{"report_id":"86f6fc4f-11e7-48ce-8ad1-80f0ccc2daa8","version":6,"status":"done","tags":[],"date":"2023-10-14T22:59:54Z","url":{"schema":"http","addr":"nsw2u.com","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"final":{"url":{"schema":"https","addr":"nsw2u.com/","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"title":"nsw2u.com | Download Switch Roms eShop NSP XCI NSZ"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T19:58:11Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"nsw2u.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"domain_registered":"2020-12-05","domain_rank":0,"first_seen":"2020-12-20 03:30:48","last_seen":"2023-10-14 14:38:07","alert_count":0,"request_count":29,"received_data":926357,"sent_data":14209,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":75,"first_seen":"2013-05-22 04:07:37","last_seen":"2023-10-13 23:31:20","alert_count":0,"request_count":3,"received_data":226800,"sent_data":1318,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ocsp.r2m03.amazontrust.com","ip":{"addr":"108.157.228.227","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2007-05-11","domain_rank":0,"first_seen":"2023-02-21 01:06:24","last_seen":"2023-10-14 05:33:59","alert_count":0,"request_count":1,"received_data":942,"sent_data":340,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ocsp.pki.goog","ip":{"addr":"142.250.74.67","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2016-06-13","domain_rank":175,"first_seen":"2018-07-01 08:43:07","last_seen":"2023-10-14 18:12:07","alert_count":0,"request_count":5,"received_data":3499,"sent_data":1665,"comment":"","tags":null,"fingerprints":null},{"fqdn":"stats.wp.com","ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":2711,"first_seen":"2017-01-30 06:06:59","last_seen":"2023-10-14 05:11:29","alert_count":0,"request_count":1,"received_data":11179,"sent_data":400,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pixel.wp.com","ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":2545,"first_seen":"2017-01-30 06:31:40","last_seen":"2023-10-14 05:11:31","alert_count":0,"request_count":1,"received_data":241,"sent_data":485,"comment":"","tags":null,"fingerprints":null},{"fqdn":"banquetunarmedgrater.com","ip":{"addr":"172.67.196.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2022-08-04","domain_rank":0,"first_seen":"2022-08-04 17:12:50","last_seen":"2023-10-13 20:49:41","alert_count":0,"request_count":1,"received_data":837,"sent_data":409,"comment":"","tags":null,"fingerprints":null},{"fqdn":"friendshipmale.com","ip":{"addr":"104.21.234.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-10-21","domain_rank":0,"first_seen":"2022-10-21 14:15:25","last_seen":"2023-10-14 11:27:48","alert_count":0,"request_count":1,"received_data":86407,"sent_data":397,"comment":"","tags":null,"fingerprints":null},{"fqdn":"i0.wp.com","ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":3021,"first_seen":"2013-09-17 08:14:42","last_seen":"2023-10-14 19:08:55","alert_count":0,"request_count":9,"received_data":151756,"sent_data":4340,"comment":"","tags":null,"fingerprints":null},{"fqdn":"itespurrom.com","ip":{"addr":"139.45.197.243","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2023-02-08","domain_rank":0,"first_seen":"2023-02-08 23:20:56","last_seen":"2023-10-08 12:33:54","alert_count":3,"request_count":3,"received_data":33932,"sent_data":1874,"comment":"","tags":null,"fingerprints":null},{"fqdn":"images.vfl.ru","ip":{"addr":"62.173.140.199","port":443,"asn":34300,"as":"Internet-Cosmos LLC","country":"Russia","country_code":"RU"},"domain_registered":"2001-02-13","domain_rank":275945,"first_seen":"2012-10-04 04:24:47","last_seen":"2023-09-29 16:31:46","alert_count":0,"request_count":9,"received_data":561939,"sent_data":3960,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google-analytics.com","ip":{"addr":"64.233.161.113","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-07-18","domain_rank":40,"first_seen":"2012-10-03 03:04:21","last_seen":"2023-10-14 05:12:31","alert_count":0,"request_count":1,"received_data":21524,"sent_data":408,"comment":"","tags":null,"fingerprints":null},{"fqdn":"definedbootnervous.com","ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2023-05-22","domain_rank":0,"first_seen":"2023-05-22 04:09:17","last_seen":"2023-09-19 17:07:27","alert_count":1,"request_count":1,"received_data":11603,"sent_data":435,"comment":"","tags":null,"fingerprints":null},{"fqdn":"professionalswebcheck.com","ip":{"addr":"3.73.202.184","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2022-04-01","domain_rank":0,"first_seen":"2022-04-02 00:47:29","last_seen":"2023-10-13 18:16:43","alert_count":0,"request_count":1,"received_data":416,"sent_data":424,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pagead2.googlesyndication.com","ip":{"addr":"216.58.211.2","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2003-01-21","domain_rank":101,"first_seen":"2021-02-20 16:52:05","last_seen":"2023-10-14 14:38:02","alert_count":0,"request_count":1,"received_data":51861,"sent_data":447,"comment":"","tags":null,"fingerprints":null},{"fqdn":"rabblespidersrenaissance.com","ip":{"addr":"192.243.61.225","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2023-09-27","domain_rank":0,"first_seen":"2023-09-27 04:01:16","last_seen":"2023-10-14 03:06:01","alert_count":3,"request_count":3,"received_data":23921,"sent_data":3062,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8877,"first_seen":"2013-06-10 22:14:26","last_seen":"2023-10-14 00:34:18","alert_count":0,"request_count":1,"received_data":1369,"sent_data":459,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":235,"first_seen":"2015-04-17 22:46:33","last_seen":"2023-10-13 18:58:36","alert_count":0,"request_count":3,"received_data":9935,"sent_data":1369,"comment":"","tags":null,"fingerprints":null},{"fqdn":"c0.wp.com","ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":6988,"first_seen":"2018-09-24 17:59:05","last_seen":"2023-10-14 10:08:16","alert_count":0,"request_count":12,"received_data":320856,"sent_data":5260,"comment":"","tags":null,"fingerprints":null},{"fqdn":"my.rtmark.net","ip":{"addr":"139.45.195.8","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2014-10-29","domain_rank":9054,"first_seen":"2015-02-04 10:54:57","last_seen":"2023-10-14 18:26:02","alert_count":0,"request_count":1,"received_data":738,"sent_data":453,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.cloudimagesb.com","ip":{"addr":"45.133.44.10","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2020-10-06","domain_rank":23099,"first_seen":"2021-02-12 17:15:41","last_seen":"2023-10-14 05:13:43","alert_count":0,"request_count":1,"received_data":25039,"sent_data":443,"comment":"","tags":null,"fingerprints":null},{"fqdn":"formationwallet.com","ip":{"addr":"173.233.137.52","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2023-09-23","domain_rank":0,"first_seen":"2023-09-25 18:05:47","last_seen":"2023-10-13 21:14:10","alert_count":1,"request_count":1,"received_data":469,"sent_data":483,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-10-14","alert":"Sinkholed","trigger":"definedbootnervous.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-10-14","alert":"Sinkholed","trigger":"itespurrom.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-10-14","alert":"Sinkholed","trigger":"rabblespidersrenaissance.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-10-14","alert":"Sinkholed","trigger":"rabblespidersrenaissance.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-10-14","alert":"Sinkholed","trigger":"rabblespidersrenaissance.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-10-14","alert":"Sinkholed","trigger":"formationwallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-10-14","alert":"Sinkholed","trigger":"itespurrom.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-10-14","alert":"Sinkholed","trigger":"itespurrom.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/ad-inserter/js/300x250.js?ver=2.7.31","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"e509c98a0bcad0ce8e6248ac8eb31de1","sha1":"ec5fe203df631088270b5f2b0b7a85498a2aeb8b","sha256":"352ea4dd2d545563bef7eb0ba6d6ebfe4bc9d9e51ab00d9c925cb9e103edee63","sha512":"eefc16b01c06fab4e58bf8c7df7775b5961cf31177082bec526f0ee11fbf437f31242ab01bdc1a214595c58fb424d1c26d69d9b8f37f9870059b161a579fd229","ssdeep":"","tlshash":"f57000802828a0aa803002802a2e3aa2b2880202e000000022a00880e000aa3e000882","size":23,"data":"","first_seen":"2023-03-08T16:02:15Z","last_seen":"2024-10-06T09:26:03.652518Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-search/build/instant-search/jp-search.chunk-main-payload.js?minify=false\u0026ver=be4054ef01b79af42428","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"492b6d5195d2fbd9e612a20a9bd1a009","sha1":"abd6a079460dc394397df83a9ea641ee03884c58","sha256":"937ba827d294056f81fcab0e37e5769ca968072be205dcd7125fb61e5a7cdac9","sha512":"02faddc16bca68168bcddfd10470627dae1b8ebfaad39c251527546eb000861e0daf9ac8ecf90bee9fa6f3faf0b095e00bec04c72c4dd16aa7b141f0c5ced3c0","ssdeep":"1536:iI2sRxi1wDn4Lh4MCfU7M2NvEhPB7Y/gXLuWeTgfcZ1hchl:PPr4Lh4MCfPgEhp7Y/yyLgEnhs","tlshash":"a473f980b4e4b85905fa012bd47f7634b3ac1e4e641d0480f7aa9cea7423e59a32fb75","size":79073,"data":"","first_seen":"2023-09-22T00:36:34Z","last_seen":"2025-12-10T00:28:28.453771Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.3.2/wp-includes/js/dist/hooks.min.js","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7bd48eb3bd568033e96caf0fb62e6690","sha1":"b38066999294b99d92d95db5f38bc15707eb1f22","sha256":"7868467c94a5aa0b3f11ef542f45287967f9627b3b5acdc86e47f8f77a126596","sha512":"7fec30cc4223c39d9ee3ccbba8cc66c90467a9987279334be43aae4c251f6c618f6b3ccf223147c79ce6c463c89f0ceb0d0e4e471ad9ab6574ab32af728a535f","ssdeep":"96:+n5ggxcq5Va/rqXCgcfT19cJ3rAgNWNSt5s8G07AajUR1rvgdH4+TtW0c:+5hcqXmrHfB9cxEkt2WAM60c","tlshash":"9ea156c474c3b430d2637063a07f549ab63a69e5782dd080e25d90d67d73a8de077a6d","size":4627,"data":"","first_seen":"2023-08-08T23:25:56Z","last_seen":"2026-05-09T05:35:40.988473Z","times_seen":21762,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f73754c10536a2e729f6d06f9e7f191f","sha1":"f69f394a68fcebecbce2ada0f6f8a91ffc077790","sha256":"06dc51e59503bfca6c59b6050f0dba624b14358f3644d81a3f6605f6586151f6","sha512":"9dc4262a5f4ca5cc79f073bf70f89dfab4e26175d58e67b569652fbec19c7a9530ac23d1c7ea3b10cd596ad4216fc5985902f6c4a3b73911b46e4da4e54baa09","ssdeep":"","tlshash":"3de0ebf01d833cfac2ff09407b66bf5a332633241010ac200c96b004023f61240a8c8c","size":294,"data":"","first_seen":"2023-05-11T18:42:32Z","last_seen":"2024-08-21T08:54:44.400943Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab1b0ef42311479d7559bffd29ef8d7d","sha1":"ba1509057a5f82563a2b55a7379f4825fe35bcab","sha256":"37bf8b4db5288941c20c28fd7c0b201d2270201a94739d64462744ffe6b52f79","sha512":"db4e6a5953ddc8e4aaf65287c085511a7c59b676a412525a17e699b40fe34eca264c2780f3654f96c1fa4dac9147f628885c5da8c2bca6a204a1d92b2d1cae48","ssdeep":"","tlshash":"85a0120040c1349e207240152ad09042bbc1411001117824004c839b1e5f44065d5904","size":79,"data":"","first_seen":"2023-03-07T01:07:29Z","last_seen":"2026-05-09T06:36:33.723853Z","times_seen":2127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"5404a368665e4f30b7a3bd4a0ec3c437","sha1":"b1dc0b8f6f7fdf01bf00abe5176cb476c5ecedb8","sha256":"0128863b16b529949092392d623bed09b96043ae3723ce2d334b2c05a8324b4b","sha512":"f1b298f35ed33a77745937989132bf31f40f7aa9f7fa7ce4952a36af6da6ec578ee5490976dad3712b236054598a88cd66b003c742d24c45e87ba2c2bbd74750","ssdeep":"1536:65BS8ZfO0UVsC6pF34LWZtFN2297CKC1NEasvjhHemPoT5R2UuMH8ten2lQ7wh:+S8ZfrXF3ft72297CKJas9gj2UxNze","tlshash":"33834cd1ff3069265ebf1162b47f114fb0b6da379bd94092e0888c642e68c5250f7f1a","size":82135,"data":"","first_seen":"2024-08-21T04:41:52.548467Z","last_seen":"2024-08-21T04:41:52.548467Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/ad-inserter/js/banner.js?ver=2.7.31","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"41bd53fe0ee631d5cfd895e18a53291d","sha1":"9d9d3c42c53ad7f906cb083a0d2d37afb4537764","sha256":"dfb2e16986e257b608b45d14396378a8f2ac6a7321c0dc2f13c66a33ec8e4a40","sha512":"41a97307b1672b9c276dacdc973cfcee6ff35961ac21c127d2263fc1c41e0356ee104456c0c5c2fb12ac30847f5c7d7e3ec4bb4f02e860ee3c3839ef984cafdd","ssdeep":"","tlshash":"b6700082088000b88030a00a020e3a3020083200c220022220020aa0a03c083b000282","size":22,"data":"","first_seen":"2023-03-08T16:02:15Z","last_seen":"2024-10-06T09:26:03.66407Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d58842e7ff194b34a3eb21b72a65018","sha1":"7d51d7a294ef0196c2647741e57e632642439bd5","sha256":"1dcea33b18534b3d498398ea846695229bca9524c16b441209d7737b71a3bcef","sha512":"c9245c58633f6b0e1d8562916301c51df8342fc56bb9b5014e669fd6a12540336f3287a49a6e4c1f400ea650ad9d3e9bab86676c3ef81495389b61f5bfbcc99c","ssdeep":"","tlshash":"fcf0dc2978305070411b402af6a7c71c7d732021556289841728b589bd75e6e5020afa","size":447,"data":"","first_seen":"2024-08-21T04:41:52.549343Z","last_seen":"2024-08-21T04:41:52.549343Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rabblespidersrenaissance.com/ed/6c/a5/ed6ca5eb8abc9a864ffa39115799b641.js","fqdn":"rabblespidersrenaissance.com","domain":"rabblespidersrenaissance.com","tld":"com"},"ip":{"addr":"192.243.61.225","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4ebc7499985f89f51514a7941d42755","sha1":"426e11fb788360274437a6b38ddca17df4441172","sha256":"846d2558831aeb877a06583d06f74a74f5366c810da2739e69ea92df020c0e43","sha512":"ee34ef20a8d12abb6f8ed2f5fe27ba5ab20c2124fcec141c24c22d7756bb3adafb968e4c0069a1659a991d37742ed27f9a181a934368585d487d6b2a0be2e3f3","ssdeep":"768:RzfZ9W8UncluiKFbyqcvGCK34LQiEldnJyoj448cDV4t719lzo4es5NbId8:sJFby1vGCK34QX04dDVQ1w4XXId8","tlshash":"8c13f7cc7f65a16122b560b7732fd902f02a0d0d79988898f3537da8aa6c734e4767dc","size":43160,"data":"","first_seen":"2023-10-15T00:59:56Z","last_seen":"2023-10-15T00:59:57Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.wp.com/w.js?ver=202341","fqdn":"stats.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6c87bc49e7646c7ccda489b9defc829","sha1":"9003fc52b4c4014b4bd9fe2f4506440b299478b2","sha256":"e97d12898ebf1039197a2a1c2f87bfe3b56f93eca2bfe60a46a1053fab7ad860","sha512":"625c15dbc10c9f9aa946a4e3a6ae95227e886fbd229d4999d942cf7179acc6a5d06a52d903c3016b3baab7abc02b22c8acfcdf570e93b868b23262cd9c19142a","ssdeep":"192:6EAPyKjIhY2MpyzWwv7afoUOl1T5ANkbAsw6EbJK1Wg:5pM6WwCe5AbVK1P","tlshash":"a022c6ac7151f03406a750a9133f670af23a4a25385b9494db6ec8f03e7899f4277fad","size":10778,"data":"","first_seen":"2023-05-15T15:42:40Z","last_seen":"2024-08-21T09:42:58.322033Z","times_seen":1419,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/lazysizes/5.3.2/plugins/bgset/ls.bgset.min.js?ver=6.3.2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"94279a9a0c4060a96efcf1da47716f86","sha1":"ea88b3fd8b01a8b86edfd0f4120cc9a834893018","sha256":"d41c6733a8c4a3a7f08204de8e3d60e1d2baf17dd7f675a26830fb1047fac40a","sha512":"1f47f774cd13f3d7f9f069e8471b6c96d049d8b077ed0965c02fc6a24ff14c0c41b245fff246aa8d0d5bb7503552ebedb0f773f92b5e48ee2d565277f726c2fa","ssdeep":"","tlshash":"1651522fb35536b7b81b10a1775e3714963330760c1ba8326a6bccacdd78c8a25a1938","size":3063,"data":"","first_seen":"2023-03-07T12:06:25Z","last_seen":"2026-05-09T06:32:14.309229Z","times_seen":489,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4733472fadbcf993b031e917e8c1a8bb","sha1":"25a0a1bbaaefc39004ab2d28cfa0291c2920c8d3","sha256":"2d901063b6ea17df1dac8e5cdcdecd6359fe0c8613a456bfc1f3b15b03dd5143","sha512":"dd51a4f3b0302a23130b3c562876d7a1335f540bbf9fda195a6180a6c83dcc9ed6df163fd156eef59655b9aad0923226955a9768d78c960dd42b4a8939083d2c","ssdeep":"","tlshash":"74b09268a2a9b20508373c36b5778124ab6b7c94b5c31605994d2d500f2e71c02c788d","size":116,"data":"","first_seen":"2023-03-12T08:01:59Z","last_seen":"2024-08-21T08:54:44.40504Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itespurrom.com/tag.min.js","fqdn":"itespurrom.com","domain":"itespurrom.com","tld":"com"},"ip":{"addr":"139.45.197.243","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"a95c344616a01fcb847758f5eab31207","sha1":"274f322059eb248f3518f7c78b2fc69faae0551c","sha256":"72e9c7cfe696a88de9acd9d80da1b2c4c3441c2ff2c0cf5c57a07aa153d91f13","sha512":"16faab23e8f4ba77eae3f0a95bedded0b90bef0a0703fffcb48d5a827aaccfaf3fce4084e473b568f906b3c6df0414db16651d0a2c022cfc1f49832d4e03fc8e","ssdeep":"1536:tFJAFXavr8SAVKgYVJVihT3fdwzpTGgmzd:pgrSw3fqqgw","tlshash":"1f73736a709174b00a37e057576b132692bb5971f57b8030641ebb9e383ac1db32efd8","size":80507,"data":"","first_seen":"2023-10-14T03:59:35Z","last_seen":"2023-10-18T12:35:08Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"91f51021b7facfc276086d27fa65c473","sha1":"26171fc83df06a093b5760bb0ea2b78f9aacefee","sha256":"e67e7ca5672b9d50d3020a0ea25054f83a552dc00c9377e164bcc9bf34463fdf","sha512":"958aeb7bdcf1f08d1cd47f8769279a1c17e76a5704618a4be6e5477b50055256ae003cfab6a67192b6864a35be29ad18fe5f9769672a5df86920169956df698e","ssdeep":"","tlshash":"bec0226bf00924703681321bd32300b282134058fed0c8d4a32193e31830d3ef033221","size":187,"data":"","first_seen":"2023-10-15T00:59:56Z","last_seen":"2024-08-21T04:41:52.551624Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.3.2/wp-includes/js/dist/vendor/regenerator-runtime.min.js","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a4f28a615173df36cb84be2b345816e","sha1":"f709263841708d9e40268f24a0072ff4fe811b35","sha256":"6974bfd8fa06b7831f05cb4b25860c851a5ad3f02a6699ebe688987dd7a6ebe6","sha512":"2685373f6522c039f17123683dbc4a2d6eaf572bca72b6019b7fcc9b15b2aa295cacab19b99a1161cc3e317d6bdfc3bdc2bffbfc87d9ea9086da58a013849910","ssdeep":"96:bfe7Sm4zIHPQ6xLROGj+12NN15PPhd50guFhMPq5TK1pFZ9OtsH5Jsd5O+Ark3c:bTmAIH/x1xj+EvWMPqtAHutsH5OKrks","tlshash":"96e1a5ddb5cbf00103577a24951f1009e33b655ee84a0048eb58e8e2fcf481ea76af7a","size":6607,"data":"","first_seen":"2023-03-14T07:30:15Z","last_seen":"2026-05-09T05:35:40.930771Z","times_seen":17737,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6930526d604e01c7e0719becb0db246","sha1":"b97d624d19e3793cd145b3eb8fa222b10d1dce14","sha256":"75e54442739120b005ab75152198cba6aa393c99209e386ac574caf2ac8efef3","sha512":"17600d65bf0a83ea4e215b300835be0c1b4d53aaff1c92da13f261f9dd17b620bc439abe5b28e275300dfce4c2a008528a677c7d75c588a2eec4eddc0b463a22","ssdeep":"768:QSRPrfnn5xQqLoYpWIDcPN7cwu6wvW7eiNWD4cDlWcL41UMt:Vj5lLoYZycwu6wQZhcDlWcLsUy","tlshash":"a0432f1c7c9260581912e3baa12b31d56a257200d86e4cf2b818d3d7de752df8da3fde","size":58918,"data":"","first_seen":"2024-08-21T04:41:52.553451Z","last_seen":"2024-08-21T04:41:52.553451Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-09T07:31:54.230546Z","times_seen":104597,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.3.2/wp-includes/js/jquery/jquery.min.js","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff04dd1ef5c67998d8652330c0441689","sha1":"5e6ff5bd5240181a8bdea983837f39ac231dac4d","sha256":"5c93f77799d122fb5255ee24da285f9f228cc118cba11e6ceb2b6bda8cdf4164","sha512":"15b29b5a106ebad320aa419675e1d7415b56276ff8ec04b8dcac845630fdcaf3ee7ca7b9d614ea415d3facf065c2608ed62359d3ccae510f5527b2965c8d7b06","ssdeep":"1536:/KRUXRa8Dgwxcy2jpBNwch96SLk8Ek2BSrBGS1ia/eEk4aV2EXi8SMpQ47GKk:/u1zNwcv9qBy1HOg8SMpQ47GKk","tlshash":"6e83f8df77ca702247ab30b9406f550bf276199d684d4400f259d8e9bc78a4a823bf7e","size":87482,"data":"","first_seen":"2023-06-13T23:41:38Z","last_seen":"2026-05-09T05:35:40.92167Z","times_seen":31899,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.3.2/wp-includes/js/dist/url.min.js","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"16e2e46b37590d0f0b095e0dc1aaaf87","sha1":"11fd26f35df888a81534699194516b5178c217a4","sha256":"68355abe687cffeeefe36bc69855523ab4745d0e753f7417138f9a41259cce71","sha512":"f9663ecafde9274325f4eef21b6a94e3d9641a5577a7b1aedd97da6d09b1355b619ffffe3cdcc392b225d51969d7d24ed6a9224a36218c424166fca4d5052aaa","ssdeep":"192:1rGJoVTALQGjj/vojA9NsgYzwY/Fmr7g7E5FFczHaB3L2QcXyp:1rlVEL1XojA9i3zwIFmr7e2XczHadL/7","tlshash":"03224088b1d7f496d2553db164bf5d3fa13969cc046e6034e66aec9a382d23d0063bbc","size":9079,"data":"","first_seen":"2023-08-08T23:54:07Z","last_seen":"2026-05-08T19:32:20.047199Z","times_seen":837,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0da466422c36650bd7c5fcd69e520459","sha1":"025b064ab4bdf8a4fda4a503e944d43fc64e284b","sha256":"741571fcf33b4301550a428cd62d723247170a83b1d4a5ce234e6f42568f560e","sha512":"ffc537e43f23e8d259c91eed77293d893c94007e72394f4cb2bf108a14c25c6cd0e360eebac4e545df16052b394da31348c54b9cc64bbbbd158eb5b973914864","ssdeep":"","tlshash":"b62135a447b73c094c2eb452ce0d7aa743412e4bfa2838b069ed1226713f0e951b762f","size":1443,"data":"","first_seen":"2024-08-21T04:41:52.555277Z","last_seen":"2024-08-21T04:41:52.555277Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eventHandler","is_inline":false,"md5":"08fde8ea209fc5fc4fdb2a9c614edaf8","sha1":"7b54ed7f80a3c3187c406e0c3d9ad247516a05fa","sha256":"ec939e7c2a87ddbb495dbe67a38c2291826a37c7c00e03f22ba7fb05d290349a","sha512":"79166cb0ebb8e43595443ca0dad0b64085bea6de42d7d9dedd098174a995eaea0b18c7a90dbe323e9e4808b42b9e4f277ecceaceffc2fbc4c8ad11df5e03d27f","ssdeep":"","tlshash":"25b012ca0444617c23e246028a333315736340fa4c00704080000421350c34fd57bfc7","size":90,"data":"","first_seen":"2023-05-25T07:37:48Z","last_seen":"2026-05-07T20:32:38.196969Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-262573192-2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f857e50bb34a2a25112f214bd2a9cb60","sha1":"8eab946abce84c1d5aebd62424c96b7b36e357f3","sha256":"70d401f1b3ca53daffccd34ed252c71b2a6218ed1182fd09fc11381625a17c68","sha512":"068bc92ba53ecee295b03dd778f3c4ecda652fb5ccf5cd5585b030e70370b94f6ce4c9d561f70cf91e0af8e0ea3f8f6eabdb5917888ccbd7685348f33216749c","ssdeep":"3072:v8ToVvB9JuTRg9y+m0MvDcwgL3LXgUnt7zIhUjYTrNr:E89EThRbq3LXgUtYeC","tlshash":"b904d6d9b393b16682a7b474543f010bf17b6d92f84cdc98e189c5c42eb4a99427bf2c","size":188584,"data":"","first_seen":"2023-10-15T00:59:56Z","last_seen":"2023-10-15T00:59:57Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-search/build/instant-search/jp-search.js?minify=false\u0026ver=0aa4f53ecbe8911b5307","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"70c183398322d73b50b8b4abece239a9","sha1":"e79dec738456aa7882ffbaf481eb13849da7c227","sha256":"969eb11be3a2271857373fe0e1424232f62f24ebc4cac8cd532c35d43634c046","sha512":"38317ee7e62ec157c0c42252ba672bfbe0ff5abbbd1e54e028824eeaeb82bd07dfbe986ad8961003706975ea2d155c33ca0293a92e16cb8e38d26b201548a3d5","ssdeep":"192:pshByU1qz7Ka/bWaFtiWdKCA/CtmsyatX6yvqNeEH7bV:pshOFN8C2Ct5qyvqNbV","tlshash":"36f1968d79c5b43b62b721b1483fb52a7b3f21a3290e4051da19c4f6bc35ec99113f88","size":7553,"data":"","first_seen":"2023-09-23T16:46:34Z","last_seen":"2025-12-10T00:28:28.619065Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/lazysizes/5.3.2/plugins/unveilhooks/ls.unveilhooks.min.js?ver=6.3.2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6a3dd4ecbf227acbafcff33d68dc71d","sha1":"7421115ddcd5d436b89a1fd27e0cdce5a01978e6","sha256":"30b2271be76ee2dd43122d0611f8aa498b9781f4cd03904ca12e12d2e91e9421","sha512":"850ecb2006210f5ec2661e9b0f375023b3538541e66467006c60df0961cefec3843d101d964405838813b0a85659b2353cc52f8c3ec98c0fb9c77a47db7067ca","ssdeep":"","tlshash":"f041e1ee7654b433adaa24e2511fa524116730331c1fad64bf4bedaecd78ce72026960","size":1872,"data":"","first_seen":"2023-03-07T01:32:49Z","last_seen":"2026-05-09T06:32:14.271001Z","times_seen":3154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-search/build/instant-search/jp-search.defaultVendors.js?minify=false\u0026ver=a812fafe63c2ca6c059f","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c7e73dd02f57abb6fec8fadea6e35b0","sha1":"dfec9a1a86ae00e26c0067bd8c8b7ea4860239c8","sha256":"d4e76d642b11df90fe1e33c420b70c975a23eebc7aea1416a272439ea9903019","sha512":"8a591ca4f78fd8bb6261f754c3f209f2d27075c1fd7001d0d7f27a77a16627ee190bd2816d5df72673d1973ba9f0a279bab046dc2aff1fcd60c6d91fd31b755b","ssdeep":"768:18HsYdCVZkFN5v5d3cPA8m4W8yPLyFXNA9qm4tAiNfUVm7QTDaQFNJ8y1CjmnAy:1qrvAP7m4wIXNVm4tXNjUZL8y1C2/","tlshash":"c573a399f4d5b0a017eb20b6813f190ff27a7869744e81d0e362e4d5bcb855e9027f6c","size":77230,"data":"","first_seen":"2023-09-22T00:36:34Z","last_seen":"2025-12-10T00:28:28.366812Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.3.2/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dda652db133fddb9b80a05c6d1b5c540","sha1":"60c8514c57a5db2980c4b046b0dd479bd427357b","sha256":"c1a9a3e223bad631dff12d33b5499eb145cb08d8621c20d9d73870e78d97afe4","sha512":"05cb3673448a79aa81887c60a82aba51f9a843dc13ab4fc39b3e6d8ae7d632732d9afefaf72fc3d197c2795a3364fdfd4f83c9b628644d98f1c9017bfd435e62","ssdeep":"192:MFRv/5sAwj4ZsHA3nc9f9dIfssIombo9MXGz:6RXBtncdIYaM+","tlshash":"840221a83719b93358cba0a6607b174326232027584a54687738dcefcdfcea91573fb5","size":8171,"data":"","first_seen":"2023-03-13T14:32:06Z","last_seen":"2026-05-09T05:35:40.969914Z","times_seen":47681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-HS5Y0K7QPG\u0026l=dataLayer\u0026cx=c","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4cc62d82c9898e21e51febbb64af4f1","sha1":"a9174a05ab2a6e94e94ad62f2c7f9186d8656c1d","sha256":"d8ad7aff271a2a8195032fe31289808c48b8b6af65830e6d934a0accb9d4fe93","sha512":"aadf82348ebe3e6d3a970251736286bd2cad0319c89e39e280ff16d05573927c299c6bba623ba4acfaaa4984ba7f2c104db0f0b3c0fa8fc5373cce8c9204e662","ssdeep":"3072:CcToVvB9JuSkcyiGO0xPy+mHMvD+wgYoLXgUnt7aSHawfCsVtZ3F1XXNx:x89ESkcyZOodVoLXgUtX6wfCsVtVvXD","tlshash":"1224f7d9b3c2716682a7b478503f010bb5bb6d92b84cccd8e189c5d42eb4a99417bf3c","size":212850,"data":"","first_seen":"2023-10-15T00:59:56Z","last_seen":"2023-10-15T00:59:57Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/themes/posterpro/js/navigation.js?ver=20120206","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3a5b08af3e63049707797efe65eab86","sha1":"f66ed251ef8c24614ff24376d472f2f394f7b93f","sha256":"d79752e33e156b5cb219ab45103fe0ed7d80f111533dd8eec42c57546b4da500","sha512":"0615e64c421c5621cc07b9ea44379ca7aea5508e66656cceeb44cf739e3512d10430343f36a01dd2dc2e20c811c94733972fbd5ba7e35bfcb487686c720e5ce7","ssdeep":"","tlshash":"3651129328f6223f959aabd9625d5053353f8e50f714bd12f834f4801818a41cef9ece","size":2279,"data":"","first_seen":"2023-03-07T01:39:41Z","last_seen":"2026-05-08T22:56:05.028285Z","times_seen":630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f506bb7af7e7613ee1c614648f06971","sha1":"4ba407f6683af457e2b187b429b00b824095ecd8","sha256":"7247c6eb60514195641449696908c8c65c5ddc8dffc0c2930ff3dd93400569b4","sha512":"0c9bbd7ca9794524cd0b3d1fd703f7973e109e390811ea262e38f8bea3786f34377bc1c1574738e7a27075fafde8b6e6ecbba4dd4037e15b68f58bdb93fac07f","ssdeep":"","tlshash":"b3c02b0152842dcf10d00ee0293475a343d53222ba30bc02258cc0d04f57511cccc353","size":134,"data":"","first_seen":"2024-08-21T04:41:52.55858Z","last_seen":"2024-08-21T04:41:52.55858Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.3.2/wp-includes/js/dist/vendor/wp-polyfill.min.js","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"94dfdbe80f36b3be63ce74ff1135b996","sha1":"5e05077d99e736af42b2da70e428e7f7df556dd4","sha256":"4c0ced2cb3830d045cdd74f745fd4d6dcb082d8edd3a9fe46e39295e30cb8032","sha512":"628169b65f39a18f13facac9e3375eb59dbcac67cdaa7612562165d94aec1fda6cff93b1f228155c317f82a544390948f7243df330972851b49f6a45781aa2d2","ssdeep":"384:H75NVCMqhONzRMs9K+K3JLyuLKmtfj0z149LmK4ujm:ViPOM5OgKC0C+mm","tlshash":"bb72748afd81b0da03f360b5012f440ff2ba9989b59e95d0e359d5e46c7d84e9027f1e","size":16146,"data":"","first_seen":"2023-07-22T18:30:44Z","last_seen":"2026-05-09T05:35:40.956501Z","times_seen":11805,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/cache/wpfc-minified/7kcuf8x0/5qz0r.js","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"38fca9e0ca205130e3dddbdcda3b4a85","sha1":"2c0ac19235a88fb361aff39bc0922e4b946c2c5e","sha256":"43c8d614ba6e97fd9ee9dcf0ae49334ed5d601403ffe8551a74e1a9faf70efaa","sha512":"ab042b5ed6a89ca611a4cbfc1a771e704bb6d9413dd41f478bc9f4464d44b4a8aefed9df5726ccb28fa5830cdd24f470b8c9ce4bd3e9787b97f8e1666960415b","ssdeep":"96:ZFQq7RRpbM1ZzOL8kk66cl1BS7gVvPos7UAsa4iG3aEWqMW6GjOw:ZZRRpYDyLw66cl1BSsVZzrhG3pMW6kOw","tlshash":"a8d180e868cee16442ea52a8084b30d871bb3695d00d9584f2f351db2d73c8eaf26b5c","size":6206,"data":"","first_seen":"2023-09-23T16:46:34Z","last_seen":"2024-08-21T05:56:53.953099Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"56707025a82573f275588f90b350d3ad","sha1":"f13b7c18e940908856144a8a4783f01984c5c4a7","sha256":"163e5c7829763a6443786bf0b88bdf7756c6500d6394ecd344a02dd9ba947d27","sha512":"f23c86565d4c2962b82216df6295ecb441a5be31a28c8e9176ce76d2a13d961e7a40fca134d97670070b831063d8cb1d7e68c4b234cc67db5e73ffbec186f05e","ssdeep":"","tlshash":"dd614a1ef4084e325f288389efd1a3f124dde6c53150b2c2ede5d47c88b59283db689a","size":3372,"data":"","first_seen":"2023-08-13T04:23:46Z","last_seen":"2024-08-21T08:54:44.420304Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/sandbox%20eval%20code","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"69c02be3f74421ae2f1156f2b810e043a2c62b015ae7c402f00e003f2440fea4eee1e8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-05-09T07:38:35.258787Z","times_seen":857527,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3ead7e34b8fbb76cb63a9a39943859e","sha1":"63fd3f10bd402ea5cc976e7bb1a45094edc3c9b7","sha256":"9e66e7b215400aaa09d635b39effef5986bfb2e86a789c6fd4b8b36ffa52ba09","sha512":"13803ebb4af82ddef125ed8c7c1715bb9779402ed3a997a46ae0f3add9e284862bc4572a6579ab1356d4f7e170de25371b56cc4b716f8d4f37af16d5831ed325","ssdeep":"","tlshash":"40a0025670d535250737143ca7c75125201704d020aae450751d82c12b250367755455","size":53,"data":"","first_seen":"2023-03-12T08:01:59Z","last_seen":"2024-08-21T08:54:44.427333Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d30f13da1f424ee0383b76edc55881e1","sha1":"7e348a5f57ab13eedbc4ed917cdeee5bb9f9bd46","sha256":"cf01a621447e67a81629bc28276677c86c48fd72c44cba83a82448574aadfd60","sha512":"06571ea850a1ff105d50dd65340b1109e07dba2915279d549f0880e161c5487e0462e63f5bcf3daa1feb9ebd6fc00f84d552fb806f5f5405ebac203f097b89b8","ssdeep":"","tlshash":"daa0244530471400c04dc1504d13fc00041010c7034fc50435d05d30d550440744331f","size":68,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-05-09T07:35:05.913183Z","times_seen":114824,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/ad-inserter/js/sponsors.js?ver=2.7.31","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"169a5dd1261e0d434162d1af68acbbcd","sha1":"c18d59ed069049b012a61a8e6b958bfb25bc1b71","sha256":"82b3dabc6615507ef352f36aa08a805d409e883f8024fd01fda43175b6b67b38","sha512":"92328fe0d3e85e7eefecc85f4b6e2882c6cd15981bb75d877ae00def78c6b6d3e54b0151322fa04a579c7ddf02a90186860f37a9c7f0594130dc12c014297002","ssdeep":"","tlshash":"d77000c080a2802888200280830a3b2030082300880e00083080000820202838c880c2","size":21,"data":"","first_seen":"2023-08-13T04:23:46Z","last_seen":"2024-08-21T08:54:44.383123Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/sandbox%20eval%20code","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"23c336606ee3a6d444b305153fa0e2e2","sha1":"473a2111970ae2a94b373e656d20c4bd4184d703","sha256":"305375d5052f6a14434d2d338f852f0f4f04fb26495f88a5d62b6afde2e2cc60","sha512":"ab0470885483545a0306733fa3a067239e299e0b47d35f9769a763f65ba5e9d928ee364a66f9e577499ab0c452f34dc7a3a48a774ce3d09e56fd88d1989e84ba","ssdeep":"","tlshash":"bbc02b137750017d2f1016b0b9009003a1c923005eb78001f006001f2040eae88dc180","size":128,"data":"","first_seen":"2023-05-06T01:21:43Z","last_seen":"2026-05-09T07:34:37.580658Z","times_seen":73897,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a55a8928cbca5bfac5a66c1723452e6","sha1":"9f786632275f60fbb585193fa762b0dc5e711a51","sha256":"7528db72a98a32805f731cc62e8a47bf9218f6e7d02183d9c77e73868e8884a0","sha512":"b844af86edf5c3c3b99d60b75a654047bd5b88ee3a692f53186c3b8d3d2a45503c60b72e6aa9a1034cbc6508de4c6162f1132d30c70de23a5a49a9b40e06bef9","ssdeep":"","tlshash":"42e02de90c81b7990cb74c6388e2c3f1d2be0c1b778048b63bf20c2600c67b40443e15","size":327,"data":"","first_seen":"2023-06-05T20:48:48Z","last_seen":"2024-08-21T08:54:44.416758Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5aa36e02ae7d557eaba143cc397773c","sha1":"05008e746819697f7ac08c933a7bf6f20cc5eea7","sha256":"43babaf4de1de33da55279bda0bb6f4277604279b909e4fd329634617f88aed0","sha512":"d3143806835dbbd83d9dc36c351ffc1287ff363b5d98780d66ee092a1dbb236a62190113db45e07ad23ded667cd861054761fa7a5cf2b401262a489568ccae84","ssdeep":"384:/f0dGPETYW3dQUxWGaw1lr1hpm9NuMJ6dasUzaWIDIBznqeANSVaAWz+CQHxE+5U:H0gPYW6TjZ0I","tlshash":"7fb2dacad23108a112567b7da4af9b9de05fd488b37218c43ec305ade5cd8707db26e6","size":24947,"data":"","first_seen":"2024-08-21T04:41:52.563962Z","last_seen":"2024-08-21T04:41:52.563962Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/themes/posterpro/foundation/js/foundation.core.js","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e78b1db7d662e95ae8c3506146b080a","sha1":"9f1675c87a306e4dd45f84d0b7ac484ae506245e","sha256":"6e79424f448b401656e2384514c9332a4baa6ab4d458ba048655e01f4b1c60f2","sha512":"5daaf41da784eddf054ce3456a5518ff17c0159ee7950f08fa7285adf10175b5e93f9804bb7e0f6aa418e1995c333650f3b5447a65fcf762bac11cee2f05b71d","ssdeep":"192:qsW5PVf0d6j7ZC9wgg/Pr7SFAiigPNECtLBulCqiR5DN0gB53RNHRkhg9lteAyd1:oGAjpTehEhOcQmANHk97ecaSpMqgGJ","tlshash":"4752204d2aef2163443b3079039f1094b17c96ab6619dd507c6da3a41fa593583b3fec","size":13696,"data":"","first_seen":"2023-03-08T15:39:55Z","last_seen":"2026-05-04T07:51:11.671197Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pagead2.googlesyndication.com/pagead/js/adsbygoogle.js","fqdn":"pagead2.googlesyndication.com","domain":"googlesyndication.com","tld":"com"},"ip":{"addr":"216.58.211.2","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e9e391ad98fbe1b2de0b7b4fa9ca904","sha1":"21d7771223e8286a06ad878af425094a40de32b5","sha256":"1468d954f25ab75355f3c0f42cd9c84efd64a67922c47d3b69bdb6d0eb399e69","sha512":"defa1ba5ce4193014a4657fe394734634087d66c9db8024778ea2c3a59be02e38e0077725c7d000ff7046bea23070594f8942446c6068b4032d329d0716532b0","ssdeep":"","tlshash":"f63197075511c5fa022195d6ea7a3e2e61337628523440a8f238f23b23770cbf3d1abd","size":1648,"data":"","first_seen":"2023-05-06T01:21:43Z","last_seen":"2026-05-09T07:34:37.593572Z","times_seen":71907,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.3.2/wp-includes/js/jquery/jquery-migrate.min.js","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-05-09T07:37:53.765496Z","times_seen":742696,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/themes/posterpro/js/skip-link-focus-fix.js?ver=20130115","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"88744222f59f4700c6bc9212e12a653c","sha1":"df0bf43d60bed605eabbcb2776e0fbb46f1d1c05","sha256":"4b179f8204186f3aa954f47cd81dbe86bf89c08edb8d5341b8e0697d99e35073","sha512":"3b1c0f5328e75d0264f9378c83d6f04d7b55b512c8d3a4cf282848dd69d6bd7910c98efed21c640140a77a54c24e2d0338e2695381b3fa48aecc9bd594af29c1","ssdeep":"","tlshash":"471199ab7234577c0d9a7b9b0e9f164878ab2c81b811a50bb45c7849432cf56c27ff78","size":880,"data":"","first_seen":"2023-03-07T12:25:13Z","last_seen":"2026-05-09T04:21:14.222449Z","times_seen":380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/themes/posterpro/foundation/js/foundation.min.js","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ed39eb42c8c450b59a24bab9cfa7fae","sha1":"7fdd3fee90709f703fac533b6061864fcd7ec206","sha256":"35ddb1ce73a4ac4f4792b00c8b8c56cbf857910ada5e2a0183d898b01adc16bb","sha512":"68f64fe44150adb2a9aaec794e1fa8af4403092fa86f9b98b1c996e51837bdb85e79e807b728f5598defb19ba3a8b3574138c03d34fc840d9029cceed2531c9a","ssdeep":"1536:RbN61LRiPamo+aCWsQC0ZNDHbehVk9c09DoeVOk04oPMgzv1zLVmrVegW:RbZPs3mS4D4MMgpQwgW","tlshash":"6dc3855e7251223246efa1b6152f060e71335b387542849cb179ceea6eb8d4832dbf7c","size":123510,"data":"","first_seen":"2023-03-07T12:57:57Z","last_seen":"2026-05-07T08:25:14.61275Z","times_seen":150,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/featured-image-from-url/includes/html/js/lazySizesConfig.js?ver=4.5.0","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"e65cb4d4cd399c1b09798edfcea1b41e","sha1":"49a2a4a502ac7e2c15727c3b7fd6e3d9d5960ff2","sha256":"d2e0e4ea817ec2075d8ad25c70e9c8e124df393088286cfe1e75dd56069abc2b","sha512":"4552173d774431c069d306c387da8b9bcf3f71a00c5453fbc1483362bb8a42ce73e123b8f616b351e37a1edea484c1555c53e6b96cb86d11db335a155506c070","ssdeep":"192:9ti9tr2idQ9KLAtgZLgCB8piI+C5SyHQMVTtei2lm:GTrfdQwLAahgCCUC5SyHQM+D0","tlshash":"e102432b302c51f9da732ee9fffe0264746bb251f12191057e1d2406bb984687570abf","size":8005,"data":"","first_seen":"2023-03-29T23:25:58Z","last_seen":"2024-08-21T08:58:36.135896Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/featured-image-from-url/includes/html/js/image.js?ver=4.5.0","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"87015559c535c9314bb1a8d6ed05597e","sha1":"b9e3b22a2bd7457d044551d5126a29bae25489a9","sha256":"e5903bfc201247ffb215a9c8ca6b66cf2b77d63dc7c7953937619535dd394a7e","sha512":"74247d596dd47219c7db120b8d30a12fffbfae88155bd5281ffabe68eefcb33bf6bfe88153306844127902d82d83c472a1f9f8e59024c5ea7603bc1611efca28","ssdeep":"","tlshash":"bd81962b30a8a1b8cd733ffdbbfe55653216315021565328bc1c66163bda22463a4fbd","size":3949,"data":"","first_seen":"2023-03-29T21:02:17Z","last_seen":"2026-05-06T18:32:21.650631Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.3.2/wp-includes/js/dist/i18n.min.js","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2c4e2a562e06e1cb22293a5b920aca6","sha1":"a7b5a369ac4883f1ee7fa701b238d20238b675ca","sha256":"698e93fe491cc7bbf07a470579a33dbd0db53c19142b7be41ebfd39a23aef11f","sha512":"7117e879a8a4d8c8e1acd1a34247a7cf420128da970ed42975d6a04665ec571dc388c62fc3b50deda0b9e896f599d56ffbc28b25a45119cd79f5f45e3e58c178","ssdeep":"192:+mBU3rRetT+w48Lq55J2iBYDee8egqF+i47HgxOwUwAIfYV:1BU3letT+wnLqNJBYDeedF+D7HgvJfYV","tlshash":"7d12c5edb0d6f056235320f044bfb804f136a99531aa98e0db90d5e6bd708d961b3fe9","size":9445,"data":"","first_seen":"2023-08-08T23:25:56Z","last_seen":"2026-05-09T05:35:40.969283Z","times_seen":20372,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-image-cdn/dist/image-cdn.js?minify=false\u0026ver=132249e245926ae3e188","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"328b8123661abdd5f4a0c695e7aa9dcc","sha1":"4164f78bb52e9f2bfbb7ae5fd519b4638063c1f0","sha256":"27dd9b075cc59cf5f3c0f6ee075f4bd113782d81ce30a4f16aac669ecfdc4fa2","sha512":"69824b237c9b22bf0b355ec684ff5db7fb13090421ab21ba4a167f453b598b2550b04d9586a9dfba619e036f6d5723fa088214a5c30831c62224e61a6c260b5d","ssdeep":"","tlshash":"85014c3a77042b3208c6e2a3a87e73957d2760363a4658b8291cfca6cc51d561175da9","size":701,"data":"","first_seen":"2023-05-10T12:45:08Z","last_seen":"2026-05-08T21:08:58.058205Z","times_seen":3537,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7012fa7e75fe28fcc9b228ded4368035","sha1":"0c4396a77c2dc7dc4670959a22acc0471e9470ed","sha256":"ef978a913f89521ab697a42f15c43eaa7ca59835ac778d9e08752055abc77395","sha512":"5661ee3ff8b140a179ce7ee6b46b22de5263a47c1f5b38e07fa08fff3e2ecede4a96dbd94a784ce8c721e38782af31352dfc303f6b427fda530c3eaaf24df7b7","ssdeep":"","tlshash":"3fd05e103cb62c31119e965475e061823d9d1a2131a15a49f248cd283fca550b2ccd6b","size":244,"data":"","first_seen":"2024-08-21T04:41:52.567297Z","last_seen":"2024-08-21T04:41:52.567297Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e86b1520f7598237e448bc6d8d83a1c6","sha1":"e42db4434016f58b4253ccde3cc307d949bad693","sha256":"4f5bd929e879e885805132ff458723d1f141dd146f1d83b59ee8119b556e6c6e","sha512":"c95ebfb9a22249d6abf47d765eef4f96307c775ff875950c567029a65904e3795f6210cfade4f8af02a6518afcb8bee928fb66306fd5e34c766ffb619d4624ec","ssdeep":"","tlshash":"7661a8786ed550396843383f3aee63042c62810f2405dac7bd0db6940f72b9919f6ddc","size":3288,"data":"","first_seen":"2024-08-21T04:41:52.568784Z","last_seen":"2024-08-21T04:41:52.568784Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a23ba5b3c2d71c61ef5b40a4b5d84a17","sha1":"8732a5e5f3d3bd88ddedb1cd24c2d17363e019d0","sha256":"c2ec440a15201b83bbb8914f9e52de7f4455e44a992f6ab761b5bd62f3a1045b","sha512":"6eaad20cd9b49550d1475ac9c95c1bf1cab244b311b291b5ef50a1591340c6d9bb7d46a2d7382bc5c8e87375ed9db6e6b3b37d1bbfea77b7d6a7cb0b4ca323ff","ssdeep":"","tlshash":"1ec02b60af44241b6d9b3d4f0f8203f0e8cb0203298c0ae233e0c9c37042313c040440","size":145,"data":"","first_seen":"2023-05-11T18:42:32Z","last_seen":"2024-08-21T08:54:44.416211Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"banquetunarmedgrater.com/advertisers.js","fqdn":"banquetunarmedgrater.com","domain":"banquetunarmedgrater.com","tld":"com"},"ip":{"addr":"172.67.196.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T07:38:17.554889Z","times_seen":14881960,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"64.233.161.113","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:gr5xyIhZ6pQ/d/bTQcFeqZVxNnR36Hc9lDJlQC8dA9Sa5fLtUB5roNiEP:gr58IhZ6pg/bTXVx9t689fN8INtEONig","tlshash":"7ea1cd9b39e650310332bfe91bfaa559b22937605220c161be0c915b7399233d3e1bec","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-05-09T07:38:35.2429Z","times_seen":855857,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"dab1184244d47ac25667c940eff90dfc","sha1":"6cd473b92e1956bd305f0056a46f18b6a4dfd80f","sha256":"071ab71aea40b26ed6bb74deeb4fb203bd381f3e418588089f4a46d36b3daa07","sha512":"8bba966fd42b5fa42535460e6721033f827c43e4fd5b2ac3e4dfb6e95c86903e133f02f0ffecb749c29cceb3de8b8a32439a3f0b8cc8d2be68a9d15ede917bdc","ssdeep":"","tlshash":"98a02200f0ff288000a002b0b2ac00c2bbc20a800b300808328cca0c3fc20a0a0cceac","size":70,"data":"","first_seen":"2023-03-08T07:05:06Z","last_seen":"2024-08-21T08:58:36.182776Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/ad-inserter/js/ads.js?ver=2.7.31","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7d8aab20ec0137a23e4ff03411bd06c","sha1":"bd7e901bbf5968d13abb3dee762244715541bdfe","sha256":"651cbb53c3e67a452582c597784a988f2ad5db132c709c279a23ad74b9917448","sha512":"570f22ab69647d211bebf6b84129e2ade1dcf6ac390f584beab1e56489e7839fcee52a1a678e410cb313f2a03bf8ac2d1df1f1d2c33fb1494ed40b6ceaa394ba","ssdeep":"","tlshash":"4ab01214352f1311c11c68cb24bce7e839f4606d36711204adddd93de5d9da217a5db1","size":110,"data":"","first_seen":"2023-03-08T16:02:15Z","last_seen":"2024-10-12T13:50:15.160718Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"friendshipmale.com/sfp.js","fqdn":"friendshipmale.com","domain":"friendshipmale.com","tld":"com"},"ip":{"addr":"104.21.234.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d0450888479d4ddda305bd96206b240","sha1":"5b4595aab1cd3f854718e05db9be0c65a12ab2f6","sha256":"44de073e74ff24c6b1c0fe1f3ac5b33d793560e85ef24fb6ce89e76c2cf90af6","sha512":"3d9f8990f7fb6885869efd08dabd9e7e74202cc9531b9d4e5ac67d8f10ea13e6b5a86e77a82b03e6e666c2d3c9bad14254c9d2ac9c37e0df016eb5906ffcc6ca","ssdeep":"768:MpmI29BZeWZssERU8jnQY8vhqdNUHHiVAWnNniZtyrXGQA3STN+hnnNYJ/dLbO/x:o+ZfZBh8jT/0uLp5OpSoTjAdJxyxua","tlshash":"4883b7807fe0648ad3979f77b71bb4c9f8aa385a7dc4048bc601fd80796662ad9f1530","size":85471,"data":"","first_seen":"2023-08-25T12:30:49Z","last_seen":"2023-11-23T01:47:35Z","times_seen":6642,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/add-search-to-menu/public/js/ivory-ajax-search.min.js?ver=5.5.2","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"51480f0afb0a30743ae59a3455633c75","sha1":"2b46f094cb87015fa342da2bf1767413ec5c92b5","sha256":"108cd01e5eaa34e9942ca8af9f8fe70271d3a3a5028fa085c628c162c3706d2d","sha512":"b69c1d8b5f4d341b1acf774b7a7fe1d9e2ddbab186fb11f5356882b35e203361f809c2c53c73aff3be25fb7f2d36bb4a0a06965abe468b9b54eabddd3e715394","ssdeep":"1536:85SHtSPqWCF1HoJtfJnRRqRg+DT5eNC8cQBiDzd+QfhanKrHldfUN8D9ZvZ6iUgP:ftI8mJnetDT5EC8cQBiDZ+QfhanKrHL/","tlshash":"cf63e9d97282b4b742f3a1aa502f250bb23a6464781d4098f93dd4fc2cb9c8d9177f78","size":67604,"data":"","first_seen":"2023-03-13T14:31:51Z","last_seen":"2026-05-08T02:51:19.000635Z","times_seen":749,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/cache/wpfc-minified/6zu0bqmr/5qz0r.js","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"351390b839bf683126e78afb44004636","sha1":"5631ca683d75c60eb3dba2bed734716accbe5426","sha256":"f9a6294ee0f29b05710d50c6f338bbf5465c1aa22a5d0a7a73e99bbe0845d4b0","sha512":"cdd5cc960f6ddd84f20df1f3c704c3d4fd67df6775744d47a86648bed42800c97de9d76956b694109f0c791ba9c77eba4c3fcfcc5e2d95dfae3b0115debf0390","ssdeep":"","tlshash":"cf515422f2e4613983ad1724c26e731e547d51cecec749abe2b00931aefbf445c47a68","size":2817,"data":"","first_seen":"2023-06-26T20:11:26Z","last_seen":"2024-08-21T05:56:53.89928Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-V5K7GYT3S4\u0026l=dataLayer\u0026cx=c","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d0614863b8d50b7f86f3f6870159f2b","sha1":"f133f9b814e40a2f4f3e93e8e51fb9457c191abc","sha256":"4d15bd04f337f723d12a5000f3a3ccdad8d9986089c7a20eab6d32580d75efd9","sha512":"55f71ea9ad87ebfbc166ec2906836b89d3d0df03d30d95db56cee5d96f21e5cd5a2dc489b39b467790a6992e33cef193149eb4526d14ef22b2af4cd3fdd79729","ssdeep":"3072:fsQToVvB9JuSmcyiGCqoy+mHMvD+wgYoLXgUnt7aZNawfCsVtZ3FaXXXNx:P89ESmcyZ1odVoLXgUtcQwfCsVtV0XXD","tlshash":"7d2408d973c2706682a6b479503f014ba5bb6da3b45cccd8f189c9d42eb4a89417bf3c","size":227277,"data":"","first_seen":"2023-10-15T00:59:57Z","last_seen":"2023-10-15T00:59:57Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"definedbootnervous.com/a45922fa4966955cecdffbdde5347ae5/invoke.js","fqdn":"definedbootnervous.com","domain":"definedbootnervous.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"933e24644fe6d434048c2e4172d045b6","sha1":"05a1e96a0caaeccbb888378ca989c3ba43fc319a","sha256":"e20624a1a9ecd3eec6ae77fb643d30449721e290651f489deab30918947dab8d","sha512":"d36a6c2265b7ebe361b2159fa51228489ac107fd04353452e6cca9859b6e970800d5089e736818040d8031b9b3d0b23f34f95796cc9542f1e74953b987f272db","ssdeep":"768:BlbM/sa3zmX+AeP/OCqV/Gkg0LHJm1jtwTpUQ52cj6:BkqvCqV/GP0bKqj6","tlshash":"b0d295593d80e84e17a78faf733bb4dceade085dbc05480fd116bc5069a6627ead4930","size":29697,"data":"","first_seen":"2023-10-15T00:59:57Z","last_seen":"2023-10-15T00:59:57Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/add-search-to-menu/public/js/ivory-search.min.js?ver=5.5.2","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"3940eede2b6841663dddd9e946dec11e","sha1":"ccb59e18338a06a5f0168be0bd1677710f6d7bd4","sha256":"b0fadf75681475e975bd2bdaceac6c08e8f5ef06f9a1c7fe9f3f7a571f5bc935","sha512":"53abfec5d466b05b21776280dad09cdcc6b985a813c8e47abd7f2489c80673914cbb1b9e400f319357dd0e6c3c1c663539eafbe2c08fbab0a01c4a23f1479836","ssdeep":"96:g5VdwhZhc31ZAph+87FLccnPOaB+FLPlkXLGLp:fQnApTxDB+xPlkbcp","tlshash":"98a1cca4f0c4ee8702f60bfe26e6145117291863973d162035de806ddcb8e8842fabbd","size":4591,"data":"","first_seen":"2023-03-07T01:07:29Z","last_seen":"2026-05-08T13:59:49.310816Z","times_seen":538,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/lazysizes/5.3.2/lazysizes.min.js?ver=6.3.2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"45bacd312d5098b4b59f563d8756c15d","sha1":"fa55e2cff078381e5365d95782a95a787d0b7192","sha256":"3d9120fa621da6d613c1698b7014ec6bdf4620366e8f2b7b547059f4b6f6272b","sha512":"ab9f37a692ab09173b3793b49f69f352227eb2e52fec4b752467a5b386d739a30541c6a63e4f478dd5249d9bae16304db3bb6c32e69d81ee64f51cdd98efb519","ssdeep":"192:OQC5XtZkovHIdcCxoE6FxqIvqwk+BgKyVkM9InkxbI2TEK+DtZzAPOj:98kNdcCxT6T9vqwk+yKGkmxbRR+DtZzt","tlshash":"42f1c49f369170739edb7465427f311ea73674239c42e121e2f9d095893c86aa323f2e","size":7889,"data":"","first_seen":"2023-03-07T01:10:08Z","last_seen":"2026-05-09T07:03:28.773899Z","times_seen":12941,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":[{"md5":"17e23fb55f36c8c95e58e35b9010aed7","sha1":"02f479b31b43374ff7185e4e332c8eea5acb0a0c","sha256":"4eef9e5a8fbe2a94e29f9f0be8a85b2b9f5ce1f9e122f5c0dcf3d07c5b968e1a","sha512":"c9115dac2ab6de744279b6839698fd432843833d7ee1f1521107f4d5f201893e5a260f39e2304244c1bc16d3b00767b6fb4bcdfb57f05b63692fb63677f6129c","ssdeep":"","tlshash":"6341fbb8210a143599c32d7b3ecd33041c26849f142aa3d67c1f36c407a369d27b7da8","size":2117,"data":"","first_seen":"2024-08-21T04:41:52.573922Z","last_seen":"2024-08-21T04:41:52.573922Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"aefdcff39cc3022e2a53a41f2fad5712","sha1":"4b64da72af2306df83f263fd299f30ef0846abe7","sha256":"ab2017eef56bba69f2be60f95013b826534f2e68fba3547f45fe7b725885ff7c","sha512":"fe22678a4ed413d371b58bf111241f70b4a91f1aedd5c701792cc499d103fd55d4a71343f45ffa21642c6a26f04b6b0a5f262cdbefcd4ef0eaa990e2ed800650","ssdeep":"192:yxzuNXZRXNTbMjx09vT3VSPiPsW2FS4WC/FprtFpHFpN8k8Pgf:yxzuXZRXN0je9vT3YPiPoFS4WC/fxfHJ","tlshash":"aad1d96fe34324b9cdab705ee88b83a83a31d5126b0354e5959cd4511824fedc53ec77","size":6266,"data":"","first_seen":"2024-08-21T04:41:52.574788Z","last_seen":"2024-08-21T04:41:52.574788Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/chp-ads-block-detector/assets/img/icon.png","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:34.709Z","timestamp":1697324374709,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/plugins/chp-ads-block-detector/assets/img/icon.png HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 15671\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Sat, 15 Jul 2023 09:29:33 GMT\r\ncf-cache-status: HIT\r\nage: 10108\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=sRFiBBmhYfOZoo1ZQhopqr2hcA%2BiMKLvr01WrDWbBv9eOFKKjqNN6QMa%2FAsm9ejLZnjPT1lEh8W9C3dH%2B8AwupAEcd1Ly6lJYSTJ%2Frz49Aihj%2FQJ30KYpSGU1mc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 81636ef9c802b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15671,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 350 x 350, 8-bit colormap, non-interlaced\\012- data","md5":"134fce13c189ed0e483a1bddb6406204","sha1":"eed559ac52e9731c56a1fb03eb94fc82e551bb66","sha256":"723597ec6e9461e79c420faf0454170cf6f9243246a4fac3cef5f05a4b5be791","sha512":"35faeeb216f26aff788bf63513b42fae25806eb125eb90d07164ad892ede5dad03b2cba4ce87941ec318dfa62a734535dbe1cf8c3bb68dbfb2fba1a2be5bbfc3","ssdeep":"384:lAnEo7Jtm6OpNKIwJKVfrlB7EIIaTgHLrDAAebZq7KHIab:uE4oKIwJiD6B/7YIab","tlshash":"c362bf19fc40ad604415ebd66eeab967b8b71eb84dd5b480a9edb1020c701f1cc5f493","first_seen":"2023-05-02T15:01:23Z","last_seen":"2026-05-07T20:32:38.194208Z","times_seen":704,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/ad-inserter/images/ads.png","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:34.713Z","timestamp":1697324374713,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/plugins/ad-inserter/images/ads.png HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 95\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Fri, 22 Sep 2023 09:31:12 GMT\r\ncf-cache-status: HIT\r\nage: 9614\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=A%2FonDmEiN5S23%2F3ffaqk5fkAvTf6luqj2uGi8dxTzK3gYfwCdJcI85nVTdWa8qN8lx3iT34xICXyFRGOnF6kgLxejcIG73EPS5GRufG9QzNGO94RcJXvAA3Oi3I%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 81636efa0863b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":95,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 1-bit colormap, non-interlaced\\012- data","md5":"71a50dbba44c78128b221b7df7bb51f1","sha1":"0ec63b140374ba704a58fa0c743cb357683313dd","sha256":"3eb10792d1f0c7e07e7248273540f1952d9a5a2996f4b5df70ab026cd9f05517","sha512":"6ad523f5b65487369d305613366b9f68dcdeee225291766e3b25faf45439ca069f614030c08ca54c714fdbf7a944fac489b1515a8bf9e0d3191e1bcbbfe6a9df","ssdeep":"","tlshash":"fdb012e323704c36d1014173523c92138b22c31ca14d19438001fc280c63305ccc879a","first_seen":"2023-04-05T13:40:31Z","last_seen":"2026-05-09T06:43:03.680059Z","times_seen":19191,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/images.vfl.ru/ii/1696250976/cac8d0a1/39022607.jpg?ssl=1","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:34.706Z","timestamp":1697324374706,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /images.vfl.ru/ii/1696250976/cac8d0a1/39022607.jpg?ssl=1 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 44016\r\nlast-modified: Mon, 02 Oct 2023 12:52:59 GMT\r\nexpires: Thu, 02 Oct 2025 00:52:59 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttps://images.vfl.ru/ii/1696250976/cac8d0a1/39022607.jpg\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"88dd70ee97fb240b\"\r\nvary: Accept\r\nx-nc: HIT arn 2\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44016,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 549x700, Scaling: [none]x[none], YUV color, decoders should clamp\\012- data","md5":"75c6cf85f705a0e0864e59824ab2c735","sha1":"cab75b114fd4bfefe79a88008824f651801bd557","sha256":"8e2a80cbd5c939e48360b46716bf1cd7598ad513f525a34ae9b2a3f549c0d18e","sha512":"4367410fa34cbeac02a69e7b75763679013e222e7636b631e0f93a59c11a6d863b18108fa812e757105aab9fd20cd0ddb913eb36f008efcdd22587f3bc56f207","ssdeep":"768:QpZYK5NgF5kABtTUFPcSb9wLAf/oPynfGrVIP5n4ZtMwduCsFJDpTV6BPTsQhhd:QpaKfqdJUF0U9wLG/q8k6utjdT0J1ToH","tlshash":"9113029d5647e44ae2c9e309883500696d548bdfc134278fa4a89f2fe2971f4ec89fc7","first_seen":"2023-10-15T00:59:57Z","last_seen":"2024-10-18T06:17:20.880105Z","times_seen":37,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":9,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/images.vfl.ru/ii/1696928090/cd438cd8/39032848.jpg?ssl=1","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:34.705Z","timestamp":1697324374705,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /images.vfl.ru/ii/1696928090/cd438cd8/39032848.jpg?ssl=1 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 42380\r\nlast-modified: Tue, 10 Oct 2023 09:05:01 GMT\r\nexpires: Thu, 09 Oct 2025 21:05:01 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttps://images.vfl.ru/ii/1696928090/cd438cd8/39032848.jpg\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"1f81867bb8a4a38b\"\r\nvary: Accept\r\nx-nc: HIT arn 1\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42380,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 549x700, Scaling: [none]x[none], YUV color, decoders should clamp\\012- data","md5":"d4928f7b25fded3f8d8a950e9d163f32","sha1":"d3c246313c0b85eb96b9bea998baeb1c8da5a7c5","sha256":"6590cb89e20fcfe488bf87db73a0a86d040513f68b0711e6456c0a0da091bce4","sha512":"e88d9ee9ea4c46458178cb000e716748e2e2c45c6b04356cd86f3a0e127ec575a774e939d62f1fc04f635153fc63950f30f67d47856d71da844890057899e8d5","ssdeep":"768:sLMJ3dKFj6tWXus+MGHnus7MFtTTUUX4TkR+r3+VfvNLa5WD:EMJ3U5Tu0GDExTNSkRbZFLa50","tlshash":"2c13f1e6125c5cc46ce0b57d0796f42f4c5265ff8ce6e7388f3a14980294887c9a0e5f","first_seen":"2023-10-15T00:59:57Z","last_seen":"2024-10-18T06:17:20.878447Z","times_seen":37,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":55,"dns":0,"connect":0,"send":0,"wait":9,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/nsw2u.com/wp-content/uploads/2022/07/nsw2u.png?w=216\u0026ssl=1","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:34.704Z","timestamp":1697324374704,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /nsw2u.com/wp-content/uploads/2022/07/nsw2u.png?w=216\u0026ssl=1 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2836\r\nlast-modified: Sat, 24 Sep 2022 18:25:42 GMT\r\nexpires: Tue, 24 Sep 2024 06:25:42 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttps://nsw2u.com/wp-content/uploads/2022/07/nsw2u.png\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"0101732b85ce3bdc\"\r\nvary: Accept\r\nx-nc: HIT arn 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2836,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image\\012- data","md5":"948c6dc3d3c1e2e9d315418f6eabe2bf","sha1":"ed06ff1f0994f3be033f22d808241d3fcca9d1e8","sha256":"3a2e29960ba6130c22ce96089a7592ae91b6a0d6a11595a10daaa9662522ad0b","sha512":"a9353ab569c698e8d8039479e5ee90a5099f6d256c18ee7892be3067bac65bf09f0a4db4cf73f3a6e008a81b4b9303c6ba962e428c5277c6e585c940fb883f81","ssdeep":"","tlshash":"93513b70855766f62a3404c6296381ab5c6cc3eb9c89dd9c810feb517a761fb43ed40d","first_seen":"2023-05-11T18:42:32Z","last_seen":"2024-11-20T09:31:06.886056Z","times_seen":27,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":18,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.67","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-10-14T22:59:34.790873887Z","timestamp":1697324374790,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Sat, 14 Oct 2023 22:59:34 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"c6586490ae5e9261b5c987e8e1dafb4d","sha1":"6d58c98401fc33ed35507a807b424a38b66e3989","sha256":"0955de17ff7d32a2ff91d0ebd1fceb8784f371ff5db206bc80b87ea50ffe3f21","sha512":"8224fe360cf281b97efe94c8c6a657d0bca8bca8b368f18250351d320f18493f68efe7c352e082b493fce11d61a1643dd03b2a3819b9be4c9bd41b4b90730a5c","ssdeep":"","tlshash":"","first_seen":"2023-10-14T18:00:51Z","last_seen":"2023-10-16T05:06:04Z","times_seen":2684,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/images.vfl.ru/ii/1679750390/4e99e8e1/38826367.jpg?ssl=1","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:34.707Z","timestamp":1697324374707,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /images.vfl.ru/ii/1679750390/4e99e8e1/38826367.jpg?ssl=1 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 31608\r\nlast-modified: Sat, 25 Mar 2023 13:28:37 GMT\r\nexpires: Tue, 25 Mar 2025 01:28:37 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttps://images.vfl.ru/ii/1679750390/4e99e8e1/38826367.jpg\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"5948b74d64865dea\"\r\nvary: Accept\r\nx-nc: HIT arn 7\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31608,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 549x700, Scaling: [none]x[none], YUV color, decoders should clamp\\012- data","md5":"3dde27351094fd110611b7099df7612d","sha1":"1f8633afc647ab96114d9cd7b87b2e1bd9d73fae","sha256":"f7118208621987432e4309b2429b3ca26191166ec2b5b4dfab15204958f9de33","sha512":"96b6568af24f1e641cfbbad0e54af4557c627116520960ef05dbe83c0dacd776ece683bac8b4af35361bf87397759956384def5ee3dbde64b0cde7430de653e1","ssdeep":"768:xOr3235dDXtgUT6KD4g7MNGNarQArZ9XuudeEn3WYadafzNo:x82pdCKDD7AzrQHImYadCo","tlshash":"02e2f112786b5f2b11283a0b3c4fb9f74be31889d2d2bd01705572b91d6dc2bdea1698","first_seen":"2023-05-06T04:59:28Z","last_seen":"2024-08-21T08:54:44.325561Z","times_seen":15,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":52,"dns":39,"connect":11,"send":0,"wait":205,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.67","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-10-14T22:59:35.091296173Z","timestamp":1697324375091,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Sat, 14 Oct 2023 22:59:34 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"c6586490ae5e9261b5c987e8e1dafb4d","sha1":"6d58c98401fc33ed35507a807b424a38b66e3989","sha256":"0955de17ff7d32a2ff91d0ebd1fceb8784f371ff5db206bc80b87ea50ffe3f21","sha512":"8224fe360cf281b97efe94c8c6a657d0bca8bca8b368f18250351d320f18493f68efe7c352e082b493fce11d61a1643dd03b2a3819b9be4c9bd41b4b90730a5c","ssdeep":"","tlshash":"","first_seen":"2023-10-14T18:00:51Z","last_seen":"2023-10-16T05:06:04Z","times_seen":2684,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/ad-inserter/js/300x250.js?ver=2.7.31","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:35.175Z","timestamp":1697324375175,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/plugins/ad-inserter/js/300x250.js?ver=2.7.31 HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 23\r\ncache-control: public, max-age=16070400\r\ncf-bgj: minify\r\ncf-polished: origSize=25\r\nexpires: max-age=A10368000, public\r\nlast-modified: Fri, 22 Sep 2023 09:31:13 GMT\r\ncf-cache-status: HIT\r\nage: 10108\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=e%2FY%2Bq3QoZrBGjJWepjXyrvQCgIhxQcG3Obt7ba%2B%2Bi%2BUlk4NsZA%2B3pdXl2wNAWWeI8rq4djIm4uFVMYviBkxwsA%2FNse0%2FB6wWPiLfLadLUPFi%2Bv5qJXo5z%2BfAUHI%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 81636efcba6eb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"e509c98a0bcad0ce8e6248ac8eb31de1","sha1":"ec5fe203df631088270b5f2b0b7a85498a2aeb8b","sha256":"352ea4dd2d545563bef7eb0ba6d6ebfe4bc9d9e51ab00d9c925cb9e103edee63","sha512":"eefc16b01c06fab4e58bf8c7df7775b5961cf31177082bec526f0ee11fbf437f31242ab01bdc1a214595c58fb424d1c26d69d9b8f37f9870059b161a579fd229","ssdeep":"","tlshash":"f57000802828a0aa803002802a2e3aa2b2880202e000000022a00880e000aa3e000882","first_seen":"2023-03-08T16:02:15Z","last_seen":"2024-10-06T09:26:03.652518Z","times_seen":26,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans%3A100%2C300%2C400%2C700\u0026ver=6.3.2","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:34.696Z","timestamp":1697324374696,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 18 Sep 2023 08:25:07 GMT","end":"Mon, 11 Dec 2023 08:25:06 GMT"},"fingerprint":{"sha1":"73:C0:B4:AB:41:0A:6A:68:D4:AE:EE:E2:11:A4:38:23:EF:D2:86:B7","sha256":"28:5E:D7:CC:C8:E8:A4:D2:0E:67:75:52:2B:E5:A0:08:B0:E3:28:A2:12:29:2A:A7:83:FE:14:F4:12:F4:E2:0E"}}},"request":{"raw":"GET /css?family=Open+Sans%3A100%2C300%2C400%2C700\u0026ver=6.3.2 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Oct 2023 22:59:34 GMT\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":739,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"gzip compressed data, max compression\\012- data","md5":"fac28ca87d50b82fb0b7412ecbea1441","sha1":"b59325228602a61931ec41c6248b549dc1a14c12","sha256":"29078b038ad8130d1b252761d2437b91e9a57a8f96dd1d79628ca1962dc185d9","sha512":"5d3aded220a77a451198a9b44f1e940f4eba2cb7a6a89d3110993cbd1ce09bbba213f7fd292b83a2c21bc7bf54366ab192a1e3974a533fd3dbcbddf2f6913d91","ssdeep":"","tlshash":"7701b5228991000cfb35aed931ec6940e22013f0a70d1f734949ba3c7caa322c68ef80","first_seen":"2023-10-15T00:59:57Z","last_seen":"2023-10-15T00:59:57Z","times_seen":1,"resource_available":false,"data":null}},"time_used":621,"timings":{"blocked":283,"dns":1,"connect":13,"send":0,"wait":20,"receive":0,"ssl":301},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:34.714Z","timestamp":1697324374714,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Oct 2023 07:45:52 GMT\r\netag: W/\"6523afb0-302c\"\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=ILRh9gT1WEEEVivsBpfpRvlL9BhH%2F9%2BDorWqfFlY03z1SRVMx212A%2FItqEejPZo7O%2BZDU0oQhT60xiNGmZ5plggRZnRfkQStwQ4xvASGfsjJ8vRTqVB6dxPk6OI%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 81636efa0864b4fa-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nexpires: Mon, 16 Oct 2023 22:59:34 GMT\r\ncache-control: max-age=172800, public\r\ncontent-encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3907,"size_decoded":0,"mime_type":"application/javascript","magic":"gzip compressed data, from Unix\\012- data","md5":"b9dac5fe9b6bb7aa7bec0232e6d1f39f","sha1":"2f42229e594dda8ef42fe66c23e39fd0678b3ec4","sha256":"88e3466ecaf8eedffd0e3c77614856f3400af1a82615e02a7b862a1e67fe86e3","sha512":"3e60f2f43da5b4bd8136bd4d3b7d563aeb121aaa1a581172bdccf9a4eb754136714c4a7cc28e9bde4ad23f8453c3c87e291d692840e0ea777a61c0772106a731","ssdeep":"","tlshash":"e6817c69fb103d81dcb022fa6edadd36858c965248d147b230b3675fc090253a2693df","first_seen":"2023-10-15T00:59:57Z","last_seen":"2023-10-15T00:59:57Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/lazysizes/5.3.2/lazysizes.min.js?ver=6.3.2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:35.212Z","timestamp":1697324375212,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Mon, 03 Jul 2023 00:00:00 GMT","end":"Tue, 02 Jul 2024 23:59:59 GMT"},"fingerprint":{"sha1":"7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D","sha256":"D9:9E:DA:D7:6F:5A:E0:87:16:F3:3E:A0:A8:34:8B:84:B7:B0:98:30:2D:18:D8:53:E6:3C:09:06:19:48:07:54"}}},"request":{"raw":"GET /ajax/libs/lazysizes/5.3.2/lazysizes.min.js?ver=6.3.2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3150\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"64942b38-c4e\"\r\nlast-modified: Thu, 22 Jun 2023 11:06:32 GMT\r\ncf-cdnjs-via: cfworker/r2\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 3839604\r\nexpires: Thu, 03 Oct 2024 22:59:34 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=FkpaAYHEekd4LhPNTNhEqiJHKfqEPEPBJcTQbFIdAqmwMJ0qHFqWHjP1qnLN%2FSO6AmrvTMs2aOAFEIB2B52XOQBvaBAp06FeqDesoplq3%2FBglUz6UEtkEBlEsH5jY3ldhNOYKqXn\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\ncf-ray: 81636efd2f84b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3150,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (7862)","md5":"45bacd312d5098b4b59f563d8756c15d","sha1":"fa55e2cff078381e5365d95782a95a787d0b7192","sha256":"3d9120fa621da6d613c1698b7014ec6bdf4620366e8f2b7b547059f4b6f6272b","sha512":"ab9f37a692ab09173b3793b49f69f352227eb2e52fec4b752467a5b386d739a30541c6a63e4f478dd5249d9bae16304db3bb6c32e69d81ee64f51cdd98efb519","ssdeep":"192:OQC5XtZkovHIdcCxoE6FxqIvqwk+BgKyVkM9InkxbI2TEK+DtZzAPOj:98kNdcCxT6T9vqwk+yKGkmxbRR+DtZzt","tlshash":"42f1c49f369170739edb7465427f311ea73674239c42e121e2f9d095893c86aa323f2e","first_seen":"2023-03-07T01:10:08Z","last_seen":"2026-05-09T07:03:28.773899Z","times_seen":12941,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":8,"dns":3,"connect":3,"send":0,"wait":9,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/cache/wpfc-minified/fhg2umku/5qz0r.css","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:34.698Z","timestamp":1697324374698,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/cache/wpfc-minified/fhg2umku/5qz0r.css HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Tue, 29 Aug 2023 11:06:03 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 9614\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=a4MR4KhJWOD%2FWctZ%2FxC%2B8dNw7ffgcPeyqbzYUYFz5CVlJgkgCeTXM7YxxlIrZ4yqOAzPqTrKpAq2RgfvwyM4w0qqBFylLQBv4U%2BaID19mpwjpG6A64TzFViSg%2Fk%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 81636ef9afebb4fa-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30715,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (34393)","md5":"d7b3559e5a5b93a95b6de98541911a3c","sha1":"fc4bbbe7374a33a2af492895014b8a73db4c81f0","sha256":"414c7164bb91e068a1b3dd4f7465890fbe58a85895654f7212386cf36f54056d","sha512":"7956eea07ea76f0c44a79df1c7bb5e6976815ae2df4d6a202daad0a01eac1f6eb5676c27c5fc959ba085f7455bbb5815be049e0b92a7329a3dfca8a5ebd98f29","ssdeep":"3072:XTFiS22l7pAw+v5/PonJPzpXDX7R6S3zQhJeK136Jg3PLTVE1o+pAUcSL4xz6E2v:oS22Z3zQhJeK136Jg3PLTVE1o+pAUcSh","tlshash":"58e3d5b2e90815c43333c54bbfd2b3a82235f239e5024ea9f45f686c8ac559516b3f9d","first_seen":"2023-10-15T00:59:57Z","last_seen":"2023-10-29T19:39:38Z","times_seen":3,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/lazysizes/5.3.2/plugins/unveilhooks/ls.unveilhooks.min.js?ver=6.3.2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:35.235Z","timestamp":1697324375235,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Mon, 03 Jul 2023 00:00:00 GMT","end":"Tue, 02 Jul 2024 23:59:59 GMT"},"fingerprint":{"sha1":"7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D","sha256":"D9:9E:DA:D7:6F:5A:E0:87:16:F3:3E:A0:A8:34:8B:84:B7:B0:98:30:2D:18:D8:53:E6:3C:09:06:19:48:07:54"}}},"request":{"raw":"GET /ajax/libs/lazysizes/5.3.2/plugins/unveilhooks/ls.unveilhooks.min.js?ver=6.3.2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 677\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"60641588-750\"\r\nlast-modified: Wed, 31 Mar 2021 06:24:08 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 111307\r\nexpires: Thu, 03 Oct 2024 22:59:34 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=E3%2Bf%2FrDKR8LkGz%2FZaB13XX%2B%2Fn8ZDtStDzk7mZ3Fpa2vSa9mQtUJNtNw07fprGRp6EMjm3kUN3HojzgTHtwAJd047X5mNPDKdfYF5DWhY0XRtn56G2ZU9AzKxEaIqSAAS9RS2eAd0\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\ncf-ray: 81636efd4f92b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":677,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1845)","md5":"f6a3dd4ecbf227acbafcff33d68dc71d","sha1":"7421115ddcd5d436b89a1fd27e0cdce5a01978e6","sha256":"30b2271be76ee2dd43122d0611f8aa498b9781f4cd03904ca12e12d2e91e9421","sha512":"850ecb2006210f5ec2661e9b0f375023b3538541e66467006c60df0961cefec3843d101d964405838813b0a85659b2353cc52f8c3ec98c0fb9c77a47db7067ca","ssdeep":"","tlshash":"f041e1ee7654b433adaa24e2511fa524116730331c1fad64bf4bedaecd78ce72026960","first_seen":"2023-03-07T01:32:49Z","last_seen":"2026-05-09T06:32:14.271001Z","times_seen":3154,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":1,"dns":4,"connect":4,"send":0,"wait":11,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/themes/posterpro/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:35.461Z","timestamp":1697324375461,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/themes/posterpro/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/wp-content/cache/wpfc-minified/fhg2umku/5qz0r.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 77160\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Sat, 15 Jul 2023 09:45:22 GMT\r\ncf-cache-status: HIT\r\nage: 9582\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=1iZYKp%2BmD%2F5e2TOccybZM2Q3f0FN8Z6zGBbprB9IccIs%2BvT9Yo1wY%2BJp%2FyKdBqIOMGWZsAB6hrddOu80o%2BC3sSxAsLndELMPlU5tBN%2BkD%2Fzq69fcBJrSXM7Cs5U%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 81636efd9b1bb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":77160,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\\012- data","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-05-09T07:38:30.299346Z","times_seen":459847,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.3.2/wp-includes/js/jquery/jquery.min.js","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:35.460Z","timestamp":1697324375460,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /c/6.3.2/wp-includes/js/jquery/jquery.min.js HTTP/1.1\r\nHost: c0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 26 May 2023 11:33:35 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 13 Oct 2024 22:59:34 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=15552000\r\nx-nc: HIT arn 2\r\ntiming-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30212,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65447)","md5":"ff04dd1ef5c67998d8652330c0441689","sha1":"5e6ff5bd5240181a8bdea983837f39ac231dac4d","sha256":"5c93f77799d122fb5255ee24da285f9f228cc118cba11e6ceb2b6bda8cdf4164","sha512":"15b29b5a106ebad320aa419675e1d7415b56276ff8ec04b8dcac845630fdcaf3ee7ca7b9d614ea415d3facf065c2608ed62359d3ccae510f5527b2965c8d7b06","ssdeep":"1536:/KRUXRa8Dgwxcy2jpBNwch96SLk8Ek2BSrBGS1ia/eEk4aV2EXi8SMpQ47GKk:/u1zNwcv9qBy1HOg8SMpQ47GKk","tlshash":"6e83f8df77ca702247ab30b9406f550bf276199d684d4400f259d8e9bc78a4a823bf7e","first_seen":"2023-06-13T23:41:38Z","last_seen":"2026-05-09T05:35:40.92167Z","times_seen":31899,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.3.2/wp-includes/js/jquery/jquery-migrate.min.js","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:35.458Z","timestamp":1697324375458,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /c/6.3.2/wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1\r\nHost: c0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 09 Jun 2023 05:49:24 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 13 Oct 2024 22:59:34 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=15552000\r\nx-nc: HIT arn 2\r\ntiming-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12391,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-05-09T07:37:53.765496Z","times_seen":742696,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-262573192-2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:35.303Z","timestamp":1697324375303,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 18 Sep 2023 08:19:25 GMT","end":"Mon, 11 Dec 2023 08:19:24 GMT"},"fingerprint":{"sha1":"54:FD:04:1B:2E:C7:46:95:DD:15:A3:A0:3F:CE:7F:03:02:53:36:8F","sha256":"F8:F9:06:54:14:65:BD:06:3E:F5:28:93:55:4E:6D:97:E0:49:77:DE:22:E7:39:A5:50:C1:A3:46:6E:D7:39:EE"}}},"request":{"raw":"GET /gtag/js?id=UA-262573192-2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\nexpires: Sat, 14 Oct 2023 22:59:34 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 14 Oct 2023 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 68140\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":68140,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (4179)","md5":"f857e50bb34a2a25112f214bd2a9cb60","sha1":"8eab946abce84c1d5aebd62424c96b7b36e357f3","sha256":"70d401f1b3ca53daffccd34ed252c71b2a6218ed1182fd09fc11381625a17c68","sha512":"068bc92ba53ecee295b03dd778f3c4ecda652fb5ccf5cd5585b030e70370b94f6ce4c9d561f70cf91e0af8e0ea3f8f6eabdb5917888ccbd7685348f33216749c","ssdeep":"3072:v8ToVvB9JuTRg9y+m0MvDcwgL3LXgUnt7zIhUjYTrNr:E89EThRbq3LXgUtYeC","tlshash":"b904d6d9b393b16682a7b474543f010bf17b6d92f84cdc98e189c5c42eb4a99427bf2c","first_seen":"2023-10-15T00:59:56Z","last_seen":"2023-10-15T00:59:57Z","times_seen":1,"resource_available":true,"data":null}},"time_used":533,"timings":{"blocked":203,"dns":2,"connect":12,"send":0,"wait":25,"receive":19,"ssl":267},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.67","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-10-14T22:59:35.61961515Z","timestamp":1697324375619,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 83\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Sat, 14 Oct 2023 22:59:34 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 471\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":471,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"b383875d47cf3281cf9553fbc71410ac","sha1":"6275628318e097e7cd3a45aefbf544e3a9bac6eb","sha256":"b599aba77b5fbc4ad65fcce338306120730c4a4b5e6d358642f0045fc82a51f0","sha512":"1a0b7cebcf11e424430775c7a84d902309c59a21c3d38c48d0616857dfd23cea0f7ad40e39794f55d2e77dab7ff1dc8671ecfe211f4b0e0bc27aa37771d744d8","ssdeep":"","tlshash":"","first_seen":"2023-10-14T18:03:04Z","last_seen":"2023-10-16T05:01:54Z","times_seen":1719,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/nsw2u.com/wp-content/uploads/2022/07/cropped-nintendo-switch-logo.png?fit=192%2C192\u0026ssl=1","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:35.593Z","timestamp":1697324375593,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /nsw2u.com/wp-content/uploads/2022/07/cropped-nintendo-switch-logo.png?fit=192%2C192\u0026ssl=1 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2568\r\nlast-modified: Sat, 24 Sep 2022 18:28:57 GMT\r\nexpires: Tue, 24 Sep 2024 06:28:57 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttps://nsw2u.com/wp-content/uploads/2022/07/cropped-nintendo-switch-logo.png\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"deb437b05941c6de\"\r\nvary: Accept\r\nx-nc: HIT arn 8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2568,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image\\012- data","md5":"513677192f138c2aba3a3847c320f723","sha1":"7ce5b67d80a2c2dedf8685b08547bcc8bf012f99","sha256":"d60495bc835271423ec6445708aceb3a068ed6f2ebfd796a86c9f9e134ca1788","sha512":"148187a98114326c9eafb7c88cc41f8973ab764d84e384788acc25700f5aa841ac31fe0cb97cc7314ca0ec908f9f80e85cff9707a17b9609ab395fd46d59b406","ssdeep":"","tlshash":"86514c2b4e751c4882a936df63c3a63596382ffcc2ac3c100d08d30590b0f6868c7b8e","first_seen":"2023-05-11T18:42:32Z","last_seen":"2024-11-20T09:31:06.918468Z","times_seen":29,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/nsw2u.com/wp-content/uploads/2022/07/cropped-nintendo-switch-logo.png?fit=32%2C32\u0026ssl=1","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:35.594Z","timestamp":1697324375594,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /nsw2u.com/wp-content/uploads/2022/07/cropped-nintendo-switch-logo.png?fit=32%2C32\u0026ssl=1 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 374\r\nlast-modified: Sat, 24 Sep 2022 18:25:44 GMT\r\nexpires: Tue, 24 Sep 2024 06:25:44 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttps://nsw2u.com/wp-content/uploads/2022/07/cropped-nintendo-switch-logo.png\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"9a9a255d155ea6c0\"\r\nvary: Accept\r\nx-nc: HIT arn 8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":374,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image\\012- data","md5":"43df8a9873aa31bb000672a677ac1640","sha1":"4c1bcd8c3a797217d375df16b4bcab2d6a2763a3","sha256":"d865b1c06cbff014e7c47cf5afb4332de4c95a537f86074e001b577c50aef07d","sha512":"aaddab0086710c3284d56823caccc10831971db4819e08cf50abf99581f0071a942521d0fad5c51e7609fd234ab739ca95e11031924033d50cb68337f26e639a","ssdeep":"","tlshash":"39e0f15421705a983bd604143ab41415664228a011205f3267882589861e2b70720316","first_seen":"2023-05-11T18:42:32Z","last_seen":"2024-11-20T09:31:06.861126Z","times_seen":33,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"64.233.161.113","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"object","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:35.590Z","timestamp":1697324375590,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 18 Sep 2023 08:19:25 GMT","end":"Mon, 11 Dec 2023 08:19:24 GMT"},"fingerprint":{"sha1":"54:FD:04:1B:2E:C7:46:95:DD:15:A3:A0:3F:CE:7F:03:02:53:36:8F","sha256":"F8:F9:06:54:14:65:BD:06:3E:F5:28:93:55:4E:6D:97:E0:49:77:DE:22:E7:39:A5:50:C1:A3:46:6E:D7:39:EE"}}},"request":{"raw":"GET /analytics.js HTTP/1.1\r\nHost: www.google-analytics.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: object\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nstrict-transport-security: max-age=10886400; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\nserver: Golfe2\r\ncontent-length: 20994\r\ndate: Sat, 14 Oct 2023 21:08:04 GMT\r\nexpires: Sat, 14 Oct 2023 23:08:04 GMT\r\ncache-control: public, max-age=7200\r\nage: 6691\r\nlast-modified: Mon, 12 Jun 2023 18:23:07 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20994,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (2343)","md5":"575b5480531da4d14e7453e2016fe0bc","sha1":"e5c5f3134fe29e60b591c87ea85951f0aea36ee1","sha256":"de36e50194320a7d3ef1ace9bd34a875a8bd458b253c061979dd628e9bf49afd","sha512":"174e48f4fb2a7e7a0be1e16564f9ed2d0bbcc8b4af18cb89ad49cf42b1c3894c8f8e29ce673bc5d9bc8552f88d1d47294ee0e216402566a3f446f04aca24857a","ssdeep":"768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL","tlshash":"74330af9b7423466c3a271e4403f1007907aadd5f449d8e4b58ad6d46d38eab02fbf68","first_seen":"2023-06-16T11:16:31Z","last_seen":"2026-05-07T09:27:39.062344Z","times_seen":5544,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":102,"dns":0,"connect":33,"send":0,"wait":16,"receive":6,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-V5K7GYT3S4\u0026l=dataLayer\u0026cx=c","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:36.084Z","timestamp":1697324376084,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 18 Sep 2023 08:19:25 GMT","end":"Mon, 11 Dec 2023 08:19:24 GMT"},"fingerprint":{"sha1":"54:FD:04:1B:2E:C7:46:95:DD:15:A3:A0:3F:CE:7F:03:02:53:36:8F","sha256":"F8:F9:06:54:14:65:BD:06:3E:F5:28:93:55:4E:6D:97:E0:49:77:DE:22:E7:39:A5:50:C1:A3:46:6E:D7:39:EE"}}},"request":{"raw":"GET /gtag/js?id=G-V5K7GYT3S4\u0026l=dataLayer\u0026cx=c HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 14 Oct 2023 22:59:35 GMT\r\nexpires: Sat, 14 Oct 2023 22:59:35 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 80356\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":80356,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (5788)","md5":"7d0614863b8d50b7f86f3f6870159f2b","sha1":"f133f9b814e40a2f4f3e93e8e51fb9457c191abc","sha256":"4d15bd04f337f723d12a5000f3a3ccdad8d9986089c7a20eab6d32580d75efd9","sha512":"55f71ea9ad87ebfbc166ec2906836b89d3d0df03d30d95db56cee5d96f21e5cd5a2dc489b39b467790a6992e33cef193149eb4526d14ef22b2af4cd3fdd79729","ssdeep":"3072:fsQToVvB9JuSmcyiGCqoy+mHMvD+wgYoLXgUnt7aZNawfCsVtZ3FaXXXNx:P89ESmcyZ1odVoLXgUtcQwfCsVtV0XXD","tlshash":"7d2408d973c2706682a6b479503f014ba5bb6da3b45cccd8f189c9d42eb4a89417bf3c","first_seen":"2023-10-15T00:59:57Z","last_seen":"2023-10-15T00:59:57Z","times_seen":1,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-HS5Y0K7QPG\u0026l=dataLayer\u0026cx=c","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:36.086Z","timestamp":1697324376086,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 18 Sep 2023 08:19:25 GMT","end":"Mon, 11 Dec 2023 08:19:24 GMT"},"fingerprint":{"sha1":"54:FD:04:1B:2E:C7:46:95:DD:15:A3:A0:3F:CE:7F:03:02:53:36:8F","sha256":"F8:F9:06:54:14:65:BD:06:3E:F5:28:93:55:4E:6D:97:E0:49:77:DE:22:E7:39:A5:50:C1:A3:46:6E:D7:39:EE"}}},"request":{"raw":"GET /gtag/js?id=G-HS5Y0K7QPG\u0026l=dataLayer\u0026cx=c HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 14 Oct 2023 22:59:35 GMT\r\nexpires: Sat, 14 Oct 2023 22:59:35 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 76495\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":76495,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (4179)","md5":"a4cc62d82c9898e21e51febbb64af4f1","sha1":"a9174a05ab2a6e94e94ad62f2c7f9186d8656c1d","sha256":"d8ad7aff271a2a8195032fe31289808c48b8b6af65830e6d934a0accb9d4fe93","sha512":"aadf82348ebe3e6d3a970251736286bd2cad0319c89e39e280ff16d05573927c299c6bba623ba4acfaaa4984ba7f2c104db0f0b3c0fa8fc5373cce8c9204e662","ssdeep":"3072:CcToVvB9JuSkcyiGO0xPy+mHMvD+wgYoLXgUnt7aSHawfCsVtZ3F1XXNx:x89ESkcyZOodVoLXgUtX6wfCsVtVvXD","tlshash":"1224f7d9b3c2716682a7b478503f010bb5bb6d92b84cccd8e189c5d42eb4a99417bf3c","first_seen":"2023-10-15T00:59:56Z","last_seen":"2023-10-15T00:59:57Z","times_seen":1,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/featured-image-from-url/includes/html/js/image.js?ver=4.5.0","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:35.204Z","timestamp":1697324375204,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/plugins/featured-image-from-url/includes/html/js/image.js?ver=4.5.0 HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Mon, 25 Sep 2023 10:34:20 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 10108\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=iUH%2FY16tBHTx7NHohDe%2Bzmv2mNBgbVAc4JWNkWLoQl0JoLG90s1KZxBPTBCLefq5K85k8nHibBCHpykJTaRMFnvN6gO1KZTo5IF9XGzgXNCE8RyHC80eylWrV4Y%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 81636efcca7ab4fa-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1543,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"87015559c535c9314bb1a8d6ed05597e","sha1":"b9e3b22a2bd7457d044551d5126a29bae25489a9","sha256":"e5903bfc201247ffb215a9c8ca6b66cf2b77d63dc7c7953937619535dd394a7e","sha512":"74247d596dd47219c7db120b8d30a12fffbfae88155bd5281ffabe68eefcb33bf6bfe88153306844127902d82d83c472a1f9f8e59024c5ea7603bc1611efca28","ssdeep":"","tlshash":"bd81962b30a8a1b8cd733ffdbbfe55653216315021565328bc1c66163bda22463a4fbd","first_seen":"2023-03-29T21:02:17Z","last_seen":"2026-05-06T18:32:21.650631Z","times_seen":61,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"definedbootnervous.com/a45922fa4966955cecdffbdde5347ae5/invoke.js","fqdn":"definedbootnervous.com","domain":"definedbootnervous.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:35.998Z","timestamp":1697324375998,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"definedbootnervous.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Sep 2023 06:24:07 GMT","end":"Mon, 18 Dec 2023 06:24:06 GMT"},"fingerprint":{"sha1":"FE:CF:3A:96:3E:47:C4:AA:55:62:56:91:23:16:FC:0A:94:CC:D9:DC","sha256":"DB:4C:6D:06:C1:AF:91:3C:40:A8:1C:B3:31:28:0E:85:76:7B:38:C3:AD:33:43:3D:E4:85:20:97:B4:2D:75:08"}}},"request":{"raw":"GET /a45922fa4966955cecdffbdde5347ae5/invoke.js HTTP/1.1\r\nHost: definedbootnervous.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 14 Oct 2023 22:59:36 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nX-Request-ID: 082a7636634857ff466e90217611ced8\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10972,"size_decoded":0,"mime_type":"application/javascript","magic":"exported SGML document, ASCII text, with very long lines (29697), with no line terminators","md5":"933e24644fe6d434048c2e4172d045b6","sha1":"05a1e96a0caaeccbb888378ca989c3ba43fc319a","sha256":"e20624a1a9ecd3eec6ae77fb643d30449721e290651f489deab30918947dab8d","sha512":"d36a6c2265b7ebe361b2159fa51228489ac107fd04353452e6cca9859b6e970800d5089e736818040d8031b9b3d0b23f34f95796cc9542f1e74953b987f272db","ssdeep":"768:BlbM/sa3zmX+AeP/OCqV/Gkg0LHJm1jtwTpUQ52cj6:BkqvCqV/GP0bKqj6","tlshash":"b0d295593d80e84e17a78faf733bb4dceade085dbc05480fd116bc5069a6627ead4930","first_seen":"2023-10-15T00:59:57Z","last_seen":"2023-10-15T00:59:57Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1533,"timings":{"blocked":707,"dns":345,"connect":110,"send":0,"wait":117,"receive":1,"ssl":250},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-10-14","alert":"Sinkholed","trigger":"definedbootnervous.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.r2m03.amazontrust.com/","fqdn":"ocsp.r2m03.amazontrust.com","domain":"amazontrust.com","tld":"com"},"ip":{"addr":"108.157.228.227","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-10-14T22:59:37.011767673Z","timestamp":1697324377011,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: ocsp.r2m03.amazontrust.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 83\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nContent-Length: 471\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=7200\r\nDate: Sat, 14 Oct 2023 22:59:36 GMT\r\nLast-Modified: Sat, 14 Oct 2023 21:41:13 GMT\r\nServer: ECAcc (ska/F69C)\r\nX-Cache: Miss from cloudfront\r\nVia: 1.1 d913eed4ff9d3ba68bce11280aa7e1b8.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: ARN56-P2\r\nX-Amz-Cf-Id: wXWxbajXFlnlRPqw9ARuHNNgWpH7sXrcEaaaL6GHYjH-tKXCc-XQ3Q==\r\nAge: 4704\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":471,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"02ca498b6476542955589c29c454c015","sha1":"7985e28cc1f0596e950d94f57df660d1daee8769","sha256":"97b3a1f34faf3f970492879972097fadead266c7abfae65b68b4e5ee6429876a","sha512":"09e6947fef48416dc0ac2332818b2245004a00bccf9f613dc02077bfadce80498a831c084d3057df2d2b7038ee1b8c90bc0565b15c2108f724ef37c8b5620f1f","ssdeep":"","tlshash":"3ef0dc440e8e51d0035e3c6f6fe64d3834a095d1a588a35a333c09c0e823b68e94a242","first_seen":"2023-10-14T10:40:43Z","last_seen":"2023-10-15T06:35:37Z","times_seen":134,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/themes/posterpro/js/skip-link-focus-fix.js?ver=20130115","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:35.250Z","timestamp":1697324375250,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/themes/posterpro/js/skip-link-focus-fix.js?ver=20130115 HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Sat, 15 Jul 2023 09:45:22 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 10108\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=2PlntxrfA5XOC2%2F1HN2uJkHML01CYTs%2BlFJmuIPPx1e4Ei8Zc%2B6QGOt81XIy9ESCA0meepuPo1i%2F4UIuBDc1A4U%2B1WICydDQghrlziSvcefYyX9c9JpjrL3WXvQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 81636efcea92b4fa-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":479,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"88744222f59f4700c6bc9212e12a653c","sha1":"df0bf43d60bed605eabbcb2776e0fbb46f1d1c05","sha256":"4b179f8204186f3aa954f47cd81dbe86bf89c08edb8d5341b8e0697d99e35073","sha512":"3b1c0f5328e75d0264f9378c83d6f04d7b55b512c8d3a4cf282848dd69d6bd7910c98efed21c640140a77a54c24e2d0338e2695381b3fa48aecc9bd594af29c1","ssdeep":"","tlshash":"471199ab7234577c0d9a7b9b0e9f164878ab2c81b811a50bb45c7849432cf56c27ff78","first_seen":"2023-03-07T12:25:13Z","last_seen":"2026-05-09T04:21:14.222449Z","times_seen":380,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"professionalswebcheck.com/stats","fqdn":"professionalswebcheck.com","domain":"professionalswebcheck.com","tld":"com"},"ip":{"addr":"3.73.202.184","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:36.872Z","timestamp":1697324376872,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"professionalswebcheck.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Wed, 30 Aug 2023 00:00:00 GMT","end":"Fri, 27 Sep 2024 23:59:59 GMT"},"fingerprint":{"sha1":"75:E9:08:FD:96:58:C7:98:43:E8:21:27:A8:E9:B9:A4:55:28:F2:0C","sha256":"34:E2:43:43:4E:FA:CF:25:BA:94:FB:DC:E9:CD:BA:35:F1:15:90:E2:F3:90:42:3E:A2:52:2B:30:7D:BC:5C:69"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionalswebcheck.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://nsw2u.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Oct 2023 22:59:36 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://nsw2u.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=5595b258-07ec-439d-bbd1-7fea07f58238:3:1; expires=Tue, 11 Oct 2033 22:59:36 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"2dd4dfa14d8dcf0d89c8615264c5a4ab","sha1":"a9440e9da8361380d5452760d6c7117560c46bfd","sha256":"65c42e3d139c510e889ca8565a01c94c07e5ee388ba4b4c127dd498e12d304cb","sha512":"77bed7ca2fef80100d3a9839b38e430320940df910338221bc0c50e35bc8db9830234d93d65c6920af9fbca4f15f172b43c299bd51301891889b0e7a5e9276cb","ssdeep":"","tlshash":"089004c47110cdd70c15701c5d37710444c4105301dc05515c4445cd1354ddc0054011","first_seen":"2023-10-15T00:59:57Z","last_seen":"2023-10-15T00:59:57Z","times_seen":1,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":141,"dns":53,"connect":26,"send":0,"wait":26,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.3.2/wp-includes/js/mediaelement/wp-mediaelement.min.css","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:34.692Z","timestamp":1697324374692,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /c/6.3.2/wp-includes/js/mediaelement/wp-mediaelement.min.css HTTP/1.1\r\nHost: c0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 07 Jun 2019 20:45:02 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 13 Oct 2024 22:59:34 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=15552000\r\nx-nc: HIT arn 2\r\ntiming-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2498,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4186), with no line terminators","md5":"ea958276b7de454bd3c2873f0dc47e5f","sha1":"b143f6e8e8f79d8f104c26b0057ef5514d763219","sha256":"2e10d353ff038c2cad3492fc17801af3e6ef2669c9e9713bdb78b1dcb104c4fe","sha512":"2d40a1e713355eff88fa3bbf5471b4db5acc48fa2b978a555c034f2e5c7f131fcaf48e849d5d048df9d5dae068c4b6467a97b1dde99115e6b32f57e928569fc1","ssdeep":"48:wFfAeWkkqEsKO+TBxaBIIj+NqUFQW76d7JrOv2bN:wueWkkrLoI7U","tlshash":"d9810c1084149d2cf4eab33766cec75db43ad747fe75e7b86936e2b8c098a842073484","first_seen":"2023-04-05T04:06:46Z","last_seen":"2026-05-09T07:37:53.750372Z","times_seen":78742,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":49,"dns":1,"connect":8,"send":0,"wait":13,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.67","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-10-14T22:59:37.246609632Z","timestamp":1697324377246,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Sat, 14 Oct 2023 22:59:36 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"6d008a14974101e1d82c1911a1197973","sha1":"3264efa3ffba2e687328b8e6f2940921c5fb5944","sha256":"4445108bc2c18d5fb71890e419bc2d157b1f505e6bb9b29a608c028485aedbeb","sha512":"100a08dde68dc96e96663f2d31b3460bfd8945070c2baaba43edcf14db5dd3687565ab8fb0077e7c6d65a7964164f36f4a252ac5b9f77a245c8a8132f3621f2a","ssdeep":"","tlshash":"e8f0d44b0d762801c87fd2b857115f55758026580e5859817cee4ad56ec37af6b9ca04","first_seen":"2023-10-14T18:25:01Z","last_seen":"2023-10-16T04:52:47Z","times_seen":154,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pagead2.googlesyndication.com/pagead/js/adsbygoogle.js","fqdn":"pagead2.googlesyndication.com","domain":"googlesyndication.com","tld":"com"},"ip":{"addr":"216.58.211.2","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:37.196Z","timestamp":1697324377196,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.g.doubleclick.net","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 18 Sep 2023 08:19:20 GMT","end":"Mon, 11 Dec 2023 08:19:19 GMT"},"fingerprint":{"sha1":"70:7D:E3:74:3D:B2:68:A6:79:15:85:2C:E6:A4:E9:90:4F:74:46:F1","sha256":"E5:11:EE:09:30:E4:D8:14:47:56:D5:DC:9C:CB:BF:38:7C:C1:28:12:86:90:46:6F:C8:D2:82:3B:23:F1:E3:ED"}}},"request":{"raw":"GET /pagead/js/adsbygoogle.js HTTP/1.1\r\nHost: pagead2.googlesyndication.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://nsw2u.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ndate: Sat, 14 Oct 2023 22:59:36 GMT\r\nexpires: Sat, 14 Oct 2023 22:59:36 GMT\r\ncache-control: private, max-age=3600\r\ncontent-type: text/javascript; charset=UTF-8\r\netag: 6821326382936011859\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: br\r\nserver: cafe\r\ncontent-length: 51178\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":51178,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (3968)","md5":"678e39a47f887be43bd87b8543ef5302","sha1":"4aced5bce7fb5eafad77ffa76c20d8e74e5ace41","sha256":"849837509debd71c4f5e88f5dfdf3b4a0c7ba237dfbf3d29292665c2f9a7d404","sha512":"53c8856cc14f2002429236c83e318837fe2bf19a0a8a68b07334850068214dc46d902f86619dfacff97c1c0029d527b79b6380069e00556e4793a9f34f8e6c06","ssdeep":"3072:AnMz1PdNeIoAJA1uOsttMR/0pGBQB5GDBeJaFcWEBR+Ic7llp//XzZRGT/Sc:AMz11NeIo71uOsttMR/cGmB5GDBekGRh","tlshash":"21e32ada72a2bcb38b6355d6006f0107b52da867f00cc8b0e1dcddd97d209aa5277b6d","first_seen":"2023-10-15T00:59:57Z","last_seen":"2023-10-15T00:59:57Z","times_seen":1,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":51,"dns":1,"connect":7,"send":0,"wait":45,"receive":10,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itespurrom.com/tag.min.js","fqdn":"itespurrom.com","domain":"itespurrom.com","tld":"com"},"ip":{"addr":"139.45.197.243","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:37.011Z","timestamp":1697324377011,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"itespurrom.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Oct 2023 07:19:17 GMT","end":"Fri, 05 Jan 2024 07:19:16 GMT"},"fingerprint":{"sha1":"5D:66:B9:C1:ED:43:A1:06:F2:CC:D6:05:58:38:E8:85:78:9F:83:BE","sha256":"5C:58:4F:7A:69:58:20:C5:2C:03:CE:C4:CC:1B:0B:53:C7:F6:1A:A4:97:8D:7A:DE:1E:36:72:71:5C:AA:69:89"}}},"request":{"raw":"GET /tag.min.js HTTP/1.1\r\nHost: itespurrom.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Oct 2023 22:59:36 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 25432\r\ncontent-encoding: br\r\nx-trace-id: 5d34ae9b3c16fd9a735b4a0bb598d985\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Oct 2023 23:17:20 GMT\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\naccess-control-max-age: 86400\r\npragma: no-cache\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25432,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a95c344616a01fcb847758f5eab31207","sha1":"274f322059eb248f3518f7c78b2fc69faae0551c","sha256":"72e9c7cfe696a88de9acd9d80da1b2c4c3441c2ff2c0cf5c57a07aa153d91f13","sha512":"16faab23e8f4ba77eae3f0a95bedded0b90bef0a0703fffcb48d5a827aaccfaf3fce4084e473b568f906b3c6df0414db16651d0a2c022cfc1f49832d4e03fc8e","ssdeep":"1536:tFJAFXavr8SAVKgYVJVihT3fdwzpTGgmzd:pgrSw3fqqgw","tlshash":"1f73736a709174b00a37e057576b132692bb5971f57b8030641ebb9e383ac1db32efd8","first_seen":"2023-10-14T03:59:35Z","last_seen":"2023-10-18T12:35:08Z","times_seen":164,"resource_available":true,"data":null}},"time_used":580,"timings":{"blocked":256,"dns":27,"connect":35,"send":0,"wait":54,"receive":12,"ssl":192},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-10-14","alert":"Sinkholed","trigger":"itespurrom.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.67","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-10-14T22:59:37.400869375Z","timestamp":1697324377400,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Sat, 14 Oct 2023 22:59:36 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"6d008a14974101e1d82c1911a1197973","sha1":"3264efa3ffba2e687328b8e6f2940921c5fb5944","sha256":"4445108bc2c18d5fb71890e419bc2d157b1f505e6bb9b29a608c028485aedbeb","sha512":"100a08dde68dc96e96663f2d31b3460bfd8945070c2baaba43edcf14db5dd3687565ab8fb0077e7c6d65a7964164f36f4a252ac5b9f77a245c8a8132f3621f2a","ssdeep":"","tlshash":"e8f0d44b0d762801c87fd2b857115f55758026580e5859817cee4ad56ec37af6b9ca04","first_seen":"2023-10-14T18:25:01Z","last_seen":"2023-10-16T04:52:47Z","times_seen":154,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/images.vfl.ru/ii/1588854988/40f4425a/30440747.jpg?w=1280\u0026resize=1280\u0026ssl=1","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:37.422Z","timestamp":1697324377422,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /images.vfl.ru/ii/1588854988/40f4425a/30440747.jpg?w=1280\u0026resize=1280\u0026ssl=1 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Oct 2023 22:59:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7712\r\nlast-modified: Sun, 19 Feb 2023 09:06:57 GMT\r\nexpires: Tue, 18 Feb 2025 21:06:57 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttps://images.vfl.ru/ii/1588854988/40f4425a/30440747.jpg\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"95d72d4081ab31e0\"\r\nvary: Accept\r\nx-nc: HIT arn 7\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7712,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 405x155, Scaling: [none]x[none], YUV color, decoders should clamp\\012- data","md5":"1f2664d6059193e6c1a59ee7ef14d1a0","sha1":"46542860abd849426ea23d66c601ff0888d735db","sha256":"f685610012cd711cdf0f3f186e878030c152058d3705dd751d6048d480bc2621","sha512":"269b43c3bd798788c7af43dc52d5a40b05f1fbabd28788b8e13e46745585a8db9feb55c56227b9572c2b0344224eaf49d56c64ac3a97719a6031f2ba1860dd8c","ssdeep":"192:htEhIER7FRw7KPaRbfmwULdBET7yhXJWNUfYEkoaDiR:huIc7+KPaERBET7yh4WfYWkiR","tlshash":"cdf1ae9c93ebc85b31504f90a165a3df0226b73a830d4b55017e12df37bf8c4724aea9","first_seen":"2023-05-06T04:59:28Z","last_seen":"2025-07-02T04:15:41.407603Z","times_seen":65,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/themes/posterpro/js/navigation.js?ver=20120206","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:35.253Z","timestamp":1697324375253,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/themes/posterpro/js/navigation.js?ver=20120206 HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Sat, 15 Jul 2023 09:45:22 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 10108\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=%2FFN3WLnfcaYnG5JKhbeT5fPks%2Ft2azyioI9om592oFS5EDTr4X1QEEVNBxLMHneoeKilXmtLYlpNX2hdcoQpQwDHyPVOtXAba5UgzoTPM1CovtD8Xo6MH%2FZQBU0%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 81636efcea93b4fa-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":800,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"c3a5b08af3e63049707797efe65eab86","sha1":"f66ed251ef8c24614ff24376d472f2f394f7b93f","sha256":"d79752e33e156b5cb219ab45103fe0ed7d80f111533dd8eec42c57546b4da500","sha512":"0615e64c421c5621cc07b9ea44379ca7aea5508e66656cceeb44cf739e3512d10430343f36a01dd2dc2e20c811c94733972fbd5ba7e35bfcb487686c720e5ce7","ssdeep":"","tlshash":"3651129328f6223f959aabd9625d5053353f8e50f714bd12f834f4801818a41cef9ece","first_seen":"2023-03-07T01:39:41Z","last_seen":"2026-05-08T22:56:05.028285Z","times_seen":630,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rabblespidersrenaissance.com/ed/6c/a5/ed6ca5eb8abc9a864ffa39115799b641.js","fqdn":"rabblespidersrenaissance.com","domain":"rabblespidersrenaissance.com","tld":"com"},"ip":{"addr":"192.243.61.225","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:36.873Z","timestamp":1697324376873,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rabblespidersrenaissance.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Sep 2023 00:59:44 GMT","end":"Tue, 26 Dec 2023 00:59:43 GMT"},"fingerprint":{"sha1":"73:4E:26:17:C1:CF:AC:01:11:05:12:E6:14:6C:C3:91:DE:DB:06:DE","sha256":"BE:C8:B8:75:27:F3:DC:37:3B:BF:94:E3:23:AC:FC:FD:EA:C0:43:C7:70:4B:91:41:A7:7F:B4:EE:38:DF:5C:D3"}}},"request":{"raw":"GET /ed/6c/a5/ed6ca5eb8abc9a864ffa39115799b641.js HTTP/1.1\r\nHost: rabblespidersrenaissance.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 14 Oct 2023 22:59:36 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nX-Request-ID: 8b4aa23aa3133a4c87563ba85fd70a00\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17609,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (43160), with no line terminators","md5":"a4ebc7499985f89f51514a7941d42755","sha1":"426e11fb788360274437a6b38ddca17df4441172","sha256":"846d2558831aeb877a06583d06f74a74f5366c810da2739e69ea92df020c0e43","sha512":"ee34ef20a8d12abb6f8ed2f5fe27ba5ab20c2124fcec141c24c22d7756bb3adafb968e4c0069a1659a991d37742ed27f9a181a934368585d487d6b2a0be2e3f3","ssdeep":"768:RzfZ9W8UncluiKFbyqcvGCK34LQiEldnJyoj448cDV4t719lzo4es5NbId8:sJFby1vGCK34QX04dDVQ1w4XXId8","tlshash":"8c13f7cc7f65a16122b560b7732fd902f02a0d0d79988898f3537da8aa6c734e4767dc","first_seen":"2023-10-15T00:59:56Z","last_seen":"2023-10-15T00:59:57Z","times_seen":1,"resource_available":true,"data":null}},"time_used":966,"timings":{"blocked":367,"dns":18,"connect":114,"send":0,"wait":117,"receive":114,"ssl":232},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-10-14","alert":"Sinkholed","trigger":"rabblespidersrenaissance.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.vfl.ru/ii/1697025199/2d40d0fc/39033877.jpg","fqdn":"images.vfl.ru","domain":"vfl.ru","tld":"ru"},"ip":{"addr":"62.173.140.199","port":443,"asn":34300,"as":"Internet-Cosmos LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:37.503Z","timestamp":1697324377503,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vfl.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 05 Oct 2023 07:19:50 GMT","end":"Wed, 03 Jan 2024 07:19:49 GMT"},"fingerprint":{"sha1":"D9:F0:63:03:03:30:7F:C2:7F:42:0C:BB:FC:94:2E:0B:8F:53:F3:04","sha256":"09:6F:FA:71:52:49:3D:BF:6C:99:8F:F1:05:C9:8B:98:BE:F1:06:1C:C0:EC:BA:29:ED:62:28:8C:68:58:1D:E9"}}},"request":{"raw":"GET /ii/1697025199/2d40d0fc/39033877.jpg HTTP/1.1\r\nHost: images.vfl.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Oct 2023 22:59:36 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 70673\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nLast-Modified: Wed, 11 Oct 2023 11:53:19 GMT\r\nETag: \"65268caf-11411\"\r\nExpires: Mon, 13 Nov 2023 22:59:36 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":70673,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 700x700, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 5.0.10], baseline, precision 8, 432x700, components 3\\012- data","md5":"c9578ce1b30a7957a4f58916181545c1","sha1":"5edd16bdbdd4c4caacd7ba9408b15b01bbb765fe","sha256":"881c108606af7bdf549477962370e9b2e17f1473a875354f37a09c634e34d492","sha512":"d28bb3b17e6756b67b054a063d67b1a15e6e13f24e370ef82d96087eb34dbfa5d4635cc7dd9a216ef640c00fe906e22c424c9298885834b1f026d6b0b0258fbc","ssdeep":"","tlshash":"","first_seen":"2023-10-15T00:59:57Z","last_seen":"2023-11-09T15:35:32Z","times_seen":6,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":63,"dns":17,"connect":27,"send":0,"wait":54,"receive":34,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rabblespidersrenaissance.com/watch.1155184760552.js?key=a45922fa4966955cecdffbdde5347ae5\u0026kw=%5B%22nsw2u%22%2C%22com%22%2C%22download%22%2C%22switch%22%2C%22roms%22%2C%22eshop%22%2C%22nsp%22%2C%22xci%22%2C%22nsz%22%5D\u0026refer=https%3A%2F%2Fnsw2u.com%2F\u0026tz=0\u0026dev=e\u0026res=14.2079\u0026uuid=5595b258-07ec-439d-bbd1-7fea07f58238%3A3%3A1","fqdn":"rabblespidersrenaissance.com","domain":"rabblespidersrenaissance.com","tld":"com"},"ip":{"addr":"173.233.137.36","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:37.264Z","timestamp":1697324377264,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rabblespidersrenaissance.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Sep 2023 00:59:44 GMT","end":"Tue, 26 Dec 2023 00:59:43 GMT"},"fingerprint":{"sha1":"73:4E:26:17:C1:CF:AC:01:11:05:12:E6:14:6C:C3:91:DE:DB:06:DE","sha256":"BE:C8:B8:75:27:F3:DC:37:3B:BF:94:E3:23:AC:FC:FD:EA:C0:43:C7:70:4B:91:41:A7:7F:B4:EE:38:DF:5C:D3"}}},"request":{"raw":"GET /watch.1155184760552.js?key=a45922fa4966955cecdffbdde5347ae5\u0026kw=%5B%22nsw2u%22%2C%22com%22%2C%22download%22%2C%22switch%22%2C%22roms%22%2C%22eshop%22%2C%22nsp%22%2C%22xci%22%2C%22nsz%22%5D\u0026refer=https%3A%2F%2Fnsw2u.com%2F\u0026tz=0\u0026dev=e\u0026res=14.2079\u0026uuid=5595b258-07ec-439d-bbd1-7fea07f58238%3A3%3A1 HTTP/1.1\r\nHost: rabblespidersrenaissance.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://nsw2u.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.21.6\r\nDate: Sat, 14 Oct 2023 22:59:36 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent\r\nCustom-Referer: https://nsw2u.com\r\nAccess-Control-Allow-Origin: https://nsw2u.com\r\nAccess-Control-Allow-Credentials: true\r\nLocation: https://rabblespidersrenaissance.com/watch.1155184760552.js?key=a45922fa4966955cecdffbdde5347ae5\u0026kw=%5B%22nsw2u%22%2C%22com%22%2C%22download%22%2C%22switch%22%2C%22roms%22%2C%22eshop%22%2C%22nsp%22%2C%22xci%22%2C%22nsz%22%5D\u0026refer=https%3A%2F%2Fnsw2u.com%2F\u0026tz=0\u0026dev=e\u0026res=14.2079\u0026uuid=5595b258-07ec-439d-bbd1-7fea07f58238%3A3%3A1\u0026shu=ac6ddf1f014350d045d96ab2ea05ae8a80831f8619fe0d74888fd84ca8d8167e9a966c3f00e3b21f516203d76a08e9611da09dc8852a15d172f82be64da4e64cb6b7641bf51e5385c736a6e21495375f7da945ddc08ebe9d7e73a7421086\u0026pst=1697324436\u0026rmtc=t\r\nSet-Cookie: u_pl=19067264; expires=Sun, 15 Oct 2023 22:59:36 GMT; secure; SameSite=None\nain=eyJhbGciOiJIUzI1NiJ9.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.whvp_sQpIdUSm4SK7_ZQxkz-uJBivC_dFSr-vXd5VZ4; expires=Sat, 14 Oct 2023 23:00:36 GMT; secure; SameSite=None\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nX-Request-ID: 28354406c9d75af61d8bbad66bccabd6\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T07:38:17.554889Z","times_seen":14881960,"resource_available":true,"data":null}},"time_used":716,"timings":{"blocked":306,"dns":1,"connect":99,"send":0,"wait":103,"receive":1,"ssl":204},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-10-14","alert":"Sinkholed","trigger":"rabblespidersrenaissance.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.vfl.ru/ii/1696713535/648489ee/39029634.jpg","fqdn":"images.vfl.ru","domain":"vfl.ru","tld":"ru"},"ip":{"addr":"62.173.140.199","port":443,"asn":34300,"as":"Internet-Cosmos LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:37.518Z","timestamp":1697324377518,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vfl.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 05 Oct 2023 07:19:50 GMT","end":"Wed, 03 Jan 2024 07:19:49 GMT"},"fingerprint":{"sha1":"D9:F0:63:03:03:30:7F:C2:7F:42:0C:BB:FC:94:2E:0B:8F:53:F3:04","sha256":"09:6F:FA:71:52:49:3D:BF:6C:99:8F:F1:05:C9:8B:98:BE:F1:06:1C:C0:EC:BA:29:ED:62:28:8C:68:58:1D:E9"}}},"request":{"raw":"GET /ii/1696713535/648489ee/39029634.jpg HTTP/1.1\r\nHost: images.vfl.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Oct 2023 22:59:37 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 31191\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nLast-Modified: Sat, 07 Oct 2023 21:18:55 GMT\r\nETag: \"6521cb3f-79d7\"\r\nExpires: Mon, 13 Nov 2023 22:59:37 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31191,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 700x700, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 5.0.10], baseline, precision 8, 412x667, components 3\\012- data","md5":"a415bdab5e6150241178552746fe5d71","sha1":"3cb9afec132f0cf1a88e83abc0b77614ee20f5b6","sha256":"8155cd0c598eeeb3df53fc23087d819333a91d25521f7f8401241b279e13bf35","sha512":"3190c27defff49a732efdce7f2b38fd9cecaeffffeb222e7a2aa6239e7395f48dccfef94d1d49f903d1af4e754d0809f8056f82384e492e36d4cba7fb2e75d19","ssdeep":"","tlshash":"","first_seen":"2023-10-15T00:59:57Z","last_seen":"2023-10-24T04:13:23Z","times_seen":4,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":137,"dns":0,"connect":0,"send":0,"wait":27,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js?userId=a53fc37264d74665b3856b33232234c6","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"139.45.195.8","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:37.524Z","timestamp":1697324377524,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rtmark.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Jul 2023 06:29:27 GMT","end":"Mon, 23 Oct 2023 06:29:26 GMT"},"fingerprint":{"sha1":"B4:02:64:AF:5C:AB:27:5B:1B:80:CF:C8:FF:EB:BF:43:29:C3:C5:C1","sha256":"C0:04:18:0C:9F:FA:D0:1F:6E:D6:5A:46:96:95:82:00:82:E6:E2:22:82:14:D0:4D:A8:78:37:EA:29:D6:4B:CC"}}},"request":{"raw":"GET /gid.js?userId=a53fc37264d74665b3856b33232234c6 HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://nsw2u.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Oct 2023 22:59:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 65\r\naccess-control-allow-origin: https://nsw2u.com\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=a53fc37264d74665b3856b33232234c6; expires=Sun, 13 Oct 2024 22:59:37 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON data\\012- , ASCII text","md5":"4185597917c681706802b8a43b8ee2c6","sha1":"c856d5a1dccc5d1b2d7268a73f61446486681820","sha256":"6ff760df8872ce038a79b2dcea109abc0e77f696bad670a3aa03f61106d46d1d","sha512":"152c3fcff99b300e3922f1c1ef35b00f953a25f5d19c8cf8e601d7bdee4eaffe699a7d12d7cf5af4784787c212959179dcdd0e733a98507308422d4dd4db7937","ssdeep":"","tlshash":"42a002905aa68a885170455a6fe7c61511040846742d631d57e8480a25c798c994fe86","first_seen":"2023-10-15T00:59:57Z","last_seen":"2023-10-15T00:59:57Z","times_seen":1,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":130,"dns":2,"connect":35,"send":0,"wait":33,"receive":3,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.vfl.ru/ii/1696499345/2d834ce4/39025715.jpg","fqdn":"images.vfl.ru","domain":"vfl.ru","tld":"ru"},"ip":{"addr":"62.173.140.199","port":443,"asn":34300,"as":"Internet-Cosmos LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:37.510Z","timestamp":1697324377510,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vfl.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 05 Oct 2023 07:19:50 GMT","end":"Wed, 03 Jan 2024 07:19:49 GMT"},"fingerprint":{"sha1":"D9:F0:63:03:03:30:7F:C2:7F:42:0C:BB:FC:94:2E:0B:8F:53:F3:04","sha256":"09:6F:FA:71:52:49:3D:BF:6C:99:8F:F1:05:C9:8B:98:BE:F1:06:1C:C0:EC:BA:29:ED:62:28:8C:68:58:1D:E9"}}},"request":{"raw":"GET /ii/1696499345/2d834ce4/39025715.jpg HTTP/1.1\r\nHost: images.vfl.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Oct 2023 22:59:36 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 45689\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nLast-Modified: Thu, 05 Oct 2023 09:49:05 GMT\r\nETag: \"651e8691-b279\"\r\nExpires: Mon, 13 Nov 2023 22:59:36 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45689,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 700x700, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 5.0.10], baseline, precision 8, 432x700, components 3\\012- data","md5":"d54f3e961e843224381b52420787300b","sha1":"b24ff4dd6ff0b3c210ac80ccec30d1612bfb2c70","sha256":"230c8719f7ff0cd67d89b8c5052dcc864b6c7ebbb62bf2ec21228af727652049","sha512":"6d980cf919ed23bd6b395f0c16fe566615788a5b742b06ae87d8da1e17ec47f7b381c0a679ffc449a3db4364d6b213bf9dde031f660ddb56b5c68dda85180fa1","ssdeep":"","tlshash":"","first_seen":"2023-10-15T00:59:57Z","last_seen":"2023-11-09T15:35:32Z","times_seen":7,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":111,"dns":4,"connect":26,"send":0,"wait":53,"receive":29,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.vfl.ru/ii/1696606849/450212ed/39028293.jpg","fqdn":"images.vfl.ru","domain":"vfl.ru","tld":"ru"},"ip":{"addr":"62.173.140.199","port":443,"asn":34300,"as":"Internet-Cosmos LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:37.513Z","timestamp":1697324377513,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vfl.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 05 Oct 2023 07:19:50 GMT","end":"Wed, 03 Jan 2024 07:19:49 GMT"},"fingerprint":{"sha1":"D9:F0:63:03:03:30:7F:C2:7F:42:0C:BB:FC:94:2E:0B:8F:53:F3:04","sha256":"09:6F:FA:71:52:49:3D:BF:6C:99:8F:F1:05:C9:8B:98:BE:F1:06:1C:C0:EC:BA:29:ED:62:28:8C:68:58:1D:E9"}}},"request":{"raw":"GET /ii/1696606849/450212ed/39028293.jpg HTTP/1.1\r\nHost: images.vfl.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Oct 2023 22:59:37 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 85525\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nLast-Modified: Fri, 06 Oct 2023 15:40:49 GMT\r\nETag: \"65202a81-14e15\"\r\nExpires: Mon, 13 Nov 2023 22:59:37 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":85525,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 700x700, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 5.0.10], baseline, precision 8, 432x700, components 3\\012- data","md5":"f31e59ed8b4014e8c240b752b138ca58","sha1":"92fe10034473f9c1939631c2c50642bfa521bf0f","sha256":"2e559285efef0bb13f7cb134710ea244f456a76074859562fff2cd86952aed87","sha512":"bde01149df96c8085e91408180fd1d38e8779001bf9cbaad5b74c19c20fe4c97aa235ff07d264782978991131538594129a9440ba820e5be27ca0aef8a792951","ssdeep":"","tlshash":"","first_seen":"2023-10-15T00:59:57Z","last_seen":"2023-11-09T15:35:32Z","times_seen":7,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":108,"dns":6,"connect":36,"send":0,"wait":55,"receive":40,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.vfl.ru/ii/1692466089/24d36bc8/38995517.jpg","fqdn":"images.vfl.ru","domain":"vfl.ru","tld":"ru"},"ip":{"addr":"62.173.140.199","port":443,"asn":34300,"as":"Internet-Cosmos LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:37.483Z","timestamp":1697324377483,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vfl.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 05 Oct 2023 07:19:50 GMT","end":"Wed, 03 Jan 2024 07:19:49 GMT"},"fingerprint":{"sha1":"D9:F0:63:03:03:30:7F:C2:7F:42:0C:BB:FC:94:2E:0B:8F:53:F3:04","sha256":"09:6F:FA:71:52:49:3D:BF:6C:99:8F:F1:05:C9:8B:98:BE:F1:06:1C:C0:EC:BA:29:ED:62:28:8C:68:58:1D:E9"}}},"request":{"raw":"GET /ii/1692466089/24d36bc8/38995517.jpg HTTP/1.1\r\nHost: images.vfl.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Oct 2023 22:59:37 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 66636\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nLast-Modified: Sat, 19 Aug 2023 17:28:09 GMT\r\nETag: \"64e0fba9-1044c\"\r\nExpires: Mon, 13 Nov 2023 22:59:37 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":66636,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 700x700, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 5.0.9], baseline, precision 8, 432x700, components 3\\012- data","md5":"81eb51e7c3a0df2a962b5b00d61669ff","sha1":"42c531b818a0bc7e01c602c8668f21065d8cd67d","sha256":"9ee994cfc66772056b1ae42f4012412d4a9f49fc8250c2c22153e54caed7b965","sha512":"10265feb6cea35daa675363edeb482fe17e432c63dcbebbbbd4801778ec6a54756c01d029b1ef249de566e1a2445cae85b8fbc938b27c8ba3e5365672fcaca13","ssdeep":"","tlshash":"","first_seen":"2023-10-15T00:59:57Z","last_seen":"2023-11-22T17:03:19Z","times_seen":8,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":137,"dns":11,"connect":27,"send":0,"wait":58,"receive":53,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.vfl.ru/ii/1696380530/d1e56cf6/39023796.jpg","fqdn":"images.vfl.ru","domain":"vfl.ru","tld":"ru"},"ip":{"addr":"62.173.140.199","port":443,"asn":34300,"as":"Internet-Cosmos LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:37.519Z","timestamp":1697324377519,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vfl.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 05 Oct 2023 07:19:50 GMT","end":"Wed, 03 Jan 2024 07:19:49 GMT"},"fingerprint":{"sha1":"D9:F0:63:03:03:30:7F:C2:7F:42:0C:BB:FC:94:2E:0B:8F:53:F3:04","sha256":"09:6F:FA:71:52:49:3D:BF:6C:99:8F:F1:05:C9:8B:98:BE:F1:06:1C:C0:EC:BA:29:ED:62:28:8C:68:58:1D:E9"}}},"request":{"raw":"GET /ii/1696380530/d1e56cf6/39023796.jpg HTTP/1.1\r\nHost: images.vfl.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Oct 2023 22:59:37 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 54351\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nLast-Modified: Wed, 04 Oct 2023 00:48:50 GMT\r\nETag: \"651cb672-d44f\"\r\nExpires: Mon, 13 Nov 2023 22:59:37 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":54351,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 700x700, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 5.0.9], baseline, precision 8, 432x700, components 3\\012- data","md5":"8fb21aff3c5603164134463b537c2f06","sha1":"db677f758830d5083c36c8cb55bada22376c5b03","sha256":"6cd036c8cc0d0b0bc4c32b26f0e630234780d45f573d465103ca04f6c25a93e8","sha512":"0f6ab38e738de8bdb65d6fbd1ade174999b7b2c85030b43cb7d7919fe60c1546306623fa97b3bd9050fd76288d56ad6138b9814d4f04e5027f398b589b0bd36d","ssdeep":"","tlshash":"","first_seen":"2023-10-15T00:59:57Z","last_seen":"2023-10-15T23:27:12Z","times_seen":2,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":166,"dns":0,"connect":0,"send":0,"wait":47,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.vfl.ru/ii/1692466506/8e093ade/38995519.jpg","fqdn":"images.vfl.ru","domain":"vfl.ru","tld":"ru"},"ip":{"addr":"62.173.140.199","port":443,"asn":34300,"as":"Internet-Cosmos LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:37.515Z","timestamp":1697324377515,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vfl.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 05 Oct 2023 07:19:50 GMT","end":"Wed, 03 Jan 2024 07:19:49 GMT"},"fingerprint":{"sha1":"D9:F0:63:03:03:30:7F:C2:7F:42:0C:BB:FC:94:2E:0B:8F:53:F3:04","sha256":"09:6F:FA:71:52:49:3D:BF:6C:99:8F:F1:05:C9:8B:98:BE:F1:06:1C:C0:EC:BA:29:ED:62:28:8C:68:58:1D:E9"}}},"request":{"raw":"GET /ii/1692466506/8e093ade/38995519.jpg HTTP/1.1\r\nHost: images.vfl.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Oct 2023 22:59:37 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 61571\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nLast-Modified: Sat, 19 Aug 2023 17:35:06 GMT\r\nETag: \"64e0fd4a-f083\"\r\nExpires: Mon, 13 Nov 2023 22:59:37 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":61571,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 700x700, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 5.0.9], baseline, precision 8, 432x700, components 3\\012- data","md5":"f5ca0775d6b4c6d61ccb84d080eab5b3","sha1":"71044f9bb69af45e4f171cf7e7c0ff3c9bcdfb1f","sha256":"a968f61a9dcb9774217eee6c6298381b912ef95f00d273c551485c5d73930696","sha512":"55c733d650ac3958f5ceb17f6793cc0d79b75bb83d6cbb174f980f5484261607a4b457c3a0b16eb52856915ed6aaed56601e3ca61c050f87c49388f14ae00912","ssdeep":"","tlshash":"","first_seen":"2023-10-15T00:59:57Z","last_seen":"2023-10-30T14:42:45Z","times_seen":6,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":128,"dns":1,"connect":96,"send":0,"wait":54,"receive":42,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/images.vfl.ru/ii/1588854988/40f4425a/30440747.jpg?w=500\u0026resize=500\u0026ssl=1","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:37.755Z","timestamp":1697324377755,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /images.vfl.ru/ii/1588854988/40f4425a/30440747.jpg?w=500\u0026resize=500\u0026ssl=1 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Oct 2023 22:59:37 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7712\r\nlast-modified: Sun, 19 Feb 2023 09:06:19 GMT\r\nexpires: Tue, 18 Feb 2025 21:06:19 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttps://images.vfl.ru/ii/1588854988/40f4425a/30440747.jpg\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"6b02d3dbdaa697a7\"\r\nvary: Accept\r\nx-nc: HIT arn 7\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7712,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 405x155, Scaling: [none]x[none], YUV color, decoders should clamp\\012- data","md5":"1f2664d6059193e6c1a59ee7ef14d1a0","sha1":"46542860abd849426ea23d66c601ff0888d735db","sha256":"f685610012cd711cdf0f3f186e878030c152058d3705dd751d6048d480bc2621","sha512":"269b43c3bd798788c7af43dc52d5a40b05f1fbabd28788b8e13e46745585a8db9feb55c56227b9572c2b0344224eaf49d56c64ac3a97719a6031f2ba1860dd8c","ssdeep":"192:htEhIER7FRw7KPaRbfmwULdBET7yhXJWNUfYEkoaDiR:huIc7+KPaERBET7yh4WfYWkiR","tlshash":"cdf1ae9c93ebc85b31504f90a165a3df0226b73a830d4b55017e12df37bf8c4724aea9","first_seen":"2023-05-06T04:59:28Z","last_seen":"2025-07-02T04:15:41.407603Z","times_seen":65,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.vfl.ru/ii/1696413057/d6012654/39024631.jpg","fqdn":"images.vfl.ru","domain":"vfl.ru","tld":"ru"},"ip":{"addr":"62.173.140.199","port":443,"asn":34300,"as":"Internet-Cosmos LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:37.516Z","timestamp":1697324377516,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vfl.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 05 Oct 2023 07:19:50 GMT","end":"Wed, 03 Jan 2024 07:19:49 GMT"},"fingerprint":{"sha1":"D9:F0:63:03:03:30:7F:C2:7F:42:0C:BB:FC:94:2E:0B:8F:53:F3:04","sha256":"09:6F:FA:71:52:49:3D:BF:6C:99:8F:F1:05:C9:8B:98:BE:F1:06:1C:C0:EC:BA:29:ED:62:28:8C:68:58:1D:E9"}}},"request":{"raw":"GET /ii/1696413057/d6012654/39024631.jpg HTTP/1.1\r\nHost: images.vfl.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Oct 2023 22:59:37 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 71099\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nLast-Modified: Wed, 04 Oct 2023 09:50:57 GMT\r\nETag: \"651d3581-115bb\"\r\nExpires: Mon, 13 Nov 2023 22:59:37 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":71099,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 700x700, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 5.0.9], baseline, precision 8, 432x700, components 3\\012- data","md5":"33f03174acbe027a947bea29f4bd9a9c","sha1":"d9ac82e4b1aa6e9d23ab6cf376cdb2e77ea8bbe9","sha256":"7c83cabdcce42904e30b4444eb9995271eebdaab4399caf7d81d14b6d434b88e","sha512":"863de0a9f42a4cfffcc2d73d30dffc98745fbc60c08303e0863a508245d8fb6cf6a07d726ef0ccad883d4fd6c3f889fba9ea96194d6ba7430a28d6b3f398fd26","ssdeep":"","tlshash":"","first_seen":"2023-10-15T00:59:57Z","last_seen":"2023-10-16T00:18:44Z","times_seen":3,"resource_available":false,"data":null}},"time_used":405,"timings":{"blocked":143,"dns":1,"connect":100,"send":0,"wait":77,"receive":34,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.vfl.ru/ii/1696002141/146fe0ac/39018698.jpg","fqdn":"images.vfl.ru","domain":"vfl.ru","tld":"ru"},"ip":{"addr":"62.173.140.199","port":443,"asn":34300,"as":"Internet-Cosmos LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:37.750Z","timestamp":1697324377750,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vfl.ru","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 05 Oct 2023 07:19:50 GMT","end":"Wed, 03 Jan 2024 07:19:49 GMT"},"fingerprint":{"sha1":"D9:F0:63:03:03:30:7F:C2:7F:42:0C:BB:FC:94:2E:0B:8F:53:F3:04","sha256":"09:6F:FA:71:52:49:3D:BF:6C:99:8F:F1:05:C9:8B:98:BE:F1:06:1C:C0:EC:BA:29:ED:62:28:8C:68:58:1D:E9"}}},"request":{"raw":"GET /ii/1696002141/146fe0ac/39018698.jpg HTTP/1.1\r\nHost: images.vfl.ru\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 14 Oct 2023 22:59:37 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 72238\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nLast-Modified: Fri, 29 Sep 2023 15:42:21 GMT\r\nETag: \"6516f05d-11a2e\"\r\nExpires: Mon, 13 Nov 2023 22:59:37 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72238,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 700x700, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 5.0.9], baseline, precision 8, 432x700, components 3\\012- data","md5":"c460612c4d4cb7eb70853eebce076baf","sha1":"3d6be3f9f61590ecaac2ab42fb08786fc0888d39","sha256":"2448139dc41930859e47eac8e14abb85784ec5577b7ace629055103102371af3","sha512":"c2d1b1b74522d190ed4435ae5575238300ba29586f092116ce8b62d280b4b33150471e32f3fd0762873d68518171974943a7018ffff4f487c777d0fcb9f8873b","ssdeep":"","tlshash":"","first_seen":"2023-10-15T00:59:57Z","last_seen":"2023-10-15T00:59:57Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rabblespidersrenaissance.com/watch.1155184760552.js?key=a45922fa4966955cecdffbdde5347ae5\u0026kw=%5B%22nsw2u%22%2C%22com%22%2C%22download%22%2C%22switch%22%2C%22roms%22%2C%22eshop%22%2C%22nsp%22%2C%22xci%22%2C%22nsz%22%5D\u0026refer=https%3A%2F%2Fnsw2u.com%2F\u0026tz=0\u0026dev=e\u0026res=14.2079\u0026uuid=5595b258-07ec-439d-bbd1-7fea07f58238%3A3%3A1\u0026shu=ac6ddf1f014350d045d96ab2ea05ae8a80831f8619fe0d74888fd84ca8d8167e9a966c3f00e3b21f516203d76a08e9611da09dc8852a15d172f82be64da4e64cb6b7641bf51e5385c736a6e21495375f7da945ddc08ebe9d7e73a7421086\u0026pst=1697324436\u0026rmtc=t","fqdn":"rabblespidersrenaissance.com","domain":"rabblespidersrenaissance.com","tld":"com"},"ip":{"addr":"192.243.61.225","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:37.721Z","timestamp":1697324377721,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rabblespidersrenaissance.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Sep 2023 00:59:44 GMT","end":"Tue, 26 Dec 2023 00:59:43 GMT"},"fingerprint":{"sha1":"73:4E:26:17:C1:CF:AC:01:11:05:12:E6:14:6C:C3:91:DE:DB:06:DE","sha256":"BE:C8:B8:75:27:F3:DC:37:3B:BF:94:E3:23:AC:FC:FD:EA:C0:43:C7:70:4B:91:41:A7:7F:B4:EE:38:DF:5C:D3"}}},"request":{"raw":"GET /watch.1155184760552.js?key=a45922fa4966955cecdffbdde5347ae5\u0026kw=%5B%22nsw2u%22%2C%22com%22%2C%22download%22%2C%22switch%22%2C%22roms%22%2C%22eshop%22%2C%22nsp%22%2C%22xci%22%2C%22nsz%22%5D\u0026refer=https%3A%2F%2Fnsw2u.com%2F\u0026tz=0\u0026dev=e\u0026res=14.2079\u0026uuid=5595b258-07ec-439d-bbd1-7fea07f58238%3A3%3A1\u0026shu=ac6ddf1f014350d045d96ab2ea05ae8a80831f8619fe0d74888fd84ca8d8167e9a966c3f00e3b21f516203d76a08e9611da09dc8852a15d172f82be64da4e64cb6b7641bf51e5385c736a6e21495375f7da945ddc08ebe9d7e73a7421086\u0026pst=1697324436\u0026rmtc=t HTTP/1.1\r\nHost: rabblespidersrenaissance.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://nsw2u.com\r\nReferer: https://nsw2u.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: u_pl=19067264; ain=eyJhbGciOiJIUzI1NiJ9.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.whvp_sQpIdUSm4SK7_ZQxkz-uJBivC_dFSr-vXd5VZ4\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 14 Oct 2023 22:59:37 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent\r\nCustom-Referer: https://nsw2u.com\r\nAccess-Control-Allow-Origin: https://nsw2u.com\r\nAccess-Control-Allow-Credentials: true\r\nSet-Cookie: uid_id2=5595b258-07ec-439d-bbd1-7fea07f58238:3:1; expires=Sat, 21 Oct 2023 22:59:37 GMT; secure; SameSite=None\niprc43849944d24ebb057e4e7a7d8065a15f=3570421; expires=Sun, 15 Oct 2023 02:59:37 GMT; secure; SameSite=None\npdhtkv=true; expires=Sun, 15 Oct 2023 22:59:37 GMT; secure; SameSite=None\nuncs=1; expires=Sun, 15 Oct 2023 22:59:37 GMT; secure; SameSite=None\npdhtkv32=true; expires=Sun, 15 Oct 2023 22:59:37 GMT; secure; SameSite=None\nuncs32=1; expires=Sun, 15 Oct 2023 22:59:37 GMT; secure; SameSite=None\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nX-Request-ID: 3c2a155692f438a19eec62a5f7a09fb1\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2101,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document, ASCII text, with very long lines (2648)","md5":"fafdbcab2e841e3d69d7e9c3c405e448","sha1":"07d1afb007a773dce187343699668377330cd1b1","sha256":"d0eda76105203b6d866ad156af1d12a6c00b892d065408669cdda0e1b6bb775a","sha512":"c1c3263eaebc4e8b02575d1befcb24291f092b836b49cd4b3951a9c41f59b9fec57c0688ef186c8b48bd598486a7565ae7955008958fc7567735ec0579e5dfa5","ssdeep":"","tlshash":"5b71b8796e9550386843383f76ea53082c62800f2504dac6ba1cb6910f72bad1df6edc","first_seen":"2023-10-15T00:59:57Z","last_seen":"2023-10-15T00:59:57Z","times_seen":1,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":140,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-10-14","alert":"Sinkholed","trigger":"rabblespidersrenaissance.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"banquetunarmedgrater.com/advertisers.js","fqdn":"banquetunarmedgrater.com","domain":"banquetunarmedgrater.com","tld":"com"},"ip":{"addr":"172.67.196.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:37.729Z","timestamp":1697324377729,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"banquetunarmedgrater.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 11 Sep 2023 08:34:11 GMT","end":"Sun, 10 Dec 2023 08:34:10 GMT"},"fingerprint":{"sha1":"77:2B:76:51:D0:51:70:02:2E:BF:B7:9B:02:8B:5A:A4:91:FA:0B:9E","sha256":"A2:26:27:42:22:55:4F:1A:25:4D:F1:86:C1:5C:3C:CD:EB:7C:D9:DE:2A:F8:10:F5:98:B2:93:4A:43:2C:8F:4E"}}},"request":{"raw":"GET /advertisers.js HTTP/1.1\r\nHost: banquetunarmedgrater.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Oct 2023 22:59:37 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: max-age=172800\r\nx-request-id: 376238843fcbe525af67dc483cfc4476\r\nstrict-transport-security: max-age=0; includeSubdomains\r\ncf-cache-status: EXPIRED\r\nlast-modified: Sat, 14 Oct 2023 22:59:36 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=oPsPucHfMjQaGz%2BfSKf2zWkSjQGctqJTI1HquOYIgKerAcRwYcZkTvJ6pcgmMTZZURrj16QBZylZ18vF77CtC3CpIOKDtPvpQmarUA7gctg7KyAwTQsIVIcHeaTZAIlywh0s7SKG%2BagMGo4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 81636f0d2fcd56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T07:38:17.554889Z","times_seen":14881960,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":52,"dns":21,"connect":2,"send":0,"wait":121,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/themes/posterpro/foundation/js/foundation.core.js","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:35.249Z","timestamp":1697324375249,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/themes/posterpro/foundation/js/foundation.core.js HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Sat, 15 Jul 2023 09:45:22 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 10108\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=MRUcZN%2BuWy4EG4vVLwUEUpSgv0VQ55LYMqAXwnAsDUWdKW5J90zcwrowtgQZwoOIgE7ynQGWpKiFteGdUcvV550DTTIkuBD6E3zLH57iiC2xqySWMBwDsJDQ9%2BI%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 81636efcea8db4fa-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4487,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"0e78b1db7d662e95ae8c3506146b080a","sha1":"9f1675c87a306e4dd45f84d0b7ac484ae506245e","sha256":"6e79424f448b401656e2384514c9332a4baa6ab4d458ba048655e01f4b1c60f2","sha512":"5daaf41da784eddf054ce3456a5518ff17c0159ee7950f08fa7285adf10175b5e93f9804bb7e0f6aa418e1995c333650f3b5447a65fcf762bac11cee2f05b71d","ssdeep":"192:qsW5PVf0d6j7ZC9wgg/Pr7SFAiigPNECtLBulCqiR5DN0gB53RNHRkhg9lteAyd1:oGAjpTehEhOcQmANHk97ecaSpMqgGJ","tlshash":"4752204d2aef2163443b3079039f1094b17c96ab6619dd507c6da3a41fa593583b3fec","first_seen":"2023-03-08T15:39:55Z","last_seen":"2026-05-04T07:51:11.671197Z","times_seen":61,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cloudimagesb.com/cti/43/ff/51/43ff51c07da75eaedd548042d5154cfe/1658930770.jpg","fqdn":"cdn.cloudimagesb.com","domain":"cloudimagesb.com","tld":"com"},"ip":{"addr":"45.133.44.10","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:37.954Z","timestamp":1697324377954,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.cloudimagesb.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Sep 2023 23:04:02 GMT","end":"Sat, 23 Dec 2023 23:04:01 GMT"},"fingerprint":{"sha1":"62:DE:BA:BA:30:E9:EE:15:E9:24:B9:C5:BF:E1:7E:39:8B:20:E5:42","sha256":"FD:4C:89:DB:18:10:6E:8B:95:59:88:5E:17:4B:19:C2:88:73:77:B4:54:F7:C0:9D:DB:E0:43:09:9A:28:77:50"}}},"request":{"raw":"GET /cti/43/ff/51/43ff51c07da75eaedd548042d5154cfe/1658930770.jpg HTTP/1.1\r\nHost: cdn.cloudimagesb.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Oct 2023 22:59:37 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24714\r\nserver: nginx/1.21.6\r\nlast-modified: Wed, 27 Jul 2022 14:06:18 GMT\r\netag: \"62e1465a-608a\"\r\nexpires: Mon, 16 Oct 2023 22:59:37 GMT\r\ncache-control: max-age=172800\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24714,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 320x50, components 3\\012- data","md5":"d465d02b90e928dfd9d9846e102a9dac","sha1":"22f7333777bec813bd9a7b870913a2b79b6d2fe4","sha256":"e393d4f1c6b5d4973e157f0f10764b92037dc18239500f42b72bed8ecef462fd","sha512":"7427afbe46c0f07673c817f5a57bd1293c11efa791b9fd98bf4b17e895d3361d5333ee503423d740974112341f752dead34bfa25871154ad981e5d1812ae438f","ssdeep":"768:4k4joegHCz4P81Im6uRcD50T9pdhqXJHEBre3Fx:PCoeX4k1euCerdh6JkBre3Fx","tlshash":"e6b2e1987d9346b1c1aec501ab62cc2048cb5f0db7ef2cd279410596c7be765c2aed1e","first_seen":"2023-04-05T23:50:35Z","last_seen":"2024-08-21T09:41:47.079258Z","times_seen":995,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":106,"dns":46,"connect":26,"send":0,"wait":25,"receive":30,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"friendshipmale.com/sfp.js","fqdn":"friendshipmale.com","domain":"friendshipmale.com","tld":"com"},"ip":{"addr":"104.21.234.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:37.540Z","timestamp":1697324377540,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Sat, 18 Feb 2023 00:00:00 GMT","end":"Sat, 17 Feb 2024 23:59:59 GMT"},"fingerprint":{"sha1":"08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37","sha256":"82:4E:6A:8D:E6:9B:EA:74:3D:E2:A4:3F:17:C0:E9:50:1B:15:F3:8F:64:56:CD:91:82:2E:74:C0:A3:75:C8:1A"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: friendshipmale.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Oct 2023 22:59:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: max-age=14400\r\nx-request-id: 5633dd0ac2d2e8cf0e5c0e0d5df76d7f\r\nstrict-transport-security: max-age=0; includeSubdomains\r\ncf-cache-status: EXPIRED\r\nlast-modified: Sat, 14 Oct 2023 22:59:36 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=U8jF%2FLjwIOFvvp4nNdh0LOXVqksU7mU83JpwcKTQw6F2g7gl1ocFCO6Ur5C81swNalUlkgLxjf4lWI2m7j5eRSUBMf20xjZneR66asx7zBKhaYySjjHqCn3%2B6J7QQE%2FRWe28vNc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 81636f0c6ac16359-LHR\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":85471,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T07:38:17.554889Z","times_seen":14881960,"resource_available":true,"data":null}},"time_used":334,"timings":{"blocked":104,"dns":28,"connect":30,"send":0,"wait":127,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/p/jetpack/12.7/css/jetpack.css","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:34.701Z","timestamp":1697324374701,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /p/jetpack/12.7/css/jetpack.css HTTP/1.1\r\nHost: c0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 10 Oct 2023 19:16:20 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 13 Oct 2024 22:59:34 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=15552000\r\nx-nc: HIT arn 2\r\ntiming-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":100602,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T07:38:17.554889Z","times_seen":14881960,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":40,"dns":1,"connect":11,"send":0,"wait":12,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.wp.com/w.js?ver=202341","fqdn":"stats.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:35.272Z","timestamp":1697324375272,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /w.js?ver=202341 HTTP/1.1\r\nHost: stats.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nx-minify: t\r\nx-minify-cache: hit\r\netag: W/10813-1684461103132.7104\r\ncontent-encoding: br\r\nexpires: Mon, 07 Oct 2024 13:30:34 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nx-nc: HIT arn\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10778,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (10778), with no line terminators","md5":"f6c87bc49e7646c7ccda489b9defc829","sha1":"9003fc52b4c4014b4bd9fe2f4506440b299478b2","sha256":"e97d12898ebf1039197a2a1c2f87bfe3b56f93eca2bfe60a46a1053fab7ad860","sha512":"625c15dbc10c9f9aa946a4e3a6ae95227e886fbd229d4999d942cf7179acc6a5d06a52d903c3016b3baab7abc02b22c8acfcdf570e93b868b23262cd9c19142a","ssdeep":"192:6EAPyKjIhY2MpyzWwv7afoUOl1T5ANkbAsw6EbJK1Wg:5pM6WwCe5AbVK1P","tlshash":"a022c6ac7151f03406a750a9133f670af23a4a25385b9494db6ec8f03e7899f4277fad","first_seen":"2023-05-15T15:42:40Z","last_seen":"2024-08-21T09:42:58.322033Z","times_seen":1419,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":4,"connect":13,"send":0,"wait":9,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i0.wp.com/images.vfl.ru/ii/1588854988/40f4425a/30440747.jpg?resize=405%2C155\u0026ssl=1","fqdn":"i0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:35.508Z","timestamp":1697324375508,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /images.vfl.ru/ii/1588854988/40f4425a/30440747.jpg?resize=405%2C155\u0026ssl=1 HTTP/1.1\r\nHost: i0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7712\r\nlast-modified: Sat, 11 Jun 2022 22:08:00 GMT\r\nexpires: Tue, 11 Jun 2024 10:08:00 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttps://images.vfl.ru/ii/1588854988/40f4425a/30440747.jpg\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"416c01d7e07bbbbf\"\r\nvary: Accept\r\nx-nc: HIT arn 7\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7712,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 405x155, Scaling: [none]x[none], YUV color, decoders should clamp\\012- data","md5":"1f2664d6059193e6c1a59ee7ef14d1a0","sha1":"46542860abd849426ea23d66c601ff0888d735db","sha256":"f685610012cd711cdf0f3f186e878030c152058d3705dd751d6048d480bc2621","sha512":"269b43c3bd798788c7af43dc52d5a40b05f1fbabd28788b8e13e46745585a8db9feb55c56227b9572c2b0344224eaf49d56c64ac3a97719a6031f2ba1860dd8c","ssdeep":"192:htEhIER7FRw7KPaRbfmwULdBET7yhXJWNUfYEkoaDiR:huIc7+KPaERBET7yh4WfYWkiR","tlshash":"cdf1ae9c93ebc85b31504f90a165a3df0226b73a830d4b55017e12df37bf8c4724aea9","first_seen":"2023-05-06T04:59:28Z","last_seen":"2025-07-02T04:15:41.407603Z","times_seen":65,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/themes/posterpro/foundation/js/foundation.min.js","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:35.246Z","timestamp":1697324375246,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/themes/posterpro/foundation/js/foundation.min.js HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Sat, 15 Jul 2023 09:45:22 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 10108\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=tBDSUsURiwACu4F%2FeeII5tnfrddiSsupiQukl3ybJiGJWOWNW4RDjQ5EKm3L2uuyxuarfbSkpebIiiIVM5XwSmIFiKPIfAQaewXsOe31TIkVwOyvd8djyGc0RGY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 81636efcda86b4fa-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":123510,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (32024)","md5":"7ed39eb42c8c450b59a24bab9cfa7fae","sha1":"7fdd3fee90709f703fac533b6061864fcd7ec206","sha256":"35ddb1ce73a4ac4f4792b00c8b8c56cbf857910ada5e2a0183d898b01adc16bb","sha512":"68f64fe44150adb2a9aaec794e1fa8af4403092fa86f9b98b1c996e51837bdb85e79e807b728f5598defb19ba3a8b3574138c03d34fc840d9029cceed2531c9a","ssdeep":"1536:RbN61LRiPamo+aCWsQC0ZNDHbehVk9c09DoeVOk04oPMgzv1zLVmrVegW:RbZPs3mS4D4MMgpQwgW","tlshash":"6dc3855e7251223246efa1b6152f060e71335b387542849cb179ceea6eb8d4832dbf7c","first_seen":"2023-03-07T12:57:57Z","last_seen":"2026-05-07T08:25:14.61275Z","times_seen":150,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.3.2/wp-includes/js/dist/url.min.js","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:35.288Z","timestamp":1697324375288,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /c/6.3.2/wp-includes/js/dist/url.min.js HTTP/1.1\r\nHost: c0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 27 Jun 2023 14:24:19 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 13 Oct 2024 22:59:34 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=15552000\r\nx-nc: HIT arn 2\r\ntiming-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9079,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (10357), with no line terminators","md5":"93d89333b0ea716b0dded414b6fd690e","sha1":"bea26f3b7bf556a03bf81259459154e5728de2cb","sha256":"acab68f8aa0636ce9058f6bf3d72d59dede88fb7111dd75532dcbd572ecb8722","sha512":"f0604bc5148b7db1d620af2f988b6878feb6ea9baaa04d8f869bca49f1edbbd40ff7865bb0d111197d820ed63b62c046ab188a9ca29ee89017a2991a25d8a049","ssdeep":"192:VrGJoVTALQGjj/vojA9NsgYzwY/Fmr7g7E5FFczHaB3L2QcXyp:VrlVEL1XojA9i3zwIFmr7e2XczHadL/j","tlshash":"d0224088b1d7f496d2553db164bf5d3fa13969cc046e6034e66aec9a382d23d0063bbc","first_seen":"2023-08-09T03:39:55Z","last_seen":"2025-03-11T09:05:12.572407Z","times_seen":213,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.3.2/wp-includes/css/dist/block-library/style.min.css","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:34.689Z","timestamp":1697324374689,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /c/6.3.2/wp-includes/css/dist/block-library/style.min.css HTTP/1.1\r\nHost: c0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 19 Jul 2023 11:13:55 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 13 Oct 2024 22:59:34 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=15552000\r\nx-nc: HIT arn 2\r\ntiming-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":104484,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T07:38:17.554889Z","times_seen":14881960,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":50,"dns":0,"connect":8,"send":0,"wait":11,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/featured-image-from-url/includes/html/js/lazySizesConfig.js?ver=4.5.0","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:35.236Z","timestamp":1697324375236,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/plugins/featured-image-from-url/includes/html/js/lazySizesConfig.js?ver=4.5.0 HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Mon, 25 Sep 2023 10:34:20 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 10108\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=EcthfPfLMu1mWxBnNUX2uzYgSMw8VC3%2FmvUxugF2s5b6MDI4FDZvFmsrEeKpTUvsg3E0Tj%2FY0uhS9pD5edj1hgDpU%2F8BCscm2TlkcYC0NxCRe5WaXVkbhkSYy4Q%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 81636efcea97b4fa-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8005,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (8246), with no line terminators","md5":"95e8541b1c7d8d1c6d971b8a1254f05e","sha1":"a0a315f535cefee969c8f938ae9133beb051b51d","sha256":"94d90d0cae68aae94246413284189ad0fd41bca226dcfc1d3394f25087df2ede","sha512":"e07cb1b2a0bc7018f6bb755b7b06bf670627b0999d67a5d3fc976901dcaf76b50cf66c55197ea22022984a95bd3782589021377f817fa951e0747bb9d622bc01","ssdeep":"192:dti9tr2idQ9KLAtgZLgCB8piI+C5SyHQMVTtei2ls:mTrfdQwLAahgCCUC5SyHQM+DS","tlshash":"2f02432b302c51f9da732ee9fffe0264746bb251f12191057e1d2406bb984687570abf","first_seen":"2023-05-08T02:38:38Z","last_seen":"2024-08-21T07:44:59.843268Z","times_seen":30,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/add-search-to-menu/public/js/ivory-ajax-search.min.js?ver=5.5.2","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:35.201Z","timestamp":1697324375201,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/plugins/add-search-to-menu/public/js/ivory-ajax-search.min.js?ver=5.5.2 HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Sat, 15 Jul 2023 09:31:33 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 10108\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=%2Bi%2Bz6Y%2Be3Vicg%2Foc5QOytyauFji%2BUvV9tcRbbjAtHzN9JGA6M0Yv%2FqYBHFuh%2FF%2BHBQUPpuVqZZdeHTfBUD%2BrN3ZxXEIM%2FM6nDq4c3DzAFtinabRfiNQS2KbQfyw%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 81636efcea96b4fa-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":67604,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T07:38:17.554889Z","times_seen":14881960,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.3.2/wp-includes/js/dist/i18n.min.js","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:35.316Z","timestamp":1697324375316,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /c/6.3.2/wp-includes/js/dist/i18n.min.js HTTP/1.1\r\nHost: c0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 28 Jun 2023 20:08:46 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 13 Oct 2024 22:59:34 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=15552000\r\nx-nc: HIT arn 2\r\ntiming-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9445,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (9729), with no line terminators","md5":"3597d2da73a2e3de74981fcc5ecbfce4","sha1":"94f7e899ca4635c129e8285579b3f0e38cf19730","sha256":"080a50955b97dc50d39c296cc22e8d02f07a3cfcc58d3127d93466e281514637","sha512":"f0d30d5dd31badd1163435ab4e5c25f64bf4431105343f847e07ea8f9b344f394fca5c1883c81d11c3808bc95aa2a7f541e386d731ba0d629a36ce9b69571a84","ssdeep":"192:emBU3rRetT+w48Lq55J2iBYDee8egqF+i47HgxOwUwAIfYN:VBU3letT+wnLqNJBYDeedF+D7HgvJfYN","tlshash":"1512c5edb0d6f056235320f044bfb804f136a99531aa98e0db90d5e6bd708d961b3fe9","first_seen":"2023-08-09T03:39:55Z","last_seen":"2025-04-06T21:49:55.616244Z","times_seen":5222,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-10-14T22:59:33.970Z","timestamp":1697324373970,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Oct 2023 22:59:33 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 14 Oct 2023 20:07:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 29 Oct 1923 20:30:00 GMT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=Ghg6%2BYvEydpTCpA9U0xJE5OSad37bh2u7dUyiYXWIkMCTBC0rIW9piVFiEypOqQjq8KQbkMgqm3D%2F5AbxCn3uxnyNgWNFqdWFSZppJyXJkyO9sZcxsNcuni3oEI%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 81636ef57a9db509-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":333368,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T07:38:17.554889Z","times_seen":14881960,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":22,"dns":0,"connect":1,"send":0,"wait":149,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/ad-inserter/js/banner.js?ver=2.7.31","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:35.187Z","timestamp":1697324375187,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/plugins/ad-inserter/js/banner.js?ver=2.7.31 HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 22\r\ncache-control: public, max-age=16070400\r\ncf-bgj: minify\r\ncf-polished: origSize=24\r\nexpires: max-age=A10368000, public\r\nlast-modified: Fri, 22 Sep 2023 09:31:13 GMT\r\ncf-cache-status: HIT\r\nage: 10108\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=Vd1xe%2FDnNBKhKmPs99RPwhvl2Hb9X6EUocG%2BK7SgkvEUNsKDjEYwMxiNoyRnUIZHMEds%2B5W1jMmw1m%2FFW1ZPBoJiBPU8%2FOT0Pw%2F1y5c1Ky7vmAeamamZdliniOw%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 81636efcba74b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"41bd53fe0ee631d5cfd895e18a53291d","sha1":"9d9d3c42c53ad7f906cb083a0d2d37afb4537764","sha256":"dfb2e16986e257b608b45d14396378a8f2ac6a7321c0dc2f13c66a33ec8e4a40","sha512":"41a97307b1672b9c276dacdc973cfcee6ff35961ac21c127d2263fc1c41e0356ee104456c0c5c2fb12ac30847f5c7d7e3ec4bb4f02e860ee3c3839ef984cafdd","ssdeep":"","tlshash":"b6700082088000b88030a00a020e3a3020083200c220022220020aa0a03c083b000282","first_seen":"2023-03-08T16:02:15Z","last_seen":"2024-10-06T09:26:03.66407Z","times_seen":26,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/add-search-to-menu/public/js/ivory-search.min.js?ver=5.5.2","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:35.243Z","timestamp":1697324375243,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/plugins/add-search-to-menu/public/js/ivory-search.min.js?ver=5.5.2 HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Sat, 15 Jul 2023 09:31:33 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 10108\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=7ZpXwgT0nuGah0hbQ5PljCTxyzFdhL9F1ofY7NeJXJzt34DlXM52guJZLQz%2F9PqiK69%2BfO8jF7t82UFIQOdOBR8x9sc868STeFwPxaKhq93zRyZjNi0bl5WFxoM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 81636efcea9ab4fa-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4591,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (4857), with no line terminators","md5":"3c05b4818fda400788cc5c2f60d87ea4","sha1":"01e544e8461be8bb14a13fb8be13cc1e8259858e","sha256":"db8170cdde3c954a075a4c1cfe836be73fc450ee8a298978470ca6a110284a08","sha512":"7d35abce59e5ecdcec8d96c94ed565e41ff43e90439c3224f31abbb0bb2d2291f74f5093e23649e94df508546fe701c9f10095167725fa4f667e91e90edde5f1","ssdeep":"96:4VdwhZhc31ZAph+87FLccnPOaB+FLPlkXLGLp:/QnApTxDB+xPlkbcp","tlshash":"f8a1cca4f0c4ee8702f60bfe26e6145117291863973d162035de806ddcb8e8442fabbd","first_seen":"2023-04-05T15:06:00Z","last_seen":"2025-03-27T22:09:40.53513Z","times_seen":100,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.3.2/wp-includes/js/dist/vendor/wp-polyfill.min.js","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:35.372Z","timestamp":1697324375372,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /c/6.3.2/wp-includes/js/dist/vendor/wp-polyfill.min.js HTTP/1.1\r\nHost: c0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 27 Jun 2023 14:24:19 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 13 Oct 2024 22:59:34 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=15552000\r\nx-nc: HIT arn 2\r\ntiming-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16146,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T07:38:17.554889Z","times_seen":14881960,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-search/build/instant-search/jp-search.defaultVendors.js?minify=false\u0026ver=a812fafe63c2ca6c059f","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:37.203Z","timestamp":1697324377203,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-search/build/instant-search/jp-search.defaultVendors.js?minify=false\u0026ver=a812fafe63c2ca6c059f HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nCookie: _ga_V5K7GYT3S4=GS1.1.1697324376.1.0.1697324376.0.0.0; _ga=GA1.1.1560127986.1697324376; _ga_HS5Y0K7QPG=GS1.1.1697324376.1.0.1697324376.0.0.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Oct 2023 22:59:36 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Thu, 12 Oct 2023 20:06:14 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 9614\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=HxOGwPdqZ10McdaiBcnbNPGwtjYR5nHcGGd%2BNI2551yfzbKYABFpIh5VCZDrcc9rJo%2FJ%2FmvHeeF4o%2FKgBNXsKd%2FFfAZtt1LqVlQ%2BFWglNSyEwdSz6ccl9FM7ouA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 81636f099b1ab4fa-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":77230,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T07:38:17.554889Z","times_seen":14881960,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.3.2/wp-includes/js/dist/hooks.min.js","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:35.322Z","timestamp":1697324375322,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /c/6.3.2/wp-includes/js/dist/hooks.min.js HTTP/1.1\r\nHost: c0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 27 Jun 2023 14:24:19 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 13 Oct 2024 22:59:34 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=15552000\r\nx-nc: HIT arn 2\r\ntiming-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4627,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (4704), with no line terminators","md5":"414c8462f6209b4905f767c8ba5c787d","sha1":"a80b8b79908e6cdf11648f810e707a75c859cda3","sha256":"007c3734a3f7737d74061ab5b96905dcb14ba1f88e7a6df55364b9d9573e3ce1","sha512":"3020c2e824981f80b0065c6607681696d108d9c8bb441e0a77a7adbe750c19e80ddb19ec7e3474ef3e97083559e3a804aa4dc4aa71244b31a5466dea553a38fd","ssdeep":"96:en5ggxcq5Va/rqXCgcfT19cJ3rAgNWNSt5s8G07AajUR1rvgdH4+TtW0K:e5hcqXmrHfB9cxEkt2WAM60K","tlshash":"eaa156c474c3b430d2637063a07f549ab63a69e5782dd080e25d90d67d73a8de077a6d","first_seen":"2023-08-09T03:39:55Z","last_seen":"2025-04-06T21:49:55.60576Z","times_seen":5551,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.3.2/wp-includes/js/dist/vendor/regenerator-runtime.min.js","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:35.392Z","timestamp":1697324375392,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /c/6.3.2/wp-includes/js/dist/vendor/regenerator-runtime.min.js HTTP/1.1\r\nHost: c0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 07 Feb 2023 15:56:37 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 13 Oct 2024 22:59:34 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=15552000\r\nx-nc: HIT arn 2\r\ntiming-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6607,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (6777), with no line terminators","md5":"4b5583c1e3d9c4f85089eebae5b0ea63","sha1":"8f1a4ba1dabf9fb35cfc2a2ebd08b93a91c0923b","sha256":"4c4ee791f1baebfe9e127c3341a2eda8e6e8a5debf27d91fae8c04cd2adb1527","sha512":"46f5b8792180b82ed2bb2716cc93c9a008efac9d88143aaac3f6230e8480f61e5f3dc34645e2a7528d2db6b859cbb53b06dd4ec95b9637da23df04bcc6edb70f","ssdeep":"96:7fe7Sm4zIHPQ6xLROGj+12NN15PPhd50guFhMPq5TK1pFZ9OtsH5Jsd5O+Ark3K:7TmAIH/x1xj+EvWMPqtAHutsH5OKrk6","tlshash":"64e1a5ddb5dbf00103577a24951f1009e33b655ee84a0058eb58e8e2fcf481ea76af7a","first_seen":"2023-04-05T05:36:56Z","last_seen":"2025-04-06T13:29:27.257263Z","times_seen":4349,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:37.005Z","timestamp":1697324377005,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nCookie: _ga_V5K7GYT3S4=GS1.1.1697324376.1.0.1697324376.0.0.0; _ga=GA1.1.1560127986.1697324376; _ga_HS5Y0K7QPG=GS1.1.1697324376.1.0.1697324376.0.0.0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Oct 2023 22:59:36 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 14 Oct 2023 20:07:00 GMT\r\nvary: Accept-Encoding\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 29 Oct 1923 20:30:00 GMT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=FwmIowBUB%2FVc%2B6NAoP2y95suS4Lno42DxldLKExQW58WsruEbKVfBtXXpnwZGcgiBcmmbFrmRHbMlKHl58eUH0G3WtT8F5%2BBkMUNIRoLhZuHRi7K9VNuCipvq7A%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 81636f09cb4db4fa-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T07:38:17.554889Z","times_seen":14881960,"resource_available":true,"data":null}},"time_used":445,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":440,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/ad-inserter/js/sponsors.js?ver=2.7.31","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:35.195Z","timestamp":1697324375195,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/plugins/ad-inserter/js/sponsors.js?ver=2.7.31 HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 21\r\ncache-control: public, max-age=16070400\r\ncf-bgj: minify\r\nexpires: max-age=A10368000, public\r\nlast-modified: Fri, 22 Sep 2023 09:31:14 GMT\r\ncf-cache-status: HIT\r\nage: 10108\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=0h%2B9ynDMEP7%2FqYehE%2Bs%2B4gTC6StTMRkB%2FzntMulNXhOk2SEZMOXUjc8PvQgcAju9UWHiRe5NoUICRNrd5DU7rLSF%2FHekq9vi0A8HIh5Zj4bDA59vX6cOCSLc9z4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 81636efcea95b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"169a5dd1261e0d434162d1af68acbbcd","sha1":"c18d59ed069049b012a61a8e6b958bfb25bc1b71","sha256":"82b3dabc6615507ef352f36aa08a805d409e883f8024fd01fda43175b6b67b38","sha512":"92328fe0d3e85e7eefecc85f4b6e2882c6cd15981bb75d877ae00def78c6b6d3e54b0151322fa04a579c7ddf02a90186860f37a9c7f0594130dc12c014297002","ssdeep":"","tlshash":"d77000c080a2802888200280830a3b2030082300880e00083080000820202838c880c2","first_seen":"2023-08-13T04:23:46Z","last_seen":"2024-08-21T08:54:44.383123Z","times_seen":24,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/ad-inserter/js/ads.js?ver=2.7.31","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:35.197Z","timestamp":1697324375197,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/plugins/ad-inserter/js/ads.js?ver=2.7.31 HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=16070400\r\ncf-bgj: minify\r\ncf-polished: origSize=112\r\nexpires: max-age=A10368000, public\r\nlast-modified: Fri, 22 Sep 2023 09:31:13 GMT\r\ncf-cache-status: HIT\r\nage: 10108\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=M0l454Br4nTyLOJcR2ZxKERRaucauHiFQ951QQaHUP0X0D4hfsgcoblDx2rhn5C8NjCRW%2B%2B6Cl1w1gDHotuM4OqwuGbdvH6apebNl1ZcWXZSyTXt2aFI3GE19Bg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 81636efcca76b4fa-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":110,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"70cd599fb1a952f67216cc82829f9ada","sha1":"74cfae7f053f69abf2dce9cb74c962a83b8ba8bf","sha256":"1fa8347df53b4287898f910b10e189b287e5610aa9d6cd322fb53d487b37a56d","sha512":"d603eeaba928c38cd588ffde87eda640ba93f4fe713813ef980864a2452e7ffcdf695d11d5c46cfa0db688baade3a5f67df9ec4b90c7d29a0fc1ae34ac29681d","ssdeep":"","tlshash":"cdb01214352f1311c11c68cb24bce7e839f4606d36611204addd993de5d9da217a5db1","first_seen":"2023-05-07T18:42:49Z","last_seen":"2024-10-12T13:50:15.100139Z","times_seen":27,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/cache/wpfc-minified/7kcuf8x0/5qz0r.js","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:35.308Z","timestamp":1697324375308,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/cache/wpfc-minified/7kcuf8x0/5qz0r.js HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Tue, 29 Aug 2023 11:06:03 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 10108\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=CI9mOQ2w4sHxN6R1yQTIH0nkC9cknEVbeS6JC1%2FLxWOaKHtnPKeLDD3oLl%2FtaNxmQSvXRcjl4QTasnk5EGyDNC13GBl9yZSdjgUXX999b%2Bm3R320iPkr2o4ND38%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 81636efd2abeb4fa-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6206,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (6303), with no line terminators","md5":"f9853427f0beb8a283ac3cdabe910ad6","sha1":"8fcd5776a89dbe61bde8c23df7abd40148d0a336","sha256":"1d280a7d6bcd1ea74968f32131f53c6a7b39468f6d7f9a21543fef8525b405ca","sha512":"6a5b9d0403311038358b626113835b389ba0dc7d7ab51c860a4c5ddb40db61b206338155dacb6770b9ed01bc2d7ae813d9f3d96d5f5057771c0bff2d6ad00803","ssdeep":"192:Z4wRLpgDyLw66cl1BSkVptrraji2boWgk4Rw:TRtuyLsOtab1gkiw","tlshash":"2bd1a2f878cee16042e856e4046b38d871b33695d00d9584b2f394db7973caeaf26b1c","first_seen":"2023-09-23T16:46:34Z","last_seen":"2023-10-29T19:39:39Z","times_seen":6,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.3.2/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:35.395Z","timestamp":1697324375395,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /c/6.3.2/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js HTTP/1.1\r\nHost: c0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 18 Jan 2023 11:16:33 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 13 Oct 2024 22:59:34 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=15552000\r\nx-nc: HIT arn 2\r\ntiming-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8171,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (8365), with no line terminators","md5":"08e6714eaf3cfe8f3c7839f22d90ba4e","sha1":"94fdad68854d0d3482b877aef7ba7c2eb265c621","sha256":"e424039d5a737a1bda8a5ded60919e5067085729310762eebb09c20e07d249c8","sha512":"a6eb0122f56c5706e1757696f1191905d67dd9a2d4c2a2ac62649c4ce08052adc4a984e591eaff2c7dadef8a32503a9bc36500ef8937823704e92d0ce195a1e3","ssdeep":"192:sFRv/5sAwj4ZsHA3nc9f9dIfssIombo9MXGL:aRXBtncdIYaM0","tlshash":"5a0221a83719b93358cba0a6607b170326232027584a54687738dcefcdfcea91573fb5","first_seen":"2023-04-05T08:09:08Z","last_seen":"2025-04-06T21:49:55.632889Z","times_seen":10374,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/cache/wpfc-minified/q8eepl4d/dmlqt.css","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:34.711Z","timestamp":1697324374711,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/cache/wpfc-minified/q8eepl4d/dmlqt.css HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Sun, 03 Sep 2023 08:56:51 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 9614\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=L5nZnZIcCSseLq903GywFoZ8R5td5n79suP2SJlM%2FwgRHeWF8%2FXrHMm0qPJ7b4YgOQI3ibbiYWGeW1Uuf2lV1Ue82U7RUd7xsQHn55kIzo98X1NAX%2BREOQAvULQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 81636ef9c805b4fa-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8143,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8145), with no line terminators","md5":"734068ce5268bc23a7506f3e9e9f5d41","sha1":"acf53910826dc6702a5fb8f2bf6aab44b17f4886","sha256":"2dd5b45b7df3d954548b70324f5730bf593bcdab6dac3632cc19ac119e8912a8","sha512":"34c86d47fb70e3baacea268cd1cf9d13698389887b315c697c353623060d9527b6f7b9f6ac3bc594cc239a11b98c79403dafeb9c2c627733227c85604b2ed61d","ssdeep":"96:u0ZI7tTgobQ5YWjTQRSouZ+YRXNlVGigAH/FtkSP5C9XMnM8MyMwjEY/e:/5YGTQMj1Xr/HoSxC9cMHxwjEY/e","tlshash":"aef1573345502c5ee6bfd16956c3766e1498f0a3bd3e07cec8269a3cc2cf5de6526148","first_seen":"2023-04-06T17:19:00Z","last_seen":"2025-03-25T19:45:27.378561Z","times_seen":94,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/lazysizes/5.3.2/plugins/bgset/ls.bgset.min.js?ver=6.3.2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:35.233Z","timestamp":1697324375233,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Mon, 03 Jul 2023 00:00:00 GMT","end":"Tue, 02 Jul 2024 23:59:59 GMT"},"fingerprint":{"sha1":"7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D","sha256":"D9:9E:DA:D7:6F:5A:E0:87:16:F3:3E:A0:A8:34:8B:84:B7:B0:98:30:2D:18:D8:53:E6:3C:09:06:19:48:07:54"}}},"request":{"raw":"GET /ajax/libs/lazysizes/5.3.2/plugins/bgset/ls.bgset.min.js?ver=6.3.2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1101\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"60641588-bf7\"\r\nlast-modified: Wed, 31 Mar 2021 06:24:08 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 11845989\r\nexpires: Thu, 03 Oct 2024 22:59:34 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=kfSZsb3TWToecf2s26U1Bds4yjHf76M97%2BTuv%2BsPY262P4d2xMnqyOD8rz9GjHTQJu8hhTeekT1a3JDUict8HTaCRUAXZfyO6txs4daNnymsk%2BuO8dEbeet7ADvA98WWyC8jqp5C\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\ncf-ray: 81636efd3f90b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3063,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3166), with no line terminators","md5":"268941a21977d78e5375571a621395be","sha1":"e31219f1b0ded9a8cc5834a977297006fedd2c07","sha256":"b6e184987af8853a448d3300cecb87e5c9c91adcf6af8bde29199a9d94bc3cd7","sha512":"62c83052641038f0ccd6775ebc7f31424a41b5a95e9a8ad3d1adc06ddfb5aff543049858fbd247f0cc8c5ef650d9bc0cc2e932762ac6317f211ccc38ff68bfc3","ssdeep":"","tlshash":"dc51632fb35536b7b81f10a1775e3714963330760c1ba8326a6bccacdd78c8a25b1938","first_seen":"2023-05-17T03:24:17Z","last_seen":"2025-03-29T09:49:23.169063Z","times_seen":25,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":7,"receive":4,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-search/build/instant-search/jp-search.js?minify=false\u0026ver=0aa4f53ecbe8911b5307","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:35.284Z","timestamp":1697324375284,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-search/build/instant-search/jp-search.js?minify=false\u0026ver=0aa4f53ecbe8911b5307 HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Thu, 12 Oct 2023 20:06:14 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 10108\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=dyxeRAWGWp59trcShph4xgIx9SVt%2Be%2FqeG%2FdTj6IizrHpfgdouFGYqhKpyRW78rvvpCd9fBowakim83Hu8tLQ8ao4i8peuCG%2F4N0FSp%2Bz9S6o1KkE932ipfwFZ4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 81636efd0aa1b4fa-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7553,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (7804), with no line terminators","md5":"9c77b566bd54b44feb40dae5abb672fd","sha1":"4800962e6abb9f034197101fd654cd8f89e40e51","sha256":"4fa5b8f79358bd73eafe22ac4a73531acbbed4b61f646d001d8636f27c4b2b07","sha512":"3d0daa31d52b7865cd56e89ae28e0e6dcfd33e6c52665613ed9cb9565314259010decfe47cc398130422dec8a417184eed0392fbcd7de273e62fc412eacf7d45","ssdeep":"192:XRshZuWPq50YldsHqfViWdKSNCk09TRjh+02cO36wceqYq7Xl:hshKfR8C6TjOKwcQqx","tlshash":"9bf1758d7dd5f43a126720b1597fbd796a3b11e2280e5020da99c4befc35de98213ec8","first_seen":"2023-09-23T16:46:34Z","last_seen":"2023-11-17T04:58:42Z","times_seen":16,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"formationwallet.com/pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=3512\u0026rd=3512\u0026fd=608\u0026bv=23.10.v.1\u0026tmpl=70","fqdn":"formationwallet.com","domain":"formationwallet.com","tld":"com"},"ip":{"addr":"173.233.137.52","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:37.539Z","timestamp":1697324377539,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"formationwallet.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Sep 2023 00:48:03 GMT","end":"Fri, 22 Dec 2023 00:48:02 GMT"},"fingerprint":{"sha1":"FB:1B:95:13:DB:5E:B2:BD:D9:2C:E1:1E:D6:05:5D:BA:63:17:4D:14","sha256":"AE:87:AC:A2:8C:DF:53:F7:51:94:40:C5:27:06:5D:6F:37:C5:8B:2C:62:55:71:7E:B0:FC:F6:32:6F:A6:2C:38"}}},"request":{"raw":"GET /pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=3512\u0026rd=3512\u0026fd=608\u0026bv=23.10.v.1\u0026tmpl=70 HTTP/1.1\r\nHost: formationwallet.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 14 Oct 2023 22:59:37 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T07:38:17.554889Z","times_seen":14881960,"resource_available":true,"data":null}},"time_used":755,"timings":{"blocked":326,"dns":17,"connect":101,"send":0,"wait":101,"receive":0,"ssl":207},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-10-14","alert":"Sinkholed","trigger":"formationwallet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-search/build/instant-search/jp-search.chunk-main-payload.css?minify=false\u0026ver=ae1ab3cfcf7670b1d705","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:37.206Z","timestamp":1697324377206,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-search/build/instant-search/jp-search.chunk-main-payload.css?minify=false\u0026ver=ae1ab3cfcf7670b1d705 HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nCookie: _ga_V5K7GYT3S4=GS1.1.1697324376.1.0.1697324376.0.0.0; _ga=GA1.1.1560127986.1697324376; _ga_HS5Y0K7QPG=GS1.1.1697324376.1.0.1697324376.0.0.0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Oct 2023 22:59:36 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Thu, 12 Oct 2023 20:06:14 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 9614\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=b5NFKMEXdrmiwEDNDFuJrbp5m29vzD3JqwSaQ3uLaKwaQHUQvB3JXo%2FW03dxQMYLhvbSkaIA23v8EaK3R08PpsN9pzIkRbJK5jLtyQMqehVkNf66Ez%2Fqjuiec6U%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 81636f09cb50b4fa-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36458,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T07:38:17.554889Z","times_seen":14881960,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/cache/wpfc-minified/ehn7s3j8/dmlqt.css","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:34.693Z","timestamp":1697324374693,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/cache/wpfc-minified/ehn7s3j8/dmlqt.css HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Sun, 03 Sep 2023 08:56:51 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 10108\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=p9IQQQIUD2YX6Bg6983mMsDL6ZraOW1aAFghnqNCFigrnbEqbh5AWYLcdNhpVNXGhnEGL6UNu6hrGWlKiQ%2BQ5btEz%2Bw97ThsPT2l%2B2VqCPKjPMPaQR3hvkN%2FVdg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 81636ef9afe9b4fa-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15333,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6817)","md5":"1fee9d9ba9d8cc17b88610f753052dd1","sha1":"b8608a7bcb05bcca68814671bb114871f2c97f0e","sha256":"f50cc3d3d3714cc7aae738eb19b41f70b1eec94c290f8985af4dcd36dcfad0dd","sha512":"199d3c0372d8bfe21e6bad2e3f2b5301336b84e79d1d69218ee7936fd2d9aa70ebfa3e692b2de58438ee5cb60029df699112a38ff65b1a0a48597f1ce57d5184","ssdeep":"384:lxsYEGsuVvDZIoq+/KJFH82/PpkjoJkDfzDN3j:lxtFlIW/KJFHT/PpkjoJkDfzDJj","tlshash":"7462b66295901d04a237892db9d6b7352b7d8223ab0617bff5a5d120c7cfd3902b3b4d","first_seen":"2023-06-26T20:11:28Z","last_seen":"2023-10-24T04:13:23Z","times_seen":5,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itespurrom.com/5/3812660/?oo=1\u0026aab=1","fqdn":"itespurrom.com","domain":"itespurrom.com","tld":"com"},"ip":{"addr":"139.45.197.243","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:37.010Z","timestamp":1697324377010,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"itespurrom.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Oct 2023 07:19:17 GMT","end":"Fri, 05 Jan 2024 07:19:16 GMT"},"fingerprint":{"sha1":"5D:66:B9:C1:ED:43:A1:06:F2:CC:D6:05:58:38:E8:85:78:9F:83:BE","sha256":"5C:58:4F:7A:69:58:20:C5:2C:03:CE:C4:CC:1B:0B:53:C7:F6:1A:A4:97:8D:7A:DE:1E:36:72:71:5C:AA:69:89"}}},"request":{"raw":"GET /5/3812660/?oo=1\u0026aab=1 HTTP/1.1\r\nHost: itespurrom.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://nsw2u.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Oct 2023 22:59:36 GMT\r\ncontent-type: application/json\r\nx-trace-id: 034ba47766173e9530a7ed94a776763c\r\nlink: \u003chttps://my.rtmark.net\u003e; rel=\"preconnect dns-prefetch\",\u003chttps://propeller-tracking.com\u003e; rel=\"preconnect dns-prefetch\",\u003chttps://sr7pv7n5x.com\u003e; rel=\"preconnect dns-prefetch\"\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64\r\naccess-control-allow-origin: https://nsw2u.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\nset-cookie: OAID=a53fc37264d74665b3856b33232234c6; expires=Sun, 13 Oct 2024 22:59:36 GMT; path=/; secure; SameSite=None\noaidts=1697324376; expires=Sun, 13 Oct 2024 22:59:36 GMT; path=/; secure; SameSite=None\nsyncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT\r\npragma: no-cache, no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2754,"size_decoded":0,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with very long lines (2994), with no line terminators","md5":"f4b721f81f3a3d8a159950a3a72636e2","sha1":"905c05a50cd939d8ad1147b5eb3cf67c9128c350","sha256":"3b54b8a88e8d4b31a9cf6b4dd2fd755990f88d2c9f3f699a6f289176c60222d2","sha512":"2a3dfbf342b099ed5cec44a996c4b7bc1eae75c73f9bb76aa18db62f90f32772dd9c40a2aa3551fae14a2334e7642a7443245d6c07b97f883dff38c0e3f7d43b","ssdeep":"","tlshash":"86510d45e156ed5be402446eff3a2d32138c286ab1a27c56cadd8c4d30fb034735ab0b","first_seen":"2023-10-15T00:59:57Z","last_seen":"2023-10-15T00:59:57Z","times_seen":1,"resource_available":false,"data":null}},"time_used":515,"timings":{"blocked":238,"dns":28,"connect":32,"send":0,"wait":37,"receive":0,"ssl":177},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-10-14","alert":"Sinkholed","trigger":"itespurrom.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c0.wp.com/c/6.3.2/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css","fqdn":"c0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.37","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:34.690Z","timestamp":1697324374690,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /c/6.3.2/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css HTTP/1.1\r\nHost: c0.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 29 Sep 2020 15:53:06 GMT\r\ncontent-encoding: br\r\nexpires: Sun, 13 Oct 2024 22:59:34 GMT\r\ncache-control: max-age=31536000\r\nstrict-transport-security: max-age=15552000\r\nx-nc: HIT arn 2\r\ntiming-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11256,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11256), with no line terminators","md5":"2b0dd7eecea03b4bdedb94ba622fdb03","sha1":"703becba85161118dd6fc66af465428ef43f561c","sha256":"b7908a015a567ec2363011df2475368dbff34360e9da3fdff50604d6395fb646","sha512":"fe64cff950921bdf83ec09fe79ca5ce52de40f5b8788697eb1d7b28055f2817778347d5d3c81a324801c7ec7151b3ee0eee99b2882c3c3b10bd760342d3bf3e7","ssdeep":"192:xthsVmeDXDanvgZenjAJKdXSMpNO96hDIzL79V1QVSD1CNxn6fR31r:czDanvuenjAkNBhDInSwh31r","tlshash":"713223929c88212cf43795645ac107ec923fc303fd62ededb73c7679caca58a516a943","first_seen":"2023-04-05T04:06:46Z","last_seen":"2026-05-09T07:37:53.727837Z","times_seen":77783,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":50,"dns":2,"connect":8,"send":0,"wait":12,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/featured-image-from-url/includes/html/css/lazyload.css?ver=4.5.0","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:34.710Z","timestamp":1697324374710,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/plugins/featured-image-from-url/includes/html/css/lazyload.css?ver=4.5.0 HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Mon, 25 Sep 2023 10:34:20 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 9614\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=r2OtNJ7s4mFeBlu56jokJIPhWwnxH%2BMRBBIITsTrqSrxSHitjJI7mXo1T9Luo9uCvXqa0rWeIZPbq1dzh9eycMl%2Bi359FSdHjLHznDQsTehItNa76vKdewcE29M%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 81636ef9c804b4fa-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":399,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (423), with no line terminators","md5":"ed94fa94e236140899a07d0bb24f233d","sha1":"8e7f16eda1a41233d4d0f19264382b6222959b6c","sha256":"2fb43730229e7993c5976889479bdd4488ce1cab9f939f11d7bba6e327c9a5df","sha512":"b4244ccd361dc344cbd75048cba2aa9866264b304504a87610a652bf3d28a9782ed39a43208f56230053359da1209456bc62265554b9ab8777b175f9c14848ba","ssdeep":"","tlshash":"c3e0e5e93a51b1686ca28be0f97ba56d5028f1594e328ddcb39a0267cf29292f011568","first_seen":"2023-05-09T01:54:18Z","last_seen":"2024-12-12T06:18:46.081255Z","times_seen":40,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-image-cdn/dist/image-cdn.js?minify=false\u0026ver=132249e245926ae3e188","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:35.289Z","timestamp":1697324375289,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-image-cdn/dist/image-cdn.js?minify=false\u0026ver=132249e245926ae3e188 HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Thu, 12 Oct 2023 20:06:14 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 10108\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=poBLm%2FK%2B9lTD%2FnsukX%2BPl%2BGGdWXB6dDUH%2FaUndOe%2Fhj3hw72tdpiT5tLZW9oNrIXcONOReCaSObZZ4Z73y6SxqeR84y84h8Kvk3lIyzaOCStDcYFKF1XAyEz3N8%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 81636efd2abbb4fa-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":701,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (727), with no line terminators","md5":"e8b1dbb3b1a9bc1b59010bd6f7035465","sha1":"c9d0ec84d9184c72ea6335c67193d25a90e003af","sha256":"18c991e1cdc15a5c427215cf20569d60a7aa9bc32f1f7a2382640782a6e5bfe7","sha512":"4024c87a8d1e6d6ea50fb2e93f03260a89047ef7579c32f6c207936c049091f1b7f5c9f4b6eb543fc759f97f6f474eb40b7e3cc5b64e1e8fedc8dea715e7c70f","ssdeep":"","tlshash":"03014c3a77042b3208c6e263a87e73957d2760363a4658b8291cfca6cc51d561175da9","first_seen":"2023-05-10T12:45:09Z","last_seen":"2025-04-04T07:06:30.457542Z","times_seen":983,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itespurrom.com/?rb=cSXrXxPFHjJk7hcC3ol27RPq8Bli84vLwRVOlepRUHkcfyrQApHw2NNQVJvAxBaUbt1_ovO0d1k1W1ompqth7WriPwEtOl-TIaCvekEgrfO8H0Q210RWGiWpacZ-K9T1FZWeeAGGY3q6PkvJraGg3AzxKxAD7jq4HRTlkOy3Eyyb4ziyI9AG6cnFpCOHAWqRyBkXbtnUtXsY_mnWC5prbA%3D%3D\u0026request_ab2=0\u0026zoneid=3812660\u0026js_build=iclick-v1.606.3-auto\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wih=1024\u0026wiw=1280\u0026wfc=2\u0026pl=https%3A%2F%2Fnsw2u.com%2F\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=1\u0026ix=0\u0026nw=1\u0026tb=false\u0026wgl=\u0026js_build=iclick-v1.606.3-auto\u0026bs=724062f4-4be5-42a6-9e31-7c1c2eddaa21\u0026userId=a53fc37264d74665b3856b33232234c6\u0026m=link","fqdn":"itespurrom.com","domain":"itespurrom.com","tld":"com"},"ip":{"addr":"139.45.197.243","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:37.726Z","timestamp":1697324377726,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"itespurrom.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Oct 2023 07:19:17 GMT","end":"Fri, 05 Jan 2024 07:19:16 GMT"},"fingerprint":{"sha1":"5D:66:B9:C1:ED:43:A1:06:F2:CC:D6:05:58:38:E8:85:78:9F:83:BE","sha256":"5C:58:4F:7A:69:58:20:C5:2C:03:CE:C4:CC:1B:0B:53:C7:F6:1A:A4:97:8D:7A:DE:1E:36:72:71:5C:AA:69:89"}}},"request":{"raw":"GET /?rb=cSXrXxPFHjJk7hcC3ol27RPq8Bli84vLwRVOlepRUHkcfyrQApHw2NNQVJvAxBaUbt1_ovO0d1k1W1ompqth7WriPwEtOl-TIaCvekEgrfO8H0Q210RWGiWpacZ-K9T1FZWeeAGGY3q6PkvJraGg3AzxKxAD7jq4HRTlkOy3Eyyb4ziyI9AG6cnFpCOHAWqRyBkXbtnUtXsY_mnWC5prbA%3D%3D\u0026request_ab2=0\u0026zoneid=3812660\u0026js_build=iclick-v1.606.3-auto\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wih=1024\u0026wiw=1280\u0026wfc=2\u0026pl=https%3A%2F%2Fnsw2u.com%2F\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=1\u0026ix=0\u0026nw=1\u0026tb=false\u0026wgl=\u0026js_build=iclick-v1.606.3-auto\u0026bs=724062f4-4be5-42a6-9e31-7c1c2eddaa21\u0026userId=a53fc37264d74665b3856b33232234c6\u0026m=link HTTP/1.1\r\nHost: itespurrom.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nsw2u.com/\r\nOrigin: https://nsw2u.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=a53fc37264d74665b3856b33232234c6; oaidts=1697324376\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Oct 2023 22:59:37 GMT\r\ncontent-type: application/json\r\nx-trace-id: d1ef7a753863f8a38ce458c68cab30bb\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64\r\naccess-control-allow-origin: https://nsw2u.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\naccess-control-max-age: 86400\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nset-cookie: OAID=a53fc37264d74665b3856b33232234c6; expires=Sun, 13 Oct 2024 22:59:37 GMT; path=/; secure; SameSite=None\noaidts=1697324377; expires=Sun, 13 Oct 2024 22:59:37 GMT; path=/; secure; SameSite=None\nsyncedCookie=true; expires=Sat, 21 Oct 2023 22:59:37 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2320,"size_decoded":0,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with very long lines (2349), with no line terminators","md5":"d4aa6b9f017ac5d4bf92af21d1b57706","sha1":"ae241f5b9327f2e0bd09c6d0795c2a4a397aeffc","sha256":"5d7e4a11127e9edd16d7e668c74abf01749838ba4ab028929a84af5b177e2b72","sha512":"b370794399fc399076cdb5ceb4b0afbcc2cada5d275628f7eccd3cc84be02002147b61057a81c1aa32e747a6f8b12cbbb9269c413cabc4fe41ae943961534e3a","ssdeep":"","tlshash":"1f411bff136090385a9d8294bdf1dd9c22d211977cc50068a7d2d41e83db1fd8e203c5","first_seen":"2023-10-15T00:59:57Z","last_seen":"2023-10-15T00:59:57Z","times_seen":1,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-10-14","alert":"Sinkholed","trigger":"itespurrom.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/cache/wpfc-minified/6zu0bqmr/5qz0r.js","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:35.304Z","timestamp":1697324375304,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/cache/wpfc-minified/6zu0bqmr/5qz0r.js HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Oct 2023 22:59:34 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Tue, 29 Aug 2023 11:06:03 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 10108\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=2r%2BWcM6NPyL5h4JTDdMH4A6CSjnEKn%2F4oPTvvS0IfIC9ue%2BLJKh2Viv4YThZaHCQpoQ7dfODya%2BbYTXw37mU70UA7QmVkh2GErPq0duuFPC0Ht8JwNE8zDk0EEA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 81636efd2abdb4fa-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2817,"size_decoded":0,"mime_type":"application/javascript","magic":"HTML document text\\012- HTML document, ASCII text, with very long lines (2972), with no line terminators","md5":"931b85cb75ffe4c6b196a0d45d0b92c0","sha1":"9e55c38907d27589edd3f8638a36dcfd2a64d779","sha256":"3ecde2005a956084887d85ad2aed0c01c0afcdba4abaa03f378e8ecdc1dbd359","sha512":"d6dfc7929dd8b1567b6fa4e8adef577f02e8f306d27376042595299e37e589c24d0b3c10ea5c3597741da5113c1dfacd719076adde4bd5e43fae964188dd9e8e","ssdeep":"","tlshash":"8c513213b3e5a02467696326863e223a1039e08d9ec3496ff2f1083deeb66652c87655","first_seen":"2023-06-26T20:11:27Z","last_seen":"2023-10-29T19:39:39Z","times_seen":5,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nsw2u.com/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-search/build/instant-search/jp-search.chunk-main-payload.js?minify=false\u0026ver=be4054ef01b79af42428","fqdn":"nsw2u.com","domain":"nsw2u.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:37.208Z","timestamp":1697324377208,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nsw2u.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Oct 2023 01:00:13 GMT","end":"Sat, 06 Jan 2024 01:00:12 GMT"},"fingerprint":{"sha1":"F3:56:5A:DF:95:E2:A8:CF:9E:B7:3F:B3:5B:E6:CA:39:3C:E0:F4:8E","sha256":"A2:E6:F2:90:34:4F:8E:0D:C6:06:A9:24:F8:7A:3F:A8:3B:2A:0D:F2:9E:37:59:33:1D:94:96:CF:29:DC:31:1F"}}},"request":{"raw":"GET /wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-search/build/instant-search/jp-search.chunk-main-payload.js?minify=false\u0026ver=be4054ef01b79af42428 HTTP/1.1\r\nHost: nsw2u.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nCookie: _ga_V5K7GYT3S4=GS1.1.1697324376.1.0.1697324376.0.0.0; _ga=GA1.1.1560127986.1697324376; _ga_HS5Y0K7QPG=GS1.1.1697324376.1.0.1697324376.0.0.0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Oct 2023 22:59:36 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=16070400\r\nexpires: max-age=A10368000, public\r\nlast-modified: Thu, 12 Oct 2023 20:06:14 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 9614\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=wciwViKajrKC8TOLHv2cnP1npdxKJQuvvvUYvu0EPVRXhWF0Se0K52KY3DSYF08D0aClubPBcJ1YglyYFWFjMkf4rsVaTmPU28TR6o8ArhvD%2FMyrhuvkfVVDIxw%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 81636f099b1cb4fa-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":79073,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T07:38:17.554889Z","times_seen":14881960,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel.wp.com/g.gif?x_stats-initial-visibility=visible\u0026v=wpcom-no-pv\u0026rand=0.10147797850100404","fqdn":"pixel.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nsw2u.com/","date":"2023-10-14T22:59:37.025Z","timestamp":1697324377025,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wp.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 14 Nov 2022 00:00:00 GMT","end":"Fri, 15 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37","sha256":"89:D4:77:37:CD:F3:BE:58:BD:98:D7:0D:7D:C9:BD:5D:C1:CB:4F:94:C0:DF:1F:13:BE:1F:84:37:10:15:EE:37"}}},"request":{"raw":"GET /g.gif?x_stats-initial-visibility=visible\u0026v=wpcom-no-pv\u0026rand=0.10147797850100404 HTTP/1.1\r\nHost: pixel.wp.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nsw2u.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Oct 2023 22:59:36 GMT\r\ncontent-type: image/gif\r\ncontent-length: 50\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 6 x 5\\012- data","md5":"e4d673a55c5656f19ef81563fb10884c","sha1":"1f2d8ed221d39329251ad3a6ff1edb20b7219443","sha256":"f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1","sha512":"e0b03411282a979cf772f700d9e5634b0c25c612e380ad33c0d59059b1b479d027016d5beb148403ef185430db35f5faed362f36ce2c8ecad0e6d8e30cea97b4","ssdeep":"","tlshash":"69900201f9a08180c1206535091a035c62049256490443062255751c5d546650616254","first_seen":"2023-04-05T23:53:38Z","last_seen":"2026-05-09T07:34:41.305988Z","times_seen":92949,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}