"onelinevideo.com","tld":"com"},"ip":{"addr":"47.253.93.134","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:02.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bereave.onelinevideo.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 21 Apr 2025 00:00:00 GMT","end":"Mon, 20 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:8E:3E:B2:04:D3:F1:8E:24:9D:86:3A:9E:82:A4:F5:45:3F:D1:AD","sha256":"92:99:82:77:56:12:E5:7A:6F:E4:9E:E1:33:D0:ED:6E:11:A4:AF:65:E4:1A:60:B9:75:F8:9B:59:74:D7:01:8B"}}},"request":{"raw":"POST /moire/calibre/eclipse HTTP/1.1\r\nHost: bereave.onelinevideo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.streamlinkttw.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 935\r\nOrigin: https://www.streamlinkttw.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 03 Nov 2025 03:54:02 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"7cf60ff717f59a76730e2b20564feaed","sha1":"895652cec506cb4bce163b6c49727c1e3b6a3978","sha256":"806dfb2f8603a65f4eba57514ec1760e9ac0b099930eb5984ec72e339f628d1d","sha512":"7d51c62c89f6c182012b77dc319aaa9e8f06983b316afba299a7dfefa20cef7d8faeaa5787baee423b90d6dca72d59f03b2e54235bf854568e86fc096e6997ee","ssdeep":"","tlshash":"3d800430f701111034457440345c41d13340d5c445101001410533d451010dc410c0c7","first_seen":"2025-11-03T03:54:29.490346Z","last_seen":"2025-11-03T03:54:29.490346Z","times_seen":1,"resource_available":false,"data":null}},"time_used":993,"timings":{"blocked":443,"dns":100,"connect":111,"send":0,"wait":107,"receive":0,"ssl":230},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/v2-banner.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"172.66.163.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:02.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tapioni.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 10:12:45 GMT","end":"Tue, 16 Dec 2025 11:12:39 GMT"},"fingerprint":{"sha1":"53:EE:30:9F:D0:82:6E:D3:05:D7:06:C0:89:A1:7F:95:D2:E2:01:7E","sha256":"21:58:AE:A3:46:B3:6B:EB:5F:82:88:D2:99:DE:87:F2:60:5D:36:27:10:AC:28:89:4F:06:F7:18:18:B4:95:23"}}},"request":{"raw":"GET /v2-banner.js HTTP/1.1\r\nHost: cdn.tapioni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 03 Nov 2025 03:54:02 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Oct 2025 10:41:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f8b4f4-aac3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\ncontent-encoding: gzip\r\nage: 156954\r\ncf-cache-status: HIT\r\ncf-ray: 9988ed95bd54c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43715,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22070)","md5":"24f2596da553d7ea6de52e9a9bd23ec0","sha1":"13ca468e42cb0029ba3d4c7721e4a5892209fb02","sha256":"848f835731fc5e7b3e7e0c7ecf819a63e5630f1521af04735442456e8f79a7e6","sha512":"608624d569c494f3751a0fa974a16a7a97f9fb3b2f59fc2def0f88415b3df30ee71098229fb0d3cb3a9acd582d3e2c5c78fc9ea076dca78cfb3b66d1ef3169f4","ssdeep":"768:qqXHdIMNXNVLndxvWlIRsIXAEXnd+Pz+oDdxfCQ5Li06/ajHveG+L8e6JA+Ok4wu:q677LdeMWj75phj+DcCP","tlshash":"6c13c58d72a6b07583e654ba403f5206f3363559754ac0acf66decd26c3888a9237f7c","first_seen":"2025-10-22T18:26:11.392026Z","last_seen":"2025-11-13T04:10:55.302719Z","times_seen":68,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":33,"dns":5,"connect":4,"send":0,"wait":6,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-02","alert":"Sinkholed","trigger":"cdn.tapioni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a.labadena.com/api/v2/items/497057?ev=407\u0026s1=1923286547889786882\u0026fs1=1\u0026sid=542eeb91-a3e0-4769-a553-035d2839afe7\u0026i=1\u0026ab=0\u0026ww=1280\u0026wh=1024\u0026url=https%3A%2F%2Fwww.streamlinkttw.com%2Fs%2FSoJiEP5A%3Flv1%3Ddoodbd.com","fqdn":"a.labadena.com","domain":"labadena.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:02.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.labadena.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 23:28:42 GMT","end":"Sun, 07 Dec 2025 23:28:41 GMT"},"fingerprint":{"sha1":"75:0C:2C:D1:88:D9:87:78:0A:96:30:7B:67:42:16:4C:38:3E:51:6C","sha256":"2D:C0:E0:B0:44:25:E2:6F:08:EA:D5:19:60:6E:39:05:4F:0A:AC:38:FA:D8:9F:D6:B8:A1:C4:6F:3B:67:51:37"}}},"request":{"raw":"GET /api/v2/items/497057?ev=407\u0026s1=1923286547889786882\u0026fs1=1\u0026sid=542eeb91-a3e0-4769-a553-035d2839afe7\u0026i=1\u0026ab=0\u0026ww=1280\u0026wh=1024\u0026url=https%3A%2F%2Fwww.streamlinkttw.com%2Fs%2FSoJiEP5A%3Flv1%3Ddoodbd.com HTTP/1.1\r\nHost: a.labadena.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.streamlinkttw.com/\r\nOrigin: https://www.streamlinkttw.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 03:54:02 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.streamlinkttw.com\r\nset-cookie: nauid=bw1IK96TLL6bSTbYy9UH; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"2073a0d64110211332eb7aa923d396f5","sha1":"dcc4d8bcf55696ae1c21d99688676d7384ce0238","sha256":"45875545655957b8ee5258067968372f262ef09d8ceb5bb060fc594165ee0d01","sha512":"cd791b4de02ed54ce019067cb72aac014eb4fb64e5ef940106607c5e6aad20c7481f21645c98832dcaa3788aa057a19b44a1df42b74f0e1353c0bebf705d361c","ssdeep":"","tlshash":"7fa002f934b83550c1546982ade033662dde0af469c1525539f1263b39e0b2c9d01219","first_seen":"2025-07-24T01:13:53.488169Z","last_seen":"2025-11-17T08:56:43.627379Z","times_seen":34,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-02","alert":"Sinkholed","trigger":"a.labadena.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.lixstreamingcaio.com/v1/user/gray/rules/check","fqdn":"api.lixstreamingcaio.com","domain":"lixstreamingcaio.com","tld":"com"},"ip":{"addr":"172.67.200.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:02.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lixstreamingcaio.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 09:33:43 GMT","end":"Wed, 21 Jan 2026 10:32:28 GMT"},"fingerprint":{"sha1":"4B:56:A4:B4:FD:CC:C3:10:87:7C:9D:AF:AA:DD:15:76:A6:A6:24:82","sha256":"47:9F:6B:6B:87:90:3E:BD:D7:80:43:FF:15:2C:13:C1:55:79:08:46:0A:9F:49:69:9F:4A:06:B8:50:C5:B3:3A"}}},"request":{"raw":"OPTIONS /v1/user/gray/rules/check HTTP/1.1\r\nHost: api.lixstreamingcaio.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.streamlinkttw.com/\r\nOrigin: https://www.streamlinkttw.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 03 Nov 2025 03:54:03 GMT\r\ncontent-length: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BjRSGlpX67M5wpFQ8qysM%2Flwg3tKL%2FDoaHBGe481PUE14XGNqTz%2BnXVM4zPRtPRiMgUKE2NMYkN5k%2FX2GQPg2DFxv9K8kL3ujNO7uu0A%2Bgft7%2BQsEP18zA%3D%3D\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.streamlinkttw.com\r\naccess-control-allow-methods: OPTIONS,GET,POST,PUT,DELETE\r\naccess-control-allow-headers: content-type\r\naccess-control-expose-headers: X-Error-Code\r\naccess-control-allow-credentials: true\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9988ed959a625ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T02:23:19.368905Z","times_seen":13918819,"resource_available":true,"data":null}},"time_used":849,"timings":{"blocked":7,"dns":1,"connect":0,"send":0,"wait":841,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.labadena.com/api/users/494333?host=www.streamlinkttw.com\u0026ev=224\u0026wh=1024\u0026ww=1280\u0026uuid=\u0026url=https%3A%2F%2Fwww.streamlinkttw.com%2Fs%2FSoJiEP5A%3Flv1%3Ddoodbd.com\u0026sid=542eeb91-a3e0-4769-a553-035d2839afe7\u0026ab=1\u0026i=1\u0026s1=1923286547889786882\u0026fs1=1\u0026url=https%3A%2F%2Fwww.streamlinkttw.com%2Fs%2FSoJiEP5A%3Flv1%3Ddoodbd.com","fqdn":"a.labadena.com","domain":"labadena.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:03.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.labadena.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 23:28:42 GMT","end":"Sun, 07 Dec 2025 23:28:41 GMT"},"fingerprint":{"sha1":"75:0C:2C:D1:88:D9:87:78:0A:96:30:7B:67:42:16:4C:38:3E:51:6C","sha256":"2D:C0:E0:B0:44:25:E2:6F:08:EA:D5:19:60:6E:39:05:4F:0A:AC:38:FA:D8:9F:D6:B8:A1:C4:6F:3B:67:51:37"}}},"request":{"raw":"GET /api/users/494333?host=www.streamlinkttw.com\u0026ev=224\u0026wh=1024\u0026ww=1280\u0026uuid=\u0026url=https%3A%2F%2Fwww.streamlinkttw.com%2Fs%2FSoJiEP5A%3Flv1%3Ddoodbd.com\u0026sid=542eeb91-a3e0-4769-a553-035d2839afe7\u0026ab=1\u0026i=1\u0026s1=1923286547889786882\u0026fs1=1\u0026url=https%3A%2F%2Fwww.streamlinkttw.com%2Fs%2FSoJiEP5A%3Flv1%3Ddoodbd.com HTTP/1.1\r\nHost: a.labadena.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/\r\nCookie: nauid=K3KRUWAvBTZccZ7U0aVG\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 03:54:04 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":672,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (362)","md5":"bc3958ef76742d72e10bf499b6e8b739","sha1":"c74e14fa34caaf8602eaf7c5193b7432ecd9d051","sha256":"a8ecd2c74c908a03c4f8e6da39a95f65ab9f2b0201632de12e95a12a3baf8830","sha512":"4a7d27078452ca31172dce0a98eb69f874b80be16951e75e0d502f67fe90d23da3f86d5138d121408aca431a25110a96dd4a38dddf6b43976289b5a6c0c75c24","ssdeep":"","tlshash":"5b0102c5429c6aff870861f3dd3d4f764a4d49783b58641aff78931a54ca18203b029f","first_seen":"2025-11-03T03:54:29.491905Z","last_seen":"2025-11-03T03:54:29.491905Z","times_seen":1,"resource_available":false,"data":null}},"time_used":601,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":601,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-02","alert":"Sinkholed","trigger":"a.labadena.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"js.capndr.com/advertising.js","fqdn":"js.capndr.com","domain":"capndr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:04.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.capndr.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Oct 2025 02:32:03 GMT","end":"Sun, 11 Jan 2026 02:32:02 GMT"},"fingerprint":{"sha1":"4F:91:E2:5E:A1:B1:4D:7F:49:01:1E:73:C6:07:EB:0A:BE:44:4C:44","sha256":"7B:0D:8E:03:0E:6E:23:65:30:3D:E8:FC:0C:E7:66:46:E2:5B:7F:FA:FD:D2:FF:61:4C:A4:18:08:24:70:51:6B"}}},"request":{"raw":"GET /advertising.js HTTP/1.1\r\nHost: js.capndr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 03 Nov 2025 03:54:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nlast-modified: Fri, 14 Jul 2023 08:23:25 GMT\r\netag: \"64b105fd-0\"\r\nexpires: Mon, 03 Nov 2025 03:59:04 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1747\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T02:23:19.368905Z","times_seen":13918819,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":77,"dns":26,"connect":21,"send":0,"wait":23,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"js.capndr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c558b1f93b.d6468dab54.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxNTA1MjU1MzM5NTE3ODUzNzAwIiwidGltZXpvbmUiOjAsInZlciI6IjIuMzguNyIsInRhZ19pZCI6MzQ5OTE5LCJzY3JlZW5fcmVzb2x1dGlvbiI6IjEyODB4MTAyNCIsImFkYmxvY2siOjAsInRpbWV6b25lX29sc29uIjoiVVRDIiwidXRtX3NvdXJjZSI6IiIsInV0bV9tZWRpdW0iOiIiLCJ1dG1fY2FtcGFpZ24iOiIiLCJ1dG1fY29udGVudCI6IiIsIm1tIjowLCJpbml0X3N0YXJ0X2xhdGVuY3kiOjAuMjksImlzX3YyIjowLCJpc192Ml9lbXB0eSI6MH0=","fqdn":"c558b1f93b.d6468dab54.com","domain":"d6468dab54.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:04.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c558b1f93b.d6468dab54.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Oct 2025 02:47:59 GMT","end":"Thu, 29 Jan 2026 02:47:58 GMT"},"fingerprint":{"sha1":"73:92:A3:53:52:26:E8:4B:30:8A:63:81:A1:BD:40:66:30:AB:D9:2B","sha256":"3A:72:DF:A4:CA:E9:A9:58:6D:D0:42:92:FB:BD:96:10:D3:DC:7A:7D:13:A2:48:7D:9E:56:23:EC:11:3D:F2:9F"}}},"request":{"raw":"GET /in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxNTA1MjU1MzM5NTE3ODUzNzAwIiwidGltZXpvbmUiOjAsInZlciI6IjIuMzguNyIsInRhZ19pZCI6MzQ5OTE5LCJzY3JlZW5fcmVzb2x1dGlvbiI6IjEyODB4MTAyNCIsImFkYmxvY2siOjAsInRpbWV6b25lX29sc29uIjoiVVRDIiwidXRtX3NvdXJjZSI6IiIsInV0bV9tZWRpdW0iOiIiLCJ1dG1fY2FtcGFpZ24iOiIiLCJ1dG1fY29udGVudCI6IiIsIm1tIjowLCJpbml0X3N0YXJ0X2xhdGVuY3kiOjAuMjksImlzX3YyIjowLCJpc192Ml9lbXB0eSI6MH0= HTTP/1.1\r\nHost: c558b1f93b.d6468dab54.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.streamlinkttw.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 03 Nov 2025 03:54:04 GMT\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nx-cdn-host-id: AH1747\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T02:23:19.368905Z","times_seen":13918819,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":118,"dns":76,"connect":21,"send":0,"wait":33,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-03","alert":"Sinkholed","trigger":"c558b1f93b.d6468dab54.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.221.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:04.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:39:49 GMT","end":"Mon, 05 Jan 2026 08:39:48 GMT"},"fingerprint":{"sha1":"00:1E:AE:67:BB:25:41:AD:21:F2:16:82:FE:7C:79:27:80:DB:D9:9D","sha256":"69:46:2C:32:2B:8C:37:3A:EC:D5:1E:DF:4E:0A:3D:1A:AD:70:5B:07:77:3B:6B:59:E3:84:19:E2:3E:F1:42:0F"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:wH4m5kaGSbGJiv1xOZZKwLjN6t1BsA:PsYmeJJDmpx4Ycux; Expires=Wed, 03-Nov-2027 03:54:05 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 03 Nov 2025 03:54:05 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S-886561334:1762142045058751\u0026ifkv=ARESoU3A0UVywQ304Yj-L6v-Gy9QT678eEmh-xwwE8E561uIIFYix4243Bv4ARuslUIWIwTzM9jA\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-opener-policy: unsafe-none\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-Bu-f98_MGpvfLx3D3aCs-Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T02:23:19.368905Z","times_seen":13918819,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":91,"dns":0,"connect":29,"send":0,"wait":36,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.streamlinkttw.com/assets/money1@2x-DPJsf2Dt-1761876578022.png","fqdn":"www.streamlinkttw.com","domain":"streamlinkttw.com","tld":"com"},"ip":{"addr":"172.67.194.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:01.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"streamlinkttw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 06:04:57 GMT","end":"Thu, 25 Dec 2025 07:02:21 GMT"},"fingerprint":{"sha1":"53:BB:BB:1F:BB:55:14:9A:0A:B7:E3:FB:B4:39:A8:68:66:94:99:0C","sha256":"3E:EB:CF:6B:A8:E0:86:DD:A6:7D:62:C2:87:34:84:1D:45:DF:9A:A2:E7:33:EF:C2:45:2F:18:8B:62:AD:33:4E"}}},"request":{"raw":"GET /assets/money1@2x-DPJsf2Dt-1761876578022.png HTTP/1.1\r\nHost: www.streamlinkttw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com\r\nCookie: _ga_FZ6E2FXG92=GS2.1.s1762142039$o1$g0$t1762142039$j60$l0$h0; _ga=GA1.1.768762269.1762142040\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 03 Nov 2025 03:54:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 10394\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VLMuPY6jL6l1i5XIQGWb73N%2FePH8hmk%2BG6k7bUpEQ%2FBLCBki4gMserzH%2BD30xmLDdiuqK5OGSjDRE%2BS8g0MuqyUAPD34kdfZ2DA6fT5FjK%2Fiv7n6kQ%3D%3D\"}]}\r\nserver: cloudflare\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\ncloudservicediscount: CDN\r\nx-amz-request-id: 0000019A380834D7B2DC6DCEDED00AAB\r\netag: \"1a71865293a336ccf972e7023d5be41c\"\r\nlast-modified: Fri, 31 Oct 2025 02:09:49 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: EU-FRA-marseille-EDGE3-CACHE18[7],EU-FRA-marseille-EDGE3-CACHE11[0,TCP_HIT,6],EU-IRL-dublin-GLOBAL1-CACHE9[376],EU-IRL-dublin-GLOBAL1-CACHE2[373,TCP_MISS,375]\r\nx-hcs-proxy-type: 1\r\nx-ccdn-cachettl: 2592000\r\nx-ccdn-req-id-46b1: 7c4e5da51916fad52e9d327270c53d69\r\nnginx-hit: 1\r\nage: 4440\r\nx-ccdn-expires: 2589057\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9988ed8daf81120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":10394,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 68 x 84, 8-bit/color RGBA, non-interlaced","md5":"1a71865293a336ccf972e7023d5be41c","sha1":"04e0b3abc45c37b5568d846196fbfc987ef74542","sha256":"d2f72edc9d01cf622b8e297adb0caab8c6b2e4cd251b0b7c0bcc93ead76dc40c","sha512":"74e0f0a01295ffb4adfda8330ab97b491b6f8f27a5d2cb0c61c54b0a38d5ac5a7c08dd070a9ee290d53b918a9cc2fc2e688b6fa5c8e2fa53d152211627d044ee","ssdeep":"192:geFidH6NyMZqG/aVz/n+Z00vJmYE0cXh/JVcsnFnSwz1KKiSqXQ7Z:geI6NyMQG/aVz/+Zqh/J+snFnSpQl","tlshash":"1d22bf4b1d409b0dea559bf07a6cd8dbcf0c07e039261a975b74c8d9a78f382cb2d448","first_seen":"2025-06-18T09:39:56.911934Z","last_seen":"2026-02-27T13:27:16.342297Z","times_seen":140,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.streamlinkttw.com/favicon.ico","fqdn":"www.streamlinkttw.com","domain":"streamlinkttw.com","tld":"com"},"ip":{"addr":"172.67.194.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:01.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"streamlinkttw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 06:04:57 GMT","end":"Thu, 25 Dec 2025 07:02:21 GMT"},"fingerprint":{"sha1":"53:BB:BB:1F:BB:55:14:9A:0A:B7:E3:FB:B4:39:A8:68:66:94:99:0C","sha256":"3E:EB:CF:6B:A8:E0:86:DD:A6:7D:62:C2:87:34:84:1D:45:DF:9A:A2:E7:33:EF:C2:45:2F:18:8B:62:AD:33:4E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.streamlinkttw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com\r\nCookie: _ga_FZ6E2FXG92=GS2.1.s1762142039$o1$g0$t1762142039$j60$l0$h0; _ga=GA1.1.768762269.1762142040\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 03 Nov 2025 03:54:01 GMT\r\ncontent-type: text/html\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\ncloudservicediscount: CDN\r\nx-amz-request-id: 0000019A38080397B15EC5966FFCE034\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6T5EUtVkqR9URNEUu8fIkvoaAqXBY4SsY1QMYTs3K0rR78rD9%2BE4iZRmj0FJuI2w0A%2FkL4GNmQRUr1Aavq6vf%2FWc8S2k1gjuy6PkYShHvh%2FR8%2FMQxQ%3D%3D\"}]}\r\nlast-modified: Fri, 31 Oct 2025 02:09:49 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: EA-IDN-kabbekasi-EDGE4-CACHE2[2],EA-IDN-kabbekasi-EDGE4-CACHE10[0,TCP_HIT,1],EA-SGP-GLOBAL1-CACHE5[2],EA-SGP-GLOBAL1-CACHE28[0,TCP_HIT,1]\r\nx-hcs-proxy-type: 1\r\nx-ccdn-cachettl: 2592000\r\nx-ccdn-req-id-46b1: 72594189298665f7397bc8ea1f3bd4b0\r\nnginx-hit: 1\r\nage: 265387\r\nx-ccdn-expires: 2326613\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9988ed8f9f95120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2553,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"6747cecf1cb0de463948f9fb568795bd","sha1":"124537b85b4dc3acdc862a10fb2ba73ecc51f2d8","sha256":"e311256d0855bd331fb56949a8ed7e63062aae58e2105ed9d04ba1ecf0faa407","sha512":"a799a69898ae29c1c15f9e2d1ccad75edbcbcccd616e10bdaf102c86021f65f35deba41b96f10f1e73ec099011ac731b30173daf3e47dad426fc32cd15f5093c","ssdeep":"","tlshash":"1b51630b2ef38815652189596fe7f11c6e55a2032b1aec4435dd6178df85f83cdc3aa4","first_seen":"2025-10-31T08:54:22.789414Z","last_seen":"2025-11-03T03:56:15.065216Z","times_seen":13,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qweqwr.lixstreaming.com/api/wood?mirror=5910d8b1c85e47e5b577dff9982bba40","fqdn":"qweqwr.lixstreaming.com","domain":"lixstreaming.com","tld":"com"},"ip":{"addr":"47.252.40.106","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:03.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"qweqwr.lixstreaming.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BA:A3:0B:A1:14:DD:5E:F0:4E:74:8F:87:B8:38:0F:ED:57:EF:D0:81","sha256":"A1:9C:AF:B4:73:B5:83:CA:D2:9A:D3:EA:DA:FE:13:CA:A0:3E:F9:8E:97:11:13:9A:31:68:13:5C:ED:D0:EF:E6"}}},"request":{"raw":"OPTIONS /api/wood?mirror=5910d8b1c85e47e5b577dff9982bba40 HTTP/1.1\r\nHost: qweqwr.lixstreaming.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: coffee,content-type,pizza,text,truth\r\nReferer: https://www.streamlinkttw.com/\r\nOrigin: https://www.streamlinkttw.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 03 Nov 2025 03:54:03 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type,truth,feature,pizza,text,senior,coffee\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T02:23:19.368905Z","times_seen":13918819,"resource_available":true,"data":null}},"time_used":881,"timings":{"blocked":388,"dns":77,"connect":100,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:03.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.wpadmngr.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Nov 2025 03:32:41 GMT","end":"Fri, 30 Jan 2026 03:32:40 GMT"},"fingerprint":{"sha1":"E3:9D:D3:89:FB:90:7B:AA:8C:19:20:0E:65:8F:8A:B8:25:1C:19:1C","sha256":"DA:2F:33:FE:DB:D4:DD:3C:4D:80:E7:DE:2D:70:4B:D7:61:B4:0C:64:DA:A2:78:BB:8F:0B:66:29:AA:A3:2F:37"}}},"request":{"raw":"GET /static/adManager.js HTTP/1.1\r\nHost: js.wpadmngr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 03 Nov 2025 03:54:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Mon, 20 Oct 2025 10:58:05 GMT\r\netag: W/\"68f615bd-24858\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 03 Nov 2025 03:59:03 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":149592,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c90d1ef9543d7d56a6869ed4be6f7847","sha1":"6ff159593c9698ad541e6d3c149847b110c3deb6","sha256":"e7e748a324a548da8ce1ccc081a1339bf22142939106758ba1803fabafc42b2e","sha512":"8ac7ce5a0c7bc4daabb49051583a693f53e9d884f8deb32158c604abe682bfd2969dc1ac4e6ea8c50c0e63684ddd7424770fa0d7fbaf42c113e8118e981f0dbc","ssdeep":"1536:Z2c1pgoXEptQy9RixdpOkxQKf7YbK2Ec+tskajUOPVKIZujAB5R1pKKfVf3dnCjH:eRizplOK8mvDtsjbnujATLQ3+da","tlshash":"64e33ac9b2d2b47407e75099d43f1206f33a1a16b80c9058f6a6e9c17878ddb9237f7a","first_seen":"2025-10-20T14:02:56.309645Z","last_seen":"2025-11-06T12:09:31.49625Z","times_seen":392,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":54,"dns":11,"connect":21,"send":0,"wait":42,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-02","alert":"Sinkholed","trigger":"js.wpadmngr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bvtpk.com/tag.min.js","fqdn":"bvtpk.com","domain":"bvtpk.com","tld":"com"},"ip":{"addr":"172.67.154.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:03.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bvtpk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 16:15:33 GMT","end":"Mon, 08 Dec 2025 17:13:51 GMT"},"fingerprint":{"sha1":"57:53:1B:12:8D:B5:A7:B6:96:E2:B4:FE:90:A1:D8:FA:24:94:9A:B9","sha256":"4E:2A:10:4F:06:F6:4E:34:B3:5A:E6:9B:A2:C7:FC:B2:A4:7D:55:44:3D:06:2B:38:35:A7:52:1D:F2:4E:80:5E"}}},"request":{"raw":"GET /tag.min.js HTTP/1.1\r\nHost: bvtpk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 03 Nov 2025 03:54:03 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-trace-id: 4e9a8b2b6886864e02e3dac6c51d6aae\r\ncache-control: public, max-age=600, s-maxage=1800\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 822\r\ncf-cache-status: HIT\r\nlast-modified: Mon, 03 Nov 2025 03:40:21 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=36CxoNhcNPWPYvJpHT%2BUSmSqu6tTKgylH%2F0ek2qgF9HX3ovqVJeaAqFMt3vaTgDul5PHRraxx%2F%2FeTNJRvm3UCZk9KlgSEFU%3D\"}]}\r\ncf-ray: 9988ed9d5a8f5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110046,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5e24b4f4813f3b1f187e124e1c08f6ff","sha1":"dac5a5ff8bf288a9b86ee4ae2ec7d70e6b6f87f7","sha256":"599b25732e5bc3f3d935133aa9d48a51a1e6b2210ff506084eec48e821d788f0","sha512":"08bc95dfe879b3fc600f1478c1e509109e837a29e48343938e1ff3ce4ff18925f3b37e97c9f4e6611b485c0c6f0e17d71c56f388cc68e770d395899a2038fd65","ssdeep":"1536:40cn7KYaJnZkNaD4NLaZkqCOsyW8Az0SYAKQ4+DIVV7BUK+g:DcwJZkNa8mkqCOK0SYTz39UKz","tlshash":"06b32bd62269241612be8034446bdd1eb5aecd8100cdcdb8e0e6bc762d78b16d3f7bd9","first_seen":"2025-11-01T18:33:38.67089Z","last_seen":"2025-11-03T10:30:31.637443Z","times_seen":53,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":14,"dns":4,"connect":1,"send":0,"wait":7,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"enrtx.com/get/","fqdn":"enrtx.com","domain":"enrtx.com","tld":"com"},"ip":{"addr":"94.130.197.239","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:05.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"popunder-base.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 07:32:10 GMT","end":"Thu, 04 Dec 2025 07:32:09 GMT"},"fingerprint":{"sha1":"50:EA:C1:7E:9B:20:00:A4:62:CE:FD:F9:FD:D2:E9:BE:77:FE:08:47","sha256":"81:9C:C4:CA:23:66:01:BB:6E:7A:21:04:B3:6B:69:EF:E7:F2:C5:8D:CB:6E:F7:3D:A2:3C:90:1F:BE:0B:6F:48"}}},"request":{"raw":"POST /get/ HTTP/1.1\r\nHost: enrtx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.streamlinkttw.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1744\r\nOrigin: https://www.streamlinkttw.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.16.0\r\ndate: Mon, 03 Nov 2025 03:54:05 GMT\r\ncontent-type: application/json\r\ncontent-length: 3092\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.16.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9327,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2f02184981c8df1e05f1fd07128b8142","sha1":"a0e1a82ec8e0637d3f81a1c1989f7690dad0335e","sha256":"19f68abf68559e3eaf8f000ddbf19fe2953f6672cf29d75bd16c7cefc4290e81","sha512":"46d1087f0025387a30d72bcf22f284832a3d27f1608f45f2ba82f079b061cd1c4d5b9111115ea9b87de9e084adc38b01c14893c5ac1f7c2b11ef6b04096c2915","ssdeep":"192:IJJdnNMwKgLdKHEyCWuk3EHcs/4LdKHEyCWikaJJdnNMwKzEHcs/T:IJTDv5mwrk32cs/45mwLkaJTDw2cs/T","tlshash":"31122ba56593e9b2b5ecacc6f9d6a124c59bc0f50c6748cbd9bb06a884cd37b10c1b0c","first_seen":"2025-11-03T03:54:29.494522Z","last_seen":"2025-11-03T03:54:29.494522Z","times_seen":1,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":84,"dns":2,"connect":25,"send":0,"wait":193,"receive":1,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nereserv.com/in/dip?event_id=d788cb35-e55e-4d32-992c-74d85bfd274b\u0026subid=1450210302\u0026spot_id=1457063\u0026created_at=2025-11-03\u0026timezone=0\u0026ver=1.168.30","fqdn":"nereserv.com","domain":"nereserv.com","tld":"com"},"ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:05.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 02:00:40 GMT","end":"Sat, 24 Jan 2026 02:00:39 GMT"},"fingerprint":{"sha1":"2B:72:A9:3F:14:00:92:B9:05:AC:BC:3B:22:CB:D9:87:80:23:C8:3D","sha256":"60:5B:BA:7E:5F:7A:B1:E0:55:4D:4C:29:EA:C7:21:68:37:AF:03:5B:A7:3D:15:98:F1:65:96:AB:4A:3E:17:3B"}}},"request":{"raw":"GET /in/dip?event_id=d788cb35-e55e-4d32-992c-74d85bfd274b\u0026subid=1450210302\u0026spot_id=1457063\u0026created_at=2025-11-03\u0026timezone=0\u0026ver=1.168.30 HTTP/1.1\r\nHost: nereserv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.streamlinkttw.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Mon, 03 Nov 2025 03:54:05 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T02:23:19.368905Z","times_seen":13918819,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-02","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-02","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tapioni.com/asg-iframe.js","fqdn":"cdn.tapioni.com","domain":"tapioni.com","tld":"com"},"ip":{"addr":"172.66.163.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:02.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tapioni.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 10:12:45 GMT","end":"Tue, 16 Dec 2025 11:12:39 GMT"},"fingerprint":{"sha1":"53:EE:30:9F:D0:82:6E:D3:05:D7:06:C0:89:A1:7F:95:D2:E2:01:7E","sha256":"21:58:AE:A3:46:B3:6B:EB:5F:82:88:D2:99:DE:87:F2:60:5D:36:27:10:AC:28:89:4F:06:F7:18:18:B4:95:23"}}},"request":{"raw":"GET /asg-iframe.js HTTP/1.1\r\nHost: cdn.tapioni.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 03 Nov 2025 03:54:02 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 36805\r\nserver: cloudflare\r\nlast-modified: Sat, 01 Nov 2025 08:15:49 GMT\r\nvary: Accept-Encoding\r\netag: \"6905c1b5-8fc5\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\nage: 156936\r\ncf-cache-status: HIT\r\ncf-ray: 9988ed95bd5fc272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105854,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65498), with no line terminators","md5":"120812baeb20fe5dbd662dcdb1fb7746","sha1":"37b61a554b2e9dc0a48581836c84ab2521fea021","sha256":"87077b6acbbac5380f45864c2266025b022106fe30cb2646059434e301f59629","sha512":"b046efa59e036f6b1593414756f663a57715b269297c5c38618552d9476077071bd7600c027723e02a4b05a6962352447b62e437a9327a7366cfd2c464314ee1","ssdeep":"1536:gEHNF1uit1UkmBZmmZEmaRuSeNMJ+CH3G457fH:lHNF1uyDmBZm0jRe8CW45jH","tlshash":"daa3928cf6c2b05607e37574422f600af27b6a54b45f8481e62ad5d07dba94fa03bf2d","first_seen":"2025-11-01T11:36:13.482133Z","last_seen":"2025-11-09T16:02:25.88711Z","times_seen":34,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":38,"dns":7,"connect":6,"send":0,"wait":6,"receive":2,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-02","alert":"Sinkholed","trigger":"cdn.tapioni.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sm.videqqwuieyui.com/thumbnails/xbox-streaming/1923286547889786882/0df14b3c-c27f-4d77-b6c3-a7f7e8102759/screenshot/3x3.jpg","fqdn":"sm.videqqwuieyui.com","domain":"videqqwuieyui.com","tld":"com"},"ip":{"addr":"34.126.238.65","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:03.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sm.videqqwuieyui.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 02:19:36 GMT","end":"Fri, 14 Nov 2025 03:15:32 GMT"},"fingerprint":{"sha1":"71:D4:0D:05:26:FE:0C:0D:3F:32:81:CC:67:68:50:74:BC:FE:94:5F","sha256":"CC:7D:3A:D6:24:63:7F:A9:52:40:6C:3C:F2:19:37:AD:CF:80:2D:0F:99:1E:C1:30:08:9D:E8:58:35:39:77:06"}}},"request":{"raw":"GET /thumbnails/xbox-streaming/1923286547889786882/0df14b3c-c27f-4d77-b6c3-a7f7e8102759/screenshot/3x3.jpg HTTP/1.1\r\nHost: sm.videqqwuieyui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 165228\r\nserver: Google-Edge-Cache\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\ncloudservicediscount: CDN\r\nx-amz-request-id: 0000019A4729A400B2D9BDFE9B2E3F05\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nx-ccdn-origin-time: 345\r\nvia: EU-NLD-amsterdam-EDGE3-CACHE1[356],EU-NLD-amsterdam-EDGE3-CACHE1[355,TCP_MISS,355],EU-GER-frankfurt-GLOBAL1-CACHE12[346],EU-GER-frankfurt-GLOBAL1-CACHE1[345,TCP_MISS,346]\r\nx-hcs-proxy-type: 0\r\nx-ccdn-cachettl: 2592000\r\nx-ccdn-req-id-46b1: 664038df6e7927130a812fc31ef00977\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\nx-request-id: f5a88e0e-f119-4033-b18e-6b8bdfe4ad78\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ndate: Mon, 03 Nov 2025 00:41:42 GMT\r\nage: 11541\r\nlast-modified: Wed, 29 Oct 2025 04:57:28 GMT\r\netag: \"12a54532211a22211954f09ea803eb59\"\r\ncontent-type: image/jpeg\r\ncache-control: public,max-age=86000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":165228,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1632x2160, components 3","md5":"12a54532211a22211954f09ea803eb59","sha1":"33a80b74ad607af8f911578311e3c56d890f9073","sha256":"5f54d4d1f80b8098cc0f8ffd1fdd536293f3b99e6997aa93efedb54fbef0f86b","sha512":"8e86b9dd91487594f7d4dee1da40f625e30305056f8599d21ca912dc48b9731d4654da7be67649aad1106f86f25d4409aa48eee4665717fe89bb495c70374703","ssdeep":"3072:yRy0fP1oMEOtY3W4pHVwumGn1As1lw/KTNSoT5Z18q8qpI0uZY0zuf:yw0H1oMjtY3NpH6umGTgGSm7D8gu206","tlshash":"23f312ba6e197104cd1c1b7191fb84e4bf2b44fc6d8a8f091ca80d1aaf31e6a7d75a11","first_seen":"2025-11-03T03:54:29.496115Z","last_seen":"2025-11-03T03:54:29.496115Z","times_seen":1,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":227,"dns":12,"connect":7,"send":0,"wait":11,"receive":26,"ssl":205},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accuratephrase.com/cqDJ9V6rb.2U5jl/S/WDQM9WN/jHY/4OOCD-kf3/NqiV0j2_NDjKgH4cODTtce3l","fqdn":"accuratephrase.com","domain":"accuratephrase.com","tld":"com"},"ip":{"addr":"188.72.219.35","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:03.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"accuratephrase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Oct 2025 06:43:11 GMT","end":"Sat, 10 Jan 2026 06:43:10 GMT"},"fingerprint":{"sha1":"5C:01:82:3D:3E:91:A2:72:76:A4:E8:DA:42:F8:FD:E6:74:85:B6:CF","sha256":"70:75:DE:E9:C6:17:AD:2B:3D:6E:6A:92:30:CC:7F:07:FE:0A:01:18:13:08:46:C7:F6:A5:EE:0D:04:8E:7E:00"}}},"request":{"raw":"GET /cqDJ9V6rb.2U5jl/S/WDQM9WN/jHY/4OOCD-kf3/NqiV0j2_NDjKgH4cODTtce3l HTTP/1.1\r\nHost: accuratephrase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 03:54:03 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 0\r\naccept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-WoW64\r\nexpires: Mon, 26 Jul 2011 05:00:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: Content-Type\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T02:23:19.368905Z","times_seen":13918819,"resource_available":true,"data":null}},"time_used":335,"timings":{"blocked":146,"dns":25,"connect":18,"send":0,"wait":36,"receive":0,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ntvpforever.com/keywords","fqdn":"ntvpforever.com","domain":"ntvpforever.com","tld":"com"},"ip":{"addr":"116.202.249.56","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:04.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 02:00:40 GMT","end":"Sat, 24 Jan 2026 02:00:39 GMT"},"fingerprint":{"sha1":"2B:72:A9:3F:14:00:92:B9:05:AC:BC:3B:22:CB:D9:87:80:23:C8:3D","sha256":"60:5B:BA:7E:5F:7A:B1:E0:55:4D:4C:29:EA:C7:21:68:37:AF:03:5B:A7:3D:15:98:F1:65:96:AB:4A:3E:17:3B"}}},"request":{"raw":"POST /keywords HTTP/1.1\r\nHost: ntvpforever.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 85\r\nOrigin: https://www.streamlinkttw.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Mon, 03 Nov 2025 03:54:04 GMT\r\ncontent-type: application/json\r\ncontent-length: 15\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"32323194b8b07fd0aa9b6f7fc79a7b30","sha1":"ea248c45722bff267b55a453dc794bc42171cef6","sha256":"080040b4937f3f423f32cd7f19b2a79ba1e1e213f1d9f4f4db4f609d4ad778d8","sha512":"e6b7cefe758be1e47a28ed8fc319cd61814e942838f0f65a26e629f0af39fae2547bece75c020c0cad5294b741a20911757b43b493dea2d3b109e4cf3ae3e9a3","ssdeep":"","tlshash":"9d600008200a08020880a000a20082002000a002002008282880008083002000888800","first_seen":"2023-09-22T06:12:14Z","last_seen":"2026-04-19T00:31:00.215608Z","times_seen":2342,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"36946.phidonatome.com/4/js/260941","fqdn":"36946.phidonatome.com","domain":"phidonatome.com","tld":"com"},"ip":{"addr":"88.208.22.3","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:03.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.phidonatome.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 14:26:35 GMT","end":"Sat, 22 Nov 2025 14:26:34 GMT"},"fingerprint":{"sha1":"26:CF:61:32:62:A2:2E:AA:5B:BB:94:49:87:8F:5F:D3:FC:56:D3:A3","sha256":"11:B6:A8:6E:27:CF:3A:FB:9E:54:98:68:00:99:A8:AE:D3:70:FD:EB:48:73:1C:CE:3E:A1:96:8E:A9:37:C1:09"}}},"request":{"raw":"GET /4/js/260941 HTTP/1.1\r\nHost: 36946.phidonatome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 03:54:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 11324\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nreferrer-policy: unsafe-url\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory\r\naccept-ch-lifetime: 31536000\r\nset-cookie: _ccid=5891197467516507798; expires=Fri, 03 Nov 2028 03:54:03 GMT; domain=phidonatome.com; path=/; HttpOnly; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31409,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (31409), with no line terminators","md5":"25360da07208d4d4da51640e61fe6009","sha1":"febb214d17ab863112aacad4e9e2af672bc85ba9","sha256":"a242b00249274117201ad44010f86a813d2326255c152b5250f40c8d70e30b69","sha512":"ad83e8561d3e8c5b76ba16efd75c9b8a1299cc2ec1d1390ff4d24e70521723e0420988c5a00d1afccba9bd2b8839a2ef2b29a6cc2f84d9fa9889e5c11289a89f","ssdeep":"768:Hkmbr/4nqZVnyTPxVC2/R3hMwsZwJmvnDY87bBZzBPZvzXRb7iGqj:ZyxnufF3qj","tlshash":"8ee22a95f996703043f7187a403f511af3361a94789e8460da2b99c22c66f8b837bf7d","first_seen":"2025-11-03T03:54:29.497893Z","last_seen":"2025-11-03T03:54:29.497893Z","times_seen":1,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":52,"dns":3,"connect":18,"send":0,"wait":18,"receive":2,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qweqwr.lixstreaming.com/api/wood?mirror=5910d8b1c85e47e5b577dff9982bba40","fqdn":"qweqwr.lixstreaming.com","domain":"lixstreaming.com","tld":"com"},"ip":{"addr":"47.252.40.106","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:04.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"qweqwr.lixstreaming.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Tue, 04 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BA:A3:0B:A1:14:DD:5E:F0:4E:74:8F:87:B8:38:0F:ED:57:EF:D0:81","sha256":"A1:9C:AF:B4:73:B5:83:CA:D2:9A:D3:EA:DA:FE:13:CA:A0:3E:F9:8E:97:11:13:9A:31:68:13:5C:ED:D0:EF:E6"}}},"request":{"raw":"GET /api/wood?mirror=5910d8b1c85e47e5b577dff9982bba40 HTTP/1.1\r\nHost: qweqwr.lixstreaming.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.streamlinkttw.com/\r\nContent-Type: application/json\r\ntruth: lixstreaming.com\r\npizza: 0082daa5-e46c-4599-ae39-524f90cde47b\r\ntext: US\r\ncoffee: 2\r\nOrigin: https://www.streamlinkttw.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Mon, 03 Nov 2025 03:54:04 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type,truth,feature,pizza,text,senior,coffee\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T02:23:19.368905Z","times_seen":13918819,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"na.nawpush.com/tags/349919?version_name=a\u0026domain=www.streamlinkttw.com","fqdn":"na.nawpush.com","domain":"nawpush.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:04.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"na.nawpush.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 02:32:20 GMT","end":"Thu, 18 Dec 2025 02:32:19 GMT"},"fingerprint":{"sha1":"38:85:B2:05:59:7D:15:16:9D:87:1B:83:46:10:68:2E:DC:7C:7A:D1","sha256":"FE:22:4E:C6:6F:85:46:CA:64:38:8F:48:77:17:E8:29:0E:7C:14:27:20:EA:A9:7B:CB:5E:49:87:A6:B0:60:2F"}}},"request":{"raw":"GET /tags/349919?version_name=a\u0026domain=www.streamlinkttw.com HTTP/1.1\r\nHost: na.nawpush.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.streamlinkttw.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 03 Nov 2025 03:54:04 GMT\r\ncontent-type: application/json\r\nserver: nginx/1.24.0\r\ncache-control: max-age=300, public\r\nx-cdn-host-id: DS5058\r\nx-proxy-cache: EXPIRED\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1377,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5dd70a623f4cbf0ed7939f9fb00b4d10","sha1":"7a52eb850748b8a8816530eaf337121b6c830159","sha256":"74e5ad814c0761568fc0ad328443276cc5f7643193a25bd16271671ba06e50d3","sha512":"be14beb4b1a89294a0f1e174f582dc39086f38ab6d6f735c91a58e001d8e907aac08e829a9d48c9d944f05c83a63ec788fc6bc874edb42eeefafb9517fe84f23","ssdeep":"","tlshash":"312131ec99759caac0c4478a84d63f4802a4327bb2cc785af5ad49b816cf596192f24b","first_seen":"2025-11-03T03:54:29.498948Z","last_seen":"2025-12-06T16:52:21.472444Z","times_seen":16,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":58,"dns":14,"connect":19,"send":0,"wait":31,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-02","alert":"Sinkholed","trigger":"na.nawpush.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.streamlinkttw.com/assets/money1@2x-DPJsf2Dt-1761876578022.png","fqdn":"www.streamlinkttw.com","domain":"streamlinkttw.com","tld":"com"},"ip":{"addr":"172.67.194.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:01.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"streamlinkttw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 06:04:57 GMT","end":"Thu, 25 Dec 2025 07:02:21 GMT"},"fingerprint":{"sha1":"53:BB:BB:1F:BB:55:14:9A:0A:B7:E3:FB:B4:39:A8:68:66:94:99:0C","sha256":"3E:EB:CF:6B:A8:E0:86:DD:A6:7D:62:C2:87:34:84:1D:45:DF:9A:A2:E7:33:EF:C2:45:2F:18:8B:62:AD:33:4E"}}},"request":{"raw":"GET /assets/money1@2x-DPJsf2Dt-1761876578022.png HTTP/1.1\r\nHost: www.streamlinkttw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com\r\nCookie: _ga_FZ6E2FXG92=GS2.1.s1762142039$o1$g0$t1762142039$j60$l0$h0; _ga=GA1.1.768762269.1762142040\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 03 Nov 2025 03:54:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 10394\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g8omulG8PfDssXitNipaoDPOEqmW5ifOmz6LPfvPxWjOzpd3mwbAfiAsZCkFJky5zxSOYZopoXAQTA2pUljtKEezIYP63VFR0X0kRqeqsFNHnS863Q%3D%3D\"}]}\r\nserver: cloudflare\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\ncloudservicediscount: CDN\r\nx-amz-request-id: 0000019A380834D7B2DC6DCEDED00AAB\r\netag: \"1a71865293a336ccf972e7023d5be41c\"\r\nlast-modified: Fri, 31 Oct 2025 02:09:49 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: EU-FRA-marseille-EDGE3-CACHE18[7],EU-FRA-marseille-EDGE3-CACHE11[0,TCP_HIT,6],EU-IRL-dublin-GLOBAL1-CACHE9[376],EU-IRL-dublin-GLOBAL1-CACHE2[373,TCP_MISS,375]\r\nx-hcs-proxy-type: 1\r\nx-ccdn-cachettl: 2592000\r\nx-ccdn-req-id-46b1: 7c4e5da51916fad52e9d327270c53d69\r\nnginx-hit: 1\r\nage: 4440\r\nx-ccdn-expires: 2589057\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9988ed8dcf83120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":10394,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 68 x 84, 8-bit/color RGBA, non-interlaced","md5":"1a71865293a336ccf972e7023d5be41c","sha1":"04e0b3abc45c37b5568d846196fbfc987ef74542","sha256":"d2f72edc9d01cf622b8e297adb0caab8c6b2e4cd251b0b7c0bcc93ead76dc40c","sha512":"74e0f0a01295ffb4adfda8330ab97b491b6f8f27a5d2cb0c61c54b0a38d5ac5a7c08dd070a9ee290d53b918a9cc2fc2e688b6fa5c8e2fa53d152211627d044ee","ssdeep":"192:geFidH6NyMZqG/aVz/n+Z00vJmYE0cXh/JVcsnFnSwz1KKiSqXQ7Z:geI6NyMQG/aVz/+Zqh/J+snFnSpQl","tlshash":"1d22bf4b1d409b0dea559bf07a6cd8dbcf0c07e039261a975b74c8d9a78f382cb2d448","first_seen":"2025-06-18T09:39:56.911934Z","last_seen":"2026-02-27T13:27:16.342297Z","times_seen":140,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.lixstreamingcaio.com/v2/s/assets/f?id=85b84332-6ce0-4799-a56e-06c86b520e39\u0026uid=1923286547889786882","fqdn":"api.lixstreamingcaio.com","domain":"lixstreamingcaio.com","tld":"com"},"ip":{"addr":"172.67.200.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:02.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lixstreamingcaio.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 09:33:43 GMT","end":"Wed, 21 Jan 2026 10:32:28 GMT"},"fingerprint":{"sha1":"4B:56:A4:B4:FD:CC:C3:10:87:7C:9D:AF:AA:DD:15:76:A6:A6:24:82","sha256":"47:9F:6B:6B:87:90:3E:BD:D7:80:43:FF:15:2C:13:C1:55:79:08:46:0A:9F:49:69:9F:4A:06:B8:50:C5:B3:3A"}}},"request":{"raw":"GET /v2/s/assets/f?id=85b84332-6ce0-4799-a56e-06c86b520e39\u0026uid=1923286547889786882 HTTP/1.1\r\nHost: api.lixstreamingcaio.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.streamlinkttw.com/\r\nContent-Type: application/json\r\nOrigin: https://www.streamlinkttw.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 03 Nov 2025 03:54:03 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x6KZ7at45Njs7K9Vck82lheMO%2BqqBINRjt%2FpDOQG248hnVWSYeIyOKOPqE21Y6tUc8k2RRwjPLgg7sxL4nbSbvu9uWG0wFvqS%2FveC85yQrONN2fOZFLjbw%3D%3D\"}]}\r\ncontent-encoding: br\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.streamlinkttw.com\r\naccess-control-expose-headers: X-Error-Code\r\naccess-control-allow-credentials: true\r\nx-xbox-platform: streaming\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9988ed968a685ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c8d402ab74203ba545824f8fb36a56e5","sha1":"5713625f1117c1c17960526b5a09dd7232c005b2","sha256":"032111fce94a0a79725b589ad45fba98ccd95280087d06402f74d450f54b42c6","sha512":"4c3de92f51814fb8637e3fa397bf26e972d47d5f873cabb5575ab5b0f13e152e20249a0359378a8fa12a8c41dc6140be99dbb63dd533183b8c8012a79aa7aba7","ssdeep":"","tlshash":"11c08c40626b0087a361aef439f6264041b334e8f50126a29988b787a36206391863f5","first_seen":"2025-11-03T03:54:29.499943Z","last_seen":"2025-11-03T03:54:29.499943Z","times_seen":1,"resource_available":false,"data":null}},"time_used":806,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":806,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:03.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Oct 2025 15:37:01 GMT","end":"Sat, 24 Jan 2026 16:36:49 GMT"},"fingerprint":{"sha1":"84:49:FF:DC:BD:D8:BA:3D:2F:25:0B:EF:CA:E4:6D:73:79:8C:F9:7D","sha256":"AF:21:94:4D:14:07:CF:FC:E5:3C:3C:F4:AC:47:9E:83:98:6A:62:87:FB:8C:27:43:25:FB:97:CC:47:15:99:4A"}}},"request":{"raw":"GET /gid.js HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.streamlinkttw.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 03 Nov 2025 03:54:03 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://www.streamlinkttw.com\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=080276feeea04d4eef1b9a38d7ef91b4; expires=Tue, 03 Nov 2026 03:54:03 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9988ed9eb89fb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"448116e31d79366a77b11f7aee8ad772","sha1":"6fefbc3b141da090334ad6302279f779c46fc53f","sha256":"a4c3645f4be5b92de355c9bcf6046afd94adf8353ee71cfff638f58b1e01ed30","sha512":"b3c80342c3940cb7c8fb7ff6e764eb63776ba23e4033eed0a9f71b02d0a98dc2e7945fc318f6c02b819aef77557ba95cf69a916236ab426a2d655889fb82b3f3","ssdeep":"","tlshash":"58a002554ca85b8cc49a6515199fd6a24200b9a6d8446688c7edc0617287a9c4585241","first_seen":"2025-11-03T03:54:29.50112Z","last_seen":"2025-11-03T03:54:29.50112Z","times_seen":1,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":44,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026dsh=S-886561334%3A1762142045058751\u0026hl=en\u0026ifkv=ARESoU1wVQiFZ83FeJyEAy2-Z3qTWf_huIMyqIcFr97h6dzDr4MdrxSJGkzhOq7eXns6_SsGB03j\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.221.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:05.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:39:49 GMT","end":"Mon, 05 Jan 2026 08:39:48 GMT"},"fingerprint":{"sha1":"00:1E:AE:67:BB:25:41:AD:21:F2:16:82:FE:7C:79:27:80:DB:D9:9D","sha256":"69:46:2C:32:2B:8C:37:3A:EC:D5:1E:DF:4E:0A:3D:1A:AD:70:5B:07:77:3B:6B:59:E3:84:19:E2:3E:F1:42:0F"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026dsh=S-886561334%3A1762142045058751\u0026hl=en\u0026ifkv=ARESoU1wVQiFZ83FeJyEAy2-Z3qTWf_huIMyqIcFr97h6dzDr4MdrxSJGkzhOq7eXns6_SsGB03j\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 03 Nov 2025 03:54:05 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-security-policy: script-src 'nonce-tixVS_rXHxHGYgU0M2S7Kw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/ https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.jI09B_3libE.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T02:23:19.368905Z","times_seen":13918819,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-FZ6E2FXG92","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:53:59.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:37:33 GMT","end":"Mon, 05 Jan 2026 08:37:32 GMT"},"fingerprint":{"sha1":"6D:B1:20:6C:4E:45:23:88:91:95:5C:C3:FE:0D:A8:1B:29:43:20:6A","sha256":"15:E2:87:29:F5:07:FE:12:A2:58:8F:EE:D0:AD:2A:AC:63:5D:69:08:82:23:F9:BD:90:70:9F:09:AA:7B:57:8B"}}},"request":{"raw":"GET /gtag/js?id=G-FZ6E2FXG92 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 03 Nov 2025 03:53:59 GMT\r\nexpires: Mon, 03 Nov 2025 03:53:59 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 142064\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":427653,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"14acbdd144a7f285d9e20b87bcfa7dc7","sha1":"89c8692ddb7ac9a9bbebb56f93764070d3bd7dae","sha256":"5b5a4701a02e3fa03f93c62bc76e053487a3a7fb3737e57ed9e475d34f727efd","sha512":"2ce8f381fb12f7e8b154244af5e1555d7bbbeb4d328858d3c40d1dbb8be88b236bbb3ddbf989358b90a1faa2963baf9f7ddf72694d1e9d986d389ac06cf08563","ssdeep":"6144:X4Bm5HIy2n8fud75KGq6A0RI6TLiYYg/FOY9ftLHAJpaAmn/xS2GqH:XWiHITiud75KGq6hvLiYlAJ6D","tlshash":"e69419ce73c670269396f078503f118ba47b29a2b45cc896f189cce42d74a9a4277f7c","first_seen":"2025-11-03T03:54:29.502285Z","last_seen":"2025-11-03T03:56:15.089678Z","times_seen":2,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":61,"dns":1,"connect":8,"send":0,"wait":25,"receive":25,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.streamlinkttw.com/assets/icon-L3kzdSYP-1761876578022.png","fqdn":"www.streamlinkttw.com","domain":"streamlinkttw.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:01.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"streamlinkttw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 06:04:57 GMT","end":"Thu, 25 Dec 2025 07:02:21 GMT"},"fingerprint":{"sha1":"53:BB:BB:1F:BB:55:14:9A:0A:B7:E3:FB:B4:39:A8:68:66:94:99:0C","sha256":"3E:EB:CF:6B:A8:E0:86:DD:A6:7D:62:C2:87:34:84:1D:45:DF:9A:A2:E7:33:EF:C2:45:2F:18:8B:62:AD:33:4E"}}},"request":{"raw":"GET /assets/icon-L3kzdSYP-1761876578022.png HTTP/1.1\r\nHost: www.streamlinkttw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com\r\nCookie: _ga_FZ6E2FXG92=GS2.1.s1762142039$o1$g0$t1762142039$j60$l0$h0; _ga=GA1.1.768762269.1762142040\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T02:23:19.368905Z","times_seen":13918819,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.labadena.com/api/spots/494335?p=1\u0026s1=1923286547889786882\u0026kw=","fqdn":"a.labadena.com","domain":"labadena.com","tld":"com"},"ip":{"addr":"37.27.230.125","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:02.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.labadena.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 23:28:42 GMT","end":"Sun, 07 Dec 2025 23:28:41 GMT"},"fingerprint":{"sha1":"75:0C:2C:D1:88:D9:87:78:0A:96:30:7B:67:42:16:4C:38:3E:51:6C","sha256":"2D:C0:E0:B0:44:25:E2:6F:08:EA:D5:19:60:6E:39:05:4F:0A:AC:38:FA:D8:9F:D6:B8:A1:C4:6F:3B:67:51:37"}}},"request":{"raw":"GET /api/spots/494335?p=1\u0026s1=1923286547889786882\u0026kw= HTTP/1.1\r\nHost: a.labadena.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 03 Nov 2025 03:54:02 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nset-cookie: nauid=K3KRUWAvBTZccZ7U0aVG; Path=/; Expires=Wed, 11 Nov 2037 11:11:11 GMT; Secure; SameSite=None\r\nx-robots-tag: noindex, nofollow\r\ncache-control: private\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"25ef3d8ad8226570544245957e03b285","sha1":"c601553111952827c04f06e950b7c1268e79dfe3","sha256":"61878c58faf5dd78bd789a275bc3b851afa487e90803612ac26a2b3a9079749c","sha512":"8111c7bb399d9e038823c839feba88a87503acc07a5aeba567ee8470ae15b58abc6ec3eaf36cb69788969dd823275ed06ad5c816c40b38f0f080d7d8841810cd","ssdeep":"","tlshash":"8aa002f9347c3510816469a1acd0337229ee07e569ca515539e2263f39a0b2c9d0011d","first_seen":"2025-07-24T01:13:53.512782Z","last_seen":"2025-11-04T05:39:23.547837Z","times_seen":23,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":47,"dns":7,"connect":14,"send":0,"wait":14,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-02","alert":"Sinkholed","trigger":"a.labadena.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.lixstreamingcaio.com/v2/s/push/videos/1923286547889786882","fqdn":"api.lixstreamingcaio.com","domain":"lixstreamingcaio.com","tld":"com"},"ip":{"addr":"172.67.200.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:03.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lixstreamingcaio.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 09:33:43 GMT","end":"Wed, 21 Jan 2026 10:32:28 GMT"},"fingerprint":{"sha1":"4B:56:A4:B4:FD:CC:C3:10:87:7C:9D:AF:AA:DD:15:76:A6:A6:24:82","sha256":"47:9F:6B:6B:87:90:3E:BD:D7:80:43:FF:15:2C:13:C1:55:79:08:46:0A:9F:49:69:9F:4A:06:B8:50:C5:B3:3A"}}},"request":{"raw":"GET /v2/s/push/videos/1923286547889786882 HTTP/1.1\r\nHost: api.lixstreamingcaio.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.streamlinkttw.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 03 Nov 2025 03:54:03 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fiVvt8Q%2BFEHlvkT4RqFyU%2BG%2B2M0DAdanPQM%2Bjn2uhCmi%2FfqoAmDi7SXE8j8i1OwWS8E2s0Jba5eL%2BSLaBbMipnc07DSbdX90EzrlsRpR2xyHepQqZt7jZQ%3D%3D\"}]}\r\ncontent-encoding: br\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.streamlinkttw.com\r\naccess-control-expose-headers: X-Error-Code\r\naccess-control-allow-credentials: true\r\nx-xbox-platform: streaming\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9988ed9bca925ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4429,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"24babe119cf2bbf755bafc95877b8a62","sha1":"92f99e1f7d3bd83314ab1b25282b2a63b827c0a5","sha256":"aa3b61d129657e2d1ad2c03dabbda70af40d55cadb0f979d0645fef9d1d33ef7","sha512":"0a55f8ed6fdc2a70eb8e09f20d81c484e4babd37ce04032bd64fd7e186253e576a1988fdc69145747a9074efcfad40a7b1657f0baf1e02a77111b2036c3e7d4a","ssdeep":"96:+03JqJJ35HLA8LZgCgxWLDx+DkqMLTGLu+Lm+L/GXLY8:+0YJpH08mZxW/x+IqMfGK+a+aX88","tlshash":"ec91e3f78024e59cab456949e89aaf4e4465e02f8ceab44f8d67c94cc0890b156fd3c8","first_seen":"2025-11-03T03:54:29.504217Z","last_seen":"2025-11-03T03:54:29.504217Z","times_seen":1,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.multstorage.com/log/count.html","fqdn":"storage.multstorage.com","domain":"multstorage.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:04.344Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /log/count.html HTTP/1.1\r\nHost: storage.multstorage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T02:23:19.368905Z","times_seen":13918819,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.streamlinkttw.com/assets/OpenSans-Bold-DqUvPboT-1761876578022.ttf","fqdn":"www.streamlinkttw.com","domain":"streamlinkttw.com","tld":"com"},"ip":{"addr":"172.67.194.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.streamlinkttw.com/s/SoJiEP5A?lv1=doodbd.com","date":"2025-11-03T03:54:01.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"streamlinkttw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 06:04:57 GMT","end":"Thu, 25 Dec 2025 07:02:21 GMT"},"fingerprint":{"sha1":"53:BB:BB:1F:BB:55:14:9A:0A:B7:E3:FB:B4:39:A8:68:66:94:99:0C","sha256":"3E:EB:CF:6B:A8:E0:86:DD:A6:7D:62:C2:87:34:84:1D:45:DF:9A:A2:E7:33:EF:C2:45:2F:18:8B:62:AD:33:4E"}}},"request":{"raw":"GET /assets/OpenSans-Bold-DqUvPboT-1761876578022.ttf HTTP/1.1\r\nHost: www.streamlinkttw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.streamlinkttw.com/assets/main-ehS-YqyT-1761876578022.css\r\nCookie: _ga_FZ6E2FXG92=GS2.1.s1762142039$o1$g0$t1762142039$j60$l0$h0; _ga=GA1.1.768762269.1762142040\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 03 Nov 2025 03:54:01 GMT\r\ncontent-type: application/x-font-ttf\r\ncontent-length: 224592\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=biVMHNfOi%2FKJ49nXE%2FbLFQHO%2BiLdgLlYiF92lw7NZSZE%2F7G3%2FxMldxW7BF%2FbWq4tAf%2FkhemJXOyKcIGDi2AkcxXY36wpL6nIwI4n8bRQKnBDKMhJxA%3D%3D\"}]}\r\nserver: cloudflare\r\nx-reserved: amazon, aws and amazon web services are trademarks or registered trademarks of Amazon Technologies, Inc\r\ncloudservicediscount: CDN\r\nx-amz-request-id: 0000019A38080F2AB15D4B32B1B89212\r\netag: \"50145685042b4df07a1fd19957275b81\"\r\nlast-modified: Fri, 31 Oct 2025 02:09:48 GMT\r\nx-amz-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nvia: EA-IDN-jakarta-AREA1-CACHE16[6],EA-IDN-jakarta-AREA1-CACHE11[0,TCP_HIT,3],EA-IDN-kabbekasi-GLOBAL1-CACHE19[95],EA-IDN-kabbekasi-GLOBAL1-CACHE7[88,TCP_MISS,90],EA-SGP-GLOBAL1-CACHE22[3],EA-SGP-GLOBAL1-CACHE9[0,TCP_HIT,1]\r\nx-hcs-proxy-type: 1\r\nx-ccdn-cachettl: 2592000\r\nx-ccdn-req-id-46b1: 46cee95c71c1353f5c13ff230c78478f\r\nnginx-hit: 1\r\nage: 4393\r\nx-ccdn-expires: 2589089\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9988ed8ddf84120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":224592,"size_decoded":0,"mime_type":"application/x-font-ttf","magic":"TrueType Font data, digitally signed, 19 tables, 1st \"DSIG\", 26 names, Macintosh, Digitized data copyright � 2010-2011, Google Corporation.Open SansBoldAscender - Open Sans Bold ","md5":"50145685042b4df07a1fd19957275b81","sha1":"c1691e8168b2596af8a00162bac60dbe605e9e36","sha256":"5894a3649b213cf5b2d673b6e7a871815fd1d120fa68a463592f27db14eae323","sha512":"9c995725aade5f126c727faf1c4453344e37b590a14152d31d44dca3c9328a54207bbc7c840695cb55bc1b559097b457888655e11199192cd5197c85aab8b1b6","ssdeep":"6144:JmT6w+rgw9JcJmHeJvjzauutgCNktQFvmnoxXTS4uvpt:M+/9JcJlYqCNktA+SXfGpt","tlshash":"212429b576023ae6ef01c477c260fd80192b78a3a77b402a69e307b699171cdfe53d46","first_seen":"2023-04-18T08:44:58Z","last_seen":"2026-04-18T19:26:45.090696Z","times_seen":1148,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}