{"report_id":"7f3e82a5-b2e0-4ee0-8c71-b08eb3f5fe4a","version":6,"status":"done","tags":[],"date":"2025-10-08T15:11:22Z","url":{"schema":"http","addr":"go.pricedirector.com/MidnightAmerica0724/170498e26daec5510e348f609dbea71c/48/1094058737/89899/ee35f3e24467cc3c9370ea90810d6212/71276/TC","fqdn":"go.pricedirector.com","domain":"pricedirector.com","tld":"com"},"ip":{"addr":"172.67.157.58","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","fqdn":"go.behindthemarkets.com","domain":"behindthemarkets.com","tld":"com"},"title":"BTM Midnight in America VSL"},"submit":{"url":{"schema":"http","addr":"go.pricedirector.com/MidnightAmerica0724/170498e26daec5510e348f609dbea71c/48/1094058737/89899/ee35f3e24467cc3c9370ea90810d6212/71276/TC","fqdn":"go.pricedirector.com","domain":"pricedirector.com","tld":"com"},"ip":{"addr":"172.67.157.58","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-12T15:11:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"verifiedlinks.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"verifiedlinks.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"verifiedlinks.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.leadpages.io","ip":{"addr":"35.192.151.63","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2014-09-17","domain_rank":349246,"first_seen":"2016-01-27T22:05:06Z","last_seen":"2025-10-07T09:18:29.034575Z","alert_count":0,"request_count":6,"received_data":2749,"sent_data":4308,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.no","ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2025-10-05T22:12:07.136045Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":919,"comment":"","tags":null,"fingerprints":null},{"fqdn":"go.pricedirector.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-04-11","domain_rank":0,"first_seen":"2023-02-11T09:45:11Z","last_seen":"2025-10-01T23:05:10.114187Z","alert_count":0,"request_count":1,"received_data":794,"sent_data":603,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-05T22:12:06.373682Z","alert_count":0,"request_count":2,"received_data":82183,"sent_data":1044,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"user.lpcontent.net","ip":{"addr":"34.120.132.252","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2020-06-17","domain_rank":1435000,"first_seen":"2021-04-21T16:36:31Z","last_seen":"2025-10-03T02:56:06.246568Z","alert_count":0,"request_count":3,"received_data":114323,"sent_data":1692,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"lh3.googleusercontent.com","ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":303,"first_seen":"2012-05-22T07:35:05Z","last_seen":"2025-10-05T22:36:22.982528Z","alert_count":0,"request_count":5,"received_data":63402,"sent_data":2735,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.leadpages.net","ip":{"addr":"34.107.203.240","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2012-11-07","domain_rank":455119,"first_seen":"2016-05-28T00:45:21Z","last_seen":"2025-10-07T08:04:06.250426Z","alert_count":0,"request_count":2,"received_data":205344,"sent_data":856,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"www.google.com","ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-10-05T22:12:06.955348Z","alert_count":0,"request_count":2,"received_data":992,"sent_data":1911,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fast.vidalytics.com","ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"domain_registered":"2007-05-15","domain_rank":540423,"first_seen":"2017-02-08T02:49:35Z","last_seen":"2025-10-05T22:21:01.047151Z","alert_count":0,"request_count":12,"received_data":4068393,"sent_data":6313,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-10-05T22:12:07.052692Z","alert_count":0,"request_count":4,"received_data":1672949,"sent_data":1826,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"go.behindthemarkets.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2017-03-30","domain_rank":876602,"first_seen":"2019-08-20T11:31:55Z","last_seen":"2025-10-07T18:45:32.057471Z","alert_count":0,"request_count":6,"received_data":459432,"sent_data":4043,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]},{"fqdn":"verifiedlinks.org","ip":{"addr":"172.66.173.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-27","domain_rank":4053499,"first_seen":"2024-09-05T10:57:15Z","last_seen":"2025-10-05T22:13:56.022183Z","alert_count":3,"request_count":1,"received_data":760,"sent_data":626,"comment":"","tags":null,"fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2025-10-05T22:12:07.233388Z","alert_count":0,"request_count":3,"received_data":2551,"sent_data":3859,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.behindthemarkets-btm.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-03-09","domain_rank":5207755,"first_seen":"2021-03-11T19:23:38Z","last_seen":"2025-10-08T14:55:15.23447Z","alert_count":0,"request_count":1,"received_data":1183,"sent_data":535,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"stats.vidalytics.com","ip":{"addr":"107.178.211.97","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2007-05-15","domain_rank":521623,"first_seen":"2017-02-08T02:49:35Z","last_seen":"2025-10-05T23:03:23.333487Z","alert_count":0,"request_count":8,"received_data":3688,"sent_data":4248,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"embed.lpcontent.net","ip":{"addr":"34.107.203.240","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2020-06-17","domain_rank":554577,"first_seen":"2020-06-20T00:54:50Z","last_seen":"2025-10-07T18:45:32.193144Z","alert_count":0,"request_count":1,"received_data":43276,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"btm-btm-btm.lpages.co","ip":{"addr":"35.202.21.90","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2017-03-15","domain_rank":0,"first_seen":"2022-07-01T15:54:14Z","last_seen":"2025-10-03T21:49:20.404827Z","alert_count":0,"request_count":1,"received_data":93396,"sent_data":737,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-05T22:12:07.524768Z","alert_count":0,"request_count":6,"received_data":258674,"sent_data":3341,"comment":"","tags":null,"fingerprints":null},{"fqdn":"js.center.io","ip":{"addr":"216.239.38.21","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-09-13","domain_rank":469626,"first_seen":"2017-01-30T05:29:11Z","last_seen":"2025-10-06T18:50:29.978257Z","alert_count":0,"request_count":4,"received_data":35316,"sent_data":1998,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"btm-btm-btm.lpages.co/serve-leadbox/7tN382DWFtDz9Uw7QqdLU2/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026aff=5\u0026creative_id=\u0026id=3415984047574068345\u0026iocid=\u0026link_id=\u0026message_id=\u0026oid=213\u0026utm_campaign=\u0026utm_medium=\u0026utm_source=5","fqdn":"btm-btm-btm.lpages.co","domain":"btm-btm-btm.lpages.co","tld":"lpages.co"},"ip":{"addr":"35.202.21.90","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9f34b7ec0deb883568315d971137c56a","sha1":"3974fdcd8295b4380fc3d010ce6daa4cf1b40ed6","sha256":"0fa175cb12446626cee0d096f7851d959cc74257ad9fda333c2eaf0dd02f4f85","sha512":"b5efbc6822e40d67ec38ed3afc43644f518d544c9a4e238d6d45a96db0abb0f90ceb8edee8eb03c702c379a54497f419382a4717949d1bb85373ed97bf2dea55","ssdeep":"","tlshash":"42f0dc8950ef19a81b738af4133f442bf0d2964e287e2216b1edc0c607a181b02e87e8","size":447,"data":"","first_seen":"2024-07-16T16:07:31Z","last_seen":"2026-03-26T14:36:58.124641Z","times_seen":257,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","fqdn":"go.behindthemarkets.com","domain":"behindthemarkets.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"862c4c08f47e9c55960e8be67b0e0e02","sha1":"bfb785b11971fd06e076f681eb5c7dbbdd4897b6","sha256":"285e221e94964ebc5e7ffa2fdb971bbfecc06b60e1a575bca06034ce7201a3d3","sha512":"470e885ede57ce1fd3d9dd444018aceb86df3f8009ba5489aee8fcd8f9aeb16fbc4e0a0f6b4630aeb963f9b2671c8eb77baed65e0ef5a5f366adc00d90a044ce","ssdeep":"","tlshash":"07f0264574db14e9173349f8322f042bf4f2558a246d261775bdc0c31b55d0b02dc7e8","size":561,"data":"","first_seen":"2025-04-14T18:41:02.666404Z","last_seen":"2026-01-03T11:59:49.995511Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","fqdn":"go.behindthemarkets.com","domain":"behindthemarkets.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a4224698469eb91077ed0583a0d151c","sha1":"7ffb9acc302f6bfb032b5772c8880f2b16c978fe","sha256":"9330b3baeefe9dc60f05a2d6470fba00384aa4e06a493784e9a57e9ad7244fb9","sha512":"f86cf3b5991451e516e99386d0acce04adf704639bd56ee1a947c5e70e59306d6f71a5888e71863fdcc1377ed535df9522ad58a048411affa615bbc3fa4ec3cc","ssdeep":"","tlshash":"45e08607fadc893b40cb701a35865330002721ca25653a2437734f94994f3476319eda","size":314,"data":"","first_seen":"2025-01-31T02:37:27.995333Z","last_seen":"2026-04-02T00:42:40.794488Z","times_seen":10137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btm-btm-btm.lpages.co/serve-leadbox/7tN382DWFtDz9Uw7QqdLU2/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026aff=5\u0026creative_id=\u0026id=3415984047574068345\u0026iocid=\u0026link_id=\u0026message_id=\u0026oid=213\u0026utm_campaign=\u0026utm_medium=\u0026utm_source=5","fqdn":"btm-btm-btm.lpages.co","domain":"btm-btm-btm.lpages.co","tld":"lpages.co"},"ip":{"addr":"35.202.21.90","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a3faab281a519d4ece6839d53701c840","sha1":"4d0935708bd081919188e521931ce14f3cc7c59e","sha256":"ae42a47bdc6093b78f0b62277fab3d311c56337621d945fbc3c68d3216fd4343","sha512":"363ea82dda135578a63f4cf48031f84d3ebdf3a1389ffa42f2560ffdfa64452297f2fb880d393acee3f1750adbc4658f91aa941508b0f2a838135cd8a8ddf394","ssdeep":"","tlshash":"d25131cc7186717943c3a9b8961f640db77b68ada4568068f1b8fad53cf00456a33f78","size":2897,"data":"","first_seen":"2023-03-07T01:15:19Z","last_seen":"2026-04-04T00:34:26.528489Z","times_seen":5815,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btm-btm-btm.lpages.co/serve-leadbox/7tN382DWFtDz9Uw7QqdLU2/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026aff=5\u0026creative_id=\u0026id=3415984047574068345\u0026iocid=\u0026link_id=\u0026message_id=\u0026oid=213\u0026utm_campaign=\u0026utm_medium=\u0026utm_source=5","fqdn":"btm-btm-btm.lpages.co","domain":"btm-btm-btm.lpages.co","tld":"lpages.co"},"ip":{"addr":"35.202.21.90","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c164a88f770902ca8e62a5e399e32018","sha1":"9d1ca269500112216a2b19d25b8c25440b2e89ba","sha256":"c53f0864a6382bf6866e66f734b2682161eb97cebed43234daf7ab086b4ca8c0","sha512":"8449de65f0359f845104d34ebbb2a06d609267cc4290efc991bb7fcca1c035e072386079c4c323444b95e9cc9d44a5d5a9ae3d5d2cef4848aee6ea60f3d64b72","ssdeep":"","tlshash":"3e71738431a1f9e302aa0024053f7357f16b371f547ae281d656fda1a534c5bd2b3eab","size":3552,"data":"","first_seen":"2023-03-07T01:15:19Z","last_seen":"2026-04-03T23:46:53.439602Z","times_seen":2561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btm-btm-btm.lpages.co/serve-leadbox/7tN382DWFtDz9Uw7QqdLU2/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026aff=5\u0026creative_id=\u0026id=3415984047574068345\u0026iocid=\u0026link_id=\u0026message_id=\u0026oid=213\u0026utm_campaign=\u0026utm_medium=\u0026utm_source=5","fqdn":"btm-btm-btm.lpages.co","domain":"btm-btm-btm.lpages.co","tld":"lpages.co"},"ip":{"addr":"35.202.21.90","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"24959da5977b7558ff59cd5acdf88a1e","sha1":"43c70045dc13d59dc973e90432261325421d8549","sha256":"71e5a7aff94fa6fd0a971d99e54814a4131a061f2e361ffc73a5a6ef11d1062a","sha512":"9ea261e22983d9c509c1c7d3ece7dc268c095ad5e39b5210bb2458c300c731e970fe1873a3b977b78e592a1f58c6531bed5eac6532cc2edb98e1bcb85bf52198","ssdeep":"","tlshash":"6ff0817a117752a6439200a7571ba74639f6666c3540f100437dcba92538d4695c7ea4","size":582,"data":"","first_seen":"2023-03-07T01:15:19Z","last_seen":"2026-04-04T00:34:26.536132Z","times_seen":5795,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","fqdn":"go.behindthemarkets.com","domain":"behindthemarkets.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0f1c1e338722cb680190732c4e8e3f3e","sha1":"de7e63cbcce170f77302100562443128f115ecbc","sha256":"ee29e0be4ce3b2f3bcfeddbb30b7594cc151657feba8d3760fb9835311116216","sha512":"053781af992494a5048ad38a31de4d1832180413c5be84b9e2e070561fa24ee634a33b34d9a6d77026a3de5dfa6ed22a2a83ceff4f09bc3aff229617f57948f4","ssdeep":"","tlshash":"23e0ab8b75da54742d4b8077563c8e2831122159b0544033bcfc883a6f486ae09666e8","size":414,"data":"","first_seen":"2023-03-08T02:09:05Z","last_seen":"2026-03-30T10:38:49.457089Z","times_seen":2970,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","fqdn":"go.behindthemarkets.com","domain":"behindthemarkets.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"70067a5e54adbe9d9567c09470b0a617","sha1":"4a47e4781b5bac3cdd38247db3fb87c63336c31a","sha256":"ad86521431911b76d497d5ebf350060c89e901d2bed2ebfa8a0d7b751b96f860","sha512":"ae0bf6ae09e992f3fd2a01d7582b82cb40d75d103695f9e871bab38cff21a98e4a232060570e3794ae0585862ee339fb5bcd65380868e7ccc3a980c2c19f7d05","ssdeep":"","tlshash":"04b01258f68972245240081c217b510693a6c911270c56109215c940398884c863198d","size":92,"data":"","first_seen":"2023-03-08T02:09:05Z","last_seen":"2026-04-02T00:42:40.786595Z","times_seen":10637,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btm-btm-btm.lpages.co/serve-leadbox/7tN382DWFtDz9Uw7QqdLU2/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026aff=5\u0026creative_id=\u0026id=3415984047574068345\u0026iocid=\u0026link_id=\u0026message_id=\u0026oid=213\u0026utm_campaign=\u0026utm_medium=\u0026utm_source=5","fqdn":"btm-btm-btm.lpages.co","domain":"btm-btm-btm.lpages.co","tld":"lpages.co"},"ip":{"addr":"35.202.21.90","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"54fcbe8bf78f4a60f28e2cdb6e694d36","sha1":"20b842db1ad9bd92eed8c854065b761a84f69e27","sha256":"72ceea7d54bdaa348bf0f1e1545e148dd2e9c248a2ca70482f8b5f0047587b4f","sha512":"d88149c60d91f3382a73e08c7f3d8820008b06e9796e011f30c9a0af67ae056fee108b6a613f87f05116e455e5849ececb01798071d3a8a5afb87361aa471dff","ssdeep":"192:0Vn0GpJYhMpCUC6YGNqg5hvdVEKIRH5rpHAm76rRh:WdC4YqxdORoRh","tlshash":"c3e12f44f712783f87136223523b410f273610286556456ab6b8e8ee5ebfc492a1377e","size":7050,"data":"","first_seen":"2023-03-07T01:15:19Z","last_seen":"2026-04-04T00:34:26.537573Z","times_seen":5758,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","fqdn":"go.behindthemarkets.com","domain":"behindthemarkets.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0a94139e4615771d6d97fb3d968225b2","sha1":"ede8882cf509b54d78f9ae6d0983cb4466a633b6","sha256":"ca0059abf25af68454df89030c51cb41e112e2fa58ebb0b2ffa85b3fc6fee883","sha512":"bab07ffc0b812de0265ed2e018c41ffa426d14b1668c45609d813f8bb218369304be25812010d92e0d4eb3bd52886ed7cd1b45546c2bbadc23584a80310ba3d6","ssdeep":"","tlshash":"0ea0124df15062011040001c4c3100141b61054072044220121848019b6081d272ab6d","size":80,"data":"","first_seen":"2023-03-08T02:09:05Z","last_seen":"2026-04-02T00:42:40.780405Z","times_seen":10730,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.behindthemarkets.com/484c3a3e-e971-4be8-bce0-2157e15fcb00","fqdn":"go.behindthemarkets.com","domain":"behindthemarkets.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"88340dcafc9cd02aab45b3d908968ce7","sha1":"87b812e3063e05dfe8ea1c237870335359d6184f","sha256":"c2e1e333ba689cbeadadfd963f9dbfc83e8bd0b8fe578b52e4353677d1ecc951","sha512":"22fcca64edae47f1e6da8ea6c476cd44cbf50ed8edbceaca87af23d8ef2fc35c8c5fcd80f9ca9623a4619307569e743b011bc6cb69decb33438581043b4c46fd","ssdeep":"24576:899F5eHPh+R66Ps+dlPWs4z4EYEliJf70cuRen:899F5eHPh+R660clPWs4z4JJfocu0n","tlshash":"7c354bd976d5742d82d365aa447b1505f33e2a10340cc09cfa3badcb29a5e4eb237e39","size":1064413,"data":"","first_seen":"2025-08-29T15:50:39.591461Z","last_seen":"2026-01-01T13:12:08.971893Z","times_seen":2366,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.center.io/center.js","fqdn":"js.center.io","domain":"center.io","tld":"io"},"ip":{"addr":"216.239.38.21","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"60f05ff45d707fe36d87b75bf181800d","sha1":"e34d94b519ed465481596bcff099467feb0aafdd","sha256":"cc08eb3316359de0d8f025efee489da73ca552209a0c9cab6b00894d7fa21d42","sha512":"db4464a38190b0df1b468e08232cd1f03dd53283ab7b36bade654efb945c211474a13cff6ca8a6e748489415c838c46cf5436a4bc90ab8605328335b1a432bac","ssdeep":"192:xbZ07UrFcfU1ftsqqStPtR4hXaUv9nUOWaAH74U2FAn31rMyfcPvjU:xd8UKfU1ftsTStP3UB9nUn4U2zyfc3jU","tlshash":"ce42b7d9b3d279b1829730b8452f204ee2bf85a5ac4c49c0a1a2c9c66db8f5c517bf5c","size":12555,"data":"","first_seen":"2023-03-07T01:15:19Z","last_seen":"2026-04-04T00:34:26.391236Z","times_seen":5983,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.behindthemarkets.com/rt.js","fqdn":"go.behindthemarkets.com","domain":"behindthemarkets.com","tld":"com"},"ip":{"addr":"35.202.21.90","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d19094d98467ebcee2ed202f39f08d6","sha1":"5941a5a8c037aba61b85566e3f638ea81df0481c","sha256":"b1e6495aa6637827580701ee3fa35eb5b3b476169f6366c38373ee79cd2ad17b","sha512":"40ae1623641db8b85c4df481a2d5081acbcf2e09f265a2770f1552a62b1788436fd2bb61ad484c974c663e57b28d486f725706c520435324d0c3d78c6f82694f","ssdeep":"","tlshash":"c2c02b04014391ca2030d006e707f700739095dfb2fdb60c55d43306701159bdc14442","size":140,"data":"","first_seen":"2025-10-08T15:11:30.178616Z","last_seen":"2025-10-08T15:11:30.178616Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","fqdn":"go.behindthemarkets.com","domain":"behindthemarkets.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d2e0cf5a8acbb94b6e8b4cab4e63fd3","sha1":"36595f0c6d5c8ea0fc53f10116f5891f76ff6993","sha256":"036d8eafb8b9748e69fe4ee93b74ea10678202dc845561435dec8e8bee734fbf","sha512":"d922a062863eeebc374597011224ce4e0e96f04fbc9faba070457151cead4bac7bc0a5c39dc6fed5aa0cc324779dc7b2ae9958fcf88635c8a0bca159d74d6813","ssdeep":"","tlshash":"7ef0d46c2c42f45737fe3534c2176d6a3757570074c2d56cd641c4257c94b851c52dde","size":490,"data":"","first_seen":"2024-12-18T06:21:19.327311Z","last_seen":"2026-03-26T14:36:58.131801Z","times_seen":196,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","fqdn":"go.behindthemarkets.com","domain":"behindthemarkets.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c014fddfc4db86c4b9e7e22da5d72553","sha1":"04b0190f60151d92cd676fa2125ec853e459874a","sha256":"33b2ed3e289e56c1013e647458523df57104ea4a9f83d2dbae0ab5ee47951955","sha512":"ad762f7bbbf4cff99be2c72b64d7ed669aa62d0fef51e8d40d1c735dcf6575e6f57fb79005e78b18d159b4cd85fbd41992e38450d6011ea2c6cfb8ad12fc7c4e","ssdeep":"","tlshash":"6e111048ff5a79129947f17d1e7fcf04bc2530274808c1e67889d9a85f64aa2820ba5d","size":917,"data":"","first_seen":"2024-08-24T02:10:09Z","last_seen":"2026-03-26T14:36:58.136901Z","times_seen":203,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fast.vidalytics.com/embeds/PzpZ_7KZ/du18m3UXDlt4b2bH/loader.min.js","fqdn":"fast.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"59788e75a0f6c9b2fbe7724fd8c1f8ab","sha1":"b4d3701ada0a62eae1ac15d586275573e07210fd","sha256":"57c154d7ebea5956ee43a90375bfa6633a643d996277fb7c77782fee2ba2ef97","sha512":"a4b7e82e6d14c210778fbb6838c9eb6054784957d7fe344d2f92c1b7e5b6b7ef064b0fd64f5883703ed9b9227e9bbdefec9aceb2d01057cd2c74d813906c9361","ssdeep":"768:sUrltIo56r5RoGwCjCtg9svBvUa0WVrYoa0:4noXCEBvBVrYr0","tlshash":"a8d2b9c9bad6f0a442f395b8813f3207f23d7b215588d560e423d6d078a978fe263d69","size":28335,"data":"","first_seen":"2025-10-08T15:11:30.180986Z","last_seen":"2025-12-20T22:01:07.699597Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btm-btm-btm.lpages.co/serve-leadbox/7tN382DWFtDz9Uw7QqdLU2/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026aff=5\u0026creative_id=\u0026id=3415984047574068345\u0026iocid=\u0026link_id=\u0026message_id=\u0026oid=213\u0026utm_campaign=\u0026utm_medium=\u0026utm_source=5","fqdn":"btm-btm-btm.lpages.co","domain":"btm-btm-btm.lpages.co","tld":"lpages.co"},"ip":{"addr":"35.202.21.90","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-04-04T01:32:20.577892Z","times_seen":233018,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btm-btm-btm.lpages.co/serve-leadbox/7tN382DWFtDz9Uw7QqdLU2/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026aff=5\u0026creative_id=\u0026id=3415984047574068345\u0026iocid=\u0026link_id=\u0026message_id=\u0026oid=213\u0026utm_campaign=\u0026utm_medium=\u0026utm_source=5","fqdn":"btm-btm-btm.lpages.co","domain":"btm-btm-btm.lpages.co","tld":"lpages.co"},"ip":{"addr":"35.202.21.90","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a674379150089ed7e1089d74b81e9d5","sha1":"ac7b5b707b5c3b9e34a32d48c5caa4fd8d4d93f0","sha256":"b00a6c35856e18d14e28fbb5d44edef82a932d47d0b7bd670df25cec9e301991","sha512":"ae9ac629398067d0d1df477e37343ba482ae7aea0074aee16d73d82ca466b2cff6078c2e99f86db17176cec16db7d466d86bd096149fd98c5c4a36667c00c044","ssdeep":"","tlshash":"eb519478362b50bb739394b2162f7709343a24bb980acb593a2fd5e1ac38d474733d94","size":2501,"data":"","first_seen":"2024-05-15T04:42:31Z","last_seen":"2026-04-04T00:34:26.542482Z","times_seen":5311,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","fqdn":"go.behindthemarkets.com","domain":"behindthemarkets.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a3faab281a519d4ece6839d53701c840","sha1":"4d0935708bd081919188e521931ce14f3cc7c59e","sha256":"ae42a47bdc6093b78f0b62277fab3d311c56337621d945fbc3c68d3216fd4343","sha512":"363ea82dda135578a63f4cf48031f84d3ebdf3a1389ffa42f2560ffdfa64452297f2fb880d393acee3f1750adbc4658f91aa941508b0f2a838135cd8a8ddf394","ssdeep":"","tlshash":"d25131cc7186717943c3a9b8961f640db77b68ada4568068f1b8fad53cf00456a33f78","size":2897,"data":"","first_seen":"2023-03-07T01:15:19Z","last_seen":"2026-04-04T00:34:26.528489Z","times_seen":5815,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","fqdn":"go.behindthemarkets.com","domain":"behindthemarkets.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2eaa545facda648f4f8a43e26ebd0bde","sha1":"3876217b5d477044b30c808db796961a8dab43dc","sha256":"8fdc1938768334bc6a22a769e24b6a27461d90649de60d8b1f0f187cc17aaff2","sha512":"15a2a281ab5c8023bd74d4aeddea6c086ec7c97c4c77b09c2d83da1b6459c3679586cdb83647d1ac825ca87b866449ba46ae61c91bfd8d850d562ae79f6a4df3","ssdeep":"96:0XfwYpd95qQRf4f82PqWA/bwCpjUhKgbja8L/eHAgBLnqquRh:04o5NZ4NiYCpKKg3vQJ99uRh","tlshash":"b4d166893091f4e2036ad168473ff217f5e7262f10a9f1905349def1a53885bd222b6b","size":6360,"data":"","first_seen":"2025-03-11T00:14:24.657821Z","last_seen":"2026-04-04T00:34:26.531056Z","times_seen":3878,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","fqdn":"go.behindthemarkets.com","domain":"behindthemarkets.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"24959da5977b7558ff59cd5acdf88a1e","sha1":"43c70045dc13d59dc973e90432261325421d8549","sha256":"71e5a7aff94fa6fd0a971d99e54814a4131a061f2e361ffc73a5a6ef11d1062a","sha512":"9ea261e22983d9c509c1c7d3ece7dc268c095ad5e39b5210bb2458c300c731e970fe1873a3b977b78e592a1f58c6531bed5eac6532cc2edb98e1bcb85bf52198","ssdeep":"","tlshash":"6ff0817a117752a6439200a7571ba74639f6666c3540f100437dcba92538d4695c7ea4","size":582,"data":"","first_seen":"2023-03-07T01:15:19Z","last_seen":"2026-04-04T00:34:26.536132Z","times_seen":5795,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","fqdn":"go.behindthemarkets.com","domain":"behindthemarkets.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"54fcbe8bf78f4a60f28e2cdb6e694d36","sha1":"20b842db1ad9bd92eed8c854065b761a84f69e27","sha256":"72ceea7d54bdaa348bf0f1e1545e148dd2e9c248a2ca70482f8b5f0047587b4f","sha512":"d88149c60d91f3382a73e08c7f3d8820008b06e9796e011f30c9a0af67ae056fee108b6a613f87f05116e455e5849ececb01798071d3a8a5afb87361aa471dff","ssdeep":"192:0Vn0GpJYhMpCUC6YGNqg5hvdVEKIRH5rpHAm76rRh:WdC4YqxdORoRh","tlshash":"c3e12f44f712783f87136223523b410f273610286556456ab6b8e8ee5ebfc492a1377e","size":7050,"data":"","first_seen":"2023-03-07T01:15:19Z","last_seen":"2026-04-04T00:34:26.537573Z","times_seen":5758,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","fqdn":"go.behindthemarkets.com","domain":"behindthemarkets.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a674379150089ed7e1089d74b81e9d5","sha1":"ac7b5b707b5c3b9e34a32d48c5caa4fd8d4d93f0","sha256":"b00a6c35856e18d14e28fbb5d44edef82a932d47d0b7bd670df25cec9e301991","sha512":"ae9ac629398067d0d1df477e37343ba482ae7aea0074aee16d73d82ca466b2cff6078c2e99f86db17176cec16db7d466d86bd096149fd98c5c4a36667c00c044","ssdeep":"","tlshash":"eb519478362b50bb739394b2162f7709343a24bb980acb593a2fd5e1ac38d474733d94","size":2501,"data":"","first_seen":"2024-05-15T04:42:31Z","last_seen":"2026-04-04T00:34:26.542482Z","times_seen":5311,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-WNRH3TX","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"66264e07f3bb962e8cd961bcf981cbff","sha1":"eb3de80668a3717c4660222a9c7656052c3888e0","sha256":"d2681c16f7fd9e548d42449337a91b824a18124f4616427123e2a09898f0cfc3","sha512":"64146b0687a13256fb08567ba235164f8287e3f30ebf5bd86792f4e4992307a64117caa75533d6594f54317bb56ac86304c0dce1e52aa08706e2002b2f439439","ssdeep":"6144:HCirgXOL+lCiDwpKkY+aXmJXBXtrZs1YEp:zcXOaDpadA","tlshash":"b99429cdb3d6742243a2a578403f014ba17b28e2f84cd895f186cde52e74a9a5237f7d","size":425328,"data":"","first_seen":"2025-10-08T15:11:30.158265Z","last_seen":"2025-10-08T15:11:30.158265Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","fqdn":"go.behindthemarkets.com","domain":"behindthemarkets.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4fe7374212694d79957cd9a1bb8fdef2","sha1":"010e231568ee9c1bd7f2460c5a79da7f557fcc9a","sha256":"93a694caf72303625617cfe8edbe6444a43454c3e34613487a74188f783c1e58","sha512":"4849ab6c4cedae3e25721196bbfa800e6f183d22dbf04fbc1edece2cfcc01112ab1c15f487dad6e6eb59cfa160b494c9aca9f27157cd7a969e0ca4dc91583f56","ssdeep":"","tlshash":"3fb092c9e2f9ae1a7680647ce22e10311aad0a1023045310599e930c2b6462a0622b5e","size":126,"data":"","first_seen":"2023-03-08T02:09:05Z","last_seen":"2026-04-02T00:42:40.778312Z","times_seen":10737,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","fqdn":"go.behindthemarkets.com","domain":"behindthemarkets.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f243709fadf6e072fd4fc43a139860e6","sha1":"21692bdbc65edff8eca41e13d7036235f8ece36f","sha256":"942275c3ece75f2592f4947d4e306a2a594de12dddd152ca13eafb747166a35c","sha512":"3752f328cde9dd8e2da4a6b381e1d7ce92ec3baa2ca90689c1009b48052f6183bdc44e23d7c9ed4d195b74c1ece462d1202294d93020948f13e61ac49584a36b","ssdeep":"","tlshash":"352163ba91237cb6132755a2b32ff785b9b761771c8ca440054cce873bb990f94b16c6","size":1118,"data":"","first_seen":"2023-03-07T01:15:19Z","last_seen":"2026-04-04T00:34:26.545939Z","times_seen":5769,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","fqdn":"go.behindthemarkets.com","domain":"behindthemarkets.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4fe7374212694d79957cd9a1bb8fdef2","sha1":"010e231568ee9c1bd7f2460c5a79da7f557fcc9a","sha256":"93a694caf72303625617cfe8edbe6444a43454c3e34613487a74188f783c1e58","sha512":"4849ab6c4cedae3e25721196bbfa800e6f183d22dbf04fbc1edece2cfcc01112ab1c15f487dad6e6eb59cfa160b494c9aca9f27157cd7a969e0ca4dc91583f56","ssdeep":"","tlshash":"3fb092c9e2f9ae1a7680647ce22e10311aad0a1023045310599e930c2b6462a0622b5e","size":126,"data":"","first_seen":"2023-03-08T02:09:05Z","last_seen":"2026-04-02T00:42:40.778312Z","times_seen":10737,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btm-btm-btm.lpages.co/serve-leadbox/7tN382DWFtDz9Uw7QqdLU2/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026aff=5\u0026creative_id=\u0026id=3415984047574068345\u0026iocid=\u0026link_id=\u0026message_id=\u0026oid=213\u0026utm_campaign=\u0026utm_medium=\u0026utm_source=5","fqdn":"btm-btm-btm.lpages.co","domain":"btm-btm-btm.lpages.co","tld":"lpages.co"},"ip":{"addr":"35.202.21.90","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f243709fadf6e072fd4fc43a139860e6","sha1":"21692bdbc65edff8eca41e13d7036235f8ece36f","sha256":"942275c3ece75f2592f4947d4e306a2a594de12dddd152ca13eafb747166a35c","sha512":"3752f328cde9dd8e2da4a6b381e1d7ce92ec3baa2ca90689c1009b48052f6183bdc44e23d7c9ed4d195b74c1ece462d1202294d93020948f13e61ac49584a36b","ssdeep":"","tlshash":"352163ba91237cb6132755a2b32ff785b9b761771c8ca440054cce873bb990f94b16c6","size":1118,"data":"","first_seen":"2023-03-07T01:15:19Z","last_seen":"2026-04-04T00:34:26.545939Z","times_seen":5769,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btm-btm-btm.lpages.co/serve-leadbox/7tN382DWFtDz9Uw7QqdLU2/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026aff=5\u0026creative_id=\u0026id=3415984047574068345\u0026iocid=\u0026link_id=\u0026message_id=\u0026oid=213\u0026utm_campaign=\u0026utm_medium=\u0026utm_source=5","fqdn":"btm-btm-btm.lpages.co","domain":"btm-btm-btm.lpages.co","tld":"lpages.co"},"ip":{"addr":"35.202.21.90","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fc0b8de8bf07fe1f20ecbf76e15f87aa","sha1":"57950c0b8f0f6768b595fd74ec115f032b03f9ed","sha256":"cf61f4a4f3c09feac95f312fe0115655571a65979b16e2c3468cd422a1ba0b8f","sha512":"e8de4f54d0277fa8c95fd4eac6ab5e13fda3338fb02c22b59566642d0d6dce0ab77b8623c7fe323727cef72416cc577e35f6ae89d57dc9595cca3bf736d47b15","ssdeep":"96:0iJz3/DCkyYxpkcoIgcY5p+yg2f8GdhehGLzlghmuJFOIo5rsnrRh:0iJzvDbyqpPgcY5AyX9XQGLzlghmGFOU","tlshash":"80b1b8271fc21cf0b6236f8c23fae5149d1cb19a8a26d2e437cc97468342006dd77769","size":5369,"data":"","first_seen":"2023-05-15T23:35:04Z","last_seen":"2026-04-03T23:46:53.493212Z","times_seen":2508,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-16585749727\u0026cx=c\u0026gtm=4e5a61","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4e79edbb2e9042e953e9ba1ab10ea03","sha1":"ca65f59979d4bc71d9a4cd53b6d87a4afd9cf6d4","sha256":"7a4d69fe02eb4f6c5c25d196265d5501494a9065707265eed871f3db3aa7cf1d","sha512":"ac69e372f74f508c9d63940d1d2a67d8dad7d8b2d2120bb357065cbe9d19ecd6cc197ffc37de095b326bf4198d33e514a36881c72b5439874d7b4451301a429e","ssdeep":"3072:993gWXaxQ4OZZ6rA90AVo1w4APskKfPbymklFxSiDw2ElLj70KkW4c+aXmdLbEbv:MC6rcXOL+lCiDwgKkY+aXmJbX4iqsqF","tlshash":"a68429cd73d674225393a478503f018ba57b68a2f84cc899f189cde52e74a9a4237f7c","size":380381,"data":"","first_seen":"2025-10-08T01:26:45.483392Z","last_seen":"2025-10-08T15:11:30.152875Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-16454845358\u0026cx=c\u0026gtm=4e5a61","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"08b640a70d81be154f869fa2cbd7161e","sha1":"7d717e98c5cf42484a679bf2ac6472f6cf343d2f","sha256":"4ee7ad0650da8307edc8eb853dede8e56ed1f5e13b2d4a971989c00b2cc28811","sha512":"6517dece2943f59e7441591e2a397966defdf69d5a28fff40d9456a3670bca4b1185495d0b90f9b2aaf725cf300e7ab36a698ee2a422dfc34c2fb406ca254a8f","ssdeep":"3072:sF3gv0PxQ4OZZ6rA90AVo1w4APskKfPbymklFxSiDw2ElLj70KkW4c+aXmdLbubA:kC6rcXOL+lCiDwgKkY+aXmJbRBqsIQ","tlshash":"1d8429cdb3d674225393a478403f018ba57b68a2f84cc899f185cde52e74a9a4277f7c","size":371728,"data":"","first_seen":"2025-10-08T02:56:38.162862Z","last_seen":"2025-10-08T15:11:30.172289Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","fqdn":"go.behindthemarkets.com","domain":"behindthemarkets.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"901062d20b53b872e0025da22bc650ae","sha1":"f938f9ec78119e505c4966148bb4d41c22d206c5","sha256":"079c1e1c9ef86157f24d38ba71800bbe435229b76a063bd93ce4ca4861071d1b","sha512":"be8811f6cbaa992fa363df0791f777ee795f78be7ebedeeedd4711f39b55bdd4fa8224dba1aa913438093d8dae75c86f6ec973818ed6ce8632eb50fa8f607b5f","ssdeep":"192:0iJzWRokxBkzgizsmzs2XQGLzlghmGFOfrsrRh:fkoI2zrzsGsGQGLotKsrRh","tlshash":"71d1b6128dc594b1d2135fac33eee9647fa4b55e821ac6d9338d6653c34480bccb7369","size":6700,"data":"","first_seen":"2025-04-02T12:24:35.753468Z","last_seen":"2026-04-04T00:34:26.565426Z","times_seen":3523,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","fqdn":"go.behindthemarkets.com","domain":"behindthemarkets.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ed6513f751a5ac340c506433a8932e4d","sha1":"2e9b4f77b90719e385fa5e1a6c64f1b64bb14c44","sha256":"9be57bcecd8a6a38f5418f581494f966ff4fae4d54ec0b116c32ae3073083dca","sha512":"9a391ec85664f22e3d3b51569b87e9b9f4c8920c6a11fe489a72ac6d5a53b690b6fa3f5a0c8c621d955cda4526c261591e3f605e79d2a2ba2c5f46465ca71a86","ssdeep":"","tlshash":"26c09b2df55cf53d410f71077667065d531709d508f036112563154396f504f50617d9","size":130,"data":"","first_seen":"2023-07-15T18:57:31Z","last_seen":"2026-03-31T01:31:58.591936Z","times_seen":2704,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-04T01:31:22.661582Z","times_seen":769170,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btm-btm-btm.lpages.co/serve-leadbox/7tN382DWFtDz9Uw7QqdLU2/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026aff=5\u0026creative_id=\u0026id=3415984047574068345\u0026iocid=\u0026link_id=\u0026message_id=\u0026oid=213\u0026utm_campaign=\u0026utm_medium=\u0026utm_source=5","fqdn":"btm-btm-btm.lpages.co","domain":"btm-btm-btm.lpages.co","tld":"lpages.co"},"ip":{"addr":"35.202.21.90","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"324d070d383d7e171663391494e4eaf1","sha1":"147167b389b5672075f113a03583378a22149967","sha256":"3dfd8ef986ba39418b44b6eeef78e69bb8d04e786e7479c37087cb70b4fa9c84","sha512":"4c0c5f46f6cd37e04bf641eebe3c267a6c60a74761eedd28aea2fcd14996e352ec231195519c76a44246a7b03f314827858a045b947835ffd57369a14ce13267","ssdeep":"","tlshash":"73e02618f214337949d756e241afbbc772362d60668d80245cb2f6892b2d898b813dc5","size":347,"data":"","first_seen":"2023-03-07T01:15:19Z","last_seen":"2026-04-04T00:34:26.631388Z","times_seen":5823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btm-btm-btm.lpages.co/serve-leadbox/7tN382DWFtDz9Uw7QqdLU2/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026aff=5\u0026creative_id=\u0026id=3415984047574068345\u0026iocid=\u0026link_id=\u0026message_id=\u0026oid=213\u0026utm_campaign=\u0026utm_medium=\u0026utm_source=5","fqdn":"btm-btm-btm.lpages.co","domain":"btm-btm-btm.lpages.co","tld":"lpages.co"},"ip":{"addr":"35.202.21.90","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"03c6f9076ca3a4dee82dff97b28e6e5f","sha1":"34e14b9e6b7f1f25bacd50142f395e4409ca74f6","sha256":"74b2d22da3e536e007235a166b47e5498591fef8dd5723ffedfbf5a89cd97aa6","sha512":"c225e366101691561ab6a36ef2ecb7c99a3edb7eddf108bbf3d834858321c1e86169bee47950beace2fa8891df984e66868d3541d0256b2afb856e5d3a03765b","ssdeep":"","tlshash":"84c022389a2095b42a9003a6928f3e811230010bc20686282c05a88da060cdc36b0802","size":181,"data":"","first_seen":"2023-03-07T12:21:00Z","last_seen":"2026-04-04T00:34:26.635289Z","times_seen":5685,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.center.io/center.js","fqdn":"js.center.io","domain":"center.io","tld":"io"},"ip":{"addr":"216.239.38.21","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"60f05ff45d707fe36d87b75bf181800d","sha1":"e34d94b519ed465481596bcff099467feb0aafdd","sha256":"cc08eb3316359de0d8f025efee489da73ca552209a0c9cab6b00894d7fa21d42","sha512":"db4464a38190b0df1b468e08232cd1f03dd53283ab7b36bade654efb945c211474a13cff6ca8a6e748489415c838c46cf5436a4bc90ab8605328335b1a432bac","ssdeep":"192:xbZ07UrFcfU1ftsqqStPtR4hXaUv9nUOWaAH74U2FAn31rMyfcPvjU:xd8UKfU1ftsTStP3UB9nUn4U2zyfc3jU","tlshash":"ce42b7d9b3d279b1829730b8452f204ee2bf85a5ac4c49c0a1a2c9c66db8f5c517bf5c","size":12555,"data":"","first_seen":"2023-03-07T01:15:19Z","last_seen":"2026-04-04T00:34:26.391236Z","times_seen":5983,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-8R6YNFMJ23\u0026cx=c\u0026gtm=4e5a61","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9af922d03f1e2deb9aa0cd54cf536612","sha1":"b6b1121e617f7c75c66da7c4983578ce156038f7","sha256":"b5001e63d46909f11a8ca04a01e95007da101ef97e905cab8a281387579966ea","sha512":"ade757c122a229beb193d734485e42837e461c8b0678ce652cb3c5280b82b450a1ada1974b9f31a6c64a8994ce983c7e81b6670c8c46de16c221830f2494b1ea","ssdeep":"6144:dB8C6r2AYOL+lC5DwgKkY+aXmJY6C5amgeek9J8X:jiKAYOhDy1W","tlshash":"0da4f99e73d6742653daf478502f01cba87b24a2b49cc8aab1c9cdf02d3459a4167f7c","size":493156,"data":"","first_seen":"2025-10-08T01:26:45.474993Z","last_seen":"2025-10-08T15:11:30.143519Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","fqdn":"go.behindthemarkets.com","domain":"behindthemarkets.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ee63f83edc78352ea0ddc35ce9ab661a","sha1":"785a1a281f3a8db51fcc2dc9984c7148d716bbce","sha256":"e89f95c09a0653057c5c62d26bf3f77fded081028f8f1a32d59fe55b5c59e0ad","sha512":"8f67476268386c8f3b40537854767093f02fa18f8df556154b1c6f28a460bd090cdfcfbd96284c3d476fee507286c653acab250e8d1b3f2122d2b42453e13fde","ssdeep":"","tlshash":"d9117577202934f11a7e25e6826aa78eacb7112b15508488c916cb913c9ccda02b3ee1","size":1055,"data":"","first_seen":"2024-09-13T03:19:12Z","last_seen":"2026-04-04T00:34:26.585144Z","times_seen":5012,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","fqdn":"go.behindthemarkets.com","domain":"behindthemarkets.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"324d070d383d7e171663391494e4eaf1","sha1":"147167b389b5672075f113a03583378a22149967","sha256":"3dfd8ef986ba39418b44b6eeef78e69bb8d04e786e7479c37087cb70b4fa9c84","sha512":"4c0c5f46f6cd37e04bf641eebe3c267a6c60a74761eedd28aea2fcd14996e352ec231195519c76a44246a7b03f314827858a045b947835ffd57369a14ce13267","ssdeep":"","tlshash":"73e02618f214337949d756e241afbbc772362d60668d80245cb2f6892b2d898b813dc5","size":347,"data":"","first_seen":"2023-03-07T01:15:19Z","last_seen":"2026-04-04T00:34:26.631388Z","times_seen":5823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","fqdn":"go.behindthemarkets.com","domain":"behindthemarkets.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"03c6f9076ca3a4dee82dff97b28e6e5f","sha1":"34e14b9e6b7f1f25bacd50142f395e4409ca74f6","sha256":"74b2d22da3e536e007235a166b47e5498591fef8dd5723ffedfbf5a89cd97aa6","sha512":"c225e366101691561ab6a36ef2ecb7c99a3edb7eddf108bbf3d834858321c1e86169bee47950beace2fa8891df984e66868d3541d0256b2afb856e5d3a03765b","ssdeep":"","tlshash":"84c022389a2095b42a9003a6928f3e811230010bc20686282c05a88da060cdc36b0802","size":181,"data":"","first_seen":"2023-03-07T12:21:00Z","last_seen":"2026-04-04T00:34:26.635289Z","times_seen":5685,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","fqdn":"go.behindthemarkets.com","domain":"behindthemarkets.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"23028fc64e65f6dd3ac0611f94a5ce14","sha1":"c7812c04a20d069f8ee1269f579e3dc19b5ab898","sha256":"aa212692e64120cb4859c70d0baff0e3200c5f1b2e15e778adb1237c93d0a3d8","sha512":"87ca97a0d6a6ee23bdd01c37ffe71c5b1f53d7492a602c535050fa8959b8034989ab5acbb04b11a2bacd679290706622c83cfa02d7398e39fc73226817669c19","ssdeep":"","tlshash":"ff3152797112b8ba439f7137423f73493e7638b57400c4141939e7580628e97a27feba","size":1765,"data":"","first_seen":"2024-07-09T02:22:59Z","last_seen":"2026-04-04T00:34:26.646102Z","times_seen":3197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","fqdn":"go.behindthemarkets.com","domain":"behindthemarkets.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e9565aa95958c3f427dd710f00d4a092","sha1":"c596f2b7d288537ccac2c83942fe24643166ccea","sha256":"f36c51fc4c2bfd0402dc43fc85669439adc251635fa6db4600570b3766c07b99","sha512":"d1eba4b97a832207da498dcd2333dcbbba3d9cf133727a9f2a20651b0b11c80a3316f1f6b474d658e9b6bdf6860544114a6fdb54718788d14202b7486468c1bc","ssdeep":"","tlshash":"88f0974c600562c60eaa71e493af980238631a7c388cd38542c0dfc819e4ecd9063492","size":461,"data":"","first_seen":"2023-03-08T02:09:05Z","last_seen":"2026-04-03T23:46:53.54938Z","times_seen":4460,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.behindthemarkets.com/btm-midnight-in-america-vsl/sandbox%20eval%20code","fqdn":"go.behindthemarkets.com","domain":"behindthemarkets.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-04T01:31:22.650782Z","times_seen":770719,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btm-btm-btm.lpages.co/serve-leadbox/7tN382DWFtDz9Uw7QqdLU2/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026aff=5\u0026creative_id=\u0026id=3415984047574068345\u0026iocid=\u0026link_id=\u0026message_id=\u0026oid=213\u0026utm_campaign=\u0026utm_medium=\u0026utm_source=5","fqdn":"btm-btm-btm.lpages.co","domain":"btm-btm-btm.lpages.co","tld":"lpages.co"},"ip":{"addr":"35.202.21.90","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ab3f007f9ddbf0f4583e6002fec81753","sha1":"64833abe13132a7220b56d21255b5c5a4e8a0c0f","sha256":"44a8607238597f4d1d1c5bd6cce5f871b987105d969aa5d492e1f37e23aca407","sha512":"2f46a0bdfa0097ab0605076fbe2f105a654b747909f6f549fca4c54e2c9c3002bb28d08178cb7f2bee3cb3d1b0d5c356e18d0323b027ba675aad8ebeb0d83a86","ssdeep":"","tlshash":"1f81a778b5147a3089d6e26a287f768471b22928548cc494313dccd66ff4cca3672fbe","size":4023,"data":"","first_seen":"2023-03-07T01:15:19Z","last_seen":"2026-04-02T04:30:53.397583Z","times_seen":3335,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","fqdn":"go.behindthemarkets.com","domain":"behindthemarkets.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-04-04T01:32:20.577892Z","times_seen":233018,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","fqdn":"go.behindthemarkets.com","domain":"behindthemarkets.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e836a223299c66996d922f90cb0a7ed3","sha1":"8bf67c5a1042829803fc04c4b047ec9f5482bf70","sha256":"c77e92eba359ee71dbbc3d949be51ac51788cb30ef685ef643bf5c8961d7eff1","sha512":"f61a784dc2ac0f9785f61c0fa5434968761d9884759a57ce2db26eb49938f92eebdfda9163b67f8b347784d17cd8cbaf13744e18e8f08650828b02c30df4ef32","ssdeep":"","tlshash":"be1180ed97519437b3e3c11df3ad33906231b2471ad5dd810d0ac896dd717822db1696","size":889,"data":"","first_seen":"2023-03-07T12:21:00Z","last_seen":"2026-04-04T00:34:26.659497Z","times_seen":5421,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","fqdn":"go.behindthemarkets.com","domain":"behindthemarkets.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-04-04T01:32:20.577892Z","times_seen":233018,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","fqdn":"go.behindthemarkets.com","domain":"behindthemarkets.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5267f0ed0994d47ba3ee1a2cb4684a3c","sha1":"7ae5b26f1fcd629c509b820a78c581f016c1b172","sha256":"0d76cc5cf9963c714f8fbdee03a69306844b49d2c75e5b0593521e7f99548bdc","sha512":"0f527badd7760162f595491ec649ea5ab444107ca159aa1e03a51df361fc2b32187da41054afc77f525041912dc69c37342860367c5224b3d5e6773105c5c0fd","ssdeep":"","tlshash":"cf01281b3ce33b64106731fe2d8b101c6137a5929468eb6d3aa5d7207fd461c0369eda","size":735,"data":"","first_seen":"2025-04-14T18:41:02.688808Z","last_seen":"2026-03-26T14:36:58.154964Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","fqdn":"go.behindthemarkets.com","domain":"behindthemarkets.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7df700c1f2464524a2fc58ecbb33124","sha1":"780489733bd54ec292602928c3618c078c19b39b","sha256":"268fa9bd43ebb2a14fad7d1742679e63d08468edf5074371d3e5416fb66a81d5","sha512":"d4e8e7610372a326b3cf5c9d6c967fcb1818161a255225ab77bac45d0b1d56decf0998dbdad4d47e1d8e816b9c53a4b969108fdac3774179c51d0490899b4dc1","ssdeep":"","tlshash":"3ec08003cd342d3442b3c352764fb7531d23c6550925d414abd461c287d454743f0748","size":175,"data":"","first_seen":"2025-01-20T10:54:10.729833Z","last_seen":"2026-03-26T14:36:58.155761Z","times_seen":167,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.lpcontent.net/leadboxes/current/embed.js","fqdn":"embed.lpcontent.net","domain":"lpcontent.net","tld":"net"},"ip":{"addr":"34.107.203.240","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7efcfabdb6209627ce8b016b1c4814eb","sha1":"f3b8ebfc5fe452333c0fa14b15b28567f30921b9","sha256":"5590f038f87169772f0bb512d942481838ac73230926fb92c4ff8db9a19b2296","sha512":"1f42ef54b30bed3a0c96efb0d508e6531ee6ba7ee51ebc73f958d2579d5e6e61c53ae6813ef62aad67f360c1b6c3590ffecccf9b6a239ef5064dc9078b72aab6","ssdeep":"768:/mNRIe9eP+woFEqmp7k66AezeXKiKJ1DKDm2R3ng2JJP/SkczPdUDMxUGp:/0FEhJkpsa1Dc3ng2JF/SkczVNUGp","tlshash":"5613f99cb2c1f5b142d7a6b8c43f2109b33668399899e4f0a635c8d0beb059f1167f39","size":42811,"data":"","first_seen":"2023-03-07T01:15:19Z","last_seen":"2026-04-04T00:34:26.393031Z","times_seen":3787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","fqdn":"go.behindthemarkets.com","domain":"behindthemarkets.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a434d8d70086c5b541cf953d46a6fcf9","sha1":"651ac529314c0915b3d6f9af6dbf366d5e020ab6","sha256":"bd79f3bace96866d957bfa99c34951689148707899756824ce4e9c0d1726ff37","sha512":"69e5c077b5eea40ae74aaf639582c9e382441cf26cca19881abbf07413abbed52bf5be9c7cc5f702f2a65a856a81d94b59963a9cb721e4e6496d3043949bfdbf","ssdeep":"","tlshash":"90a0220c32cb3300c30000ae20ea808ca2388880222c0300a80200e03c8c20e0230e0f","size":65,"data":"","first_seen":"2023-11-21T15:38:37Z","last_seen":"2026-04-02T00:42:40.771933Z","times_seen":10585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.google.com/ccm/collect?en=page_view\u0026dl=https%3A%2F%2Fgo.behindthemarkets.com%2Fbtm-midnight-in-america-vsl%2F\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=2139065658.1759936259\u0026dt=BTM%20Midnight%20in%20America%20VSL\u0026auid=1774646019.1759936259\u0026navt=n\u0026npa=1\u0026gtm=45He5a61v812088355za200zd812088355xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~102015666~103116026~103200004~103233427~104527906~104528501~104684208~104684211~104948813~115480709~115834636~115834638\u0026tft=1759936259378\u0026tfd=1378\u0026apve=1\u0026apvf=f","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:10:59.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:37:19 GMT","end":"Mon, 08 Dec 2025 08:37:18 GMT"},"fingerprint":{"sha1":"71:09:AD:C8:6A:D2:25:DB:C9:D9:5E:5B:C1:06:E1:0D:D6:39:D6:F0","sha256":"A9:72:F7:39:49:86:27:92:AA:EE:65:04:99:A9:0E:A8:02:70:01:E6:72:46:C2:FB:DC:5E:5E:6B:DC:B8:27:A0"}}},"request":{"raw":"POST /ccm/collect?en=page_view\u0026dl=https%3A%2F%2Fgo.behindthemarkets.com%2Fbtm-midnight-in-america-vsl%2F\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=2139065658.1759936259\u0026dt=BTM%20Midnight%20in%20America%20VSL\u0026auid=1774646019.1759936259\u0026navt=n\u0026npa=1\u0026gtm=45He5a61v812088355za200zd812088355xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~102015666~103116026~103200004~103233427~104527906~104528501~104684208~104684211~104948813~115480709~115834636~115834638\u0026tft=1759936259378\u0026tfd=1378\u0026apve=1\u0026apvf=f HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://go.behindthemarkets.com/\r\nOrigin: https://go.behindthemarkets.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 08 Oct 2025 15:10:59 GMT\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: text/plain\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://go.behindthemarkets.com\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T01:30:53.33799Z","times_seen":13310387,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":126,"dns":0,"connect":23,"send":0,"wait":33,"receive":1,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://btm-btm-btm.lpages.co/serve-leadbox/7tN382DWFtDz9Uw7QqdLU2/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026aff=5\u0026creative_id=\u0026id=3415984047574068345\u0026iocid=\u0026link_id=\u0026message_id=\u0026oid=213\u0026utm_campaign=\u0026utm_medium=\u0026utm_source=5","date":"2025-10-08T15:10:59.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://btm-btm-btm.lpages.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 13:00:44 GMT\r\nexpires: Fri, 02 Oct 2026 13:00:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 526215\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-04-04T01:32:49.239607Z","times_seen":198568,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/quattrocento/v24/OZpbg_xvsDZQL_LKIF7q4jP_eE3vcKnY.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:10:58.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/quattrocento/v24/OZpbg_xvsDZQL_LKIF7q4jP_eE3vcKnY.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://go.behindthemarkets.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35960\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 13:04:32 GMT\r\nexpires: Fri, 02 Oct 2026 13:04:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 525987\r\nlast-modified: Thu, 04 Sep 2025 17:23:38 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35960,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35960, version 1.0","md5":"20479dd3f845d10a9545743e2203f2ab","sha1":"aba5c2ff79e23d8344c96d4a8df90a10eb5d2e3d","sha256":"f71000f0e9157888653489c1eefb6750a257ae7ced7dd208053fd1094919ee39","sha512":"daf2c12317f77b97de3802312d53915a86ee3198aacbcf7bbfe893d636417a72edbfc3f6ecdf807239ce2b261591137187ef5e32e5c086f7091489fa4a90a8c0","ssdeep":"768:IenoY3l7/zvB9/uOUiEajniZZot9MdF+LMY1waXdPpfTIm5C/0B:I1Y3lrbBQOjpjniZiziE1xlIm5bB","tlshash":"04f2f1105b4ea19fdbe7bded92c3a449c5316cbeb8701931a7d67c9e892208e4714fc2","first_seen":"2025-09-10T23:56:34.587656Z","last_seen":"2026-04-03T14:23:12.069085Z","times_seen":312,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":67,"dns":1,"connect":7,"send":0,"wait":8,"receive":10,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.center.io/identify.html","fqdn":"js.center.io","domain":"center.io","tld":"io"},"ip":{"addr":"216.239.38.21","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:10:59.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.center.io","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 08:40:02 GMT","end":"Tue, 23 Dec 2025 09:27:12 GMT"},"fingerprint":{"sha1":"D9:1D:58:0C:38:73:74:08:E8:C2:48:1F:7B:EE:3D:C8:C9:9C:0E:8D","sha256":"03:CA:23:AD:9A:66:F0:B5:9B:C4:F3:40:9C:5C:3F:C5:A3:79:3D:76:DE:2E:91:E0:2C:26:79:09:76:CA:1B:63"}}},"request":{"raw":"GET /identify.html HTTP/1.1\r\nHost: js.center.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-cloud-trace-context: 1bc16078dee8071955eb38fcf89d52ff\r\ncontent-encoding: gzip\r\nserver: Google Frontend\r\ncontent-length: 2016\r\ndate: Wed, 08 Oct 2025 15:06:11 GMT\r\nexpires: Wed, 08 Oct 2025 15:11:11 GMT\r\ncache-control: public, max-age=300\r\nage: 288\r\netag: \"OMWYXg\"\r\ncontent-type: text/html\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]}],"data":{"size":4432,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (612)","md5":"0ba3629e9c8b8af4c7a13d344978898a","sha1":"c05b5c80e1eec6e630547ecfacf11eb86391e4b6","sha256":"0efa1e4687032588dae8d6d3a00a92e504a3a14b9d1bb23c19670a47c9792110","sha512":"bbfd97be2213ec96188aade0ae1c4d7ed14da116b563ad4499fe72cc2c8906b94666b1be8303957ed4e8cdc8e6fd8ecba6023ef5e3e2c63452dac13745671d51","ssdeep":"96:0nicH3e+k4QdKwQLJnRNSFHqeQCokddY3dUCR:0nL3e74QQnSKeQC6p","tlshash":"f29151d9b2c67850869b30b4127f304f92be8a95fc0c4e80a5629ac1bf7459d5633eec","first_seen":"2023-04-08T09:51:16Z","last_seen":"2026-04-04T00:34:26.432285Z","times_seen":5555,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fast.vidalytics.com/video/PzpZ_7KZ/slxoAwy_ur0M6ad6/147664/144163__FFMPEG/ts/video/1280x720_h264_2400000/1.ts","fqdn":"fast.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:11:00.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 13 Nov 2024 00:00:00 GMT","end":"Fri, 21 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3A:95:4C:0B:62:16:0C:59:B3:98:1E:33:58:C9:DE:90:23:BB:7E:FB","sha256":"A4:E0:6D:B7:32:ED:D7:A5:28:AA:A2:34:06:62:B3:AF:A8:6F:FC:B0:6B:B1:D5:78:4B:52:78:5B:5D:A2:23:BD"}}},"request":{"raw":"GET /video/PzpZ_7KZ/slxoAwy_ur0M6ad6/147664/144163__FFMPEG/ts/video/1280x720_h264_2400000/1.ts HTTP/1.1\r\nHost: fast.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://go.behindthemarkets.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 15:11:00 GMT\r\ncontent-type: video/mp2t\r\ncontent-length: 1170112\r\nx-cff: B\r\nx-guploader-uploadid: AHMx-iHb9BqIHEF39niVo-RD6OxVcA77CIfiJ1vQI_mw2QgvvnxJSiZv1pdcFlgplOVoh4GI-Fh74w\r\nx-goog-generation: 1724349484873474\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1170112\r\nx-goog-hash: crc32c=DaAyAQ==, md5=6OZz3BfPzNkI/yr4hQU6dA==\r\nx-goog-storage-class: STANDARD\r\naccess-control-allow-origin: *\r\nexpires: Fri, 27 Feb 2026 11:01:37 GMT\r\ncache-control: public, max-age=31104000\r\nlast-modified: Thu, 22 Aug 2024 17:58:04 GMT\r\netag: \"e8e673dc17cfccd908ff2af885053a74\"\r\nx-lb-backend: gcs-prod\r\nx-lb-cache: hit\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nx-cf3: H\r\ncf4age: 0\r\nx-cf-tsc: 1741092840\r\ncf4ttl: 31104000.000\r\nx-cf-forcetr: 1\r\nx-cdn: 8\r\nx-cdn-site: c8-prod\r\naccess-control-expose-headers: Content-Type, server, x-hw, x-cdn, x-cdn-info, x-cache, x-cache-hits, x-served-by, x-goog-stored-content-length, content-length, x-lb-backend, x-lb-cache, x-cf1, x-cf2, x-cf3, x-cff\r\nx-cf2: H\r\naccept-ranges: bytes\r\nserver: CFS 1124\r\nx-cf1: 42305:fA.arn1:co:1736526511:cacheN.arn1-01:M\r\nx-cf-reqid: e44e98651410127c1ae5c2121672c77a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":1170112,"size_decoded":0,"mime_type":"video/mp2t","magic":"data","md5":"1ea9dfed9cde25b1c3ff87526fb8ec47","sha1":"7490cf7f2c5986397fd08146045f15968895f124","sha256":"c2932c78961c0fee141020b09fa7700c48ede8b0c4ab51ce50f22cd1645938c6","sha512":"2898479216bd1b834807374217c82c34c244bca76b1e004449a31413740e15493e67b120b136094acac2ca4d9f1eadcd80b23d5f7f62625e107384a394baf7c3","ssdeep":"24576:C1EQaFc7FErmuKGQCmhD72O/PX8NjIfkOsfXc7+Wn:CbaHr4GQCm572OctIfkTfozn","tlshash":"7125231e3b06dd1ac9238932920cd6e5e67a1c9587d84b51b1cbb28ff4febd8d924134","first_seen":"2025-07-30T19:14:46.249378Z","last_seen":"2026-03-26T14:36:58.087188Z","times_seen":60,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.vidalytics.com/awesome-log?cid=PzpZ_7KZ\u0026uid=GAhSChhB4VS34Raq","fqdn":"stats.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"107.178.211.97","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:11:02.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 13 Nov 2024 00:00:00 GMT","end":"Fri, 21 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3A:95:4C:0B:62:16:0C:59:B3:98:1E:33:58:C9:DE:90:23:BB:7E:FB","sha256":"A4:E0:6D:B7:32:ED:D7:A5:28:AA:A2:34:06:62:B3:AF:A8:6F:FC:B0:6B:B1:D5:78:4B:52:78:5B:5D:A2:23:BD"}}},"request":{"raw":"POST /awesome-log?cid=PzpZ_7KZ\u0026uid=GAhSChhB4VS34Raq HTTP/1.1\r\nHost: stats.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 310\r\nOrigin: https://go.behindthemarkets.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-methods: GET,OPTIONS,POST\r\ncontent-type: application/json\r\ndate: Wed, 08 Oct 2025 15:11:02 GMT\r\ncontent-length: 29\r\nx-envoy-upstream-service-time: 2\r\nserver: istio-envoy\r\naccess-control-allow-origin: https://go.behindthemarkets.com\r\naccess-control-expose-headers: Access-Control-Allow-Origin,Cache-Control,Content-Length,Content-Type,ETag,If-None-Match\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":29,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3fa4d740a575a660c2275a1c73e5c24e","sha1":"cc7c3a94a016e6730e48f62221e15dd8247f7919","sha256":"0753d0df670348ef90c8e5a3a24f7a8e22696f89c506fa4dd07c4a44f47d113d","sha512":"3ec620f2b8fd2a55fe58da3e2542b9096651e218a16a5d64db7c6b51216cfa7f6c5dade6a81422c75b30e673b78d616245e59da87544f9ffe041d4f2d2fdd49a","ssdeep":"","tlshash":"ea8000b0200bac8aa0a0a0c00200083202cccaa2ab800a28882ac02300802c020e0030","first_seen":"2025-10-08T15:11:30.133142Z","last_seen":"2025-10-08T15:11:30.133142Z","times_seen":1,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.leadpages.io/analytics/v1/observations/capture?version=1.8.6\u0026correlateBy=bHomk3nsRr7GQwzspiTwqQ\u0026origin=center-js\u0026kind=timer,timer,counter,timer\u0026label=load-center,load-identify,ident-new,send-events\u0026value=136,224,1,422","fqdn":"api.leadpages.io","domain":"leadpages.io","tld":"io"},"ip":{"addr":"35.192.151.63","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:11:03.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.leadpages.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Sep 2025 12:46:53 GMT","end":"Mon, 08 Dec 2025 12:46:52 GMT"},"fingerprint":{"sha1":"35:13:FF:40:26:85:89:EA:BE:CB:76:CA:AF:B5:F7:47:83:9C:64:6D","sha256":"54:F4:80:9F:84:D5:28:DC:DA:18:96:EC:47:6F:60:6C:57:1A:90:18:BA:A9:37:5A:15:93:66:02:BD:19:45:6B"}}},"request":{"raw":"GET /analytics/v1/observations/capture?version=1.8.6\u0026correlateBy=bHomk3nsRr7GQwzspiTwqQ\u0026origin=center-js\u0026kind=timer,timer,counter,timer\u0026label=load-center,load-identify,ident-new,send-events\u0026value=136,224,1,422 HTTP/1.1\r\nHost: api.leadpages.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://go.behindthemarkets.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/gif\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccess-control-max-age: 600\r\naccess-control-allow-origin: https://go.behindthemarkets.com\r\nServer: Stargate\r\naccess-control-allow-credentials: true\r\nDate: Wed, 08 Oct 2025 15:11:04 GMT\r\nx-request-id: 002vbf3qdi5g8ju4sf90\r\naccess-control-expose-headers: LP-Security-Token\r\nX-Forwarded-For: 91.90.42.154\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"c2196de8ba412c60c22ab491af7b1409","sha1":"5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b","sha256":"6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992","sha512":"84e24a70b78e9de9c9d0dfeb49f3f4247dbc1c715d8844471ee40669270682e199d48f5fbec62bd984c9c0270534b407c4d2561dd6c05adec3c83c1534f32d5c","ssdeep":"","tlshash":"d4800003e280c002c2a2c0300e0ccb802b88b0208a28030fb0ec2baeec3a2a00c02000","first_seen":"2023-04-05T07:36:27Z","last_seen":"2026-04-04T00:24:41.096471Z","times_seen":150692,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.lpcontent.net/leadboxes/current/embed.js","fqdn":"embed.lpcontent.net","domain":"lpcontent.net","tld":"net"},"ip":{"addr":"34.107.203.240","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:10:58.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"embed.lpcontent.net","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 02:09:33 GMT","end":"Wed, 03 Dec 2025 03:03:26 GMT"},"fingerprint":{"sha1":"05:61:15:6D:7A:E4:3C:3C:7E:B3:F0:EF:C5:35:E0:18:B8:1E:E1:E6","sha256":"13:07:B1:CB:D0:97:BA:55:3B:83:CD:F9:7B:58:B0:4D:13:86:51:F4:48:71:14:5F:D2:E7:2F:DB:19:87:D8:D4"}}},"request":{"raw":"GET /leadboxes/current/embed.js HTTP/1.1\r\nHost: embed.lpcontent.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nx-cloud-trace-context: 9731c6bbd907c946647ffcb67347ad1f\r\ncontent-encoding: gzip\r\nserver: Google Frontend\r\nvia: 1.1 google\r\ncontent-length: 14811\r\ndate: Wed, 08 Oct 2025 15:08:19 GMT\r\nexpires: Wed, 08 Oct 2025 15:13:19 GMT\r\ncache-control: public, max-age=300\r\nage: 159\r\netag: \"Na7c-w\"\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":42811,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (30758)","md5":"7efcfabdb6209627ce8b016b1c4814eb","sha1":"f3b8ebfc5fe452333c0fa14b15b28567f30921b9","sha256":"5590f038f87169772f0bb512d942481838ac73230926fb92c4ff8db9a19b2296","sha512":"1f42ef54b30bed3a0c96efb0d508e6531ee6ba7ee51ebc73f958d2579d5e6e61c53ae6813ef62aad67f360c1b6c3590ffecccf9b6a239ef5064dc9078b72aab6","ssdeep":"768:/mNRIe9eP+woFEqmp7k66AezeXKiKJ1DKDm2R3ng2JJP/SkczPdUDMxUGp:/0FEhJkpsa1Dc3ng2JF/SkczVNUGp","tlshash":"5613f99cb2c1f5b142d7a6b8c43f2109b33668399899e4f0a635c8d0beb059f1167f39","first_seen":"2023-03-07T01:15:19Z","last_seen":"2026-04-04T00:34:26.393031Z","times_seen":3787,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":133,"dns":29,"connect":25,"send":0,"wait":28,"receive":5,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:10:58.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://go.behindthemarkets.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 12:56:02 GMT\r\nexpires: Fri, 02 Oct 2026 12:56:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 526497\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-04T01:31:11.497547Z","times_seen":713503,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":70,"dns":0,"connect":22,"send":0,"wait":16,"receive":3,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fast.vidalytics.com/video/PzpZ_7KZ/slxoAwy_ur0M6ad6/147664/144163__FFMPEG/thumb/preview-5_0.jpg","fqdn":"fast.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:10:59.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 13 Nov 2024 00:00:00 GMT","end":"Fri, 21 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3A:95:4C:0B:62:16:0C:59:B3:98:1E:33:58:C9:DE:90:23:BB:7E:FB","sha256":"A4:E0:6D:B7:32:ED:D7:A5:28:AA:A2:34:06:62:B3:AF:A8:6F:FC:B0:6B:B1:D5:78:4B:52:78:5B:5D:A2:23:BD"}}},"request":{"raw":"GET /video/PzpZ_7KZ/slxoAwy_ur0M6ad6/147664/144163__FFMPEG/thumb/preview-5_0.jpg HTTP/1.1\r\nHost: fast.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 15:10:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2798\r\nx-cff: B\r\nx-guploader-uploadid: AAwnv3KxS1u0ur7RehpkXvZPm4K-veG4q1knyiDc_8w67alFRELWGHp1dxmIP4dO184p-Hdr\r\ncache-control: public, max-age=31104000\r\nexpires: Mon, 28 Sep 2026 21:48:55 GMT\r\nlast-modified: Thu, 22 Aug 2024 17:26:09 GMT\r\netag: \"6282001656ada5b0486bd5c4aa5478aa\"\r\nx-goog-generation: 1724347569048187\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 2798\r\nx-goog-hash: crc32c=8V6DrQ==, md5=YoIAFlatpbBIa9XEqlR4qg==\r\nx-goog-storage-class: STANDARD\r\naccess-control-allow-origin: *\r\nx-lb-backend: gcs-prod\r\nx-lb-cache: miss\r\nx-cf3: M\r\ncf4age: 0\r\nx-cf-tsc: 1759528135\r\ncf4ttl: 31104000.000\r\nx-cdn: 8\r\nx-cdn-site: c8-prod\r\naccess-control-expose-headers: Content-Type, server, x-hw, x-cdn, x-cdn-info, x-cache, x-cache-hits, x-served-by, x-goog-stored-content-length, content-length, x-lb-backend, x-lb-cache, x-cf1, x-cf2, x-cf3, x-cff\r\nx-cf2: H\r\naccept-ranges: bytes\r\nserver: CFS 1124\r\nx-cf1: 42305:fA.arn1:co:1736526511:cacheN.arn1-01:M\r\nx-cf-reqid: eee87300a221d4b66ab50458d3cdf2b7\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":2798,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 320x321, segment length 16, comment: \"Lavc60.3.100\", baseline, precision 8, 107x60, components 3","md5":"6282001656ada5b0486bd5c4aa5478aa","sha1":"27fe2ce08e067fcd8779dd9da82abe231580217c","sha256":"01b134d59ebc345635d358fb6fa756c6968202b8cbdd5773fe125bf3351d6919","sha512":"f1cf95cb396faf841c64a4a6d173bed676c918d5e6fa52a91d7354845f1ee993deed0e5159577735ff684429331fd1f248b68ca019a486ce01daeb0411194979","ssdeep":"","tlshash":"29514b116e061809f37784f703134712e3a5b2f5de95734009ca28acb91f4367b1a659","first_seen":"2024-08-24T02:10:12Z","last_seen":"2026-03-26T14:36:58.108251Z","times_seen":203,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-8R6YNFMJ23\u0026cx=c\u0026gtm=4e5a61","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:10:59.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:17 GMT","end":"Mon, 08 Dec 2025 08:34:16 GMT"},"fingerprint":{"sha1":"71:28:4D:CB:A8:43:CE:20:8D:C2:D0:1C:15:47:53:FB:EE:1F:E6:6C","sha256":"FD:F8:A3:C0:21:C0:03:15:43:2F:C7:36:8C:50:6A:39:57:B4:06:6A:0D:82:33:AB:55:A7:80:D2:E3:79:B8:11"}}},"request":{"raw":"GET /gtag/js?id=G-8R6YNFMJ23\u0026cx=c\u0026gtm=4e5a61 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 08 Oct 2025 15:10:59 GMT\r\nexpires: Wed, 08 Oct 2025 15:10:59 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 156404\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":493156,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (15266)","md5":"9af922d03f1e2deb9aa0cd54cf536612","sha1":"b6b1121e617f7c75c66da7c4983578ce156038f7","sha256":"b5001e63d46909f11a8ca04a01e95007da101ef97e905cab8a281387579966ea","sha512":"ade757c122a229beb193d734485e42837e461c8b0678ce652cb3c5280b82b450a1ada1974b9f31a6c64a8994ce983c7e81b6670c8c46de16c221830f2494b1ea","ssdeep":"6144:dB8C6r2AYOL+lC5DwgKkY+aXmJY6C5amgeek9J8X:jiKAYOhDy1W","tlshash":"0da4f99e73d6742653daf478502f01cba87b24a2b49cc8aab1c9cdf02d3459a4167f7c","first_seen":"2025-10-08T01:26:45.474993Z","last_seen":"2025-10-08T15:11:30.143519Z","times_seen":6,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.leadpages.io/analytics/v1/observations/capture?version=1.7.13\u0026origin=page-speed\u0026kind=timer,timer,timer,timer,timer,timer,timer,timer,timer,timer\u0026label=domain-lookup,connect,request,ttfb,response,loading,interactive,content-loaded,complete,load\u0026value=0,0,121,123,120,147,563,598,2909,2910","fqdn":"api.leadpages.io","domain":"leadpages.io","tld":"io"},"ip":{"addr":"35.192.151.63","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:11:01.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.leadpages.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Sep 2025 12:46:53 GMT","end":"Mon, 08 Dec 2025 12:46:52 GMT"},"fingerprint":{"sha1":"35:13:FF:40:26:85:89:EA:BE:CB:76:CA:AF:B5:F7:47:83:9C:64:6D","sha256":"54:F4:80:9F:84:D5:28:DC:DA:18:96:EC:47:6F:60:6C:57:1A:90:18:BA:A9:37:5A:15:93:66:02:BD:19:45:6B"}}},"request":{"raw":"GET /analytics/v1/observations/capture?version=1.7.13\u0026origin=page-speed\u0026kind=timer,timer,timer,timer,timer,timer,timer,timer,timer,timer\u0026label=domain-lookup,connect,request,ttfb,response,loading,interactive,content-loaded,complete,load\u0026value=0,0,121,123,120,147,563,598,2909,2910 HTTP/1.1\r\nHost: api.leadpages.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/gif\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccess-control-expose-headers: LP-Security-Token\r\nServer: Stargate\r\nDate: Wed, 08 Oct 2025 15:11:01 GMT\r\nx-request-id: 002vbef6i7409s8qf7p0\r\naccess-control-allow-credentials: true\r\nX-Forwarded-For: 91.90.42.154\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"c2196de8ba412c60c22ab491af7b1409","sha1":"5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b","sha256":"6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992","sha512":"84e24a70b78e9de9c9d0dfeb49f3f4247dbc1c715d8844471ee40669270682e199d48f5fbec62bd984c9c0270534b407c4d2561dd6c05adec3c83c1534f32d5c","ssdeep":"","tlshash":"d4800003e280c002c2a2c0300e0ccb802b88b0208a28030fb0ec2baeec3a2a00c02000","first_seen":"2023-04-05T07:36:27Z","last_seen":"2026-04-04T00:24:41.096471Z","times_seen":150692,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":123,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","fqdn":"go.behindthemarkets.com","domain":"behindthemarkets.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-08T15:10:57.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.behindthemarkets.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 07:39:29 GMT","end":"Tue, 16 Dec 2025 07:39:28 GMT"},"fingerprint":{"sha1":"8A:AB:03:74:FD:35:DF:E5:77:D1:92:33:77:B6:A8:4C:38:F9:7D:BF","sha256":"66:D5:FF:85:5E:FA:3A:00:B4:39:08:F3:3F:A0:9F:1C:A7:CC:C6:2F:33:08:8A:DA:65:BA:2D:15:F3:CC:45:82"}}},"request":{"raw":"GET /btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id= HTTP/1.1\r\nHost: go.behindthemarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T01:30:53.33799Z","times_seen":13310387,"resource_available":true,"data":null}},"time_used":601,"timings":{"blocked":300,"dns":48,"connect":119,"send":0,"wait":0,"receive":0,"ssl":130},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,500,700|Roboto+Condensed:300,400,500,700|Quattrocento:300,400,500,700|Open+Sans:300,400,500,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:10:58.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"54:09:EF:2E:96:03:5C:86:DF:F0:DA:AC:A6:7A:0D:35:49:4E:68:90","sha256":"0E:84:83:07:1D:C1:46:17:EB:EA:2F:15:CE:88:56:D2:FF:9E:AE:31:D2:C3:FC:DA:00:24:46:48:43:CD:11:1F"}}},"request":{"raw":"GET /css?family=Roboto:300,400,500,700|Roboto+Condensed:300,400,500,700|Quattrocento:300,400,500,700|Open+Sans:300,400,500,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 08 Oct 2025 15:10:58 GMT\r\ndate: Wed, 08 Oct 2025 15:10:58 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56162,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"4fdff6ce35a561f37ea0e935e5c91030","sha1":"20f878f6c658165beb06487c5cb3997a3c3c30a5","sha256":"0c2b25627ef07f21f03ba3af3b941ff8a2452e2d7e7aedd633025aebc315312e","sha512":"7ee723eac06731ae6d332b1fb518afb14bce484ec2cc6b13831a1e0be92a65389e837ccb9bd022811652bbe53ffa3616740c8732dda183ae4430ebb0106ab839","ssdeep":"768:VosL5+YcuKNyEfSQv3rgXU/9ffQiqGr8vkSfEQNVR1GJuofOQjLXqiuIBhIblLuG:VVdbYvMoa","tlshash":"93432ea1042b5400a7835cd223ce7e34ee0fa2157044d0b6abfd5baaedd7d66637835e","first_seen":"2025-09-22T14:10:41.889295Z","last_seen":"2025-11-14T19:41:20.398178Z","times_seen":12,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":97,"dns":1,"connect":20,"send":0,"wait":36,"receive":0,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user.lpcontent.net/fonts/bb4wMKcXKB896PwqF4vMVT/tLp7EWydCzw5kwUYKVFcjB/cyEG4e84LSSey88oAJCzQ3.woff2?time=1640185343","fqdn":"user.lpcontent.net","domain":"lpcontent.net","tld":"net"},"ip":{"addr":"34.120.132.252","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:10:59.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"user.lpcontent.net","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 14:07:30 GMT","end":"Thu, 01 Jan 2026 15:01:44 GMT"},"fingerprint":{"sha1":"8D:7B:25:6A:42:E0:FE:B8:92:92:9A:40:16:EF:0A:0A:30:B6:4A:26","sha256":"C1:8A:73:A2:EC:36:F6:55:31:43:AC:B5:50:3E:AF:09:7B:84:85:15:7B:2A:FC:D2:A4:05:5E:86:D6:6C:54:B6"}}},"request":{"raw":"GET /fonts/bb4wMKcXKB896PwqF4vMVT/tLp7EWydCzw5kwUYKVFcjB/cyEG4e84LSSey88oAJCzQ3.woff2?time=1640185343 HTTP/1.1\r\nHost: user.lpcontent.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://go.behindthemarkets.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://user.lpcontent.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-guploader-uploadid: AAwnv3KNiOhVCXWB6QbIkVXQjGlxC_r5kgBRZVVHd6mLC0W3pq0_JlRaaonWmNINf-LWI171VXzZPxg\r\nx-goog-generation: 1640185343067889\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 52040\r\nx-goog-hash: crc32c=6YxB1w==, md5=VBUWwMb63PxtAprEY9QADg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 52040\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: content-type\r\nserver: UploadServer\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000, h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nvia: 1.1 google\r\ndate: Wed, 08 Oct 2025 14:45:25 GMT\r\nexpires: Wed, 08 Oct 2025 15:45:25 GMT\r\ncache-control: public, max-age=3600\r\nage: 1534\r\nlast-modified: Wed, 22 Dec 2021 15:02:23 GMT\r\netag: \"541516c0c6fadcfc6d029ac463d4000e\"\r\ncontent-type: fonts/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":52040,"size_decoded":0,"mime_type":"fonts/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 52040, version 2.0","md5":"541516c0c6fadcfc6d029ac463d4000e","sha1":"8b6431014118a72b934b5e6af17dd138c2127f4e","sha256":"e829e217b80dde708942929f7f407e3bc6adcffaf601a84188253c6ec54c2952","sha512":"190deb8028e05bcf640be3e712444f7f4c043606006654a855b4fd13af0e0551554261eb0dde6c8d25c6bd09eb5e50d503c12ad17b530b3110fe0b469df6ed0f","ssdeep":"1536:uq4eBUfnnWmlyWPubGYw0BqE2Rbb//ccNJOu3q010icknNr:uTAYnZl8bNwcqE2Rbb/kcNJOu6a","tlshash":"9f3302caeb3b75bd91cf2eef527c2073057a7256c1361da1074fca421822d1e2e31169","first_seen":"2023-05-24T01:03:31Z","last_seen":"2026-03-26T14:36:58.088172Z","times_seen":321,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":18,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.vidalytics.com/awesome-log?cid=PzpZ_7KZ","fqdn":"stats.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"107.178.211.97","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:11:00.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 13 Nov 2024 00:00:00 GMT","end":"Fri, 21 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3A:95:4C:0B:62:16:0C:59:B3:98:1E:33:58:C9:DE:90:23:BB:7E:FB","sha256":"A4:E0:6D:B7:32:ED:D7:A5:28:AA:A2:34:06:62:B3:AF:A8:6F:FC:B0:6B:B1:D5:78:4B:52:78:5B:5D:A2:23:BD"}}},"request":{"raw":"GET /awesome-log?cid=PzpZ_7KZ HTTP/1.1\r\nHost: stats.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://go.behindthemarkets.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: Accept, Content-Type, Origin, Range, X-Requested-With\r\naccess-control-allow-methods: GET, POST, PUT, OPTIONS\r\naccess-control-expose-headers: Access-Control-Allow-Origin,Cache-Control,Content-Length,Content-Type,ETag,If-None-Match\r\ncache-control: no-cache, public, max-age=2592000\r\ncontent-length: 43\r\ncontent-type: image/gif\r\netag: \"PzpZ_7KZ/GAhSChhB4VS34Raq\"\r\ndate: Wed, 08 Oct 2025 15:11:00 GMT\r\nx-envoy-upstream-service-time: 1\r\nserver: istio-envoy\r\naccess-control-allow-origin: https://go.behindthemarkets.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"57f187c7a868faeac558007a8eb6cb2e","sha1":"11ab10ab109fdb53d91d444ac781101f5a6360c6","sha256":"aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22","sha512":"3844065e1dd778a05e8cc39901fbf3191ded380d594359df137901ec56ca52e03d57eb60acc2421a0ee74f0733bbb5d781b7744685c26fb013a236f49b02fed3","ssdeep":"","tlshash":"5f900407c1500051c151c4310444cf1017407570010d030d50dc1055dc1715d0d01100","first_seen":"2023-04-07T09:22:11Z","last_seen":"2026-04-04T00:34:07.206738Z","times_seen":55971,"resource_available":true,"data":null}},"time_used":647,"timings":{"blocked":256,"dns":21,"connect":119,"send":0,"wait":122,"receive":0,"ssl":126},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fast.vidalytics.com/video/PzpZ_7KZ/slxoAwy_ur0M6ad6/147664/144163__FFMPEG/video_TS_h264_aac_96000_1920x1080_3500000_variant.m3u8","fqdn":"fast.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:11:00.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 13 Nov 2024 00:00:00 GMT","end":"Fri, 21 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3A:95:4C:0B:62:16:0C:59:B3:98:1E:33:58:C9:DE:90:23:BB:7E:FB","sha256":"A4:E0:6D:B7:32:ED:D7:A5:28:AA:A2:34:06:62:B3:AF:A8:6F:FC:B0:6B:B1:D5:78:4B:52:78:5B:5D:A2:23:BD"}}},"request":{"raw":"GET /video/PzpZ_7KZ/slxoAwy_ur0M6ad6/147664/144163__FFMPEG/video_TS_h264_aac_96000_1920x1080_3500000_variant.m3u8 HTTP/1.1\r\nHost: fast.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://go.behindthemarkets.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 15:11:00 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\ncontent-length: 51821\r\nx-cff: B\r\nx-guploader-uploadid: AAwnv3KDl_pOsylfunWEbqBdB4uDq-7DpFpa54a048n2FcOXqSj8tubIL5sQI5v3RfTiN1bP\r\nx-goog-generation: 1724351094277318\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 51821\r\nx-goog-hash: crc32c=8mCemg==, md5=xysNBofmpg3uoxIpLTKvMw==\r\nx-goog-storage-class: STANDARD\r\naccess-control-allow-origin: *\r\nexpires: Sat, 19 Sep 2026 04:11:03 GMT\r\ncache-control: public, max-age=31104000\r\nlast-modified: Thu, 22 Aug 2024 18:24:54 GMT\r\netag: \"c72b0d0687e6a60deea312292d32af33\"\r\nx-lb-backend: gcs-prod\r\nx-lb-cache: revalidated\r\nx-cf3: H\r\ncf4age: 139820\r\nx-cf-tsc: 1758959888\r\ncf4ttl: 30964180.000\r\nx-cdn: 8\r\nx-cdn-site: c8-prod\r\naccess-control-expose-headers: Content-Type, server, x-hw, x-cdn, x-cdn-info, x-cache, x-cache-hits, x-served-by, x-goog-stored-content-length, content-length, x-lb-backend, x-lb-cache, x-cf1, x-cf2, x-cf3, x-cff\r\nx-cf2: H\r\naccept-ranges: bytes\r\nserver: CFS 1124\r\nx-cf1: 42305:fA.arn1:co:1736526511:cacheN.arn1-01:M\r\nx-cf-reqid: a8ab9f8639972aa185cfe0091adc5ad3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]}],"data":{"size":51821,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"c72b0d0687e6a60deea312292d32af33","sha1":"fc7ac920ea2e2c41b750b07c789794ff07ffe92f","sha256":"70b5eb63afbdf99e3cd77b24babe30f42eeb26722b16556cf9d4ff347fed55cb","sha512":"a8b04470896be8a56590231328260c6484b4fbdaccc6f6f891c4dce933d45f7a0a1be1285f51ef62f82c923daecbe43f7d2bda5e6b8a18006c810259fc71b6fd","ssdeep":"384:w7TE5C/Al+rZkzmFgfix8Q1SPUJWjINr+Rc3a/94TGKnotubMByvdYX6x8LeFgE+:wszBWSl","tlshash":"7a3396a8d1f52444e20a4f9a9b37f07785107a1cfeeddd409ae583b01cbf7a617886e4","first_seen":"2024-08-24T02:10:12Z","last_seen":"2026-03-26T14:36:58.09824Z","times_seen":201,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.vidalytics.com/scribe","fqdn":"stats.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"107.178.211.97","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:11:00.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 13 Nov 2024 00:00:00 GMT","end":"Fri, 21 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3A:95:4C:0B:62:16:0C:59:B3:98:1E:33:58:C9:DE:90:23:BB:7E:FB","sha256":"A4:E0:6D:B7:32:ED:D7:A5:28:AA:A2:34:06:62:B3:AF:A8:6F:FC:B0:6B:B1:D5:78:4B:52:78:5B:5D:A2:23:BD"}}},"request":{"raw":"POST /scribe HTTP/1.1\r\nHost: stats.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 804\r\nOrigin: https://go.behindthemarkets.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-methods: POST,OPTIONS\r\ncontent-type: application/json\r\ndate: Wed, 08 Oct 2025 15:11:01 GMT\r\ncontent-length: 16\r\nx-envoy-upstream-service-time: 2\r\nserver: istio-envoy\r\naccess-control-allow-origin: https://go.behindthemarkets.com\r\naccess-control-expose-headers: Access-Control-Allow-Origin,Cache-Control,Content-Length,Content-Type,ETag,If-None-Match\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a1cbd35d4488ac8cc6f959d4c633dc37","sha1":"11844023759429ec785ae1c18e6a9c69803ee2bd","sha256":"707d4c7f44dd33e874b5a09b6dba4702b12bfd3e19e470d601fcfc1d7009286c","sha512":"1681f6f4eb56a4a46346eebdb411eedc18fe2975b9929ddb57647f50ce8b33529df03285b8ebcb747552e625b674bc140ee4b33263edcb336ab6e4caac532b3c","ssdeep":"","tlshash":"46600003000c00300cf03c00030330303f300f00000f00fc000c303000003c0c00c000","first_seen":"2023-04-05T11:33:20Z","last_seen":"2026-04-03T22:32:38.283819Z","times_seen":9629,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.vidalytics.com/scribe","fqdn":"stats.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"107.178.211.97","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:11:01.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 13 Nov 2024 00:00:00 GMT","end":"Fri, 21 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3A:95:4C:0B:62:16:0C:59:B3:98:1E:33:58:C9:DE:90:23:BB:7E:FB","sha256":"A4:E0:6D:B7:32:ED:D7:A5:28:AA:A2:34:06:62:B3:AF:A8:6F:FC:B0:6B:B1:D5:78:4B:52:78:5B:5D:A2:23:BD"}}},"request":{"raw":"POST /scribe HTTP/1.1\r\nHost: stats.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 530\r\nOrigin: https://go.behindthemarkets.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-methods: POST,OPTIONS\r\ncontent-type: application/json\r\ndate: Wed, 08 Oct 2025 15:11:01 GMT\r\ncontent-length: 16\r\nx-envoy-upstream-service-time: 2\r\nserver: istio-envoy\r\naccess-control-allow-origin: https://go.behindthemarkets.com\r\naccess-control-expose-headers: Access-Control-Allow-Origin,Cache-Control,Content-Length,Content-Type,ETag,If-None-Match\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a1cbd35d4488ac8cc6f959d4c633dc37","sha1":"11844023759429ec785ae1c18e6a9c69803ee2bd","sha256":"707d4c7f44dd33e874b5a09b6dba4702b12bfd3e19e470d601fcfc1d7009286c","sha512":"1681f6f4eb56a4a46346eebdb411eedc18fe2975b9929ddb57647f50ce8b33529df03285b8ebcb747552e625b674bc140ee4b33263edcb336ab6e4caac532b3c","ssdeep":"","tlshash":"46600003000c00300cf03c00030330303f300f00000f00fc000c303000003c0c00c000","first_seen":"2023-04-05T11:33:20Z","last_seen":"2026-04-03T22:32:38.283819Z","times_seen":9629,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/fjallaone/v16/Yq6R-LCAWCX3-6Ky7FAFrOF6kg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://btm-btm-btm.lpages.co/serve-leadbox/7tN382DWFtDz9Uw7QqdLU2/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026aff=5\u0026creative_id=\u0026id=3415984047574068345\u0026iocid=\u0026link_id=\u0026message_id=\u0026oid=213\u0026utm_campaign=\u0026utm_medium=\u0026utm_source=5","date":"2025-10-08T15:10:59.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/fjallaone/v16/Yq6R-LCAWCX3-6Ky7FAFrOF6kg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://btm-btm-btm.lpages.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 45228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 12:45:06 GMT\r\nexpires: Fri, 02 Oct 2026 12:45:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 527153\r\nlast-modified: Tue, 16 Sep 2025 13:41:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45228,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45228, version 1.0","md5":"1b492d988a78c417f463cab50fd9bf01","sha1":"e5935ccbf5498efb471e3fb9e23f7d0b3ce904e4","sha256":"96bbdb37b0db8ffc26756924566453f5fdcdf58ada20262cd75071b540361b12","sha512":"a85b9560d26aeda8969a2d767f24473101dc52b777d3230aa65b9b77240579989c6222cdf0222c87e85527c7115f3b28e2bdfe88aef8f66dd80ea37df18dc183","ssdeep":"768:/CARQwtR2xjVquaEHl+hC3ttiWRatuXR2Unn/n/nPCqLQ5qIJIm1LE5uy6Unt:/P2u8p3tFatI/i5qIhUt","tlshash":"da13028c04bac18b9647717669771e35782b27cee72ce0de775480b58bb0f0e260b656","first_seen":"2025-09-17T05:46:54.805235Z","last_seen":"2026-04-04T00:57:16.65251Z","times_seen":3274,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://btm-btm-btm.lpages.co/serve-leadbox/7tN382DWFtDz9Uw7QqdLU2/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026aff=5\u0026creative_id=\u0026id=3415984047574068345\u0026iocid=\u0026link_id=\u0026message_id=\u0026oid=213\u0026utm_campaign=\u0026utm_medium=\u0026utm_source=5","date":"2025-10-08T15:10:59.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://btm-btm-btm.lpages.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 13:00:44 GMT\r\nexpires: Fri, 02 Oct 2026 13:00:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 526215\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-04-04T01:32:49.239607Z","times_seen":198568,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-16585749727\u0026cx=c\u0026gtm=4e5a61","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:10:59.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:17 GMT","end":"Mon, 08 Dec 2025 08:34:16 GMT"},"fingerprint":{"sha1":"71:28:4D:CB:A8:43:CE:20:8D:C2:D0:1C:15:47:53:FB:EE:1F:E6:6C","sha256":"FD:F8:A3:C0:21:C0:03:15:43:2F:C7:36:8C:50:6A:39:57:B4:06:6A:0D:82:33:AB:55:A7:80:D2:E3:79:B8:11"}}},"request":{"raw":"GET /gtag/js?id=AW-16585749727\u0026cx=c\u0026gtm=4e5a61 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 08 Oct 2025 15:10:59 GMT\r\nexpires: Wed, 08 Oct 2025 15:10:59 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 129059\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":380381,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"d4e79edbb2e9042e953e9ba1ab10ea03","sha1":"ca65f59979d4bc71d9a4cd53b6d87a4afd9cf6d4","sha256":"7a4d69fe02eb4f6c5c25d196265d5501494a9065707265eed871f3db3aa7cf1d","sha512":"ac69e372f74f508c9d63940d1d2a67d8dad7d8b2d2120bb357065cbe9d19ecd6cc197ffc37de095b326bf4198d33e514a36881c72b5439874d7b4451301a429e","ssdeep":"3072:993gWXaxQ4OZZ6rA90AVo1w4APskKfPbymklFxSiDw2ElLj70KkW4c+aXmdLbEbv:MC6rcXOL+lCiDwgKkY+aXmJbX4iqsqF","tlshash":"a68429cd73d674225393a478503f018ba57b68a2f84cc899f189cde52e74a9a4237f7c","first_seen":"2025-10-08T01:26:45.483392Z","last_seen":"2025-10-08T15:11:30.152875Z","times_seen":5,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.behindthemarkets.com/btm-midnight-in-america-vsl/undefined","fqdn":"go.behindthemarkets.com","domain":"behindthemarkets.com","tld":"com"},"ip":{"addr":"35.202.21.90","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:10:58.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.behindthemarkets.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 07:39:29 GMT","end":"Tue, 16 Dec 2025 07:39:28 GMT"},"fingerprint":{"sha1":"8A:AB:03:74:FD:35:DF:E5:77:D1:92:33:77:B6:A8:4C:38:F9:7D:BF","sha256":"66:D5:FF:85:5E:FA:3A:00:B4:39:08:F3:3F:A0:9F:1C:A7:CC:C6:2F:33:08:8A:DA:65:BA:2D:15:F3:CC:45:82"}}},"request":{"raw":"GET /btm-midnight-in-america-vsl/undefined HTTP/1.1\r\nHost: go.behindthemarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=\r\nCookie: variation=z5Leeq9Dkr4xvJykhu5kwA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 08 Oct 2025 15:10:59 GMT\r\ncontent-type: text/html\r\ncontent-length: 142\r\nlocation: https://go.behindthemarkets.com/btm-midnight-in-america-vsl/undefined/\r\nserver: Leadpages\r\nstrict-transport-security: max-age=15768000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96287,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T01:30:53.33799Z","times_seen":13310387,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lh3.googleusercontent.com/W_vRo2tNrVX1bAh6a2vHvwkN-SmBa9FS-pNZToMYTmh5ofJjywWyb6t2nJhjjaMcVosVP_9R5GwhffqAOJ6lTH33VJW6FzHT3m2i=w16","fqdn":"lh3.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:10:59.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:07 GMT","end":"Mon, 08 Dec 2025 08:36:06 GMT"},"fingerprint":{"sha1":"CB:ED:08:40:60:28:21:1C:F0:5E:4E:70:F4:A7:21:B3:2D:D3:A2:41","sha256":"38:2A:CC:C1:33:BE:46:EF:3F:1F:4C:37:EF:65:6F:51:FD:55:86:1E:B3:ED:83:0A:3F:26:E1:6D:19:97:C6:9B"}}},"request":{"raw":"GET /W_vRo2tNrVX1bAh6a2vHvwkN-SmBa9FS-pNZToMYTmh5ofJjywWyb6t2nJhjjaMcVosVP_9R5GwhffqAOJ6lTH33VJW6FzHT3m2i=w16 HTTP/1.1\r\nHost: lh3.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\nserver: fife\r\ncontent-length: 226\r\nx-xss-protection: 0\r\ndate: Wed, 08 Oct 2025 13:26:54 GMT\r\nexpires: Thu, 09 Oct 2025 13:26:54 GMT\r\ncache-control: public, max-age=86400, no-transform\r\nage: 6245\r\netag: \"v1\"\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":226,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 3, 8-bit/color RGB, non-interlaced","md5":"ece4cae91b1f404227957d7277e45330","sha1":"674ac000b9bb6b4a7c7a702fc4f6694db7d8ddef","sha256":"247ec6a64d5a6e8c0ffd4d8b731beb4d749298d530401f53bf33b7e59baabad7","sha512":"f8b362c6b0cbd7e31e1495aa52f65360a7c53c7d5729c563cb328f5ac138d9b1c9f580821cd58f1cef37093b4a33e7298b528a058ca60963e0d6af4d8fce5690","ssdeep":"","tlshash":"72d02357a2554d7eec1cdb57494c00656475431057dfc063a45e99717c33b05cce49f3","first_seen":"2025-01-09T00:49:35.47806Z","last_seen":"2026-01-13T00:25:59.501316Z","times_seen":1060,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":111,"dns":7,"connect":10,"send":0,"wait":22,"receive":0,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lh3.googleusercontent.com/-YzQ2d78XvCQmjpuP1lhz7j7pecTJybsKXv5VCXRj76FzDjxYyWbTRMQGHllXrHUFEoSckB-CgjDT0gDSCMXnblzA5IcKRaGhXw=w1280","fqdn":"lh3.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:10:59.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:07 GMT","end":"Mon, 08 Dec 2025 08:36:06 GMT"},"fingerprint":{"sha1":"CB:ED:08:40:60:28:21:1C:F0:5E:4E:70:F4:A7:21:B3:2D:D3:A2:41","sha256":"38:2A:CC:C1:33:BE:46:EF:3F:1F:4C:37:EF:65:6F:51:FD:55:86:1E:B3:ED:83:0A:3F:26:E1:6D:19:97:C6:9B"}}},"request":{"raw":"GET /-YzQ2d78XvCQmjpuP1lhz7j7pecTJybsKXv5VCXRj76FzDjxYyWbTRMQGHllXrHUFEoSckB-CgjDT0gDSCMXnblzA5IcKRaGhXw=w1280 HTTP/1.1\r\nHost: lh3.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nvary: Origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\netag: \"v1\"\r\nexpires: Thu, 09 Oct 2025 15:11:00 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"unnamed.jpg\"\r\nx-content-type-options: nosniff\r\ndate: Wed, 08 Oct 2025 15:11:00 GMT\r\nserver: fife\r\ncontent-length: 20099\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20099,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x955, components 3","md5":"5c17d33875b31fb2faf394e6b79befe2","sha1":"287641df91aa5645d607e342ec29bf16bcb3a35a","sha256":"9d9cc3cf2fef7c86a695aa7a8c53354776c5c491a587a4e9342c8282e189a603","sha512":"da3d6e825c996328358b8d8e940ad0df663c60214bf01b2834e7d22391f8239436aa98d0e4b0a18230a5a873b3a88fd2c10af7a356d943c0ba456fc861b39c68","ssdeep":"384:kYNg7ZFe1xo6aYc5PjKYVVcVVVVLUVLVVV7JK4fMrY:kYybexaYcFjKYVVcVVVVLUVLVVVXMrY","tlshash":"d192c58c1758b155c5d3db78a54aa3988370b33ebcaf9135d218ca10cba857bebcdc64","first_seen":"2024-07-16T16:07:32Z","last_seen":"2026-03-26T14:36:58.089159Z","times_seen":276,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":102,"dns":1,"connect":20,"send":0,"wait":288,"receive":8,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.center.io/identify.html","fqdn":"js.center.io","domain":"center.io","tld":"io"},"ip":{"addr":"216.239.38.21","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://btm-btm-btm.lpages.co/serve-leadbox/7tN382DWFtDz9Uw7QqdLU2/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026aff=5\u0026creative_id=\u0026id=3415984047574068345\u0026iocid=\u0026link_id=\u0026message_id=\u0026oid=213\u0026utm_campaign=\u0026utm_medium=\u0026utm_source=5","date":"2025-10-08T15:10:59.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.center.io","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 08:40:02 GMT","end":"Tue, 23 Dec 2025 09:27:12 GMT"},"fingerprint":{"sha1":"D9:1D:58:0C:38:73:74:08:E8:C2:48:1F:7B:EE:3D:C8:C9:9C:0E:8D","sha256":"03:CA:23:AD:9A:66:F0:B5:9B:C4:F3:40:9C:5C:3F:C5:A3:79:3D:76:DE:2E:91:E0:2C:26:79:09:76:CA:1B:63"}}},"request":{"raw":"GET /identify.html HTTP/1.1\r\nHost: js.center.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btm-btm-btm.lpages.co/\r\nCookie: centerVisitorId=GMSo5EbHbHSTbaFcTLebvi\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-cloud-trace-context: 0901e746fd846cda3c6dfa58bb887f31\r\ncontent-encoding: gzip\r\nserver: Google Frontend\r\ncontent-length: 2016\r\ndate: Wed, 08 Oct 2025 15:07:25 GMT\r\nexpires: Wed, 08 Oct 2025 15:12:25 GMT\r\ncache-control: public, max-age=300\r\nage: 214\r\netag: \"OMWYXg\"\r\ncontent-type: text/html\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]}],"data":{"size":4432,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (612)","md5":"0ba3629e9c8b8af4c7a13d344978898a","sha1":"c05b5c80e1eec6e630547ecfacf11eb86391e4b6","sha256":"0efa1e4687032588dae8d6d3a00a92e504a3a14b9d1bb23c19670a47c9792110","sha512":"bbfd97be2213ec96188aade0ae1c4d7ed14da116b563ad4499fe72cc2c8906b94666b1be8303957ed4e8cdc8e6fd8ecba6023ef5e3e2c63452dac13745671d51","ssdeep":"96:0nicH3e+k4QdKwQLJnRNSFHqeQCokddY3dUCR:0nL3e74QQnSKeQC6p","tlshash":"f29151d9b2c67850869b30b4127f304f92be8a95fc0c4e80a5629ac1bf7459d5633eec","first_seen":"2023-04-08T09:51:16Z","last_seen":"2026-04-04T00:34:26.432285Z","times_seen":5555,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fast.vidalytics.com/video/PzpZ_7KZ/slxoAwy_ur0M6ad6/147664/144163__FFMPEG/ts/video/1920x1080_h264_3500000/2.ts","fqdn":"fast.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:11:00.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 13 Nov 2024 00:00:00 GMT","end":"Fri, 21 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3A:95:4C:0B:62:16:0C:59:B3:98:1E:33:58:C9:DE:90:23:BB:7E:FB","sha256":"A4:E0:6D:B7:32:ED:D7:A5:28:AA:A2:34:06:62:B3:AF:A8:6F:FC:B0:6B:B1:D5:78:4B:52:78:5B:5D:A2:23:BD"}}},"request":{"raw":"GET /video/PzpZ_7KZ/slxoAwy_ur0M6ad6/147664/144163__FFMPEG/ts/video/1920x1080_h264_3500000/2.ts HTTP/1.1\r\nHost: fast.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://go.behindthemarkets.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 15:11:00 GMT\r\ncontent-type: video/mp2t\r\ncontent-length: 1147176\r\nx-cff: B\r\nx-guploader-uploadid: AKDAyItz7_ys-4mVf7ZYO7dfB1Yb0y-6JW517eezRaYDq-ZywXKVfx7gNWLV05yfa04kkqw8\r\ncache-control: public, max-age=31104000\r\nexpires: Fri, 03 Apr 2026 15:05:55 GMT\r\nlast-modified: Thu, 22 Aug 2024 18:24:34 GMT\r\netag: \"1977c174f1e2d70ee66abe25b8b984c4\"\r\nx-goog-generation: 1724351074186468\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1147176\r\nx-goog-hash: crc32c=JmFVYg==, md5=GXfBdPHi1w7mar4luLmExA==\r\nx-goog-storage-class: STANDARD\r\naccess-control-allow-origin: *\r\nx-lb-backend: gcs-prod\r\nx-lb-cache: miss\r\nx-cf3: H\r\ncf4age: 17165\r\nx-cf-tsc: 1746936825\r\ncf4ttl: 31086834.000\r\nx-cdn: 8\r\nx-cdn-site: c8-prod\r\naccess-control-expose-headers: Content-Type, server, x-hw, x-cdn, x-cdn-info, x-cache, x-cache-hits, x-served-by, x-goog-stored-content-length, content-length, x-lb-backend, x-lb-cache, x-cf1, x-cf2, x-cf3, x-cff\r\nx-cf2: H\r\naccept-ranges: bytes\r\nserver: CFS 1124\r\nx-cf1: 42305:fA.arn1:co:1736526511:cacheN.arn1-01:M\r\nx-cf-reqid: a95abf5cb7d3c0e65ce9c0323692fe35\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1147176,"size_decoded":0,"mime_type":"video/mp2t","magic":"data","md5":"e9c6c491fa7b96e9c3650309a2c360b3","sha1":"59ce1ae82861287f6ac19034d7208d42055f9233","sha256":"ee8670133d2b7fac086a915d0a8f1b68d16939618c95811c94f288b7c61d5102","sha512":"9dd6a4a5197a8c536012d14eb5862aa25101ddbedbe2fcf17b2596d23165503204dac81851e04964ae477fcf1c27245709570cd271491239e11dd6375a7e8eff","ssdeep":"24576:2L6L+LSA69+d0r/wqmeTdAjxfOp1ipY7X2l:ZLVLkAmt9OpGY7XK","tlshash":"b525230c3b90bd99dd85a63143805932ebb02ea41d25af5e5845f75efcfd2e4d0a24b2","first_seen":"2025-07-30T19:14:46.311307Z","last_seen":"2026-03-26T14:36:58.105311Z","times_seen":57,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.vidalytics.com/awesome-log?cid=PzpZ_7KZ\u0026uid=GAhSChhB4VS34Raq","fqdn":"stats.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"107.178.211.97","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:11:02.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 13 Nov 2024 00:00:00 GMT","end":"Fri, 21 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3A:95:4C:0B:62:16:0C:59:B3:98:1E:33:58:C9:DE:90:23:BB:7E:FB","sha256":"A4:E0:6D:B7:32:ED:D7:A5:28:AA:A2:34:06:62:B3:AF:A8:6F:FC:B0:6B:B1:D5:78:4B:52:78:5B:5D:A2:23:BD"}}},"request":{"raw":"OPTIONS /awesome-log?cid=PzpZ_7KZ\u0026uid=GAhSChhB4VS34Raq HTTP/1.1\r\nHost: stats.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://go.behindthemarkets.com/\r\nOrigin: https://go.behindthemarkets.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: https://go.behindthemarkets.com\r\naccess-control-allow-methods: POST,GET,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Accept,Authorization,Cache-Control,Content-Disposition,Content-Type,Origin,pragma,Range,X-Requested-With,X-File-Name,X-Filename\r\naccess-control-expose-headers: Access-Control-Allow-Origin,Cache-Control,Content-Length,Content-Type,ETag,If-None-Match\r\ndate: Wed, 08 Oct 2025 15:11:02 GMT\r\nserver: istio-envoy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T01:30:53.33799Z","times_seen":13310387,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"verifiedlinks.org/go?ehash=170498e26daec5510e348f609dbea71c\u0026product=53848\u0026ar=48\u0026cid=89899\u0026lid=ee35f3e24467cc3c9370ea90810d6212\u0026slhash=71276\u0026mtaid=TC\u0026cid2=[s8]","fqdn":"verifiedlinks.org","domain":"verifiedlinks.org","tld":"org"},"ip":{"addr":"172.66.173.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-08T15:10:55.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"verifiedlinks.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 02:31:46 GMT","end":"Sat, 15 Nov 2025 03:31:42 GMT"},"fingerprint":{"sha1":"44:FF:50:56:7A:4C:11:63:BD:9B:ED:6A:97:0C:9D:FC:C6:AE:5B:00","sha256":"02:61:83:50:FB:1B:8E:0C:35:78:6F:DB:38:42:DD:45:EA:9B:BD:56:99:C7:B8:8D:97:07:60:00:D9:F2:54:86"}}},"request":{"raw":"GET /go?ehash=170498e26daec5510e348f609dbea71c\u0026product=53848\u0026ar=48\u0026cid=89899\u0026lid=ee35f3e24467cc3c9370ea90810d6212\u0026slhash=71276\u0026mtaid=TC\u0026cid2=[s8] HTTP/1.1\r\nHost: verifiedlinks.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 08 Oct 2025 15:10:56 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://www.behindthemarkets-btm.com/7BZ2W/CJR5QB/?sub1=3415984047574068345\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: User-Agent\r\ncf-cache-status: DYNAMIC\r\nset-cookie: PHPSESSID=16d565ac5396a7d5d2a8f6beb0274963; Path=/\npixel_session_hash_53848=3415984047574068345; HttpOnly; SameSite=None; Secure; Path=/; Max-Age=2592000; Expires=Fri, 07 Nov 2025 15:10:55 GMT\nbt_tracking_product_53848=4981d12818b0266e03b538713005999041f5d089adfb36e29f3f214efd785edb; Max-Age=172800; Expires=Fri, 10 Oct 2025 15:10:55 GMT\r\ncf-ray: 98b6915dc9c70afa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T01:30:53.33799Z","times_seen":13310387,"resource_available":true,"data":null}},"time_used":1203,"timings":{"blocked":91,"dns":35,"connect":1,"send":0,"wait":1021,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"verifiedlinks.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"verifiedlinks.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"verifiedlinks.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.leadpages.io/analytics/v1/events/capture?k=view\u0026a=leadpage\u0026l=oSaEGv8BdaraPAdWggNqeX\u0026v=\u0026e=\u0026st=\u0026lc=en-US\u0026pid=bb4wMKcXKB896PwqF4vMVT-default-prop\u0026uid=GMSo5EbHbHSTbaFcTLebvi\u0026sid=JHkXdPFU9BMPHcZLnCLNje\u0026cid=lp-oSaEGv8BdaraPAdWggNqeX%3ABQHzgGnruQCt4KBCF4FhiE%3Az5Leeq9Dkr4xvJykhu5kwA\u0026uri=https%3A%2F%2Fgo.behindthemarkets.com%2Fbtm-midnight-in-america-vsl%2F%3F_ef_transaction_id%3Dbc43f30744eb479fbdafd7dbcebb0f4f%26utm_source%3D5%26utm_campaign%3D%26utm_medium%3D%26id%3D3415984047574068345%26iocid%3D%26aff%3D5%26creative_id%3D%26oid%3D213%26message_id%3D%26link_id%3D\u0026rf=\u0026rx=1280\u0026ry=1024\u0026tz=%2B00%3A00","fqdn":"api.leadpages.io","domain":"leadpages.io","tld":"io"},"ip":{"addr":"35.192.151.63","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:10:59.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.leadpages.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Sep 2025 12:46:53 GMT","end":"Mon, 08 Dec 2025 12:46:52 GMT"},"fingerprint":{"sha1":"35:13:FF:40:26:85:89:EA:BE:CB:76:CA:AF:B5:F7:47:83:9C:64:6D","sha256":"54:F4:80:9F:84:D5:28:DC:DA:18:96:EC:47:6F:60:6C:57:1A:90:18:BA:A9:37:5A:15:93:66:02:BD:19:45:6B"}}},"request":{"raw":"GET /analytics/v1/events/capture?k=view\u0026a=leadpage\u0026l=oSaEGv8BdaraPAdWggNqeX\u0026v=\u0026e=\u0026st=\u0026lc=en-US\u0026pid=bb4wMKcXKB896PwqF4vMVT-default-prop\u0026uid=GMSo5EbHbHSTbaFcTLebvi\u0026sid=JHkXdPFU9BMPHcZLnCLNje\u0026cid=lp-oSaEGv8BdaraPAdWggNqeX%3ABQHzgGnruQCt4KBCF4FhiE%3Az5Leeq9Dkr4xvJykhu5kwA\u0026uri=https%3A%2F%2Fgo.behindthemarkets.com%2Fbtm-midnight-in-america-vsl%2F%3F_ef_transaction_id%3Dbc43f30744eb479fbdafd7dbcebb0f4f%26utm_source%3D5%26utm_campaign%3D%26utm_medium%3D%26id%3D3415984047574068345%26iocid%3D%26aff%3D5%26creative_id%3D%26oid%3D213%26message_id%3D%26link_id%3D\u0026rf=\u0026rx=1280\u0026ry=1024\u0026tz=%2B00%3A00 HTTP/1.1\r\nHost: api.leadpages.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://go.behindthemarkets.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/gif\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: Stargate\r\nDate: Wed, 08 Oct 2025 15:10:59 GMT\r\naccess-control-expose-headers: LP-Security-Token\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 600\r\naccess-control-allow-origin: https://go.behindthemarkets.com\r\nx-request-id: 002vbe1suhmm998859hg\r\nset-cookie: view.bb4wMKcXKB896PwqF4vMVT-default-prop.oSaEGv8BdaraPAdWggNqeX=1759936260000; Domain=api.leadpages.io; expires=Thu, 09 Oct 2025 15:10:59 GMT; HttpOnly; Max-Age=86400; Path=/analytics/v1/events/capture; SameSite=None; Secure\r\nX-Forwarded-For: 91.90.42.154\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"c2196de8ba412c60c22ab491af7b1409","sha1":"5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b","sha256":"6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992","sha512":"84e24a70b78e9de9c9d0dfeb49f3f4247dbc1c715d8844471ee40669270682e199d48f5fbec62bd984c9c0270534b407c4d2561dd6c05adec3c83c1534f32d5c","ssdeep":"","tlshash":"d4800003e280c002c2a2c0300e0ccb802b88b0208a28030fb0ec2baeec3a2a00c02000","first_seen":"2023-04-05T07:36:27Z","last_seen":"2026-04-04T00:24:41.096471Z","times_seen":150692,"resource_available":true,"data":null}},"time_used":702,"timings":{"blocked":284,"dns":28,"connect":122,"send":0,"wait":132,"receive":0,"ssl":134},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fast.vidalytics.com/video/PzpZ_7KZ/slxoAwy_ur0M6ad6/147664/144163__FFMPEG/video_TS_h264_aac_96000_1280x720_2400000_variant.m3u8","fqdn":"fast.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:11:00.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 13 Nov 2024 00:00:00 GMT","end":"Fri, 21 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3A:95:4C:0B:62:16:0C:59:B3:98:1E:33:58:C9:DE:90:23:BB:7E:FB","sha256":"A4:E0:6D:B7:32:ED:D7:A5:28:AA:A2:34:06:62:B3:AF:A8:6F:FC:B0:6B:B1:D5:78:4B:52:78:5B:5D:A2:23:BD"}}},"request":{"raw":"GET /video/PzpZ_7KZ/slxoAwy_ur0M6ad6/147664/144163__FFMPEG/video_TS_h264_aac_96000_1280x720_2400000_variant.m3u8 HTTP/1.1\r\nHost: fast.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://go.behindthemarkets.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 15:11:00 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\ncontent-length: 50912\r\nx-cff: B\r\nx-guploader-uploadid: AAwnv3KJ_jOax9X5hwitwLyf9yGOh831kE38OqCY2hxf9fiMb67eXErqkE3Lll-RBqR4Xe9u8ahgmVw9qg3aBg\r\nx-goog-generation: 1724349509886426\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 50912\r\nx-goog-hash: crc32c=ulrUfQ==, md5=HAEPnLG00kuf17KljKsZUg==\r\nx-goog-storage-class: STANDARD\r\naccess-control-allow-origin: *\r\nexpires: Tue, 22 Sep 2026 00:14:42 GMT\r\ncache-control: public, max-age=31104000\r\nlast-modified: Thu, 22 Aug 2024 17:58:29 GMT\r\netag: \"1c010f9cb1b4d24b9fd7b2a58cab1952\"\r\nx-lb-backend: gcs-prod\r\nx-lb-cache: revalidated\r\nx-cf3: H\r\ncf4age: 0\r\nx-cf-tsc: 1758959888\r\ncf4ttl: 31104000.000\r\nx-cdn: 8\r\nx-cdn-site: c8-prod\r\naccess-control-expose-headers: Content-Type, server, x-hw, x-cdn, x-cdn-info, x-cache, x-cache-hits, x-served-by, x-goog-stored-content-length, content-length, x-lb-backend, x-lb-cache, x-cf1, x-cf2, x-cf3, x-cff\r\nx-cf2: H\r\naccept-ranges: bytes\r\nserver: CFS 1124\r\nx-cf1: 42305:fA.arn1:co:1736526511:cacheN.arn1-01:M\r\nx-cf-reqid: aefa4e686a2e7db126a57e34e36da1ab\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":50912,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"1c010f9cb1b4d24b9fd7b2a58cab1952","sha1":"7e27a216050e83b3a92fc1f9276daa4dd345ec92","sha256":"1e4a6bb1c04aa056f16aec14ece1442d2958be0484ca823ff64b8e62576e65bd","sha512":"e4a7f92c202f1d4abd3c9b492f972d28403588de5159e8ca056ca48cbe12f5b7466b04c9b8fd46ae3d6aa1bc28a93ea890736f6692b4622297a3e68c7828cd5a","ssdeep":"384:w7wvyp0D2to0p2DwVyvMBNIHqhs7O1Q6XYdeb/8xifbuBMnKtoD2AlC/E5GT49J7:wtfUdq3","tlshash":"b433c7acc1b93454e18d0db2bb55f1728510799faceb9b4513fb86400e6bd871e84ebc","first_seen":"2024-07-16T16:07:32Z","last_seen":"2026-03-26T14:36:58.109241Z","times_seen":269,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.leadpages.net/fonts/font-awesome/6.4.2/css/all.min.css","fqdn":"static.leadpages.net","domain":"leadpages.net","tld":"net"},"ip":{"addr":"34.107.203.240","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:10:58.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.leadpages.net","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 09:55:41 GMT","end":"Sat, 13 Dec 2025 10:48:55 GMT"},"fingerprint":{"sha1":"D6:09:12:4D:BE:D0:03:9B:7F:C9:6F:FA:9B:6C:0E:F0:E3:66:3A:BE","sha256":"C0:5C:0D:4B:E0:F8:83:BE:FA:93:79:B4:2F:C6:94:4A:BE:F4:E1:A8:84:2D:43:07:3B:8D:7F:77:36:A7:FB:DE"}}},"request":{"raw":"GET /fonts/font-awesome/6.4.2/css/all.min.css HTTP/1.1\r\nHost: static.leadpages.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nx-cloud-trace-context: 49ed5c85b05ac9cfb8d0cb4b22935907\r\ncontent-encoding: gzip\r\nserver: Google Frontend\r\nvia: 1.1 google\r\ndate: Tue, 07 Oct 2025 13:05:49 GMT\r\nexpires: Wed, 07 Oct 2026 13:05:49 GMT\r\ncache-control: public, max-age=31536000\r\netag: \"Na7c-w\"\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\ncontent-length: 26836\r\nage: 93909\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":102217,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (52276)","md5":"5222e06b77a1692fa2520a219840e6be","sha1":"8b4236206a8b86af3761a244277663046d7ff7ee","sha256":"0934b1fc0d3a766d41d3adf5e7a115875e66e98ebba408d965a41cf3d2cb4ab5","sha512":"cf780ba5def29277f562835b0b3a9129ce2aca8afc81a294d6a9a7f824a1c5bb81bac00d23d42946884606b7821642b12e17a2e92f424171446db2aea8b8340c","ssdeep":"1536:0wMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuuprrlCq:M709gMGFiyPGuuprlCq","tlshash":"09a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-08-04T22:28:10Z","last_seen":"2026-04-04T00:34:26.443036Z","times_seen":36044,"resource_available":false,"data":null}},"time_used":557,"timings":{"blocked":248,"dns":27,"connect":26,"send":0,"wait":27,"receive":27,"ssl":198},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-WNRH3TX","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:10:58.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:17 GMT","end":"Mon, 08 Dec 2025 08:34:16 GMT"},"fingerprint":{"sha1":"71:28:4D:CB:A8:43:CE:20:8D:C2:D0:1C:15:47:53:FB:EE:1F:E6:6C","sha256":"FD:F8:A3:C0:21:C0:03:15:43:2F:C7:36:8C:50:6A:39:57:B4:06:6A:0D:82:33:AB:55:A7:80:D2:E3:79:B8:11"}}},"request":{"raw":"GET /gtm.js?id=GTM-WNRH3TX HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 08 Oct 2025 15:10:59 GMT\r\nexpires: Wed, 08 Oct 2025 15:10:59 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 141380\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":425328,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (11728)","md5":"66264e07f3bb962e8cd961bcf981cbff","sha1":"eb3de80668a3717c4660222a9c7656052c3888e0","sha256":"d2681c16f7fd9e548d42449337a91b824a18124f4616427123e2a09898f0cfc3","sha512":"64146b0687a13256fb08567ba235164f8287e3f30ebf5bd86792f4e4992307a64117caa75533d6594f54317bb56ac86304c0dce1e52aa08706e2002b2f439439","ssdeep":"6144:HCirgXOL+lCiDwpKkY+aXmJXBXtrZs1YEp:zcXOaDpadA","tlshash":"b99429cdb3d6742243a2a578403f014ba17b28e2f84cd895f186cde52e74a9a5237f7d","first_seen":"2025-10-08T15:11:30.158265Z","last_seen":"2025-10-08T15:11:30.158265Z","times_seen":1,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":78,"dns":5,"connect":21,"send":0,"wait":42,"receive":57,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.behindthemarkets.com/btm-midnight-in-america-vsl/undefined/","fqdn":"go.behindthemarkets.com","domain":"behindthemarkets.com","tld":"com"},"ip":{"addr":"35.202.21.90","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:10:59.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.behindthemarkets.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 07:39:29 GMT","end":"Tue, 16 Dec 2025 07:39:28 GMT"},"fingerprint":{"sha1":"8A:AB:03:74:FD:35:DF:E5:77:D1:92:33:77:B6:A8:4C:38:F9:7D:BF","sha256":"66:D5:FF:85:5E:FA:3A:00:B4:39:08:F3:3F:A0:9F:1C:A7:CC:C6:2F:33:08:8A:DA:65:BA:2D:15:F3:CC:45:82"}}},"request":{"raw":"GET /btm-midnight-in-america-vsl/undefined/ HTTP/1.1\r\nHost: go.behindthemarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: variation=z5Leeq9Dkr4xvJykhu5kwA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Wed, 08 Oct 2025 15:10:59 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: no-cache\r\nserver: Leadpages\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":96287,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (46675)","md5":"4ede80ef1287b539f7ef31b8081f734a","sha1":"9b077fdebeeabde0423dc52e8d7853cd1b52efd4","sha256":"9cfb7614c0123943267f5e7538ee0894e88a56792b9f092e77e707fd1ce08c7b","sha512":"6d25b3ad4f893fe6d658fb1a1d7c9491a520870a794e605d4fc2273c96a710a30cf7bf17fb0ae0db07962956c229ca756fc05d6462fe124b5016b9986b05af09","ssdeep":"768:KFmwTX8YmWAbEjh6aAR42Qnz/SKfG0UJkbR/SffDM/8ErHe9wfbWanvqyVqmNxwv:KFkEEQnzFdrHeYbWanjhxSQTcQGLB","tlshash":"de939543da2a34ada1178975f0217208635cba09e5b3ddc4f3da977a0fc64990d72bce","first_seen":"2024-06-11T13:02:49Z","last_seen":"2026-04-03T12:18:36.881076Z","times_seen":3767,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans:300,400,500,700|Fjalla+One:300,400,500,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btm-btm-btm.lpages.co/serve-leadbox/7tN382DWFtDz9Uw7QqdLU2/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026aff=5\u0026creative_id=\u0026id=3415984047574068345\u0026iocid=\u0026link_id=\u0026message_id=\u0026oid=213\u0026utm_campaign=\u0026utm_medium=\u0026utm_source=5","date":"2025-10-08T15:10:59.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"54:09:EF:2E:96:03:5C:86:DF:F0:DA:AC:A6:7A:0D:35:49:4E:68:90","sha256":"0E:84:83:07:1D:C1:46:17:EB:EA:2F:15:CE:88:56:D2:FF:9E:AE:31:D2:C3:FC:DA:00:24:46:48:43:CD:11:1F"}}},"request":{"raw":"GET /css?family=Open+Sans:300,400,500,700|Fjalla+One:300,400,500,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btm-btm-btm.lpages.co/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 08 Oct 2025 15:10:59 GMT\r\ndate: Wed, 08 Oct 2025 15:10:59 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24669,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"c771e35efa36cf71da56ea4cc83ec547","sha1":"8f2cb9faadb2df1fea023f81e65de1e6b73495e6","sha256":"5ec9c333ee4381550c923c1091ee954425144f0a08ee939f414ec8cc8d157188","sha512":"e98bc1766b13e8a0dd39550827499a9956e1c1feb10e277b52ba4811eba5789fa125aff22dc74aad5c16f342b387fe3a19bd749dd6f801e1197bd1d3bdc960b6","ssdeep":"192:Vc5SF1LbCddw24WrqKnbqGIwV4Mrz7xCAAN21/rqbnbqGIwV4RazqmCjjC2KcrqR:i5jAYqY4tjXqY4pGqqY4UU8qY4Z","tlshash":"bbb22aa00027585063431de623ce7e34ee0fa2657044d07a6bfd8b9beedad6963b435d","first_seen":"2025-09-22T14:10:41.8626Z","last_seen":"2026-03-26T14:36:58.090167Z","times_seen":1290,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.leadpages.io/analytics/v1/observations/capture?version=1.8.6\u0026correlateBy=kJqjkMSk3yTux4Na8XuGQ6\u0026origin=center-js\u0026kind=timer,timer,counter\u0026label=load-center,load-identify,ident-exists\u0026value=83,339,1","fqdn":"api.leadpages.io","domain":"leadpages.io","tld":"io"},"ip":{"addr":"35.192.151.63","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://btm-btm-btm.lpages.co/serve-leadbox/7tN382DWFtDz9Uw7QqdLU2/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026aff=5\u0026creative_id=\u0026id=3415984047574068345\u0026iocid=\u0026link_id=\u0026message_id=\u0026oid=213\u0026utm_campaign=\u0026utm_medium=\u0026utm_source=5","date":"2025-10-08T15:11:04.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.leadpages.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Sep 2025 12:46:53 GMT","end":"Mon, 08 Dec 2025 12:46:52 GMT"},"fingerprint":{"sha1":"35:13:FF:40:26:85:89:EA:BE:CB:76:CA:AF:B5:F7:47:83:9C:64:6D","sha256":"54:F4:80:9F:84:D5:28:DC:DA:18:96:EC:47:6F:60:6C:57:1A:90:18:BA:A9:37:5A:15:93:66:02:BD:19:45:6B"}}},"request":{"raw":"GET /analytics/v1/observations/capture?version=1.8.6\u0026correlateBy=kJqjkMSk3yTux4Na8XuGQ6\u0026origin=center-js\u0026kind=timer,timer,counter\u0026label=load-center,load-identify,ident-exists\u0026value=83,339,1 HTTP/1.1\r\nHost: api.leadpages.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://btm-btm-btm.lpages.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btm-btm-btm.lpages.co/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/gif\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccess-control-max-age: 600\r\naccess-control-allow-origin: https://btm-btm-btm.lpages.co\r\nServer: Stargate\r\naccess-control-allow-credentials: true\r\nDate: Wed, 08 Oct 2025 15:11:04 GMT\r\nx-request-id: 002vbf5lcohec6slqd2g\r\naccess-control-expose-headers: LP-Security-Token\r\nX-Forwarded-For: 91.90.42.154\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"c2196de8ba412c60c22ab491af7b1409","sha1":"5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b","sha256":"6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992","sha512":"84e24a70b78e9de9c9d0dfeb49f3f4247dbc1c715d8844471ee40669270682e199d48f5fbec62bd984c9c0270534b407c4d2561dd6c05adec3c83c1534f32d5c","ssdeep":"","tlshash":"d4800003e280c002c2a2c0300e0ccb802b88b0208a28030fb0ec2baeec3a2a00c02000","first_seen":"2023-04-05T07:36:27Z","last_seen":"2026-04-04T00:24:41.096471Z","times_seen":150692,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-8R6YNFMJ23\u0026cid=877149459.1759936260\u0026gtm=45je5a61v874108444z8812088355za200zb812088355zd812088355\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528501~104684208~104684211~104948813~115480710~115616985~115834636~115834638\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528501~104684208~104684211~104948813~115480710~115616985~115834636~115834638\u0026z=2037627940","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:11:00.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:38:47 GMT","end":"Mon, 08 Dec 2025 08:38:46 GMT"},"fingerprint":{"sha1":"C0:45:71:17:CE:C3:46:B2:12:DC:B2:E3:86:3F:B6:4A:4A:A6:66:E8","sha256":"0D:84:59:55:0F:E7:1B:8D:AD:24:44:33:81:69:DE:97:58:25:F0:6A:68:26:D3:3C:BF:E5:34:C9:91:CD:4E:EF"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-8R6YNFMJ23\u0026cid=877149459.1759936260\u0026gtm=45je5a61v874108444z8812088355za200zb812088355zd812088355\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528501~104684208~104684211~104948813~115480710~115616985~115834636~115834638\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528501~104684208~104684211~104948813~115480710~115616985~115834636~115834638\u0026z=2037627940 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Wed, 08 Oct 2025 15:11:00 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T01:31:22.603625Z","times_seen":761337,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":91,"dns":12,"connect":21,"send":0,"wait":33,"receive":0,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.vidalytics.com/scribe","fqdn":"stats.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"107.178.211.97","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:11:01.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 13 Nov 2024 00:00:00 GMT","end":"Fri, 21 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3A:95:4C:0B:62:16:0C:59:B3:98:1E:33:58:C9:DE:90:23:BB:7E:FB","sha256":"A4:E0:6D:B7:32:ED:D7:A5:28:AA:A2:34:06:62:B3:AF:A8:6F:FC:B0:6B:B1:D5:78:4B:52:78:5B:5D:A2:23:BD"}}},"request":{"raw":"POST /scribe HTTP/1.1\r\nHost: stats.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 486\r\nOrigin: https://go.behindthemarkets.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-methods: POST,OPTIONS\r\ncontent-type: application/json\r\ndate: Wed, 08 Oct 2025 15:11:01 GMT\r\ncontent-length: 16\r\nx-envoy-upstream-service-time: 2\r\nserver: istio-envoy\r\naccess-control-allow-origin: https://go.behindthemarkets.com\r\naccess-control-expose-headers: Access-Control-Allow-Origin,Cache-Control,Content-Length,Content-Type,ETag,If-None-Match\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a1cbd35d4488ac8cc6f959d4c633dc37","sha1":"11844023759429ec785ae1c18e6a9c69803ee2bd","sha256":"707d4c7f44dd33e874b5a09b6dba4702b12bfd3e19e470d601fcfc1d7009286c","sha512":"1681f6f4eb56a4a46346eebdb411eedc18fe2975b9929ddb57647f50ce8b33529df03285b8ebcb747552e625b674bc140ee4b33263edcb336ab6e4caac532b3c","ssdeep":"","tlshash":"46600003000c00300cf03c00030330303f300f00000f00fc000c303000003c0c00c000","first_seen":"2023-04-05T11:33:20Z","last_seen":"2026-04-03T22:32:38.283819Z","times_seen":9629,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lh3.googleusercontent.com/W_vRo2tNrVX1bAh6a2vHvwkN-SmBa9FS-pNZToMYTmh5ofJjywWyb6t2nJhjjaMcVosVP_9R5GwhffqAOJ6lTH33VJW6FzHT3m2i=w800","fqdn":"lh3.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:11:01.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:07 GMT","end":"Mon, 08 Dec 2025 08:36:06 GMT"},"fingerprint":{"sha1":"CB:ED:08:40:60:28:21:1C:F0:5E:4E:70:F4:A7:21:B3:2D:D3:A2:41","sha256":"38:2A:CC:C1:33:BE:46:EF:3F:1F:4C:37:EF:65:6F:51:FD:55:86:1E:B3:ED:83:0A:3F:26:E1:6D:19:97:C6:9B"}}},"request":{"raw":"GET /W_vRo2tNrVX1bAh6a2vHvwkN-SmBa9FS-pNZToMYTmh5ofJjywWyb6t2nJhjjaMcVosVP_9R5GwhffqAOJ6lTH33VJW6FzHT3m2i=w800 HTTP/1.1\r\nHost: lh3.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\netag: \"v1\"\r\nexpires: Thu, 09 Oct 2025 15:11:01 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\ndate: Wed, 08 Oct 2025 15:11:01 GMT\r\nserver: fife\r\ncontent-length: 39765\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39765,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 148, 8-bit/color RGBA, non-interlaced","md5":"5dfd90f769e0e4b291f06f21f68419d2","sha1":"ee3bc25ceee43d3e2aeb4e66377ef869f954ecaa","sha256":"02260d32a47b7cc2c9c3b11137303dd79a2923cda482e2449a4be778b325bdb1","sha512":"5b5e563adbdff8c79907ce87319c8cac826e39acb75400d20e806aa87c4bbb6812402660794915e8f9a51bda4aa4f76250636f61ba6f89b981f0acdf8cd26b3c","ssdeep":"768:b5sW4eLMOpkEUOuHEJlxSKCNGtJsGXeG2ynl4DfJ1DNwvICK:bvfLPjnuWHCknXJ1nlexMg","tlshash":"c503f1d8d9423da1b7d829a69b3b87dc9dc5264f55c0ab31f9b7216e48a7c6400923c3","first_seen":"2025-01-20T10:54:10.693079Z","last_seen":"2026-01-13T00:25:59.511434Z","times_seen":758,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user.lpcontent.net/fonts/bb4wMKcXKB896PwqF4vMVT/tLp7EWydCzw5kwUYKVFcjB/3F4sc4AXzByVYk996ggWaU.woff2?time=1640185343","fqdn":"user.lpcontent.net","domain":"lpcontent.net","tld":"net"},"ip":{"addr":"34.120.132.252","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:10:59.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"user.lpcontent.net","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 14:07:30 GMT","end":"Thu, 01 Jan 2026 15:01:44 GMT"},"fingerprint":{"sha1":"8D:7B:25:6A:42:E0:FE:B8:92:92:9A:40:16:EF:0A:0A:30:B6:4A:26","sha256":"C1:8A:73:A2:EC:36:F6:55:31:43:AC:B5:50:3E:AF:09:7B:84:85:15:7B:2A:FC:D2:A4:05:5E:86:D6:6C:54:B6"}}},"request":{"raw":"GET /fonts/bb4wMKcXKB896PwqF4vMVT/tLp7EWydCzw5kwUYKVFcjB/3F4sc4AXzByVYk996ggWaU.woff2?time=1640185343 HTTP/1.1\r\nHost: user.lpcontent.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://go.behindthemarkets.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://user.lpcontent.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-guploader-uploadid: AAwnv3KwItMPhEcWbx1OWxZXb7l1Qh7wCDffGeLEgD_u664_05h2TtxzsSfVVTUehNa839iPAP-j5GY\r\nx-goog-generation: 1640185343011733\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 58532\r\nx-goog-hash: crc32c=V9e9OQ==, md5=btevWRFujxuXcNOpYa3PDA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 58532\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: content-type\r\nserver: UploadServer\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000, h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nvia: 1.1 google\r\ndate: Wed, 08 Oct 2025 14:45:25 GMT\r\nexpires: Wed, 08 Oct 2025 15:45:25 GMT\r\ncache-control: public, max-age=3600\r\nage: 1534\r\nlast-modified: Wed, 22 Dec 2021 15:02:23 GMT\r\netag: \"6ed7af59116e8f1b9770d3a961adcf0c\"\r\ncontent-type: fonts/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":58532,"size_decoded":0,"mime_type":"fonts/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 58532, version 2.0","md5":"6ed7af59116e8f1b9770d3a961adcf0c","sha1":"d092a66078e0523843e2ba30ef4513794031f578","sha256":"4ea90d09b5846e7f39228fa04549636404e779146220c4de7e7396cbdce3a764","sha512":"383940840fa4d1d6bcdafaef1e79f271968ceef056b669554e364fa3de6703a5e0a7e3dc1f79dd54a7e00f2861e3b078b6609c43de40ccb561984c2fed6d5b2d","ssdeep":"1536:B3MzAUmyuKVS0+8of+yjnppK7X1q1Dis7vtSzE7yen:eqlKS0+8gI1q12s7vt1Bn","tlshash":"a7430251a01eeaca5d4508490ec1e752ad1417bef31e0db4031d93db83b2a7796fbb58","first_seen":"2023-05-24T21:51:45Z","last_seen":"2026-03-26T14:36:58.12137Z","times_seen":449,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":45,"dns":3,"connect":0,"send":0,"wait":14,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fast.vidalytics.com/license?hash=du18m3UXDlt4b2bH%7Cgo.behindthemarkets.com","fqdn":"fast.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:11:00.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 13 Nov 2024 00:00:00 GMT","end":"Fri, 21 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3A:95:4C:0B:62:16:0C:59:B3:98:1E:33:58:C9:DE:90:23:BB:7E:FB","sha256":"A4:E0:6D:B7:32:ED:D7:A5:28:AA:A2:34:06:62:B3:AF:A8:6F:FC:B0:6B:B1:D5:78:4B:52:78:5B:5D:A2:23:BD"}}},"request":{"raw":"GET /license?hash=du18m3UXDlt4b2bH%7Cgo.behindthemarkets.com HTTP/1.1\r\nHost: fast.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://go.behindthemarkets.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 15:11:00 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 94\r\nx-cff: B\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300, s-maxage=300\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 0\r\nx-envoy-decorator-operation: vidalytics-player-api.vidalytics-player-api.svc.cluster.local:80/*\r\nx-lb-backend: api-prod\r\nsurrogate-key: lb-api\r\nx-lb-cache: disabled\r\nx-cf3: H\r\ncf4age: 835\r\naccept-ranges: bytes\r\nx-cf-tsc: 1759936260\r\ncf4ttl: 0.000\r\nx-cf-forcetr: 1\r\nx-cdn: 8\r\nx-cdn-site: c8-prod\r\naccess-control-expose-headers: Content-Type, server, x-hw, x-cdn, x-cdn-info, x-cache, x-cache-hits, x-served-by, x-goog-stored-content-length, content-length, x-lb-backend, x-lb-cache, x-cf1, x-cf2, x-cf3, x-cff\r\ncontent-encoding: gzip\r\nx-cf2: M\r\nserver: CFS 1124\r\nx-cf1: 42305:fA.arn1:co:1736526511:cacheN.arn1-01:M\r\nx-cf-reqid: a382fba51fede8d680cb89299b5755cf\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]}],"data":{"size":79,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"47c2d2e11622ee951ff84c162aa55118","sha1":"e519ae17f82ed9a868e396ca530272adc1dc5b36","sha256":"8325b6295df5a0550e62ef6e0543d59bcc3df488e8329b24193fadef4e82eb53","sha512":"8d144ce0929ab85a1d5afff6bcd4b93b0a3112c1f52a29e67748b76605b2eca86f3d6629532804f3872e3f7109f10bd1f69b48c912f92d72744dd019d83acf5a","ssdeep":"","tlshash":"51a011280a0aacb8020e02082808f88a023e328380c28a222c0ace08088283008a3008","first_seen":"2025-10-08T15:11:30.162703Z","last_seen":"2025-10-08T15:11:30.162703Z","times_seen":1,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.leadpages.io/analytics/v1/observations/capture?origin=\u0026version=1.2.2\u0026correlateBy=PmwBD7xH44a5h9BtFmE72u\u0026kind=timer\u0026label=lb_embed_leadbox_load\u0026value=605","fqdn":"api.leadpages.io","domain":"leadpages.io","tld":"io"},"ip":{"addr":"35.192.151.63","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:11:00.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.leadpages.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Sep 2025 12:46:53 GMT","end":"Mon, 08 Dec 2025 12:46:52 GMT"},"fingerprint":{"sha1":"35:13:FF:40:26:85:89:EA:BE:CB:76:CA:AF:B5:F7:47:83:9C:64:6D","sha256":"54:F4:80:9F:84:D5:28:DC:DA:18:96:EC:47:6F:60:6C:57:1A:90:18:BA:A9:37:5A:15:93:66:02:BD:19:45:6B"}}},"request":{"raw":"GET /analytics/v1/observations/capture?origin=\u0026version=1.2.2\u0026correlateBy=PmwBD7xH44a5h9BtFmE72u\u0026kind=timer\u0026label=lb_embed_leadbox_load\u0026value=605 HTTP/1.1\r\nHost: api.leadpages.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://go.behindthemarkets.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/gif\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccess-control-expose-headers: LP-Security-Token\r\naccess-control-max-age: 600\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://go.behindthemarkets.com\r\nServer: Stargate\r\nx-request-id: 002v1l8ksab0491rrv0g\r\nDate: Wed, 08 Oct 2025 15:11:00 GMT\r\nX-Forwarded-For: 91.90.42.154\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"c2196de8ba412c60c22ab491af7b1409","sha1":"5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b","sha256":"6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992","sha512":"84e24a70b78e9de9c9d0dfeb49f3f4247dbc1c715d8844471ee40669270682e199d48f5fbec62bd984c9c0270534b407c4d2561dd6c05adec3c83c1534f32d5c","ssdeep":"","tlshash":"d4800003e280c002c2a2c0300e0ccb802b88b0208a28030fb0ec2baeec3a2a00c02000","first_seen":"2023-04-05T07:36:27Z","last_seen":"2026-04-04T00:24:41.096471Z","times_seen":150692,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":142,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-8R6YNFMJ23\u0026gtm=45je5a61v874108444z8812088355za200zb812088355zd812088355\u0026_p=1759936258932\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=877149459.1759936260\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAAQ\u0026_s=3\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528501~104684208~104684211~104948813~115480710~115616985~115834636~115834638\u0026sid=1759936259\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fgo.behindthemarkets.com%2Fbtm-midnight-in-america-vsl%2F%3F_ef_transaction_id%3Dbc43f30744eb479fbdafd7dbcebb0f4f%26utm_source%3D5%26utm_campaign%3D%26utm_medium%3D%26id%3D3415984047574068345%26iocid%3D%26aff%3D5%26creative_id%3D%26oid%3D213%26message_id%3D%26link_id%3D\u0026dt=BTM%20Midnight%20in%20America%20VSL\u0026en=fetch_user_data\u0026epn.variant_id=0\u0026up.custom_client_id=877149459.1759936260.\u0026upn.variant_id=0\u0026upn.experiment_id=0\u0026tfd=6961","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:11:04.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:17 GMT","end":"Mon, 08 Dec 2025 08:34:16 GMT"},"fingerprint":{"sha1":"71:28:4D:CB:A8:43:CE:20:8D:C2:D0:1C:15:47:53:FB:EE:1F:E6:6C","sha256":"FD:F8:A3:C0:21:C0:03:15:43:2F:C7:36:8C:50:6A:39:57:B4:06:6A:0D:82:33:AB:55:A7:80:D2:E3:79:B8:11"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-8R6YNFMJ23\u0026gtm=45je5a61v874108444z8812088355za200zb812088355zd812088355\u0026_p=1759936258932\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=877149459.1759936260\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAAQ\u0026_s=3\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528501~104684208~104684211~104948813~115480710~115616985~115834636~115834638\u0026sid=1759936259\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fgo.behindthemarkets.com%2Fbtm-midnight-in-america-vsl%2F%3F_ef_transaction_id%3Dbc43f30744eb479fbdafd7dbcebb0f4f%26utm_source%3D5%26utm_campaign%3D%26utm_medium%3D%26id%3D3415984047574068345%26iocid%3D%26aff%3D5%26creative_id%3D%26oid%3D213%26message_id%3D%26link_id%3D\u0026dt=BTM%20Midnight%20in%20America%20VSL\u0026en=fetch_user_data\u0026epn.variant_id=0\u0026up.custom_client_id=877149459.1759936260.\u0026upn.variant_id=0\u0026upn.experiment_id=0\u0026tfd=6961 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://go.behindthemarkets.com/\r\nOrigin: https://go.behindthemarkets.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://go.behindthemarkets.com\r\ndate: Wed, 08 Oct 2025 15:11:04 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:158:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:158:0\r\nreport-to: {\"group\":\"ascnsrsggc:158:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:158:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T01:30:53.33799Z","times_seen":13310387,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","fqdn":"go.behindthemarkets.com","domain":"behindthemarkets.com","tld":"com"},"ip":{"addr":"35.202.21.90","port":80,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-08T15:10:58.165Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id= HTTP/1.1\r\nHost: go.behindthemarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Wed, 08 Oct 2025 15:10:58 GMT\r\nContent-Type: text/html\r\nContent-Length: 166\r\nConnection: keep-alive\r\nLocation: https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=\r\nServer: Leadpages\r\nStrict-Transport-Security: max-age=15768000\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":132569,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T01:30:53.33799Z","times_seen":13310387,"resource_available":true,"data":null}},"time_used":350,"timings":{"blocked":112,"dns":0,"connect":119,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user.lpcontent.net/fonts/bb4wMKcXKB896PwqF4vMVT/tLp7EWydCzw5kwUYKVFcjB.css?time=1640185343","fqdn":"user.lpcontent.net","domain":"lpcontent.net","tld":"net"},"ip":{"addr":"34.120.132.252","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:10:58.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"user.lpcontent.net","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 14:07:30 GMT","end":"Thu, 01 Jan 2026 15:01:44 GMT"},"fingerprint":{"sha1":"8D:7B:25:6A:42:E0:FE:B8:92:92:9A:40:16:EF:0A:0A:30:B6:4A:26","sha256":"C1:8A:73:A2:EC:36:F6:55:31:43:AC:B5:50:3E:AF:09:7B:84:85:15:7B:2A:FC:D2:A4:05:5E:86:D6:6C:54:B6"}}},"request":{"raw":"GET /fonts/bb4wMKcXKB896PwqF4vMVT/tLp7EWydCzw5kwUYKVFcjB.css?time=1640185343 HTTP/1.1\r\nHost: user.lpcontent.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAwnv3I6Yplo95o0uoB1BnmCnj2OJh8uap4KcnNcKLqlvquFnXTcMH54KDPg2i5S-fo4nfGI\r\nx-goog-generation: 1640185343652325\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1163\r\nx-goog-hash: crc32c=V98Gqw==, md5=f93Q8RmwP/dFCZbleNpLLg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 1163\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: content-type\r\nserver: UploadServer\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000, h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nvia: 1.1 google\r\ndate: Wed, 08 Oct 2025 14:45:24 GMT\r\nexpires: Wed, 08 Oct 2025 15:45:24 GMT\r\ncache-control: public, max-age=3600\r\nage: 1534\r\nlast-modified: Wed, 22 Dec 2021 15:02:23 GMT\r\netag: \"7fddd0f119b03ff7450996e578da4b2e\"\r\ncontent-type: text/css\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":1163,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"7fddd0f119b03ff7450996e578da4b2e","sha1":"c9248ef2b7d45dd5ceb198555222b518e74f5471","sha256":"aaa391c224292f66f216cb0e98eb47292685b26368b7077f018172d0554ca9bf","sha512":"bd76c135550017043e9420d8877f2b71e54f67d94d319ad2020778ede1fd0f03731a78eee93d3ddb85743270a37e8e9573f6f9ed6a15d111cf4da0613c1728d8","ssdeep":"","tlshash":"b4217be340a5340027131e5bb3cbb91a1d8ae20355d7d11ad3b528695de0b6867a0bfd","first_seen":"2023-05-24T01:03:31Z","last_seen":"2026-03-26T14:36:58.120429Z","times_seen":347,"resource_available":false,"data":null}},"time_used":620,"timings":{"blocked":301,"dns":57,"connect":13,"send":0,"wait":14,"receive":0,"ssl":229},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.leadpages.io/analytics/v1/observations/capture?origin=\u0026version=1.2.2\u0026correlateBy=PmwBD7xH44a5h9BtFmE72u\u0026kind=timer,counter,text\u0026label=lb_embed_embed_script_load,lb_embed_exit-intent_tigger_queue,lb_embed_leadbox_embedded\u0026value=172,1,7tN382DWFtDz9Uw7QqdLU2","fqdn":"api.leadpages.io","domain":"leadpages.io","tld":"io"},"ip":{"addr":"35.192.151.63","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:10:59.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.leadpages.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Sep 2025 12:46:53 GMT","end":"Mon, 08 Dec 2025 12:46:52 GMT"},"fingerprint":{"sha1":"35:13:FF:40:26:85:89:EA:BE:CB:76:CA:AF:B5:F7:47:83:9C:64:6D","sha256":"54:F4:80:9F:84:D5:28:DC:DA:18:96:EC:47:6F:60:6C:57:1A:90:18:BA:A9:37:5A:15:93:66:02:BD:19:45:6B"}}},"request":{"raw":"GET /analytics/v1/observations/capture?origin=\u0026version=1.2.2\u0026correlateBy=PmwBD7xH44a5h9BtFmE72u\u0026kind=timer,counter,text\u0026label=lb_embed_embed_script_load,lb_embed_exit-intent_tigger_queue,lb_embed_leadbox_embedded\u0026value=172,1,7tN382DWFtDz9Uw7QqdLU2 HTTP/1.1\r\nHost: api.leadpages.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://go.behindthemarkets.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/gif\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccess-control-expose-headers: LP-Security-Token\r\naccess-control-max-age: 600\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://go.behindthemarkets.com\r\nServer: Stargate\r\nx-request-id: 002v1l0eolgncalla91g\r\nDate: Wed, 08 Oct 2025 15:10:59 GMT\r\nX-Forwarded-For: 91.90.42.154\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"c2196de8ba412c60c22ab491af7b1409","sha1":"5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b","sha256":"6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992","sha512":"84e24a70b78e9de9c9d0dfeb49f3f4247dbc1c715d8844471ee40669270682e199d48f5fbec62bd984c9c0270534b407c4d2561dd6c05adec3c83c1534f32d5c","ssdeep":"","tlshash":"d4800003e280c002c2a2c0300e0ccb802b88b0208a28030fb0ec2baeec3a2a00c02000","first_seen":"2023-04-05T07:36:27Z","last_seen":"2026-04-04T00:24:41.096471Z","times_seen":150692,"resource_available":true,"data":null}},"time_used":764,"timings":{"blocked":315,"dns":1,"connect":132,"send":0,"wait":134,"receive":0,"ssl":179},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lh3.googleusercontent.com/-YzQ2d78XvCQmjpuP1lhz7j7pecTJybsKXv5VCXRj76FzDjxYyWbTRMQGHllXrHUFEoSckB-CgjDT0gDSCMXnblzA5IcKRaGhXw=s16","fqdn":"lh3.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:10:59.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:07 GMT","end":"Mon, 08 Dec 2025 08:36:06 GMT"},"fingerprint":{"sha1":"CB:ED:08:40:60:28:21:1C:F0:5E:4E:70:F4:A7:21:B3:2D:D3:A2:41","sha256":"38:2A:CC:C1:33:BE:46:EF:3F:1F:4C:37:EF:65:6F:51:FD:55:86:1E:B3:ED:83:0A:3F:26:E1:6D:19:97:C6:9B"}}},"request":{"raw":"GET /-YzQ2d78XvCQmjpuP1lhz7j7pecTJybsKXv5VCXRj76FzDjxYyWbTRMQGHllXrHUFEoSckB-CgjDT0gDSCMXnblzA5IcKRaGhXw=s16 HTTP/1.1\r\nHost: lh3.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nvary: Origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\netag: \"v1\"\r\nexpires: Thu, 09 Oct 2025 15:11:00 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"unnamed.jpg\"\r\nx-content-type-options: nosniff\r\ndate: Wed, 08 Oct 2025 15:11:00 GMT\r\nserver: fife\r\ncontent-length: 309\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":309,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 16x12, components 3","md5":"567b08f369c773b11e879334ca837a8d","sha1":"444a4abfffc6928295dec222bfdf08a1a4f3e09a","sha256":"015b29e865e76fa740b3c72004c443556bf2c9d42250c3e700c51c0b2c0b689a","sha512":"061129beaaf5fc1080b9f0f79654e67b3c66ff5383ff60049b684887b0e6fa8dd6c18d3d6635649015e874673b4a612604dce21a5c021fbf8c632c3244d1cb6c","ssdeep":"","tlshash":"fee0233f35c5d724d8711d710374531077056ef170211b8d00c351357f641d75c00187","first_seen":"2024-07-16T16:07:32Z","last_seen":"2026-03-26T14:36:58.091135Z","times_seen":276,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":109,"dns":2,"connect":7,"send":0,"wait":263,"receive":0,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-8R6YNFMJ23\u0026gtm=45je5a61v874108444z8812088355za200zb812088355zd812088355\u0026_p=1759936258932\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=877149459.1759936260\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_s=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528501~104684208~104684211~104948813~115480710~115616985~115834636~115834638\u0026sid=1759936259\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fgo.behindthemarkets.com%2Fbtm-midnight-in-america-vsl%2F%3F_ef_transaction_id%3Dbc43f30744eb479fbdafd7dbcebb0f4f%26utm_source%3D5%26utm_campaign%3D%26utm_medium%3D%26id%3D3415984047574068345%26iocid%3D%26aff%3D5%26creative_id%3D%26oid%3D213%26message_id%3D%26link_id%3D\u0026dt=BTM%20Midnight%20in%20America%20VSL\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026epn.variant_id=0\u0026tfd=1826","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:11:00.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:17 GMT","end":"Mon, 08 Dec 2025 08:34:16 GMT"},"fingerprint":{"sha1":"71:28:4D:CB:A8:43:CE:20:8D:C2:D0:1C:15:47:53:FB:EE:1F:E6:6C","sha256":"FD:F8:A3:C0:21:C0:03:15:43:2F:C7:36:8C:50:6A:39:57:B4:06:6A:0D:82:33:AB:55:A7:80:D2:E3:79:B8:11"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-8R6YNFMJ23\u0026gtm=45je5a61v874108444z8812088355za200zb812088355zd812088355\u0026_p=1759936258932\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=877149459.1759936260\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_s=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528501~104684208~104684211~104948813~115480710~115616985~115834636~115834638\u0026sid=1759936259\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fgo.behindthemarkets.com%2Fbtm-midnight-in-america-vsl%2F%3F_ef_transaction_id%3Dbc43f30744eb479fbdafd7dbcebb0f4f%26utm_source%3D5%26utm_campaign%3D%26utm_medium%3D%26id%3D3415984047574068345%26iocid%3D%26aff%3D5%26creative_id%3D%26oid%3D213%26message_id%3D%26link_id%3D\u0026dt=BTM%20Midnight%20in%20America%20VSL\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026epn.variant_id=0\u0026tfd=1826 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://go.behindthemarkets.com/\r\nOrigin: https://go.behindthemarkets.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://go.behindthemarkets.com\r\ndate: Wed, 08 Oct 2025 15:11:00 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:158:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:158:0\r\nreport-to: {\"group\":\"ascnsrsggc:158:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:158:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T01:30:53.33799Z","times_seen":13310387,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":6,"dns":0,"connect":8,"send":0,"wait":25,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-8R6YNFMJ23\u0026gtm=45je5a61v874108444za200zb812088355zd812088355\u0026_p=1759936258932\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=877149459.1759936260\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AEAAAAQ\u0026_s=2\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528501~104684208~104684211~104948813~115480710~115616985~115834636~115834638\u0026sid=1759936259\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fgo.behindthemarkets.com%2Fbtm-midnight-in-america-vsl%2F%3F_ef_transaction_id%3Dbc43f30744eb479fbdafd7dbcebb0f4f%26utm_source%3D5%26utm_campaign%3D%26utm_medium%3D%26id%3D3415984047574068345%26iocid%3D%26aff%3D5%26creative_id%3D%26oid%3D213%26message_id%3D%26link_id%3D\u0026dt=BTM%20Midnight%20in%20America%20VSL\u0026en=scroll\u0026epn.variant_id=0\u0026epn.percent_scrolled=90\u0026tfd=1960","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:11:00.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:17 GMT","end":"Mon, 08 Dec 2025 08:34:16 GMT"},"fingerprint":{"sha1":"71:28:4D:CB:A8:43:CE:20:8D:C2:D0:1C:15:47:53:FB:EE:1F:E6:6C","sha256":"FD:F8:A3:C0:21:C0:03:15:43:2F:C7:36:8C:50:6A:39:57:B4:06:6A:0D:82:33:AB:55:A7:80:D2:E3:79:B8:11"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-8R6YNFMJ23\u0026gtm=45je5a61v874108444za200zb812088355zd812088355\u0026_p=1759936258932\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=877149459.1759936260\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AEAAAAQ\u0026_s=2\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528501~104684208~104684211~104948813~115480710~115616985~115834636~115834638\u0026sid=1759936259\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fgo.behindthemarkets.com%2Fbtm-midnight-in-america-vsl%2F%3F_ef_transaction_id%3Dbc43f30744eb479fbdafd7dbcebb0f4f%26utm_source%3D5%26utm_campaign%3D%26utm_medium%3D%26id%3D3415984047574068345%26iocid%3D%26aff%3D5%26creative_id%3D%26oid%3D213%26message_id%3D%26link_id%3D\u0026dt=BTM%20Midnight%20in%20America%20VSL\u0026en=scroll\u0026epn.variant_id=0\u0026epn.percent_scrolled=90\u0026tfd=1960 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://go.behindthemarkets.com/\r\nOrigin: https://go.behindthemarkets.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://go.behindthemarkets.com\r\ndate: Wed, 08 Oct 2025 15:11:00 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:158:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:158:0\r\nreport-to: {\"group\":\"ascnsrsggc:158:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:158:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T01:30:53.33799Z","times_seen":13310387,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.vidalytics.com/scribe","fqdn":"stats.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"107.178.211.97","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:11:00.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 13 Nov 2024 00:00:00 GMT","end":"Fri, 21 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3A:95:4C:0B:62:16:0C:59:B3:98:1E:33:58:C9:DE:90:23:BB:7E:FB","sha256":"A4:E0:6D:B7:32:ED:D7:A5:28:AA:A2:34:06:62:B3:AF:A8:6F:FC:B0:6B:B1:D5:78:4B:52:78:5B:5D:A2:23:BD"}}},"request":{"raw":"POST /scribe HTTP/1.1\r\nHost: stats.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 7055\r\nOrigin: https://go.behindthemarkets.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-methods: POST,OPTIONS\r\ncontent-type: application/json\r\ndate: Wed, 08 Oct 2025 15:11:01 GMT\r\ncontent-length: 16\r\nx-envoy-upstream-service-time: 2\r\nserver: istio-envoy\r\naccess-control-allow-origin: https://go.behindthemarkets.com\r\naccess-control-expose-headers: Access-Control-Allow-Origin,Cache-Control,Content-Length,Content-Type,ETag,If-None-Match\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a1cbd35d4488ac8cc6f959d4c633dc37","sha1":"11844023759429ec785ae1c18e6a9c69803ee2bd","sha256":"707d4c7f44dd33e874b5a09b6dba4702b12bfd3e19e470d601fcfc1d7009286c","sha512":"1681f6f4eb56a4a46346eebdb411eedc18fe2975b9929ddb57647f50ce8b33529df03285b8ebcb747552e625b674bc140ee4b33263edcb336ab6e4caac532b3c","ssdeep":"","tlshash":"46600003000c00300cf03c00030330303f300f00000f00fc000c303000003c0c00c000","first_seen":"2023-04-05T11:33:20Z","last_seen":"2026-04-03T22:32:38.283819Z","times_seen":9629,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fast.vidalytics.com/video/PzpZ_7KZ/slxoAwy_ur0M6ad6/147664/144163__FFMPEG/stream.m3u8","fqdn":"fast.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:11:00.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 13 Nov 2024 00:00:00 GMT","end":"Fri, 21 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3A:95:4C:0B:62:16:0C:59:B3:98:1E:33:58:C9:DE:90:23:BB:7E:FB","sha256":"A4:E0:6D:B7:32:ED:D7:A5:28:AA:A2:34:06:62:B3:AF:A8:6F:FC:B0:6B:B1:D5:78:4B:52:78:5B:5D:A2:23:BD"}}},"request":{"raw":"GET /video/PzpZ_7KZ/slxoAwy_ur0M6ad6/147664/144163__FFMPEG/stream.m3u8 HTTP/1.1\r\nHost: fast.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://go.behindthemarkets.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 15:11:00 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\ncontent-length: 604\r\nx-cff: B\r\nx-guploader-uploadid: AHMx-iFglyNQKFJ8kyQ5yovIOyMOB-9w98JKJnOXRhQFx81SVXURguWYi-Vnb9r5f_wjMzYoekECoX4\r\nx-goog-generation: 1724351097816420\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 604\r\nx-goog-hash: crc32c=ydWdbw==, md5=QESvL3A9KjqbfM20/fM4jg==\r\nx-goog-storage-class: STANDARD\r\naccess-control-allow-origin: *\r\nexpires: Fri, 27 Feb 2026 12:53:59 GMT\r\ncache-control: public, max-age=31104000\r\nlast-modified: Thu, 22 Aug 2024 18:24:57 GMT\r\netag: \"4044af2f703d2a3a9b7ccdb4fdf3388e\"\r\nx-lb-backend: gcs-prod\r\nx-lb-cache: revalidated\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nx-cf3: M\r\ncf4age: 0\r\nx-cf-tsc: 1741092840\r\ncf4ttl: 31104000.000\r\nx-cf-forcetr: 1\r\nx-cdn: 8\r\nx-cdn-site: c8-prod\r\naccess-control-expose-headers: Content-Type, server, x-hw, x-cdn, x-cdn-info, x-cache, x-cache-hits, x-served-by, x-goog-stored-content-length, content-length, x-lb-backend, x-lb-cache, x-cf1, x-cf2, x-cf3, x-cff\r\nx-cf2: H\r\naccept-ranges: bytes\r\nserver: CFS 1124\r\nx-cf1: 42305:fA.arn1:co:1736526511:cacheN.arn1-01:M\r\nx-cf-reqid: afc3c5a81ad452637b1b31fcba4ad9a8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]}],"data":{"size":604,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"4044af2f703d2a3a9b7ccdb4fdf3388e","sha1":"21c85d70b0892d25eefe259c2fb6d23a58488194","sha256":"15fe8af447469d4b98d88f12ede451a9124e460f50d0ab4846b35ac6309e0da5","sha512":"93bb9ba138cee4ff51e24fdbb85a23d06d9c1c9e517ca7ecca835a58fb398519674e31899f7ab5cc0324ac9ceae462525491330814dfea13091a7690f175b43c","ssdeep":"","tlshash":"32f0f984e12fe00f758c9cd9a4e57261785938e786d4635061fe21984897de837db42c","first_seen":"2024-08-24T02:10:12Z","last_seen":"2026-03-26T14:36:58.102254Z","times_seen":93,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fast.vidalytics.com/video/PzpZ_7KZ/slxoAwy_ur0M6ad6/147664/144163__FFMPEG/thumb/thumbnail-5_0.jpg","fqdn":"fast.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:11:00.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 13 Nov 2024 00:00:00 GMT","end":"Fri, 21 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3A:95:4C:0B:62:16:0C:59:B3:98:1E:33:58:C9:DE:90:23:BB:7E:FB","sha256":"A4:E0:6D:B7:32:ED:D7:A5:28:AA:A2:34:06:62:B3:AF:A8:6F:FC:B0:6B:B1:D5:78:4B:52:78:5B:5D:A2:23:BD"}}},"request":{"raw":"GET /video/PzpZ_7KZ/slxoAwy_ur0M6ad6/147664/144163__FFMPEG/thumb/thumbnail-5_0.jpg HTTP/1.1\r\nHost: fast.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 15:11:00 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22402\r\nx-cff: B\r\nx-guploader-uploadid: AAwnv3L7oKUBwnL1DZT6-8-urTFX6_-AMNBtOZRY4bmgM1xO2sUEkZBCkm_v16_v0bgM4fRT\r\ncache-control: public, max-age=31104000\r\nexpires: Mon, 28 Sep 2026 21:48:55 GMT\r\nlast-modified: Thu, 22 Aug 2024 17:26:09 GMT\r\netag: \"db41a9f3e64c627ce38ad96844248e39\"\r\nx-goog-generation: 1724347569170438\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 22402\r\nx-goog-hash: crc32c=y9Qy/g==, md5=20Gp8+ZMYnzjitloRCSOOQ==\r\nx-goog-storage-class: STANDARD\r\naccess-control-allow-origin: *\r\nx-lb-backend: gcs-prod\r\nx-lb-cache: miss\r\nx-cf3: M\r\ncf4age: 0\r\nx-cf-tsc: 1759528136\r\ncf4ttl: 31104000.000\r\nx-cdn: 8\r\nx-cdn-site: c8-prod\r\naccess-control-expose-headers: Content-Type, server, x-hw, x-cdn, x-cdn-info, x-cache, x-cache-hits, x-served-by, x-goog-stored-content-length, content-length, x-lb-backend, x-lb-cache, x-cf1, x-cf2, x-cf3, x-cff\r\nx-cf2: H\r\naccept-ranges: bytes\r\nserver: CFS 1124\r\nx-cf1: 42305:fA.arn1:co:1736526511:cacheN.arn1-01:M\r\nx-cf-reqid: 08a27fa80178da7a9c310cf01e0c3020\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":22402,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc60.3.100\", baseline, precision 8, 480x270, components 3","md5":"db41a9f3e64c627ce38ad96844248e39","sha1":"5f7cda804caab4eababa9b7fc952b431519ecf14","sha256":"cffdd18b6a2223adb34489545ad3b5ff9373e0730228d8ba35c579df1ea54420","sha512":"2af054043a61d7c4cb99e32f4d38471acbabe7d60d7e81107571f83c3f2cda7659bcb2c49c1c461727e5ab61d4c74df599a51f1ba3fe83bc7ec168fa19a10db7","ssdeep":"384:hQVhj1dsvkyIyxJNLv7S9irBzfXptDO6kMm/GfUQaIxnZLbQhSrY5KtF6/X1vinL:KVhoI6Lv7S8rBzRZOcmeXnZvzrY5r1vC","tlshash":"1aa2d09ff8d13c56f2431e3d7c6f5514c9abaea86a1a7540d481fd60b820f170813d9e","first_seen":"2024-08-24T02:10:13Z","last_seen":"2026-03-26T14:36:58.106308Z","times_seen":202,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.pricedirector.com/MidnightAmerica0724/170498e26daec5510e348f609dbea71c/48/1094058737/89899/ee35f3e24467cc3c9370ea90810d6212/71276/TC","fqdn":"go.pricedirector.com","domain":"pricedirector.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-08T15:10:54.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pricedirector.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:34:27 GMT","end":"Sat, 13 Dec 2025 19:48:06 GMT"},"fingerprint":{"sha1":"87:BE:4F:79:1C:07:0D:20:70:5D:36:39:B9:A4:61:CE:7D:0B:4A:C6","sha256":"6C:BF:EC:F3:7E:9F:95:51:C4:26:04:28:2D:CE:D1:EC:01:60:00:4F:5A:B8:ED:03:F5:D0:F4:D7:68:E9:F5:53"}}},"request":{"raw":"GET /MidnightAmerica0724/170498e26daec5510e348f609dbea71c/48/1094058737/89899/ee35f3e24467cc3c9370ea90810d6212/71276/TC HTTP/1.1\r\nHost: go.pricedirector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 08 Oct 2025 15:10:55 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://verifiedlinks.org/go?ehash=170498e26daec5510e348f609dbea71c\u0026product=53848\u0026ar=48\u0026cid=89899\u0026lid=ee35f3e24467cc3c9370ea90810d6212\u0026slhash=71276\u0026mtaid=TC\u0026cid2=[s8]\r\nserver: cloudflare\r\ncache-control: max-age=600\r\nexpires: Wed, 08 Oct 2025 15:20:54 GMT\r\nvary: User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hw2xCyY3buOT4gEB1Hoq%2BKPpcJdaKABeEAO%2FwVhV2xU3YAsQjrCNptCNRN777BGKwX1KITOjY0aouA5vIs%2F4xm%2FTz1J5B7sGMUyE7B6GxnuaxQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 98b69158f9a956b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T01:30:53.33799Z","times_seen":13310387,"resource_available":true,"data":null}},"time_used":1143,"timings":{"blocked":236,"dns":31,"connect":1,"send":0,"wait":671,"receive":0,"ssl":199},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.behindthemarkets-btm.com/7BZ2W/CJR5QB/?sub1=3415984047574068345","fqdn":"www.behindthemarkets-btm.com","domain":"behindthemarkets-btm.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-08T15:10:56.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"behindthemarkets-btm.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 08:08:18 GMT","end":"Sun, 09 Nov 2025 09:06:43 GMT"},"fingerprint":{"sha1":"B4:D3:BE:3F:64:06:9A:CB:43:64:13:A4:0A:4F:E0:85:41:C4:94:DF","sha256":"09:B8:91:82:56:53:9C:B0:B3:76:85:DE:AB:5E:A0:C6:62:53:B5:CF:47:BE:48:43:75:EC:07:03:20:DF:92:91"}}},"request":{"raw":"GET /7BZ2W/CJR5QB/?sub1=3415984047574068345 HTTP/1.1\r\nHost: www.behindthemarkets-btm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 08 Oct 2025 15:10:57 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=\r\nserver: cloudflare\r\naccept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-eflow-request-id: 4fb19404-3a63-4eea-bff8-8ce177491054\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xpsQUsYzy5bocoK4sVcuHrnFMztRJXy65naOOu6W%2FB0Hqj957PY%2B3bn0rW2EEiXhGa2GD06u9UsABPpskhsRBqd6aV3iMGukqeLZDanhpagXUrk9b5ZjXpCN\"}]}\r\nset-cookie: uniqueClick_CJR5QB=b7323c6b-7d45-4ed7-829a-832745f0b02c:1759936257; SameSite=None; Secure; Path=/; Expires=Thu, 09 Oct 2025 15:10:57 GMT\ntransaction_id=bc43f30744eb479fbdafd7dbcebb0f4f; SameSite=None; Secure; Path=/; Expires=Tue, 06 Jan 2026 15:10:57 GMT\r\ncf-ray: 98b691682d5b5699-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T01:30:53.33799Z","times_seen":13310387,"resource_available":true,"data":null}},"time_used":1457,"timings":{"blocked":635,"dns":42,"connect":1,"send":0,"wait":187,"receive":0,"ssl":589},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/quattrocento/v24/OZpEg_xvsDZQL_LKIF7q4jP3w2j6.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:10:58.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/quattrocento/v24/OZpEg_xvsDZQL_LKIF7q4jP3w2j6.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://go.behindthemarkets.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35708\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 12:43:02 GMT\r\nexpires: Fri, 02 Oct 2026 12:43:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 527277\r\nlast-modified: Thu, 04 Sep 2025 17:19:29 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35708,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35708, version 1.0","md5":"09af1f8b9aba5a46e621d7f9d4592fba","sha1":"7fe726baddbcf6134928ed3544f906517f76c032","sha256":"54b83dd2f9e82637d8aa5d4b7b75ac6f5a3b7af836ee05113cac634211bf51b3","sha512":"226df4302a7a6a22421141161ba400e5bac10c42d70885ec681f624e0d990d9c8aff10526bc48498afb11094e0fe390a864cd9449cfbcb521c7a4677d3782603","ssdeep":"768:FQhLTzZYrVKBmw+QzGa9N8zMvztJ3YP5YqdgQ/MDQK2seQdu:WhGKBntzG6HvzUP5XxM0K2se1","tlshash":"6df202a694022755386cf1ce2ee3d1151b09f8e7eafb46043688d3ac5451ddcc7caee9","first_seen":"2025-09-09T00:57:39.032064Z","last_seen":"2026-04-03T14:23:12.058273Z","times_seen":439,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":67,"dns":0,"connect":20,"send":0,"wait":16,"receive":3,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.vidalytics.com/scribe","fqdn":"stats.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"107.178.211.97","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:11:13.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 13 Nov 2024 00:00:00 GMT","end":"Fri, 21 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3A:95:4C:0B:62:16:0C:59:B3:98:1E:33:58:C9:DE:90:23:BB:7E:FB","sha256":"A4:E0:6D:B7:32:ED:D7:A5:28:AA:A2:34:06:62:B3:AF:A8:6F:FC:B0:6B:B1:D5:78:4B:52:78:5B:5D:A2:23:BD"}}},"request":{"raw":"POST /scribe HTTP/1.1\r\nHost: stats.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 651\r\nOrigin: https://go.behindthemarkets.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-methods: POST,OPTIONS\r\ncontent-type: application/json\r\ndate: Wed, 08 Oct 2025 15:11:13 GMT\r\ncontent-length: 16\r\nx-envoy-upstream-service-time: 4\r\nserver: istio-envoy\r\naccess-control-allow-origin: https://go.behindthemarkets.com\r\naccess-control-expose-headers: Access-Control-Allow-Origin,Cache-Control,Content-Length,Content-Type,ETag,If-None-Match\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a1cbd35d4488ac8cc6f959d4c633dc37","sha1":"11844023759429ec785ae1c18e6a9c69803ee2bd","sha256":"707d4c7f44dd33e874b5a09b6dba4702b12bfd3e19e470d601fcfc1d7009286c","sha512":"1681f6f4eb56a4a46346eebdb411eedc18fe2975b9929ddb57647f50ce8b33529df03285b8ebcb747552e625b674bc140ee4b33263edcb336ab6e4caac532b3c","ssdeep":"","tlshash":"46600003000c00300cf03c00030330303f300f00000f00fc000c303000003c0c00c000","first_seen":"2023-04-05T11:33:20Z","last_seen":"2026-04-03T22:32:38.283819Z","times_seen":9629,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","fqdn":"go.behindthemarkets.com","domain":"behindthemarkets.com","tld":"com"},"ip":{"addr":"35.202.21.90","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-08T15:10:58.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.behindthemarkets.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 07:39:29 GMT","end":"Tue, 16 Dec 2025 07:39:28 GMT"},"fingerprint":{"sha1":"8A:AB:03:74:FD:35:DF:E5:77:D1:92:33:77:B6:A8:4C:38:F9:7D:BF","sha256":"66:D5:FF:85:5E:FA:3A:00:B4:39:08:F3:3F:A0:9F:1C:A7:CC:C6:2F:33:08:8A:DA:65:BA:2D:15:F3:CC:45:82"}}},"request":{"raw":"GET /btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id= HTTP/1.1\r\nHost: go.behindthemarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 15:10:58 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nset-cookie: variation=z5Leeq9Dkr4xvJykhu5kwA; Path=/btm-midnight-in-america-vsl/\r\ncache-control: no-cache\r\nx-cache: HIT\r\netag: W/\"432d4e5440f44a3e068c7e87cb7bd5fa\"\r\nlast-modified: Fri, 11 Apr 2025 22:48:56 GMT\r\nserver: Leadpages\r\nstrict-transport-security: max-age=15768000\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":132569,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (63376)","md5":"396ff7cd09b09e884be294ae8521d9ce","sha1":"a9280e6874f3fca9e21958cabfb57386ed8c1d43","sha256":"e96b1f4ad715a29a9fbfe1b73c71402a4416a7deb8335f95edca0086585bb19c","sha512":"fabdd78bfe69d4ee1bf14845fb6dcfaaf1606c1ae0e9ec1063b6a01e11a0d55c53010001ca4f46dae46e05fd9983644df2d8ecf09fe6c919597426cfca4387e7","ssdeep":"1536:idFDtEQJ6uN63fdhwwatleMfZ2yMokZjKSPQz8a6m7x4IEtRuVbWanrhxzIQ2a9c:iFhkZplanrhxzIrzMEKf0","tlshash":"e5d30a43c916306c91174a76e2d92608672cfa06d1738cc8f3d99a6a4fc39dd1eb279f","first_seen":"2025-04-14T18:41:02.656464Z","last_seen":"2026-01-03T11:59:49.923244Z","times_seen":42,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.center.io/center.js","fqdn":"js.center.io","domain":"center.io","tld":"io"},"ip":{"addr":"216.239.38.21","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:10:58.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.center.io","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 08:40:02 GMT","end":"Tue, 23 Dec 2025 09:27:12 GMT"},"fingerprint":{"sha1":"D9:1D:58:0C:38:73:74:08:E8:C2:48:1F:7B:EE:3D:C8:C9:9C:0E:8D","sha256":"03:CA:23:AD:9A:66:F0:B5:9B:C4:F3:40:9C:5C:3F:C5:A3:79:3D:76:DE:2E:91:E0:2C:26:79:09:76:CA:1B:63"}}},"request":{"raw":"GET /center.js HTTP/1.1\r\nHost: js.center.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-cloud-trace-context: 668158d7941e92adae7fbc00a060d038\r\ncontent-encoding: gzip\r\nserver: Google Frontend\r\ncontent-length: 5417\r\ndate: Wed, 08 Oct 2025 15:08:52 GMT\r\nexpires: Wed, 08 Oct 2025 15:13:52 GMT\r\ncache-control: public, max-age=300\r\nage: 127\r\netag: \"OMWYXg\"\r\ncontent-type: application/javascript\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":12555,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (566)","md5":"60f05ff45d707fe36d87b75bf181800d","sha1":"e34d94b519ed465481596bcff099467feb0aafdd","sha256":"cc08eb3316359de0d8f025efee489da73ca552209a0c9cab6b00894d7fa21d42","sha512":"db4464a38190b0df1b468e08232cd1f03dd53283ab7b36bade654efb945c211474a13cff6ca8a6e748489415c838c46cf5436a4bc90ab8605328335b1a432bac","ssdeep":"192:xbZ07UrFcfU1ftsqqStPtR4hXaUv9nUOWaAH74U2FAn31rMyfcPvjU:xd8UKfU1ftsTStP3UB9nUn4U2zyfc3jU","tlshash":"ce42b7d9b3d279b1829730b8452f204ee2bf85a5ac4c49c0a1a2c9c66db8f5c517bf5c","first_seen":"2023-03-07T01:15:19Z","last_seen":"2026-04-04T00:34:26.391236Z","times_seen":5983,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":93,"dns":15,"connect":8,"send":0,"wait":20,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btm-btm-btm.lpages.co/serve-leadbox/7tN382DWFtDz9Uw7QqdLU2/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026aff=5\u0026creative_id=\u0026id=3415984047574068345\u0026iocid=\u0026link_id=\u0026message_id=\u0026oid=213\u0026utm_campaign=\u0026utm_medium=\u0026utm_source=5","fqdn":"btm-btm-btm.lpages.co","domain":"btm-btm-btm.lpages.co","tld":"lpages.co"},"ip":{"addr":"35.202.21.90","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:10:59.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lpages.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Sep 2025 12:44:38 GMT","end":"Mon, 08 Dec 2025 12:44:37 GMT"},"fingerprint":{"sha1":"58:8D:83:C1:26:73:73:6D:55:34:F2:DB:5C:1E:BE:A0:0F:BF:63:51","sha256":"75:43:22:AC:78:78:BC:7B:16:51:E9:A5:B1:86:31:7C:DF:E3:0F:6E:2A:1F:4B:A2:0F:64:BA:5C:6B:EE:F4:77"}}},"request":{"raw":"GET /serve-leadbox/7tN382DWFtDz9Uw7QqdLU2/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026aff=5\u0026creative_id=\u0026id=3415984047574068345\u0026iocid=\u0026link_id=\u0026message_id=\u0026oid=213\u0026utm_campaign=\u0026utm_medium=\u0026utm_source=5 HTTP/1.1\r\nHost: btm-btm-btm.lpages.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 15:10:59 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncache-control: no-cache\r\nx-cache: MISS, HIT\r\netag: W/\"a66bdee58826b1be24ef2ebaf3de4bec\"\r\nlast-modified: Fri, 12 Jul 2024 15:02:26 GMT\r\nserver: Leadpages\r\nstrict-transport-security: max-age=15768000\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93053,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (48569)","md5":"d2e8d6873e290ba950914d2c8491dce1","sha1":"d1f192deef1a18478391cea031844e759b3e093c","sha256":"f52e7fde7f7c231d2fcb15e85fc1304bf4648e35719f7f3a5906d78e89e3d36f","sha512":"1585537ae25dce9fc0e8d446b14e6d3be49805e1f1fab66867664644a664c88de95511db0665396e6e786e4005ae94ca6e6b1712c3747420d2bb29ee8cd1d399","ssdeep":"768:WlTX8YmlAbEjh6aAR42QYYMB9m/JexQpfXMj/afSifbWanvqyVqmNxwsrSQUHQTm:WSFEQY32exMdbWanjhxzIQTcQGLeMEO","tlshash":"0b93c843da2934aca117c976f1157108236cba09e6b3ddc0f3da8a7a5fd24990d71bce","first_seen":"2024-07-20T00:20:46Z","last_seen":"2026-03-26T14:36:58.086168Z","times_seen":95,"resource_available":false,"data":null}},"time_used":929,"timings":{"blocked":331,"dns":52,"connect":134,"send":0,"wait":267,"receive":0,"ssl":143},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-16454845358\u0026cx=c\u0026gtm=4e5a61","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:10:59.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:17 GMT","end":"Mon, 08 Dec 2025 08:34:16 GMT"},"fingerprint":{"sha1":"71:28:4D:CB:A8:43:CE:20:8D:C2:D0:1C:15:47:53:FB:EE:1F:E6:6C","sha256":"FD:F8:A3:C0:21:C0:03:15:43:2F:C7:36:8C:50:6A:39:57:B4:06:6A:0D:82:33:AB:55:A7:80:D2:E3:79:B8:11"}}},"request":{"raw":"GET /gtag/js?id=AW-16454845358\u0026cx=c\u0026gtm=4e5a61 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 08 Oct 2025 15:10:59 GMT\r\nexpires: Wed, 08 Oct 2025 15:10:59 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 127260\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":371728,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"08b640a70d81be154f869fa2cbd7161e","sha1":"7d717e98c5cf42484a679bf2ac6472f6cf343d2f","sha256":"4ee7ad0650da8307edc8eb853dede8e56ed1f5e13b2d4a971989c00b2cc28811","sha512":"6517dece2943f59e7441591e2a397966defdf69d5a28fff40d9456a3670bca4b1185495d0b90f9b2aaf725cf300e7ab36a698ee2a422dfc34c2fb406ca254a8f","ssdeep":"3072:sF3gv0PxQ4OZZ6rA90AVo1w4APskKfPbymklFxSiDw2ElLj70KkW4c+aXmdLbubA:kC6rcXOL+lCiDwgKkY+aXmJbRBqsIQ","tlshash":"1d8429cdb3d674225393a478403f018ba57b68a2f84cc899f185cde52e74a9a4277f7c","first_seen":"2025-10-08T02:56:38.162862Z","last_seen":"2025-10-08T15:11:30.172289Z","times_seen":4,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.leadpages.net/fonts/font-awesome/6.4.2/css/all.min.css","fqdn":"static.leadpages.net","domain":"leadpages.net","tld":"net"},"ip":{"addr":"34.107.203.240","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://btm-btm-btm.lpages.co/serve-leadbox/7tN382DWFtDz9Uw7QqdLU2/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026aff=5\u0026creative_id=\u0026id=3415984047574068345\u0026iocid=\u0026link_id=\u0026message_id=\u0026oid=213\u0026utm_campaign=\u0026utm_medium=\u0026utm_source=5","date":"2025-10-08T15:10:59.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.leadpages.net","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 09:55:41 GMT","end":"Sat, 13 Dec 2025 10:48:55 GMT"},"fingerprint":{"sha1":"D6:09:12:4D:BE:D0:03:9B:7F:C9:6F:FA:9B:6C:0E:F0:E3:66:3A:BE","sha256":"C0:5C:0D:4B:E0:F8:83:BE:FA:93:79:B4:2F:C6:94:4A:BE:F4:E1:A8:84:2D:43:07:3B:8D:7F:77:36:A7:FB:DE"}}},"request":{"raw":"GET /fonts/font-awesome/6.4.2/css/all.min.css HTTP/1.1\r\nHost: static.leadpages.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\nx-cloud-trace-context: 49ed5c85b05ac9cfb8d0cb4b22935907\r\ncontent-encoding: gzip\r\nserver: Google Frontend\r\nvia: 1.1 google\r\ndate: Tue, 07 Oct 2025 13:05:49 GMT\r\nexpires: Wed, 07 Oct 2026 13:05:49 GMT\r\ncache-control: public, max-age=31536000\r\netag: \"Na7c-w\"\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\ncontent-length: 26836\r\nage: 93910\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":102217,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (52276)","md5":"5222e06b77a1692fa2520a219840e6be","sha1":"8b4236206a8b86af3761a244277663046d7ff7ee","sha256":"0934b1fc0d3a766d41d3adf5e7a115875e66e98ebba408d965a41cf3d2cb4ab5","sha512":"cf780ba5def29277f562835b0b3a9129ce2aca8afc81a294d6a9a7f824a1c5bb81bac00d23d42946884606b7821642b12e17a2e92f424171446db2aea8b8340c","ssdeep":"1536:0wMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuuprrlCq:M709gMGFiyPGuuprlCq","tlshash":"09a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-08-04T22:28:10Z","last_seen":"2026-04-04T00:34:26.443036Z","times_seen":36044,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.center.io/center.js","fqdn":"js.center.io","domain":"center.io","tld":"io"},"ip":{"addr":"216.239.38.21","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://btm-btm-btm.lpages.co/serve-leadbox/7tN382DWFtDz9Uw7QqdLU2/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026aff=5\u0026creative_id=\u0026id=3415984047574068345\u0026iocid=\u0026link_id=\u0026message_id=\u0026oid=213\u0026utm_campaign=\u0026utm_medium=\u0026utm_source=5","date":"2025-10-08T15:10:59.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.center.io","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 08:40:02 GMT","end":"Tue, 23 Dec 2025 09:27:12 GMT"},"fingerprint":{"sha1":"D9:1D:58:0C:38:73:74:08:E8:C2:48:1F:7B:EE:3D:C8:C9:9C:0E:8D","sha256":"03:CA:23:AD:9A:66:F0:B5:9B:C4:F3:40:9C:5C:3F:C5:A3:79:3D:76:DE:2E:91:E0:2C:26:79:09:76:CA:1B:63"}}},"request":{"raw":"GET /center.js HTTP/1.1\r\nHost: js.center.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://btm-btm-btm.lpages.co/\r\nCookie: centerVisitorId=GMSo5EbHbHSTbaFcTLebvi\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-cloud-trace-context: 0b1b3044ab18ef5d9bae8035683d74cc\r\ncontent-encoding: gzip\r\nserver: Google Frontend\r\ncontent-length: 5417\r\ndate: Wed, 08 Oct 2025 15:06:28 GMT\r\nexpires: Wed, 08 Oct 2025 15:11:28 GMT\r\ncache-control: public, max-age=300\r\nage: 271\r\netag: \"OMWYXg\"\r\ncontent-type: application/javascript\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":12555,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (566)","md5":"60f05ff45d707fe36d87b75bf181800d","sha1":"e34d94b519ed465481596bcff099467feb0aafdd","sha256":"cc08eb3316359de0d8f025efee489da73ca552209a0c9cab6b00894d7fa21d42","sha512":"db4464a38190b0df1b468e08232cd1f03dd53283ab7b36bade654efb945c211474a13cff6ca8a6e748489415c838c46cf5436a4bc90ab8605328335b1a432bac","ssdeep":"192:xbZ07UrFcfU1ftsqqStPtR4hXaUv9nUOWaAH74U2FAn31rMyfcPvjU:xd8UKfU1ftsTStP3UB9nUn4U2zyfc3jU","tlshash":"ce42b7d9b3d279b1829730b8452f204ee2bf85a5ac4c49c0a1a2c9c66db8f5c517bf5c","first_seen":"2023-03-07T01:15:19Z","last_seen":"2026-04-04T00:34:26.391236Z","times_seen":5983,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?en=page_view\u0026dl=https%3A%2F%2Fgo.behindthemarkets.com%2Fbtm-midnight-in-america-vsl%2F\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=2139065658.1759936259\u0026dt=BTM%20Midnight%20in%20America%20VSL\u0026auid=1774646019.1759936259\u0026navt=n\u0026npa=1\u0026gtm=45He5a61v812088355za200zd812088355xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~102015666~103116026~103200004~103233427~104527906~104528501~104684208~104684211~104948813~115480709~115834636~115834638\u0026tft=1759936259378\u0026tfd=1378\u0026apve=1\u0026apvf=f\u0026img=1","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:11:00.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:18 GMT","end":"Mon, 08 Dec 2025 08:34:17 GMT"},"fingerprint":{"sha1":"33:09:D4:D3:61:83:44:73:CF:04:5A:44:53:2E:B5:36:64:BB:FC:7F","sha256":"86:F0:16:7D:8B:24:BC:17:6C:2B:06:E6:05:A6:33:43:10:A0:61:A6:BA:81:FB:58:ED:0A:DC:0B:AE:5D:08:C6"}}},"request":{"raw":"GET /ccm/collect?en=page_view\u0026dl=https%3A%2F%2Fgo.behindthemarkets.com%2Fbtm-midnight-in-america-vsl%2F\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=2139065658.1759936259\u0026dt=BTM%20Midnight%20in%20America%20VSL\u0026auid=1774646019.1759936259\u0026navt=n\u0026npa=1\u0026gtm=45He5a61v812088355za200zd812088355xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~102015666~103116026~103200004~103233427~104527906~104528501~104684208~104684211~104948813~115480709~115834636~115834638\u0026tft=1759936259378\u0026tfd=1378\u0026apve=1\u0026apvf=f\u0026img=1 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 08 Oct 2025 15:11:00 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: text/plain\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T01:30:53.33799Z","times_seen":13310387,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fast.vidalytics.com/video/PzpZ_7KZ/slxoAwy_ur0M6ad6/147664/144163__FFMPEG/video_TS_h264_aac_96000_640x360_900000_variant.m3u8","fqdn":"fast.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:11:00.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 13 Nov 2024 00:00:00 GMT","end":"Fri, 21 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3A:95:4C:0B:62:16:0C:59:B3:98:1E:33:58:C9:DE:90:23:BB:7E:FB","sha256":"A4:E0:6D:B7:32:ED:D7:A5:28:AA:A2:34:06:62:B3:AF:A8:6F:FC:B0:6B:B1:D5:78:4B:52:78:5B:5D:A2:23:BD"}}},"request":{"raw":"GET /video/PzpZ_7KZ/slxoAwy_ur0M6ad6/147664/144163__FFMPEG/video_TS_h264_aac_96000_640x360_900000_variant.m3u8 HTTP/1.1\r\nHost: fast.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://go.behindthemarkets.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 15:11:00 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\ncontent-length: 49094\r\nx-cff: B\r\nx-guploader-uploadid: AAwnv3K7NrMHIpnBxrUiPcGbl8jkGPHYGN_xLA7A604vSLkiGw3V00Q2O9QstxxVF3rDzEitvTOvJXw\r\ncache-control: public, max-age=31104000\r\nexpires: Thu, 17 Sep 2026 10:53:50 GMT\r\nlast-modified: Thu, 22 Aug 2024 17:43:03 GMT\r\netag: \"4779bbf5fccb4709ef7acf3055ea78e2\"\r\nx-goog-generation: 1724348583020330\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 49094\r\nx-goog-hash: crc32c=FRJBkw==, md5=R3m79fzLRwnves8wVep44g==\r\nx-goog-storage-class: STANDARD\r\naccess-control-allow-origin: *\r\nx-lb-backend: gcs-prod\r\nx-lb-cache: miss\r\nx-cf3: H\r\ncf4age: 0\r\nx-cf-tsc: 1758560968\r\ncf4ttl: 31104000.000\r\nx-cdn: 8\r\nx-cdn-site: c8-prod\r\naccess-control-expose-headers: Content-Type, server, x-hw, x-cdn, x-cdn-info, x-cache, x-cache-hits, x-served-by, x-goog-stored-content-length, content-length, x-lb-backend, x-lb-cache, x-cf1, x-cf2, x-cf3, x-cff\r\nx-cf2: H\r\naccept-ranges: bytes\r\nserver: CFS 1124\r\nx-cf1: 42305:fA.arn1:co:1736526511:cacheN.arn1-01:M\r\nx-cf-reqid: bffa5648301b63ed8935f50eae8141ce\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]}],"data":{"size":49094,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"4779bbf5fccb4709ef7acf3055ea78e2","sha1":"698c3a848823a6f71c6ed07f8a05fa445908308b","sha256":"e623568784cd66ecca2adb5dbc13a7076ada70a83a40a869fdbb0ae5a02182e2","sha512":"fce6e45f9420f6c9c44213d93df45d044aa9aecbc74ff4bb28e0dffc402d9ed1ce4d8620f5b1e679a3d93f5451ee4d462bf30b332ecfbb7e088abd932e8d496c","ssdeep":"384:w7mZkfiFgLeWjUJSPQ1O7Lex8X6dYzmwVyv0h/2Dot943aRcr+lAqHINO7shSPPJ:wfv6/ez","tlshash":"ef2395a8d1753454e00e5df7bb37b0a2c21079fcadf99f4016a5424628eb396d7ccea8","first_seen":"2024-07-16T16:07:33Z","last_seen":"2026-03-26T14:36:58.112569Z","times_seen":269,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fast.vidalytics.com/players/v.5.8.5.002-vid-prod/player.min.js","fqdn":"fast.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:10:59.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 13 Nov 2024 00:00:00 GMT","end":"Fri, 21 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3A:95:4C:0B:62:16:0C:59:B3:98:1E:33:58:C9:DE:90:23:BB:7E:FB","sha256":"A4:E0:6D:B7:32:ED:D7:A5:28:AA:A2:34:06:62:B3:AF:A8:6F:FC:B0:6B:B1:D5:78:4B:52:78:5B:5D:A2:23:BD"}}},"request":{"raw":"GET /players/v.5.8.5.002-vid-prod/player.min.js HTTP/1.1\r\nHost: fast.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://go.behindthemarkets.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 15:10:59 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 287561\r\nx-cff: B\r\nx-guploader-uploadid: ABgVH885kSW5jK-dfO0g8DG2LwHk1OWQBseFUjOrSB0U6XE_1RHbEcUYJT0ddH-jq_0vzXDHnqDgLbQ\r\ncache-control: public, max-age=86400, s-maxage=2592000\r\nexpires: Sun, 28 Sep 2025 09:48:37 GMT\r\nlast-modified: Fri, 29 Aug 2025 09:18:20 GMT\r\netag: \"39d43b2e207c0a01e1fb6680e6b3f794\"\r\nvary: Accept-Encoding\r\nx-goog-generation: 1756459100580971\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: gzip\r\nx-goog-stored-content-length: 287561\r\nx-goog-meta-release-tag: v.5.8.5.002-vid-prod\r\nx-goog-meta-surrogate-key: player-versioned\r\nx-goog-hash: crc32c=Kn9crw==, md5=OdQ7LiB8CgHh+2aA5rP3lA==\r\nx-goog-storage-class: STANDARD\r\naccess-control-allow-origin: *\r\nx-lb-backend: gcs-prod\r\nx-lb-cache: miss\r\nx-cf3: H\r\ncf4age: 0\r\nx-cf-tsc: 1756461138\r\ncf4ttl: 2592000.000\r\nx-cdn: 8\r\nx-cdn-site: c8-prod\r\naccess-control-expose-headers: Content-Type, server, x-hw, x-cdn, x-cdn-info, x-cache, x-cache-hits, x-served-by, x-goog-stored-content-length, content-length, x-lb-backend, x-lb-cache, x-cf1, x-cf2, x-cf3, x-cff\r\ncontent-encoding: gzip\r\nx-cf2: H\r\nserver: CFS 1124\r\nx-cf1: 42305:fA.arn1:co:1736526511:cacheN.arn1-01:H\r\nx-cf-reqid: dd75091e4a0d0e20f2e4ba16f559b71c\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]}],"data":{"size":1064413,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"70afc249cba15ae2167f638eb47b19a1","sha1":"c15c29e49b1a0703e1ce151270408c08b9499b2d","sha256":"3b74abba44d40945c6be5368149a76061cbcf17cf71b17f648875ec7742db38a","sha512":"95a5d800bf56bfa9bbb27084f9b7414934d82ab73ce391dd61bff9a5bc5244ce1d83eba6d2bb8c93073007cf9577f076712716a141ca636492f094dddce79237","ssdeep":"24576:899F5eHPh+R66Ps+dlPWs4z4EYEliJf70cuRex:899F5eHPh+R660clPWs4z4JJfocu0x","tlshash":"e4254bd976d5742d82d365aa447b1506f33d2a10340cc09cfa3badcb29a5e4eb237e39","first_seen":"2025-08-29T15:50:39.528121Z","last_seen":"2026-01-01T13:12:08.80476Z","times_seen":2459,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fast.vidalytics.com/video/PzpZ_7KZ/slxoAwy_ur0M6ad6/147664/144163__FFMPEG/ts/video/640x360_h264_900000/1.ts","fqdn":"fast.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:11:00.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 13 Nov 2024 00:00:00 GMT","end":"Fri, 21 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3A:95:4C:0B:62:16:0C:59:B3:98:1E:33:58:C9:DE:90:23:BB:7E:FB","sha256":"A4:E0:6D:B7:32:ED:D7:A5:28:AA:A2:34:06:62:B3:AF:A8:6F:FC:B0:6B:B1:D5:78:4B:52:78:5B:5D:A2:23:BD"}}},"request":{"raw":"GET /video/PzpZ_7KZ/slxoAwy_ur0M6ad6/147664/144163__FFMPEG/ts/video/640x360_h264_900000/1.ts HTTP/1.1\r\nHost: fast.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://go.behindthemarkets.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 15:11:00 GMT\r\ncontent-type: video/mp2t\r\ncontent-length: 466616\r\nx-cff: B\r\nx-guploader-uploadid: ABgVH89YxhtbPmeWkh_-17CICdN6UdJjTRO57qgx1iSiK5sVZbS_iqUrQ3-gmEonsrkM97CAl9yqkT0\r\ncache-control: public, max-age=31104000\r\nexpires: Sat, 18 Jul 2026 21:58:45 GMT\r\nlast-modified: Thu, 22 Aug 2024 17:42:45 GMT\r\netag: \"d7f5eeab5dc3502e336085e77e9098f0\"\r\nx-goog-generation: 1724348565597242\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 466616\r\nx-goog-hash: crc32c=jSMw7g==, md5=1/Xuq13DUC4zYIXnfpCY8A==\r\nx-goog-storage-class: STANDARD\r\naccess-control-allow-origin: *\r\nx-lb-backend: gcs-prod\r\nx-lb-cache: miss\r\nx-cf3: H\r\ncf4age: 0\r\nx-cf-tsc: 1759528136\r\ncf4ttl: 31104000.000\r\nx-cdn: 8\r\nx-cdn-site: c8-prod\r\naccess-control-expose-headers: Content-Type, server, x-hw, x-cdn, x-cdn-info, x-cache, x-cache-hits, x-served-by, x-goog-stored-content-length, content-length, x-lb-backend, x-lb-cache, x-cf1, x-cf2, x-cf3, x-cff\r\nx-cf2: H\r\naccept-ranges: bytes\r\nserver: CFS 1124\r\nx-cf1: 42305:fA.arn1:co:1736526511:cacheN.arn1-01:M\r\nx-cf-reqid: e9f4c2a51d9cfe20f02d333eece27228\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":466616,"size_decoded":0,"mime_type":"video/mp2t","magic":"data","md5":"d7f5eeab5dc3502e336085e77e9098f0","sha1":"01721d5ba043315a18d0f12c4b50df39d0f98289","sha256":"2a27a21d164f1a65464032f820070c4b29384d63d53201d30df2f193d0c09c7b","sha512":"929744c3655ddec034fc16ef237f030a74242f802e60b71a18d3d59ef248b7df8322d1c3a51e4fba48cf53dd6a486f7dc6c910d629eea6c62b650c38faeee390","ssdeep":"6144:Zt7+UZRh4NLoUjdKop8LV0tZWSFNMU2y2lto8hJ+gAVNJ6a0d85gJDcWdpQOI:zqUZANEYXp82tPcb+gAzJJS85gAf","tlshash":"d3a4236a27009cd9dc5996f241ae9fbce7950c014ad00f8bbebfb209e5f5760da241f4","first_seen":"2024-08-24T02:10:13Z","last_seen":"2026-03-26T14:36:58.080344Z","times_seen":184,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.behindthemarkets.com/rt.js","fqdn":"go.behindthemarkets.com","domain":"behindthemarkets.com","tld":"com"},"ip":{"addr":"35.202.21.90","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:10:58.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"go.behindthemarkets.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Sep 2025 07:39:29 GMT","end":"Tue, 16 Dec 2025 07:39:28 GMT"},"fingerprint":{"sha1":"8A:AB:03:74:FD:35:DF:E5:77:D1:92:33:77:B6:A8:4C:38:F9:7D:BF","sha256":"66:D5:FF:85:5E:FA:3A:00:B4:39:08:F3:3F:A0:9F:1C:A7:CC:C6:2F:33:08:8A:DA:65:BA:2D:15:F3:CC:45:82"}}},"request":{"raw":"GET /rt.js HTTP/1.1\r\nHost: go.behindthemarkets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 15:10:58 GMT\r\ncontent-type: text/javascript\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nserver: Leadpages\r\nstrict-transport-security: max-age=15768000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":140,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"2d19094d98467ebcee2ed202f39f08d6","sha1":"5941a5a8c037aba61b85566e3f638ea81df0481c","sha256":"b1e6495aa6637827580701ee3fa35eb5b3b476169f6366c38373ee79cd2ad17b","sha512":"40ae1623641db8b85c4df481a2d5081acbcf2e09f265a2770f1552a62b1788436fd2bb61ad484c974c663e57b28d486f725706c520435324d0c3d78c6f82694f","ssdeep":"","tlshash":"c2c02b04014391ca2030d006e707f700739095dfb2fdb60c55d43306701159bdc14442","first_seen":"2025-10-08T15:11:30.178616Z","last_seen":"2025-10-08T15:11:30.178616Z","times_seen":1,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fast.vidalytics.com/embeds/PzpZ_7KZ/du18m3UXDlt4b2bH/loader.min.js","fqdn":"fast.vidalytics.com","domain":"vidalytics.com","tld":"com"},"ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:10:58.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vidalytics.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 13 Nov 2024 00:00:00 GMT","end":"Fri, 21 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3A:95:4C:0B:62:16:0C:59:B3:98:1E:33:58:C9:DE:90:23:BB:7E:FB","sha256":"A4:E0:6D:B7:32:ED:D7:A5:28:AA:A2:34:06:62:B3:AF:A8:6F:FC:B0:6B:B1:D5:78:4B:52:78:5B:5D:A2:23:BD"}}},"request":{"raw":"GET /embeds/PzpZ_7KZ/du18m3UXDlt4b2bH/loader.min.js HTTP/1.1\r\nHost: fast.vidalytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 15:10:59 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 10058\r\nx-cff: B\r\ncache-control: public, max-age=600, s-maxage=3600, stale-while-revalidate=3600\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 50\r\nx-envoy-decorator-operation: vidalytics-player-api.vidalytics-player-api.svc.cluster.local:80/*\r\nx-lb-backend: api-prod\r\naccess-control-allow-origin: *\r\nsurrogate-key: lb-api\r\nx-lb-cache: disabled\r\nx-cf3: H\r\ncf4age: 835\r\nx-cf-tsc: 1759936259\r\ncf4ttl: 2764.451\r\nx-cdn: 8\r\nx-cdn-site: c8-prod\r\naccess-control-expose-headers: Content-Type, server, x-hw, x-cdn, x-cdn-info, x-cache, x-cache-hits, x-served-by, x-goog-stored-content-length, content-length, x-lb-backend, x-lb-cache, x-cf1, x-cf2, x-cf3, x-cff\r\ncontent-encoding: gzip\r\nx-cf2: M\r\naccept-ranges: bytes\r\nserver: CFS 1124\r\nx-cf1: 42305:fA.arn1:co:1756962427:cacheN.arn1-01:M\r\nx-cf-reqid: 700b7a8decd3aff5e7e730dd442fdc5d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":28335,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (28335), with no line terminators","md5":"59788e75a0f6c9b2fbe7724fd8c1f8ab","sha1":"b4d3701ada0a62eae1ac15d586275573e07210fd","sha256":"57c154d7ebea5956ee43a90375bfa6633a643d996277fb7c77782fee2ba2ef97","sha512":"a4b7e82e6d14c210778fbb6838c9eb6054784957d7fe344d2f92c1b7e5b6b7ef064b0fd64f5883703ed9b9227e9bbdefec9aceb2d01057cd2c74d813906c9361","ssdeep":"768:sUrltIo56r5RoGwCjCtg9svBvUa0WVrYoa0:4noXCEBvBVrYr0","tlshash":"a8d2b9c9bad6f0a442f395b8813f3207f23d7b215588d560e423d6d078a978fe263d69","first_seen":"2025-10-08T15:11:30.180986Z","last_seen":"2025-12-20T22:01:07.699597Z","times_seen":18,"resource_available":true,"data":null}},"time_used":637,"timings":{"blocked":291,"dns":161,"connect":21,"send":0,"wait":51,"receive":1,"ssl":109},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lh3.googleusercontent.com/uWbfM9kdLOUOO7e7Oo3SHGl-evxMsXn3Lr-DhULu9YBHexURg7_-EzYc_1re7bKq122lJyi-MikC47mcHwkz5ki_2IB43rFblMw=w16","fqdn":"lh3.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://go.behindthemarkets.com/btm-midnight-in-america-vsl/?_ef_transaction_id=bc43f30744eb479fbdafd7dbcebb0f4f\u0026utm_source=5\u0026utm_campaign=\u0026utm_medium=\u0026id=3415984047574068345\u0026iocid=\u0026aff=5\u0026creative_id=\u0026oid=213\u0026message_id=\u0026link_id=","date":"2025-10-08T15:10:59.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:07 GMT","end":"Mon, 08 Dec 2025 08:36:06 GMT"},"fingerprint":{"sha1":"CB:ED:08:40:60:28:21:1C:F0:5E:4E:70:F4:A7:21:B3:2D:D3:A2:41","sha256":"38:2A:CC:C1:33:BE:46:EF:3F:1F:4C:37:EF:65:6F:51:FD:55:86:1E:B3:ED:83:0A:3F:26:E1:6D:19:97:C6:9B"}}},"request":{"raw":"GET /uWbfM9kdLOUOO7e7Oo3SHGl-evxMsXn3Lr-DhULu9YBHexURg7_-EzYc_1re7bKq122lJyi-MikC47mcHwkz5ki_2IB43rFblMw=w16 HTTP/1.1\r\nHost: lh3.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://go.behindthemarkets.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\nserver: fife\r\ncontent-length: 405\r\nx-xss-protection: 0\r\ndate: Wed, 08 Oct 2025 13:26:54 GMT\r\nexpires: Thu, 09 Oct 2025 13:26:54 GMT\r\ncache-control: public, max-age=86400, no-transform\r\nage: 6245\r\netag: \"v1\"\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":405,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 6, 8-bit/color RGBA, non-interlaced","md5":"27879dba27309770d3f23825a76985e4","sha1":"623e7c03a6c6e579a7e039446f9831351944ab4c","sha256":"3b6d534b315b9f52a295a10e0aac18512854c3909892d368010649ac683ed02a","sha512":"37d4fe5b08a2411847f765559a81b8af17ba31b46e70996c54adf46495405420b93c0d81401b6da894bf2d80c538d791d5f344807b287d3184ad83b652c44a0f","ssdeep":"","tlshash":"3ce0f1cecf748abaa701167274060f257d67877cc5ac374c010ad827712464b7599f35","first_seen":"2025-01-09T00:49:35.481024Z","last_seen":"2026-01-13T00:25:59.49351Z","times_seen":1040,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":113,"dns":5,"connect":23,"send":0,"wait":21,"receive":0,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}