{"report_id":"89102433-3544-44b8-9aec-92d303f60cac","version":6,"status":"done","tags":[],"date":"2025-09-24T03:04:44Z","url":{"schema":"https","addr":"r.search.yahoo.com/_ylt=AwrO.5CWX9NoXYwCwzrrFAx.;_ylu=Y29sbwNncTEEcG9zAzMEdnRpZAMEc2VjA3Ny/RV=2/RE=1759892631/RO=10/RU=https%3a%2f%2fmoney.ca%2finvesting%2fclient-has-almost-5000-in-crypto-stolen-from-account/RK=2/RS=BJ09_1RZThlNJqqF6AFmUTgGToA-","fqdn":"r.search.yahoo.com","domain":"yahoo.com","tld":"com"},"ip":{"addr":"212.82.100.137","port":0,"asn":34010,"as":"Yahoo-UK Limited","country":"Ireland","country_code":"IE"},"final":{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"title":"Wealthsimple Client Has Almost $5,000 in Crypto Stolen From Account — What Investors Need to Know to Protect Their Assets"},"submit":{"url":{"schema":"https","addr":"r.search.yahoo.com/_ylt=AwrO.5CWX9NoXYwCwzrrFAx.;_ylu=Y29sbwNncTEEcG9zAzMEdnRpZAMEc2VjA3Ny/RV=2/RE=1759892631/RO=10/RU=https%3a%2f%2fmoney.ca%2finvesting%2fclient-has-almost-5000-in-crypto-stolen-from-account/RK=2/RS=BJ09_1RZThlNJqqF6AFmUTgGToA-","fqdn":"r.search.yahoo.com","domain":"yahoo.com","tld":"com"},"ip":{"addr":"212.82.100.137","port":0,"asn":34010,"as":"Yahoo-UK Limited","country":"Ireland","country_code":"IE"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-29T03:04:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"mp.4dex.io","ip":{"addr":"172.64.153.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-04-02","domain_rank":19933,"first_seen":"2019-01-03T13:51:11Z","last_seen":"2025-09-21T23:43:02.649329Z","alert_count":0,"request_count":2,"received_data":1046,"sent_data":938,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"s.ad.smaato.net","ip":{"addr":"34.1.242.226","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"domain_registered":"2006-05-16","domain_rank":5036,"first_seen":"2020-09-06T10:57:37Z","last_seen":"2025-09-22T02:37:10.889059Z","alert_count":0,"request_count":1,"received_data":99,"sent_data":665,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"data.money.ca","ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2000-11-06","domain_rank":0,"first_seen":"2025-01-13T23:02:44.358454Z","last_seen":"2025-02-14T20:21:19.44688Z","alert_count":0,"request_count":1,"received_data":540255,"sent_data":1440,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"prompts.maze.co","ip":{"addr":"52.20.24.97","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2010-07-20","domain_rank":54040,"first_seen":"2023-01-27T08:45:00Z","last_seen":"2025-09-22T03:41:49.378084Z","alert_count":0,"request_count":2,"received_data":599,"sent_data":1207,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"otrack.kueezrtb.com","ip":{"addr":"172.66.162.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-08-29","domain_rank":52388,"first_seen":"2024-07-25T11:01:24Z","last_seen":"2025-09-22T20:53:28.905416Z","alert_count":0,"request_count":6,"received_data":948,"sent_data":4959,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"raven-static.aditude.io","ip":{"addr":"172.66.168.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-09-05","domain_rank":49158,"first_seen":"2024-07-02T04:50:19Z","last_seen":"2025-09-22T04:33:23.240873Z","alert_count":0,"request_count":1,"received_data":120929,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"onetag-sys.com","ip":{"addr":"51.75.86.98","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"domain_registered":"2015-04-05","domain_rank":1047,"first_seen":"2015-04-08T11:30:19Z","last_seen":"2025-09-21T23:43:03.153489Z","alert_count":0,"request_count":1,"received_data":165,"sent_data":550,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sync.pmbmonetize.live","ip":{"addr":"173.208.96.74","port":443,"asn":396362,"as":"LEASEWEB-USA-NYC","country":"United States","country_code":"US"},"domain_registered":"2025-04-11","domain_rank":26548,"first_seen":"2025-04-27T13:56:50.210034Z","last_seen":"2025-09-22T13:11:41.310569Z","alert_count":0,"request_count":2,"received_data":916,"sent_data":1048,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"assets.wisepublishing.com","ip":{"addr":"172.64.147.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2003-05-01","domain_rank":1957151,"first_seen":"2020-07-10T00:08:28Z","last_seen":"2025-07-07T15:31:56.283104Z","alert_count":0,"request_count":1,"received_data":44049,"sent_data":436,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"dsp-service.admatic.de","ip":{"addr":"172.67.72.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":17961,"first_seen":"2024-12-18T21:09:55.578953Z","last_seen":"2025-09-22T02:37:11.717506Z","alert_count":0,"request_count":3,"received_data":8845,"sent_data":2118,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"js-sec.indexww.com","ip":{"addr":"104.18.24.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-03-28","domain_rank":4843,"first_seen":"2015-05-13T07:47:54Z","last_seen":"2025-09-22T02:37:11.062496Z","alert_count":0,"request_count":1,"received_data":3358,"sent_data":528,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ex.ingage.tech","ip":{"addr":"104.18.26.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-07-26","domain_rank":24918,"first_seen":"2020-09-04T21:02:37Z","last_seen":"2025-09-22T06:36:49.812181Z","alert_count":0,"request_count":4,"received_data":1982,"sent_data":1995,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"prebid.smilewanted.com","ip":{"addr":"172.66.154.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-10-05","domain_rank":27103,"first_seen":"2019-07-25T11:11:55Z","last_seen":"2025-09-21T23:43:02.875536Z","alert_count":0,"request_count":2,"received_data":1054,"sent_data":948,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-09-21T22:11:30.527953Z","alert_count":0,"request_count":1,"received_data":559,"sent_data":1115,"comment":"","tags":null,"fingerprints":null},{"fqdn":"exchange.kueezrtb.com","ip":{"addr":"159.203.149.115","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"domain_registered":"2022-08-29","domain_rank":10501,"first_seen":"2022-11-18T13:26:37Z","last_seen":"2025-09-22T04:50:51.748754Z","alert_count":0,"request_count":2,"received_data":898,"sent_data":1084,"comment":"","tags":null,"fingerprints":null},{"fqdn":"track.kueezrtb.com","ip":{"addr":"172.66.162.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-08-29","domain_rank":44583,"first_seen":"2022-11-23T10:02:56Z","last_seen":"2025-09-17T00:37:47.114581Z","alert_count":0,"request_count":7,"received_data":1193,"sent_data":5591,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-09-21T22:11:31.071214Z","alert_count":0,"request_count":3,"received_data":1189597,"sent_data":1310,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.assertcom.de","ip":{"addr":"65.21.238.88","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"unknown","domain_rank":32893,"first_seen":"2017-11-29T02:55:31Z","last_seen":"2025-09-22T13:22:41.830625Z","alert_count":0,"request_count":1,"received_data":477,"sent_data":409,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cs.admanmedia.com","ip":{"addr":"80.77.87.162","port":443,"asn":46636,"as":"NATCOWEB","country":"United States","country_code":"US"},"domain_registered":"2009-09-02","domain_rank":5199,"first_seen":"2017-05-05T11:54:47Z","last_seen":"2025-09-21T23:43:02.133641Z","alert_count":0,"request_count":1,"received_data":573,"sent_data":682,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"prebid.admatic.de","ip":{"addr":"172.67.72.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":25734,"first_seen":"2025-04-16T12:31:36.983581Z","last_seen":"2025-09-21T23:43:03.578603Z","alert_count":0,"request_count":5,"received_data":8616,"sent_data":3545,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"gtrack.kueezrtb.com","ip":{"addr":"172.66.162.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-08-29","domain_rank":44745,"first_seen":"2023-07-03T10:25:47Z","last_seen":"2025-09-23T02:38:01.507629Z","alert_count":0,"request_count":7,"received_data":1193,"sent_data":5598,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2025-09-21T22:13:13.943291Z","alert_count":0,"request_count":1,"received_data":41842,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"d14pdm1b7fi5kh.cloudfront.net","ip":{"addr":"3.167.7.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2022-05-31T12:08:25Z","last_seen":"2024-03-22T15:06:16Z","alert_count":0,"request_count":1,"received_data":202687,"sent_data":420,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"snippet.maze.co","ip":{"addr":"3.167.2.70","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2010-07-20","domain_rank":59866,"first_seen":"2022-10-27T13:30:17Z","last_seen":"2025-09-23T19:07:42.41872Z","alert_count":0,"request_count":2,"received_data":21479,"sent_data":931,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"prism.app-us1.com","ip":{"addr":"104.18.128.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-11-13","domain_rank":65110,"first_seen":"2019-01-09T06:40:26Z","last_seen":"2025-09-22T00:49:37.101063Z","alert_count":0,"request_count":1,"received_data":538,"sent_data":541,"comment":"","tags":null,"fingerprints":[{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"raven-edge.aditude.io","ip":{"addr":"172.66.168.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-09-05","domain_rank":46082,"first_seen":"2024-06-27T19:03:05Z","last_seen":"2025-09-22T18:40:45.858071Z","alert_count":0,"request_count":1,"received_data":5542,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2025-09-21T22:11:31.293382Z","alert_count":0,"request_count":1,"received_data":842,"sent_data":1261,"comment":"","tags":null,"fingerprints":null},{"fqdn":"server.smartytech.io","ip":{"addr":"57.128.210.69","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"domain_registered":"2022-10-06","domain_rank":39161,"first_seen":"2023-01-17T05:10:46Z","last_seen":"2025-09-21T23:43:02.956806Z","alert_count":0,"request_count":2,"received_data":3430,"sent_data":1324,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"assets.ribn.com","ip":{"addr":"104.18.42.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2001-03-25","domain_rank":1943691,"first_seen":"2020-11-23T07:14:44Z","last_seen":"2025-07-09T06:51:23.055841Z","alert_count":0,"request_count":1,"received_data":49313,"sent_data":418,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"moneywise.com","ip":{"addr":"172.64.148.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1997-10-23","domain_rank":41934,"first_seen":"2015-01-21T08:15:04Z","last_seen":"2025-07-07T15:31:56.142337Z","alert_count":0,"request_count":1,"received_data":232,"sent_data":520,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"static.smilewanted.com","ip":{"addr":"172.66.154.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-10-05","domain_rank":51476,"first_seen":"2016-09-03T19:47:46Z","last_seen":"2025-09-21T23:43:02.784502Z","alert_count":0,"request_count":1,"received_data":50193,"sent_data":451,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"assets.adobedtm.com","ip":{"addr":"96.6.17.25","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2013-11-22","domain_rank":3051,"first_seen":"2014-01-28T04:51:35Z","last_seen":"2025-09-21T22:27:36.667584Z","alert_count":0,"request_count":2,"received_data":3140,"sent_data":976,"comment":"","tags":null,"fingerprints":null},{"fqdn":"geo.aditude.io","ip":{"addr":"104.20.42.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-09-05","domain_rank":49510,"first_seen":"2024-11-21T16:53:44Z","last_seen":"2025-09-22T19:49:55.146775Z","alert_count":0,"request_count":1,"received_data":542,"sent_data":423,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"hb.minutemedia-prebid.com","ip":{"addr":"35.207.179.213","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"domain_registered":"2022-01-27","domain_rank":27043,"first_seen":"2022-02-03T14:20:09Z","last_seen":"2025-09-22T02:37:10.390158Z","alert_count":0,"request_count":2,"received_data":1216,"sent_data":978,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"dn0qt3r0xannq.cloudfront.net","ip":{"addr":"3.167.2.77","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2022-01-21T11:08:15Z","last_seen":"2025-09-22T04:33:22.155088Z","alert_count":0,"request_count":2,"received_data":353513,"sent_data":923,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"measureadv.com","ip":{"addr":"204.62.14.130","port":443,"asn":46636,"as":"NATCOWEB","country":"United States","country_code":"US"},"domain_registered":"2025-07-17","domain_rank":210846,"first_seen":"2025-08-05T21:00:16.606706Z","last_seen":"2025-09-22T13:11:41.418983Z","alert_count":0,"request_count":4,"received_data":3827,"sent_data":2369,"comment":"","tags":null,"fingerprints":null},{"fqdn":"r.search.yahoo.com","ip":{"addr":"212.82.100.137","port":443,"asn":34010,"as":"Yahoo-UK Limited","country":"Ireland","country_code":"IE"},"domain_registered":"1995-01-18","domain_rank":65232,"first_seen":"2014-02-05T02:58:59Z","last_seen":"2025-09-22T07:07:31.974914Z","alert_count":0,"request_count":1,"received_data":1722,"sent_data":713,"comment":"","tags":null,"fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sync.kueezrtb.com","ip":{"addr":"157.230.5.61","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"domain_registered":"2022-08-29","domain_rank":16095,"first_seen":"2022-11-21T13:38:16Z","last_seen":"2025-09-22T04:50:53.630302Z","alert_count":0,"request_count":1,"received_data":508,"sent_data":597,"comment":"","tags":null,"fingerprints":null},{"fqdn":"smetrics.money.ca","ip":{"addr":"63.140.62.139","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2000-11-06","domain_rank":0,"first_seen":"2025-01-13T23:02:44.229285Z","last_seen":"2025-02-14T20:21:19.340152Z","alert_count":0,"request_count":2,"received_data":2638,"sent_data":3960,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"accounts.google.com","ip":{"addr":"142.251.9.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":103,"first_seen":"2012-05-23T06:57:57Z","last_seen":"2025-09-21T22:18:44.028378Z","alert_count":0,"request_count":2,"received_data":243167,"sent_data":835,"comment":"","tags":null,"fingerprints":null},{"fqdn":"i.clean.gg","ip":{"addr":"34.95.69.49","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2018-04-01","domain_rank":10789,"first_seen":"2018-05-23T22:36:18Z","last_seen":"2025-09-22T04:33:22.035155Z","alert_count":0,"request_count":2,"received_data":1001,"sent_data":973,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.29.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"csync.smilewanted.com","ip":{"addr":"172.66.154.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-10-05","domain_rank":17039,"first_seen":"2019-08-06T10:07:03Z","last_seen":"2025-09-21T23:43:03.142137Z","alert_count":0,"request_count":9,"received_data":17044,"sent_data":6997,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.google.no","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2025-09-21T22:11:30.846888Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":844,"comment":"","tags":null,"fingerprints":null},{"fqdn":"media1.money.ca","ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2000-11-06","domain_rank":0,"first_seen":"2023-10-28T22:47:29Z","last_seen":"2025-02-14T20:21:19.369063Z","alert_count":0,"request_count":9,"received_data":94726,"sent_data":14067,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"static.kueezrtb.com","ip":{"addr":"172.66.162.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-08-29","domain_rank":54734,"first_seen":"2023-03-30T12:12:59Z","last_seen":"2025-09-17T03:35:44.947412Z","alert_count":0,"request_count":2,"received_data":233103,"sent_data":843,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"sync.cootlogix.com","ip":{"addr":"64.227.2.1","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"domain_registered":"2017-08-21","domain_rank":8649,"first_seen":"2022-08-31T09:46:08Z","last_seen":"2025-09-22T08:34:59.618891Z","alert_count":0,"request_count":1,"received_data":508,"sent_data":567,"comment":"","tags":null,"fingerprints":null},{"fqdn":"diffuser-cdn.app-us1.com","ip":{"addr":"104.17.31.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-11-13","domain_rank":64683,"first_seen":"2019-06-13T03:58:17Z","last_seen":"2025-09-22T02:15:30.947172Z","alert_count":0,"request_count":1,"received_data":34049,"sent_data":426,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"u.kueezrtb.com","ip":{"addr":"172.66.162.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-08-29","domain_rank":66572,"first_seen":"2023-03-30T12:13:00Z","last_seen":"2025-09-17T00:37:46.848459Z","alert_count":0,"request_count":1,"received_data":846,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ib.adnxs.com","ip":{"addr":"37.252.172.123","port":443,"asn":29990,"as":"ASN-APPNEX","country":"Germany","country_code":"DE"},"domain_registered":"2008-05-27","domain_rank":1567,"first_seen":"2012-05-20T19:01:49Z","last_seen":"2025-09-22T17:38:36.371951Z","alert_count":0,"request_count":2,"received_data":1624,"sent_data":952,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"geo-location.prebid.cloud","ip":{"addr":"3.167.2.73","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2022-01-27","domain_rank":57585,"first_seen":"2022-09-28T00:11:58Z","last_seen":"2025-09-22T04:33:23.08025Z","alert_count":0,"request_count":2,"received_data":1198,"sent_data":896,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"csync.loopme.me","ip":{"addr":"34.1.233.77","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"domain_registered":"2012-08-22","domain_rank":5343,"first_seen":"2017-10-10T15:53:43Z","last_seen":"2025-09-23T14:18:29.469536Z","alert_count":0,"request_count":1,"received_data":437,"sent_data":652,"comment":"","tags":null,"fingerprints":null},{"fqdn":"edge.aditude.io","ip":{"addr":"172.66.168.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-09-05","domain_rank":64087,"first_seen":"2023-03-14T16:14:38Z","last_seen":"2025-09-22T04:33:22.917461Z","alert_count":0,"request_count":1,"received_data":472039,"sent_data":1477,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"prebid.a-mo.net","ip":{"addr":"163.5.194.35","port":443,"asn":60558,"as":"Phoenix Nap, LLC.","country":"France","country_code":"FR"},"domain_registered":"2017-09-08","domain_rank":5022,"first_seen":"2020-07-14T17:45:55Z","last_seen":"2025-09-21T23:43:02.523709Z","alert_count":0,"request_count":5,"received_data":3603,"sent_data":2843,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"prebid.cootlogix.com","ip":{"addr":"45.55.120.38","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"domain_registered":"2017-08-21","domain_rank":33029,"first_seen":"2019-03-28T13:05:50Z","last_seen":"2025-09-22T05:52:00.673316Z","alert_count":0,"request_count":2,"received_data":862,"sent_data":1018,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sync.a-mo.net","ip":{"addr":"163.5.194.37","port":443,"asn":60558,"as":"Phoenix Nap, LLC.","country":"France","country_code":"FR"},"domain_registered":"2017-09-08","domain_rank":9445,"first_seen":"2024-01-09T10:46:22Z","last_seen":"2025-09-23T03:44:17.214764Z","alert_count":0,"request_count":2,"received_data":478,"sent_data":1265,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"static.cdn.admatic.de","ip":{"addr":"172.67.72.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":23659,"first_seen":"2025-02-14T04:58:23.200884Z","last_seen":"2025-09-21T23:43:03.740995Z","alert_count":0,"request_count":5,"received_data":12287,"sent_data":3590,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"money.ca","ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2000-11-06","domain_rank":440880,"first_seen":"2012-09-30T15:27:59Z","last_seen":"2025-02-14T20:21:19.966123Z","alert_count":0,"request_count":29,"received_data":1402343,"sent_data":59619,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]},{"name":"Teads","description":"Teads is a technology provider that sells ads on publisher websites.","website":"https://www.teads.com","common_platform_enumeration":"","icon":"Teads.svg","categories":["Advertising"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}]},{"fqdn":"r92p84zajxs4zgxny.ay.delivery","ip":{"addr":"104.21.41.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":3,"received_data":113501,"sent_data":1360,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"script.4dex.io","ip":{"addr":"104.26.9.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-04-02","domain_rank":28714,"first_seen":"2018-07-23T10:04:27Z","last_seen":"2025-09-21T23:43:02.706744Z","alert_count":0,"request_count":1,"received_data":62635,"sent_data":414,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"df0767b3d0b899e72183ee055fb31687","sha1":"3b216091cad1771b9cb8123477d0629a04ccbbb5","sha256":"6c544cb1cdd3215a4823eb531e34c5c7d65b084de2586f60881d45dc7fc77366","sha512":"a24d8bdaacdb346c1312a13191088e488819af8dc6991af87693fca8be2dbe09f1bbb22c45b938bdce810101b08366052f21d89a103124403f7b60b031abf2db","ssdeep":"768:mFVki7Wnq9puLMiD5wQNqoKybZxKU7omPVBpSEedA74sQPjRM98Vgol7b85QtNr+:Yo+Vp0Wthd8rG1LL2YGXjxlwK","tlshash":"32535bca71d2787207b35af6e07f4142f23610753589c8a4b39adce528e98d96232f3d","size":62944,"data":"","first_seen":"2025-09-20T03:59:22.797759Z","last_seen":"2025-09-24T03:05:07.45347Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"adf9a11c8dd8948a7cdcc6ff39b96f93","sha1":"bf809357372d250800d2e1ad7261e16afe2ad3de","sha256":"cb37d7b59c4e5010d15b857994fee528c38fc2b9bbff80bf1f18272037a96844","sha512":"ddde79cc8c05f54bc0eb0fec67b51e4adc74722382091fa88d824a04049c00ebd17060e188e000dfa238fdd105a43874009916431476ed0d422d280353731c9e","ssdeep":"","tlshash":"23d023c124c794008362b591c02c703772342e56c03ff4d4353c57745077007c1d8d59","size":204,"data":"","first_seen":"2025-09-24T03:05:07.455723Z","last_seen":"2025-09-24T03:05:07.455723Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"ca6953356109128a6e170283dca10efa","sha1":"e2f809b51bb49164711139393a9a4f529a227463","sha256":"06e15cdefe2b52dbd99c3c5e8be4cdbc6d614e5fa6dbe94e7687de0da593049f","sha512":"2262a98e027ecff146b80bd4c164ad9ff760993d56af3e8569def67486652ee256c87534fb2a3b1bf439953932defc05148e8420f00577d8c622c28e0835a14b","ssdeep":"","tlshash":"78d022c024c7a8008362b4a2c028b13772342e9ac07ff8d8323c9b7490bb006c1d8da9","size":204,"data":"","first_seen":"2025-09-20T03:59:22.885809Z","last_seen":"2025-09-24T03:05:07.456957Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"018b1f57f0e2bd779d92e583489d8591","sha1":"9cc222024787b70be1c2c11218a83da9bec1e3ea","sha256":"5b09b077a0098e6954c749345ef8092ff0f4371090426d362f2aa6f9a29ab1a3","sha512":"3255a356b12382ec33534249af856db10cee336ab4f75be700463a9d14efe025ca68951fe1973b670b2fd74f3f6fcfe20a6ff2c69d77e86c23b2d84b2fbb9ee4","ssdeep":"","tlshash":"bcd022c024c7a8008366b4a2c028b037b2342f9ac03ff8d8313c9bb490b7007e1d8da9","size":204,"data":"","first_seen":"2025-09-20T03:59:22.895104Z","last_seen":"2025-09-24T03:05:07.458015Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/__ssobj/ssdomvar.js+core.js+generic-adapter.js","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"46ed7e61ee232bd537ef2e349b1df36f","sha1":"74ba2d4aedb3a6a789a3d15dd5b346c506fa51b5","sha256":"b54592549433cee46c1a42a830a71bd04e105d8f16dbe18c760c22677f095da7","sha512":"5613e9e91a23ee398babb6891ff6f8e82c05e404dfaa412256d65b8ba2bf04824ba3adaef20ba8ae64a76b46fd1f47b0955ecf141ce3f023bbc47adde9e8ede5","ssdeep":"384:Kb29RIeIWdQ84dVSSygAm5MHiJD7Vk+V40Wx0h/MMmrMK7jLVaB:Kb29RhHk/6D+MHAD7VhK0Dh/M1TV0","tlshash":"b092c4e831c171379bdb20b2d46f620ab13975e31e8fc050e564e8a178bc92e4e77e59","size":19958,"data":"","first_seen":"2025-09-20T03:59:22.657908Z","last_seen":"2025-09-30T17:15:10.376229Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e685bf8c3599741042c5202d1909a0d6","sha1":"b4b7b07ca0437355b0a2f870e74d740781909296","sha256":"f7391190001a102753332e86cb3a4521d53726bf9cec5d9b7ef13306ce761d49","sha512":"fb14229cbff6d9be74469bcf2ea336d5f613577a0bf360ae6e850aff94cc4ad4722e87febe274780683c5d97813a8eb213b5adb32ff8ded96a147fc89d2d4c5f","ssdeep":"","tlshash":"b3f0dd2f73d426b8504c538ff36fb2453061e7748b8541118ee504592fabc5bb285772","size":656,"data":"","first_seen":"2025-05-27T15:26:37.787655Z","last_seen":"2025-12-01T16:21:13.606987Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"310e310ea56beb12a5b0f4927fa86603","sha1":"0aaac42b8608a6c0f1999bf87b157b411ddd0ea4","sha256":"b2215d3c84b029897d61f0d332187a28fd66fcad31e14b9295656a2a1654d23a","sha512":"ff1f0e9c6431c644a5955fe6d83263cdcf31272baff462e63e46c7116ed74d40d05b617d68a4df0d8d0b43f25828bbbaf21e2467d98458ad71b1fc806dc4774e","ssdeep":"","tlshash":"89f0239191bd15db9079625cdf1bb342f6a9070358e65697c221900d1604703d010bf3","size":446,"data":"","first_seen":"2025-09-20T03:59:22.805539Z","last_seen":"2025-09-24T03:05:07.45966Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"fd4ebf7d33310c370e3a701d88db441c","sha1":"33667b3457bf84fc7571b8bc91da489a4186d522","sha256":"fecad04084f9cefc6b7edf56d5445e5fe885ce5a64b53048a9517708e97232d8","sha512":"48005386b2ef852fa96b5cd433c4fed818c978eabd322550eca5cf26e730ede3f0bdb933f0dea8c1dd35e4936663d2a7e7db5ecc965cc6a5413f2258da7c0a1e","ssdeep":"","tlshash":"bac02bd418c30d00c34334a0c035a03773341270817d8464273ce358b073106d06ccee","size":143,"data":"","first_seen":"2025-09-20T03:59:22.936406Z","last_seen":"2025-09-24T03:05:07.460617Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"b3ff617bf6aa30aeed1d21d55b2efb97","sha1":"cb06bc7932091fb7a0fbe1b97948c62319ec094c","sha256":"71d46b4fefc7792288037829a2ce8dab801cee880042f2073bd9ffa8c1bb73f4","sha512":"ce20a1e1d62ac747d20dad62c7c83c2317cb69270516086ef260b9b67e1fada024aea68793602c42b1de955994f934f331e4d932efa591783fc94e317d8d3fd0","ssdeep":"","tlshash":"3bd0c28217879808413630a3856070ba93742bebd9be4d98743d93647272107e24ac35","size":287,"data":"","first_seen":"2025-09-20T03:59:22.815463Z","last_seen":"2025-09-24T03:05:07.461852Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-T77L5RT","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2fcdc85c51ace400bf38add892c0672","sha1":"33f0d1f2a388e4cd474711b833381b72a9c4e923","sha256":"6ba0edece0e3c5eee40437fc0130d84d56f952e3f5d9650638a3a96bee8f37eb","sha512":"446ed62d3a36b5622202c0771452b992c721efa1bbc760290e0c91d24b7e742a00b0c0c88082de6d032db947502d63931a71947668a6644188de6db8faa412dd","ssdeep":"6144:Y8YEFp5Y1D2im068gZqI2QNTs7eBnhsVa6H:YRuYN2iNgtBq","tlshash":"0f9419cd73c674664392b478903f018bb5bb68a2b44cd895f189dce42e74aaa4137f7c","size":425177,"data":"","first_seen":"2025-09-24T03:05:07.36509Z","last_seen":"2025-09-24T03:05:07.36509Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e119dbcfa7c29c7941152434f228f75c","sha1":"b13b3a888dcf80251cb03f06916dded88e620208","sha256":"de9e9511b2b7a85c68065b76e37be78141cfe9f167a24b53521be0271316cd05","sha512":"2ecf37de9a7f51f5865de774da01f42b927a5cd8a3b0e37647a7c38a3ed608b39163e844e88abd19bde65ad0b7291f464b17fb819ce71e9ad2e1cfcb7cdb502b","ssdeep":"","tlshash":"54d02bb634c0146652b982b8b3b383093467124858195a16a54980586a34c95004a8dc","size":266,"data":"","first_seen":"2025-09-20T03:59:22.954651Z","last_seen":"2025-09-24T03:05:07.463395Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/sandbox%20eval%20code","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"fb4eb094524daea58bf7f82331598541","sha1":"f5ca39eb98fa1685f8647514a627d3d7f216f7ef","sha256":"7cbf1e77bb9277bac7030ded2087246adf5c59564a5a1f28ce8c09be6ef48683","sha512":"316e84930b062a939f8ae6e0f256bf68257e8c01b0f56f499ccf557628a1fdc99258a069b0e11aa956b96109ccc6fd63225f13191abf42ea4f36b89485c66ba4","ssdeep":"","tlshash":"f4c02b63f77025dd1f183ab07511600363c6eb044bb74002f006003f5440fb519b80a4","size":136,"data":"","first_seen":"2023-04-11T21:23:25Z","last_seen":"2026-04-03T17:32:11.500538Z","times_seen":134708,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"42673913c237da2bcc4f1aa3398f57e0","sha1":"4b367ca2b752cda67c524bb6f9692838700f7bd4","sha256":"4b4f05cc1e1a70d768e1d410fd1c9b97c15ec21d0c5f27d4186f593edb39352a","sha512":"c4ac0e85c6b8a8cf930229bdc7944e5538f2e19464397362d900543739a9c99b42a014457c984a1989480246dd4bfa6aa0bf6e36ac29cd484d0028be9d66fbe7","ssdeep":"","tlshash":"6fe0f12eba224a59158d099c71fa771461f7c2222f2c5133605acd08fd2dc1187312cf","size":410,"data":"","first_seen":"2025-09-24T03:05:07.46545Z","last_seen":"2025-09-24T03:05:07.46545Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dsp-service.admatic.de/cookie_sync?r=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fadmatic_autres%2F%24%7BUSER_ID%7D","fqdn":"dsp-service.admatic.de","domain":"admatic.de","tld":"de"},"ip":{"addr":"172.67.72.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f24c0231e1d0a449a29fc0a87d6682b0","sha1":"11633cc21b656e40378373d3226bc5c686b4be32","sha256":"ad9fdf22c42157fcee5fd2730595c34dabcead3a67cfa13a3daec17f49cccc85","sha512":"293a2123389a066e37601caf7eaf3a24e226b925b720a598d3edf85d5acf699b37e425a3b79518b52b138a7bb817d49b2879103844145646e8becd1f96706e12","ssdeep":"","tlshash":"484161bf16a9131c470327a656e253de7c36221938c154e6d6accc1b50a8e3125d97ec","size":2248,"data":"","first_seen":"2025-09-24T03:05:07.466639Z","last_seen":"2025-09-24T03:05:07.466639Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cdn.admatic.de/cookie.html?bidder=membrana\u0026gdpr=\u0026gdpr_consent=\u0026f=i\u0026uid=13660fa4-e1e7-4d47-85bb-fed4b58cf9fd","fqdn":"static.cdn.admatic.de","domain":"admatic.de","tld":"de"},"ip":{"addr":"172.67.72.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"74e698f60c481a697079097bb4d9a581","sha1":"11c54cc7d43ef66c1835b09208946c05cc31aa6c","sha256":"30da2eda7a3c2f2a750c8484e8182d8b15328dfd1b32cba9d1e600164cebe4a3","sha512":"57705fbb90b29578acb93f391a98cf8ad90500752d04f34db6027fbc586c9466e49c92a1e7ed3179c096b8310f66a667a32265271855a6d5cf00e2bf70037f53","ssdeep":"","tlshash":"441166507265ac9e870602f81f750d0ba4a1e1523cf5a069b88df5b13212c17d7fe5ef","size":1105,"data":"","first_seen":"2025-05-21T22:21:34.449577Z","last_seen":"2026-03-27T07:05:51.701386Z","times_seen":2344,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"9e419c41b9d2f0a69b350cd4f0479500","sha1":"1dd093dac2f1f3a97699a9233053ca9a44d3a837","sha256":"1cd35b84d047d69f15fcd70711681e7bfb0cd2d813d699f3f6c4280192b6e011","sha512":"600f1055e9a547938d60a7d04c8d26191946c278a4ddfef4eaeeef1448141f616693ea3231f51c5eb50f24acac3808de86bb4f4788efa30bf884a8afa35447e8","ssdeep":"","tlshash":"33c02bd448c20e00c3033fa0c035603763b81661c0bd4475163de3a0903301bd04cc6d","size":138,"data":"","first_seen":"2025-06-27T18:53:14.775473Z","last_seen":"2026-03-29T16:46:00.992069Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"cec9c98dff3a3e2525d79a3d1d195a98","sha1":"9150238313b021e92aa5a1308eb70bc2b790fb6e","sha256":"9b61f27d73b369536b546644b7c4701fa45b47fc30d22bfd9d6275ed32d7ce6b","sha512":"baa144476b158abb26e3c32fc9023175856d25c8fc8c3adcc17b7df967dfc47ea871bfb5c848a9308748857d527463979d1e097b23fd2638ffc643fb0f025356","ssdeep":"","tlshash":"b0c08cd418c76a00c317b4c2c03a946762382ea591be88a43b39a79495b7036d19ccae","size":162,"data":"","first_seen":"2025-09-20T03:59:22.811711Z","last_seen":"2025-09-24T03:05:07.468507Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"33ca430da356699d9e2efc272a606463","sha1":"ba684a2688438bd56cf52e2e806fb37709b60fa1","sha256":"ab1a84cc9f305daaa9fe1e0e31a672bc604d0397499d2c25b29d016b4d3d9e5c","sha512":"720bb68183715fa5384b06131b975e3813a3480110e6a3181b1ecda7db6318b8a6bac16db48b778f06674fd3d8434ea1b003476a77123c5676c839f415916f8d","ssdeep":"","tlshash":"65d0c281178b9808413630638560b0ba93742bebd9ba5d98743d93647272103e249c35","size":287,"data":"","first_seen":"2025-09-20T03:59:22.933053Z","last_seen":"2025-09-24T03:05:07.46953Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cdn.admatic.de/cookie.html?bidder=amx\u0026gdpr=0\u0026gdpr_consent=\u0026f=i\u0026uid=","fqdn":"static.cdn.admatic.de","domain":"admatic.de","tld":"de"},"ip":{"addr":"172.67.72.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"74e698f60c481a697079097bb4d9a581","sha1":"11c54cc7d43ef66c1835b09208946c05cc31aa6c","sha256":"30da2eda7a3c2f2a750c8484e8182d8b15328dfd1b32cba9d1e600164cebe4a3","sha512":"57705fbb90b29578acb93f391a98cf8ad90500752d04f34db6027fbc586c9466e49c92a1e7ed3179c096b8310f66a667a32265271855a6d5cf00e2bf70037f53","ssdeep":"","tlshash":"441166507265ac9e870602f81f750d0ba4a1e1523cf5a069b88df5b13212c17d7fe5ef","size":1105,"data":"","first_seen":"2025-05-21T22:21:34.449577Z","last_seen":"2026-03-27T07:05:51.701386Z","times_seen":2344,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"b97a1a8be193fa468bc062a5a6c70f8c","sha1":"a6b7221d6f03f174e3417a637875b797dc884074","sha256":"4c6f4681e0bfb8f1768d921a397413ac16fef06533c0c18979420c47e6b839fa","sha512":"518a0d11a98ce720ea75b902e64dc2b2db8b1251db5c19ccc70e0c7982353ef5a248d8cbe00c7a75d807bb09af55e2885184921a5ad1f6d84fa5a7dbcfe39612","ssdeep":"","tlshash":"57c02bd00cc70e00c30334a0c035a03762341330807d8464173ce3589073106f05ccee","size":143,"data":"","first_seen":"2025-09-20T03:59:22.937839Z","last_seen":"2025-09-24T03:05:07.470585Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"94ff57fc56f26d32ce552a9131b09fb9","sha1":"ac459db3132caa8b39d7bb850c5ed8877cbd9330","sha256":"7b517b53fcf2888da1a1b4f55c9eabaa290cc37dbf70db300b1f1ffe05233b73","sha512":"21b557b0ba028c605b679dd8e58399e9bd2b298e41900ffe94242ad1937652a8226a548bdf7e2d3ea4fa115c194439354f0186b60fdbe7177c428ce264102356","ssdeep":"","tlshash":"7071bec5fbcda063c22960114d3f78cd253cd0b2281198afbde4f62468e98ae5225b78","size":3802,"data":"","first_seen":"2025-07-07T15:32:00.299839Z","last_seen":"2025-09-24T03:05:07.47153Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dn0qt3r0xannq.cloudfront.net/moneywise-nZYQAA5Sy3/money-longform/prebid-load.js","fqdn":"dn0qt3r0xannq.cloudfront.net","domain":"dn0qt3r0xannq.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.167.2.77","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ab004c9800c6cd59f566cc9410300cd","sha1":"70030d8f81905144fecb753542f0bc27c14b771b","sha256":"8e4ed5a4182c0df946aabba69c38df5a3f82650501fe058bbbffad6909c73181","sha512":"4e86aa549ebbd8f9c926a68080f8f636b780d1bcf00192e134e9af0e37123eac8067348317b2200878f5acb3167a729f49953ec2c800e50024e9282bd8612662","ssdeep":"768:c66iirXYyvbp+V5UcnaLSn6Fgbtn/hXQXu:T6iRyvbp9cnaL26g/qXu","tlshash":"11e209973765b06203eb90fde03f1107f271d669581e843cf188aceb656e64692a3f36","size":32787,"data":"","first_seen":"2025-09-24T03:05:07.370716Z","last_seen":"2025-09-24T03:05:07.370716Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2bb68ebc493123ac08cd06f708c37a1a","sha1":"c441d97e93ac37b022f47f4ec3f247ccee5609fc","sha256":"feee187964fa69a6753e8a13418d936c49ba4f4dec1fcaace4c4902d32d63a55","sha512":"b7e5214ef419a0acc40c0a34d41a55140ff078f9e6d7e438c6c4fff1d9ac618b0396e3483668ed6f434ed34615225bddbcc0576ff237b40957b37d1e659c6558","ssdeep":"","tlshash":"09b092a96b2b0c5200f053944f3e378871183513b1a26c32ae0021086290e0ba7a08ad","size":116,"data":"","first_seen":"2025-07-07T15:32:00.301358Z","last_seen":"2025-09-24T03:05:07.47207Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"216b9b6df5120f6d0f0bb1a27ce12dca","sha1":"bea30386d48e1e769242f04199d71529f4ff0297","sha256":"b475a8df28953d9365aac576dba3ab20382494a3991823b22a565d369d7517b9","sha512":"e7fbc80b94d5aff834903bc72e6d20f13c9d6c9ccac3d1706cdc300712a07c6dbc6547be31eb4ca4c047eea229dbb5df0a42bb1137c0e98473075ce0d853556b","ssdeep":"192:VQ9UvhTO98cZ01S46dx9mlvXdjX6erhiReP3aBQ:VQ9UvhTOSs0SdxUvXdr+Qai","tlshash":"23f13e0a36744d7400fe6215634fa6f43230e1d7614298283a4e7f686fade3f91367e8","size":7815,"data":"","first_seen":"2025-07-07T15:32:00.302939Z","last_seen":"2025-12-01T16:21:13.607568Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"4ed34306bab6ec53232b2a7a5ee7ce8f","sha1":"2176d017a29069c2abf8ca7a4958714494b064f7","sha256":"1c69d3b607478aeaa96c031cc38b15bdf4e5a49588aef0c8e05bc917868b9fdb","sha512":"cc085ad6b396bfb997aae15671804d27e4d8cf5ec16b8fdcda0b7978ceaacf01c8fb6735e4eb3763f92a39784b8807fb0d044139d950b661058680599ba6f999","ssdeep":"","tlshash":"43d022c434c7a8008362b4a2c028b03772382eaac03ff8d8313c9bb490b7007c1e8da9","size":204,"data":"","first_seen":"2025-09-20T03:59:22.813642Z","last_seen":"2025-09-24T03:05:07.474248Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b957954b1109328b99f03bfe482528a9","sha1":"bde2dd783eff1373b9daab5b8ba663d517bc9ba4","sha256":"8c0f4bd0f895cabb7fecc0bcf950202d6b135e3265a54059d7db3e0b3294632e","sha512":"5b918e1b6ee131da5fc75a585abeff6b48733c2c81c9a38d00b8ca1b0b55abcd53057d36bbcd23ddbf073f8528dce669d656ad9e6984b7d441d1c35ee2fef244","ssdeep":"","tlshash":"3cd0a9098bb0802ac42f3a10aa8c34e2c2204d385389dc06aaf2d83030f0c29a320a8e","size":228,"data":"","first_seen":"2025-09-20T03:59:22.829058Z","last_seen":"2025-09-24T03:05:07.475422Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"92265df52c2c764743a8b1568c5da955","sha1":"5f6f5d46d89cd0554560124ef5c6aa609a3503fd","sha256":"51c9bcc4fef8d305646de2bab1b2bd65cbd0f1368919dea4fc2813b4798b5141","sha512":"256e02aaf3a33e9f6951ac3fc528771291aa61654f703b78d65109d6eaeb149d30c0c1f6ca2eadb5f2615ffd4835494453a52bc7085855934c693285a802a143","ssdeep":"","tlshash":"3101ab9c6f8ef42e4508b117047ec2ac862dc0623524c0d36cc4dd5d84a4bfd892dc9a","size":803,"data":"","first_seen":"2025-09-20T03:59:22.834484Z","last_seen":"2025-09-24T03:05:07.478724Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/expand-collapse/2522.js","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5be65a9b2e1e87a5b9e87b49e0991eb3","sha1":"cb66890ebb96ea4d57ae1aa6900057cd1d3ee11b","sha256":"7076ad6aa572fb60be4939535966575ec57bedee72a08ea89b80728773603900","sha512":"3e5c9bfc804505bde616ec10dbc9222159abe405b37143ecf2f975c821bd4def2365e4b190341ed64f4d7212acde82800949acbecd4c3675bc64d505bedd8363","ssdeep":"","tlshash":"f53161973e40fee91f970432942a31c161b2356d08eee130a8190d90786ed2dbe2a27d","size":1594,"data":"","first_seen":"2025-09-20T03:59:22.667617Z","last_seen":"2025-09-24T03:05:07.330822Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7e0a1713cf9280ff2d24b5755d8b2fd6","sha1":"3e1dd237612ad28fc98d7c28d1a6f0638a5131e2","sha256":"f756fde0939b8881da7c754d508caec7cac90d0ec75781ad3cf8ec6e5aef40ee","sha512":"5783cf95817c653fb683860b78a49e359c43679ecc47a35c59d09b153f5871498e05e9b5b50d84a83619bee6b590cf6b8e64e0f0ec104e3cbbcc41221d66c001","ssdeep":"","tlshash":"3be04260b14c302a04f3336eaed7b304fe23222011c0aca907399258253686fbad6689","size":296,"data":"","first_seen":"2025-09-20T03:59:22.83688Z","last_seen":"2025-09-24T03:05:07.479827Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"15cd0013e86282721e5d437cf02ae59f","sha1":"15751eac3776ac203e3edd51c0fe30ef9b73f8b5","sha256":"f2691250a61e3d6d986e902557800543c537d1a86985061994db295993ef8408","sha512":"f9bc279ceab8eb48a1fdf65197e72ea65c157b0c67585dc85c31e26b0d1b1112e14b7d75a1dd02b152ee908a2d40001ebca652e296add06566ffeb9208debc08","ssdeep":"","tlshash":"4131d0bafb5e64240235302ade6ef386b525853551c44896de315e6d24f0d1f82c8cad","size":1514,"data":"","first_seen":"2025-09-20T03:59:22.842913Z","last_seen":"2025-09-24T03:05:07.480951Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"4f942ac3bcecd8b3ea43d9cc892d3a23","sha1":"e19b80c22a0ed991c0162c6262c10dcd82f10ca0","sha256":"f072c3e647d9927fa62cfd2dfa0d3d279d316f0bff367aa1f8a7785a547f60f8","sha512":"0d19022060c386970776ab95f0b7072072d09e0f427d177e757f709f7f26da77f3cb65287237daaab5a34a0e6a8816895771731876ead343b214fd3649c00752","ssdeep":"","tlshash":"47c02bc498c22f00c2033cc0c03548377134122580bd4476373ce790903305bd01cc7d","size":141,"data":"","first_seen":"2023-06-21T18:54:47Z","last_seen":"2026-02-01T04:35:16.160009Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"df939fdf7bef8dc98df58dd56dca328e","sha1":"65ac2c29f053c694fc6865ceab362d7ddf9e96f8","sha256":"01d4a4af60660912d25d8407961155074a6d8dc7cf643a3f95be150a19b3ce89","sha512":"b6f137c8409eddb37ba192bd32b4551a9ac28b81509e1a65d4bac52e30fb09e23167c33055006cd876353a9712bd23134b9326ad4f1a4a6c993c73cfefdc11c6","ssdeep":"","tlshash":"40c02bd408c30d00c30335a0c035a037a2341230807d84641b3ca75c9073106e09ccee","size":143,"data":"","first_seen":"2025-09-20T03:59:22.830737Z","last_seen":"2025-09-24T03:05:07.483305Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"9920b2a4f8a0aae6fce3976b12040974","sha1":"a713df9cd38226c516f93e6c05354b1c0796d3e4","sha256":"ef5a8ebff39a647ae045270c91f504e7c216bb6b0ec6e051d3242bf55148e4ef","sha512":"44e1bf570a99ee8776952c5f7c406c0579ccd66c28a9fc74b100d4f7c5d9978ea45b87cfd21945dac105148b06b1bbcdaa71070bf1529a3405c3c61bcc8eb95e","ssdeep":"384:wDD3MbvLjDyacJGNjQsxIEZz1pFPYIeKyvsz:YD3M7DyXs/91XPZFz","tlshash":"3e136472a6c58e6cb70d83c59c77fa1bd07f313f2ea9ada44068a6608170efc49174d2","size":42953,"data":"","first_seen":"2025-09-20T03:59:22.947372Z","last_seen":"2025-09-24T03:05:07.484383Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"ed240b91787f235999b7353f169eabe1","sha1":"5acddfc89f4bddb25ab5973d7bfbcca37bcfe585","sha256":"648b1a904983465d616077bcc463544a8176d2adfd78c98ef1068636d661dded","sha512":"88ffe05fa8cab804b49bc3cb8840bd9cb3f169b02893f554a2de76da62937344251b23d1b6b27552f5a4acfa6e1287edba596d2b34f2309a994a1760ee7df834","ssdeep":"","tlshash":"33d0c285078b9808413a3063856170ba93b46bebd9ba5d98753d93647276102e249c35","size":287,"data":"","first_seen":"2025-09-20T03:59:22.875329Z","last_seen":"2025-09-24T03:05:07.485589Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"453db400792d272d9c7e3a6b191d59d8","sha1":"4f3584590c342443c8df50188a75e8fc5f3a0518","sha256":"1a1695ae5f69ae075f292b4be0fe1793671db6acce8ce4657d05092ffdc6efe8","sha512":"9da4e987ede8a18df5f643c0d998be1caf09a5c02a89b956eed1115c6a09ddc462cc4781b8da21a3c81756c9bcb566ce3c8c9cffbc4a0756a67191bd2ae6de92","ssdeep":"","tlshash":"2dc02bc058c24900c20334a0c135403761351725807d4864163cb3e0c033107d14cc5d","size":135,"data":"","first_seen":"2025-07-09T06:51:28.102585Z","last_seen":"2025-09-24T03:05:07.486897Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"snippet.maze.co/static/d9d19396e39caf5310677a0d6e45b001a7074df4/contextualScaffold.js","fqdn":"snippet.maze.co","domain":"maze.co","tld":"co"},"ip":{"addr":"3.167.2.70","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8273cfe3fd690787bcadd65fefd2dd51","sha1":"67e9999f31700839f9834c448b626b36e92bcb28","sha256":"60c8d29d46e44db813a472fff38278569b164856caf00f8d28a7ed6e6dc739d7","sha512":"cd19a607c9c758027d5c44ba4e902befe2b122aecca58d14fff9ce9816a97a4f67c14bc3eac6b48b21f1277b6f3a8cc569a988142565e3719c9d1e7ec6db8a77","ssdeep":"384:hROqTwTWzChfkYcJDEIS068Fo29vafeR7xKQzJC7PslzcbLccGNdGkhswL0:hROqTwTWokdZFoaYe7TzJcslzcccDkh6","tlshash":"ca821a6196eaf83347dc810ef474934152020faeee89c04cfe7d58aba5c44c5a5b6fb9","size":18440,"data":"","first_seen":"2025-09-23T19:07:56.315179Z","last_seen":"2025-09-24T13:09:16.71256Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csync.smilewanted.com/","fqdn":"csync.smilewanted.com","domain":"smilewanted.com","tld":"com"},"ip":{"addr":"172.66.154.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f19a04ee31b00cde9b19eb0d87c1472","sha1":"1da80b259134cae08d9f3f42636652505b729b73","sha256":"a1ff0c27d0d55299042bf16d415588a5f3d2255a2a1e304be8f564c10f39fb43","sha512":"57bfeedb885f9f43d538b0bbe13f3169ca652f4925ab2f5c646e81d5b3affffce2df397810620786f26f37dc2eca1187d1910f8543eff3c4a89032fe9a1ce2b8","ssdeep":"192:E3elHi1d2/yfuvO+CMaimV+sXzC85GxGAUEpCqr28h1c:Er1UauhWiKzC5w+JhS","tlshash":"7d12bb8a7aea271193877ef9095d640973a73607379cc8df7a8c91280fd140d06dde5b","size":9784,"data":"","first_seen":"2025-09-22T16:09:05.5318Z","last_seen":"2025-12-08T06:42:42.656392Z","times_seen":584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dsp-service.admatic.de/cookie_sync?r=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fadmatic%2F%24%7BUSER_ID%7D","fqdn":"dsp-service.admatic.de","domain":"admatic.de","tld":"de"},"ip":{"addr":"172.67.72.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c3835bb05ad43a43b90173df1b8903c0","sha1":"814b970b6b30046b60c538ae2d97fc73f665f543","sha256":"2f894c302f2aada1436447c772ca9e1f55d3d871c88d2e7a4ca5258dd19aede1","sha512":"a8ee6d0a257f7a8dbc9332a48f2672a78ef5e4a0c0413a5f9466bc537bcc8e8dfcc628f54fb09a50e35f5c6c01b207f7439b3a0039f3993f5373d798f85b9674","ssdeep":"","tlshash":"9441727f0669131c4743269657b253ee7c27251c38c055f9d2bcdc1b51a4e3112d47dc","size":2352,"data":"","first_seen":"2025-09-24T03:05:07.488529Z","last_seen":"2025-09-24T03:05:07.488529Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"ce2df86634cca400716a6fcffb9d5b7f","sha1":"59b4ac24786ab7ea68e6c9880a04e54d8ba875d9","sha256":"48a5260ac23bdcb7641a1a7ae0bbae07026d96bbb83475b68c1248aeab9d53db","sha512":"0d891731b7b3c047ab98fce32354861f2b5b6a08db9db735579bc0acb663b58e43ff9c0a2d9b43e6a2fc2c6dfe10e9dbe96f14dab1fe88102f15974a82f1a41c","ssdeep":"","tlshash":"d1c02bd008c31d00c3033890c035b077b1341261d2fd4869163ca394c473106d0accee","size":141,"data":"","first_seen":"2025-07-09T06:51:28.082932Z","last_seen":"2025-09-24T03:05:07.490183Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"20547bde9418fa22a34ca056dd87d659","sha1":"63a4e4fb872852f01a3d9bc0545e28c9959b72ce","sha256":"aebfd2e494dc3b5bfa5fbb8037357a8f727c21ef59b757ebc5075ae7da56b225","sha512":"234323318e453a32c9f41d153c94459062f02bc8a0fa0e2c4019c4118aada739d6b963795395181f5a241f9dd0f292074d3a532cead00075edaac6e28bfef5a3","ssdeep":"","tlshash":"5cc08c8188822a00c3033980c039546a61246a22827f48a42738a366847302ae20cc5d","size":150,"data":"","first_seen":"2025-09-20T03:59:22.809884Z","last_seen":"2025-09-24T03:05:07.492044Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"555536c94ff3a75bc3b038a614386275","sha1":"a96e63d04c57c59753d3b0a6de4832c508ec187b","sha256":"6c968844d102560982746290c85c4ed71067a928271d7262baae5c5fe4029244","sha512":"ad6719d78d1da7e80791d08b1e89fe1e5475b0cf9dea4538f060900b9f4904fd601380ef0bbf6b536f0cbe2075f37d7c0a0b2e5df2682a397030bd5e9aae8446","ssdeep":"","tlshash":"dad0c281078b980841363063856070ba93b46bebd9ba5d98753d93647276106e649c35","size":287,"data":"","first_seen":"2025-09-20T03:59:22.845023Z","last_seen":"2025-09-24T03:05:07.494182Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"7e9bb2aba66aad11c4499e43a24c6223","sha1":"b75ff15fdd9164bf9d6dedbb6c9d94b4d0a20c69","sha256":"6b7a7816c222aee4b0e3833abd8ccebfc0ab875746f2ba1c295fbae2e8ea2716","sha512":"acc1d11f31a697907b6a9816465f40c06904a3956bdd8e21c7c6b218100b761e6a32eec46fb3cf8ae13de34b561b85568e9cdd1d25ac46a894d45ba87de2b132","ssdeep":"","tlshash":"b8d0a9c014c76410837762a2c324b02aa234bb96812e38a836299364a0a6106c1aacaa","size":207,"data":"","first_seen":"2025-09-20T03:59:22.822239Z","last_seen":"2025-09-24T03:05:07.496334Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"019fed895515fa507f95583dc6d702b7","sha1":"5c07cba29353812ea1fe8499ab62944752e5760a","sha256":"f89c8da7503464b20d57930503f95396e4b3dbaadc8a55589fb09576469a88e5","sha512":"c61a6fa83fb70936f6bd1f0e110ff98477311f8e7a3645ed4305422c226d9df67fd498a36f0b8e0d859d25f801b1d8345af2125a5a708925b0fe5af441d9de71","ssdeep":"","tlshash":"72c08cc128cb6a00c317b5c2c03a942762382e65917e48a42e39a794a5b302ad19ccae","size":162,"data":"","first_seen":"2025-09-20T03:59:22.92261Z","last_seen":"2025-09-24T03:05:07.498531Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data.money.ca/custom-data.js","fqdn":"data.money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"58142a75e9762cd1fc8e6ec637f7f142","sha1":"e6a71d204d5d7d59355846f0c2f8ce7f8bda5e7b","sha256":"b0e6f9577c776b19745f303b0bd7bf81f02595e082027726287a96236c9519be","sha512":"3aced8da5e808c632acc072d5716347f9e41f3686c9c0a497598b22c3ef802e4807a8fa4438d97476f05f43c2e1bc01b4cb28b86d5baceccb417db1b7c4e27ed","ssdeep":"6144:BvQMGWlF1IwNxZ0pMWuRp9bvaZjBEYi9hIcUtTIQyhrOa2olLdva7CXhA3z:2WR+uWuRprSd1yIhohdnXh8z","tlshash":"bfb46c8a72e4f4651aeb25f8e03f1102b2b66c44740cc064fa9dedcd3d6d9496173faa","size":539747,"data":"","first_seen":"2025-09-20T03:59:22.662406Z","last_seen":"2025-09-24T03:05:07.398801Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script.4dex.io/a/latest/adagio.js","fqdn":"script.4dex.io","domain":"4dex.io","tld":"io"},"ip":{"addr":"104.26.9.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5ccbcc2259cdb10e0b65bbd0798ca7d","sha1":"c623310abec6db091560fce2b48e6e9e4230c41e","sha256":"299314ceedf1362e55e1caf70d8ab51202c931224793b9b5463c86411ae42721","sha512":"fdc3817fac82065370ad9c15075d00618cf6066d1da3720e626385212fc72bf8bcde66b00faaf347b958988514ed47a93e7f3998f56b56fe36474a771978c23d","ssdeep":"1536:sh3T2Yu/M1SRJT83Kg4BOWnIWvqLE8bvspe:s2MGvg4qWvq48bvspe","tlshash":"ab53e7de7286703689d7a07b513f110a73366445b4588048b97adee62d7ce8fa322f7c","size":61936,"data":"","first_seen":"2025-09-11T05:25:24.167636Z","last_seen":"2025-11-17T15:50:22.25385Z","times_seen":825,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"164f0f3ded5c421bfb732fd1430c1c3e","sha1":"1597f49ef671678c6b28eeaa0a5bf9ec94c9e687","sha256":"536fe32ee858a6a5d4d9bd3492b49f33029a678b002a9065b214a692000a04a1","sha512":"0d00628940669370efc730fe6701cc8c316a196a3a057a24d336d792b73737c26072781af5c01f9380d4b2e95434a67a645ce9254c90eb230075b59233e40501","ssdeep":"","tlshash":"491134e0f71cac3b203179648dbe22c959bc4a7ba481a477bd648f702950e1f8516c2f","size":1009,"data":"","first_seen":"2025-09-20T03:59:22.850858Z","last_seen":"2025-09-24T03:05:07.499984Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6dfd6af663b6fcd62cea6506327363ae","sha1":"38f5d9be6a81461527d2602b0f701863781941d4","sha256":"a38797b94fd253fd12cdefec7ed73b52f8567302080b518e31e716f40f403472","sha512":"c46ff233eaa59a6bcc6b8d36fe43d6e1c90403bc1b6d408dd8b1f9bc118c54fc9bd29a8d12324bb8997d272dd639c6449411544dabf798eded3ea1743b6c7094","ssdeep":"","tlshash":"96b01229434d452401182c0c59c910e944081034616d98003f78c50404d16c40378010","size":91,"data":"","first_seen":"2025-09-20T03:59:22.858705Z","last_seen":"2025-09-24T03:05:07.502267Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a31e7eeb21736c0acd3374b87e6b180","sha1":"a439072cb73c2e777b99e784d77166d610a6ae63","sha256":"2bbd46f56ad40fc6a3ce40ef7d1200a54b31c84bc2b0153bf6fd26dcc07a7232","sha512":"3b7549daa9d636b38300bb686a4f8cfd00b4628483164384c2da53d0c06d9631a72e74a01288468bae9154881202c1bc5f3f93226cfd5378a7ccf50a3c01dc86","ssdeep":"3072:/L8n9g0hb4AUh9VfsOztpEkNHGELDaK05ZQEO9AjUy39R2blwaFt8fXxJjxBw:/LFAUh9Vz5pEkNtj8Xt+KfXxJbw","tlshash":"8934e5cdb2d6f03243ab2075806f510bf23a6d59b40e8454e225e8d67c7898ee277f79","size":251800,"data":"","first_seen":"2025-09-24T03:05:07.440961Z","last_seen":"2025-09-24T03:05:07.440961Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"cf96ca188bbf642cd2215a8e7aacaba4","sha1":"e5eda20af6a14ca9fa614dc92c6ebd7320596704","sha256":"2566beab591c7638cdd97e7e5fadc2440a6a730ff5a529bd600ff19191008e3a","sha512":"9b4ff2d8902be05260845bad517f955fcef66b79baff6a24ebbcc1937ce711118a3af777d3af20c95a720a5a8a85ca498c3b255f618e0f41f5715c2386db9190","ssdeep":"","tlshash":"2fc09bc458c75900c21735a1c135543761791765917d4565163db3a49533216d15cc6d","size":132,"data":"","first_seen":"2023-05-09T07:18:41Z","last_seen":"2026-04-03T13:14:36.754291Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"1ed97987880bc1c30b690a600b161d94","sha1":"e29b10431d220561f534213f5be94edaea1f5e33","sha256":"8bb6abc5c270d237d366baf7b09f43568d56899146dd883c6aa98a868fcbf7b3","sha512":"b6b83ac911379583d6c0518efafa65d0cb3a04c3003b8581888b7c97079c75635e8004b34370c4efafbc0d4f4df551ce990756644c25beaaa0da0e5f3667e18f","ssdeep":"","tlshash":"62c02bc408c21a00c20734d0c075c43722381271c17d8465163ca378d4b3947e06cc9d","size":145,"data":"","first_seen":"2023-04-16T00:08:59Z","last_seen":"2026-03-31T21:50:49.299408Z","times_seen":609,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"r92p84zajxs4zgxny.ay.delivery/client-v2.js","fqdn":"r92p84zajxs4zgxny.ay.delivery","domain":"ay.delivery","tld":"delivery"},"ip":{"addr":"104.21.41.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"264c7aa8744286646dfdf8960902b977","sha1":"95de1d22c99528281b663bca9aeb5870f40f6f48","sha256":"9f07a20dd7fa218ad622055d0184ae29537a87ea95854dbb0c0fa877a30a4b01","sha512":"e68e396520831aad06255007e531e857593f856bf5f545b7c9030a6c8a421669a809fc7351067959dd2bbc59d10130a041c2040a079975cdf3038295916528d8","ssdeep":"1536:kQKwcOprLlUFfPTLNVjuLGuWKdjyBKNVE03G63lijfTUsY:kQuqrLlUF/NR8Gz41H9YK","tlshash":"dfb3c69abb95b47501f3a0f5407f520bb3367b162568f040d622edd43c68a8f65a3e3b","size":111377,"data":"","first_seen":"2025-09-24T03:05:07.394091Z","last_seen":"2025-11-12T14:17:45.928553Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"89e2126fd701da035895bf80eaf46031","sha1":"f581728d3d7bd70715cc5064d6815131b56209ba","sha256":"0264e701c8f478303e7959fc29dcf5a80146033f870d1d60c155379d8458b893","sha512":"006c1effbfcb932257b8021651ef37e2291350a99aa8194ba00503b566de22ba9644fa7ed8978a1d07088d547168d6a49683e085a8037305aa57d4e3b3e66740","ssdeep":"","tlshash":"a7f0ab8b79db14702da7a13e573e49142093321bb084d033bdfcc8252f0979a4a64afc","size":573,"data":"","first_seen":"2025-09-20T03:59:22.860855Z","last_seen":"2025-09-24T03:05:07.50532Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/organic-v2-scripts.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"314a69c5e55a480bedc9b1c31bb74d88","sha1":"87ec4c9666a94cd4cb05d203a1487022ed3fb7ef","sha256":"790297922a7b5112ca575e0c129a9a8cb5d9bc9308673171c53ead3824ac7d12","sha512":"b50911985d8aa10ef634c64a7dbbc81c5f4d81de1c253f77a2aa0640ad957bc51ea3b2d7975de02b8f468f3622ec59d47f28293174434b34a050b1b2a92ab485","ssdeep":"1536:0np+QFf9qCrw/IdISKdc0dlqu+JA56uYIwu6Vs+MaH73oGsxv:0np0Hqpses0Bo","tlshash":"61933dccb6d2f02583633475417f500bf33e6e69a84e8504d169e8e9bcb854ea277e6c","size":91942,"data":"","first_seen":"2025-09-20T03:59:22.783903Z","last_seen":"2025-09-24T03:05:07.333007Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-586127439\u0026cx=c\u0026gtm=4e59m1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a8ed97cca3d7b4199012de1dee135f0","sha1":"6e29b82dd98f143347e2d1153a80222d35db5c51","sha256":"bb2b74e42fa5b09eaf16044a65a56953dbbab861c87530fb3b49b19dacc7b07b","sha512":"f6a7ca36fdcd7f943c1c08fd2e378a8d4c742103096fedcaba933dfdd0ebec7f41c72eb71a852da7cee4f693dadda88dbb92f13d22d2472aa7d6684fbef6e3bb","ssdeep":"3072:q7KiunNrW6EuqEFpz0B+DsYzZD7XkkEiEJnTOvSw665zoxStgW5+K54yI2QNTs7O:fwEFp0Y1D2im068gZ4I2QNTs7eQCTt5","tlshash":"557418cd73d674668393a478907f018bb1bb6892f44cc899f185d8e42e74a9a4237f7c","size":343007,"data":"","first_seen":"2025-09-24T03:05:07.405844Z","last_seen":"2025-09-24T03:05:07.405844Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cdn.admatic.de/cookie.html?bidder=membrana\u0026gdpr=\u0026gdpr_consent=\u0026f=i\u0026uid=dc9825f6-ddb2-4f6d-a7ac-f65e841470e8","fqdn":"static.cdn.admatic.de","domain":"admatic.de","tld":"de"},"ip":{"addr":"172.67.72.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"74e698f60c481a697079097bb4d9a581","sha1":"11c54cc7d43ef66c1835b09208946c05cc31aa6c","sha256":"30da2eda7a3c2f2a750c8484e8182d8b15328dfd1b32cba9d1e600164cebe4a3","sha512":"57705fbb90b29578acb93f391a98cf8ad90500752d04f34db6027fbc586c9466e49c92a1e7ed3179c096b8310f66a667a32265271855a6d5cf00e2bf70037f53","ssdeep":"","tlshash":"441166507265ac9e870602f81f750d0ba4a1e1523cf5a069b88df5b13212c17d7fe5ef","size":1105,"data":"","first_seen":"2025-05-21T22:21:34.449577Z","last_seen":"2026-03-27T07:05:51.701386Z","times_seen":2344,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.adobedtm.com/1d8526a1ddc2/cff7fdda0680/199d26c90464/RC787ced493be54519a55bfc4eed61a995-source.min.js","fqdn":"assets.adobedtm.com","domain":"adobedtm.com","tld":"com"},"ip":{"addr":"96.6.17.25","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"30f93f24408bae9f0a8c27036a9eab26","sha1":"f7deec029f6b665c498d930c5bc589fa6df1c96f","sha256":"0e744ec7d7760f26f1a54a84aa42a6513a253d538db0c7b8bf73aa618167b146","sha512":"ad093e31425ab9d9270dffd24feee7b94877851a8d3d617c71e0c59acd89393de12226305de95180971c8a457339a7f02a1ed682f39c7421a482dfa3743010cc","ssdeep":"","tlshash":"0b11405ff3a44530616c22cbb31fb1943422d33a0b94c2a7cef20c64a9a2913a0897f5","size":907,"data":"","first_seen":"2025-09-20T03:59:22.693727Z","last_seen":"2025-09-24T03:05:07.406988Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d14pdm1b7fi5kh.cloudfront.net/script.js","fqdn":"d14pdm1b7fi5kh.cloudfront.net","domain":"d14pdm1b7fi5kh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.167.7.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"62681f14b46dff2b2fb1e1cfdfae8f95","sha1":"e7d6f165cea8e172c74550d89b56ac7c106ec072","sha256":"c8874ed9fb31202b5e256dd635507ac8ee2de2a8ee839748a369fd306ad9eaf2","sha512":"80db88f259bd87f4806ae62513d7997d54eddd46c3988579b540c9ff7759f2d4b4c89cdb786dbfcef28b947c2335bd472f154b6c8c890994fe284f46e9016a62","ssdeep":"6144:MpMJcDdsRA7Dju9NSE+8/U59/8uKXwmlpwOj:qMJc5N7vu9NSE+8/W+wRc","tlshash":"0a14d5d12e6970da4aab1532c23f534aa02fd692d89d9850e271fd783d7810ef47fa31","size":202073,"data":"","first_seen":"2025-09-24T03:05:07.337226Z","last_seen":"2025-09-24T03:30:19.44948Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7f04664028cd3aacf385c7d8635ee02c","sha1":"02e7171555ba43d87c1789f73cab2dad4b44ac5d","sha256":"11813226d39f3c0d5125f831a25d91ead31af679b50cb396b02e55fa9392070a","sha512":"27ad0faf6c5d48c356e553f1e7067b1fe358f852dfe68298bfd04e0301a5da09afb6b012861413ebe1c4e76fc6147b34a0d6db2d086fc6a857e34a0025671a1d","ssdeep":"","tlshash":"a03182a9eb3d6c7b20753234af2e558da03c215ba8830c665fd48e447caca178786c5b","size":1784,"data":"","first_seen":"2025-09-20T03:59:22.867573Z","last_seen":"2025-09-24T03:05:07.506695Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"0780391e8eec1db9de600e2852a28021","sha1":"aa17c703cdb21d31718e9f3e1d055161a9b121f7","sha256":"b51e6f6972403e521f67201dbd580146711bbb65074b61002af2aeb903c3545e","sha512":"57585a75ba56bd3bdef8f8eb35bd3ae56c4fa8936562238cabbf1c14eeb9d074bcf8c54e62c4e28e0e8f5c05ef0c889b18c7d5283bf6913f23eb4c80da17796a","ssdeep":"","tlshash":"fbd022c024c7a8008366b5a2c028b037b2346f9ac03ff8d8363c9b7490bb00ac1d8da9","size":204,"data":"","first_seen":"2025-09-20T03:59:22.953275Z","last_seen":"2025-09-24T03:05:07.508783Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"edge.aditude.io/prebid/9.19.0.js?v=634aa20e55e619677216ef102e57d363\u0026modules=WyIzM2Fjcm9zc0JpZEFkYXB0ZXIiLCIzM2Fjcm9zc0lkU3lzdGVtIiwiYWRhZ2lvQmlkQWRhcHRlciIsImFkaXR1ZGUiLCJhbXhCaWRBZGFwdGVyIiwiYXBwbmV4dXNCaWRBZGFwdGVyIiwiY29ubmVjdElkU3lzdGVtIiwiY29uc2VudE1hbmFnZW1lbnQiLCJjb25zZW50TWFuYWdlbWVudFVzcCIsImNwbXN0YXJDdXN0b21CaWRBZGFwdGVyIiwiY3JpdGVvSWRTeXN0ZW0iLCJlbnJpY2htZW50RnBkTW9kdWxlIiwiZmFicmlja0lkU3lzdGVtIiwiZ2RwckVuZm9yY2VtZW50IiwiZ3B0UHJlQXVjdGlvbiIsImlkNUlkU3lzdGVtIiwiaW5zdGljYXRvckJpZEFkYXB0ZXIiLCJpeEJpZEFkYXB0ZXIiLCJrdWVlelJ0YkJpZEFkYXB0ZXIiLCJtZWRpYW5ldEJpZEFkYXB0ZXIiLCJtaW51dGVtZWRpYUJpZEFkYXB0ZXIiLCJuYXRpdm9CaWRBZGFwdGVyIiwib3BlbnhCaWRBZGFwdGVyIiwicHJpY2VGbG9vcnMiLCJwdWJQcm92aWRlZElkU3lzdGVtIiwicHVibWF0aWNCaWRBZGFwdGVyIiwicmlzZUJpZEFkYXB0ZXIiLCJydWJpY29uQmlkQWRhcHRlciIsInNoYXJlZElkU3lzdGVtIiwic2hhcmV0aHJvdWdoQmlkQWRhcHRlciIsInNtYWF0b0JpZEFkYXB0ZXIiLCJzbWlsZXdhbnRlZEJpZEFkYXB0ZXIiLCJzb3ZybkJpZEFkYXB0ZXIiLCJ0ZWFkc0JpZEFkYXB0ZXIiLCJ0cmlwbGVsaWZ0QmlkQWRhcHRlciIsInVuZGVydG9uZUJpZEFkYXB0ZXIiLCJ1bmlmaWVkSWRTeXN0ZW0iLCJ2YWxpZGF0aW9uRnBkTW9kdWxlIiwidmlkYXpvb0JpZEFkYXB0ZXIiXQ%3D%3D","fqdn":"edge.aditude.io","domain":"aditude.io","tld":"io"},"ip":{"addr":"172.66.168.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e7cdbaa3655e4f43812acb3837d9dc8","sha1":"636883b7f885fb9a13c2eef97fecc5d3a701077e","sha256":"39dbf80bffb6895fdcee54c32e0f92f5841d93d070f37de9cc98727ccf1cc13e","sha512":"30a382ec2bac99cf38ca16dc1b6553ec2baf7a20211a3a897d9eee51402d6ced572d12fa2e5b767e3abd762e13b47cbf8ece1799671942f0094fa89799c04078","ssdeep":"6144:VMQTyDHKVCxqRH2wC1aPh2Iq20hopp8JtM2ypZ:aQmDqVCxqR2woa5Jq20h48XM5Z","tlshash":"23a42b9a33c6f0bb53d704e4d57f4215f2698904740ec050f629ada62836d6fa2a3f7e","size":471455,"data":"","first_seen":"2025-09-20T03:59:22.793276Z","last_seen":"2025-09-24T03:05:07.448617Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cdn.admatic.de/cookie.html?bidder=admaticde\u0026gdpr=\u0026gdpr_consent=\u0026f=b\u0026uid=7b456e6d-386c-43fd-bdb4-e6ab1c330954","fqdn":"static.cdn.admatic.de","domain":"admatic.de","tld":"de"},"ip":{"addr":"172.67.72.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"74e698f60c481a697079097bb4d9a581","sha1":"11c54cc7d43ef66c1835b09208946c05cc31aa6c","sha256":"30da2eda7a3c2f2a750c8484e8182d8b15328dfd1b32cba9d1e600164cebe4a3","sha512":"57705fbb90b29578acb93f391a98cf8ad90500752d04f34db6027fbc586c9466e49c92a1e7ed3179c096b8310f66a667a32265271855a6d5cf00e2bf70037f53","ssdeep":"","tlshash":"441166507265ac9e870602f81f750d0ba4a1e1523cf5a069b88df5b13212c17d7fe5ef","size":1105,"data":"","first_seen":"2025-05-21T22:21:34.449577Z","last_seen":"2026-03-27T07:05:51.701386Z","times_seen":2344,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4b894a24631ef2295c97b47eb70c0260","sha1":"b0d3c36cb8599bd49b1c8e3f2e546c213f75070b","sha256":"03b6899ebbcfa35093be7bc02e211734de614fb5e5a6af0e21c5e2eb5a5446bb","sha512":"ba99b9c97d72255c57c026eeb4b7e213b9ec3f82f91ee066e775e36b8650f508d32c111a6993153ed5ce1433632d02e435716a385989dad798eb1d04c22fb7a6","ssdeep":"","tlshash":"d941cdd0b61cb97794362898ccac62c9292d403f95c18c33be64c7b92e64e5f8b6191b","size":2328,"data":"","first_seen":"2025-09-20T03:59:22.870394Z","last_seen":"2025-09-24T03:05:07.511101Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"b87d1e00ec7474acf7d24ba8c1bdbab5","sha1":"357be19dc9a42ea3669608f979613bdfb87e186a","sha256":"1848c565398003f247c8787064ad30701425a2f86d4a4c5e7547612b26761201","sha512":"cf090ca91fe1e0f8f526b46b0e45d01fe1c1fa85184c71152d16949cbe27c38fdb731ee3b6d3f3327f5cb81829b7679a43714af1ed66ebbfeb86835686d7702f","ssdeep":"","tlshash":"ebc02bc048c33e00c30338d0c035f43b7134122082bd44b5163ce3549473106d05dcde","size":144,"data":"","first_seen":"2025-07-09T06:51:28.087049Z","last_seen":"2025-09-24T03:05:07.512547Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.kueezrtb.com/js/latest_cls.js?_=1758683062968","fqdn":"static.kueezrtb.com","domain":"kueezrtb.com","tld":"com"},"ip":{"addr":"172.66.162.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1786f7635ae5dd1838994eb70b319ce6","sha1":"e42917440b749c2bc2a6509386f618b0970f6f7d","sha256":"b2d4fd6ca97d67a9a637550873c5e70f34341d590111a59af86b3f07a976ef43","sha512":"29d445862477d2b0a3cff35d80b21a0241c0d4325543d5b75affde5dc0fdc7e431f43fd67f1e88b35fca3369290a50f604b5c9830ecd9576d90be310914cfc77","ssdeep":"3072:Y8SxxDqELfifL+lny+vcKyFxK9zJAJgddD7x41S70M2vxdI3RQpTebvC1NqKTvfT:Y8Wm1S7d2vxdI3+psNKvfT","tlshash":"e324088e2e0970d01362b5e7672561b5da80df41be8dc4e8fee87d1cf954e24ba78231","size":230182,"data":"","first_seen":"2025-09-09T18:23:27.462799Z","last_seen":"2025-12-13T17:25:33.04708Z","times_seen":697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b1dc1531afb628ea7af7b9a197b76c3f","sha1":"5e2dc92157dfaa11cc47de32a7d24f06a1850395","sha256":"514300e17b218cf23eca9310f14665a44d05dd98f105df5dbff05363698b0f2d","sha512":"f6f892e019160db27025fbd925ab8591f5639de3c24d36e42e4b0b4e802a6d0e463573f6f8c192dbb309d5298c6ed3c93d0f42b1f37de85bf1028219bafded5c","ssdeep":"","tlshash":"73014cacc9791c67964d389538f63286a020467f4e297c503e7c944c8fddd5e107962b","size":815,"data":"","first_seen":"2025-09-20T03:59:22.877792Z","last_seen":"2025-09-24T03:05:07.513542Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"069fcad27b702ec5330a05cbfc7b1b20","sha1":"2f9ead3d37183ab2345394ed38fe5121349e81b8","sha256":"eadf2dcd70d07f079a4b11f4d09d119dc90a93a2b93f99b211ffc4da6420a4db","sha512":"78e99aaaffed5f1f9ea9a48dfa224f00c0087a9a7f5408d25079aa9e05ebea367291933266fc1ef00b17cd38bb6c4cdbdbd68fe3bc705aa12d05b5c7f75237f9","ssdeep":"","tlshash":"d9b092a4ee0c69a77a16309088b360d80c5e2a3f584181b6660090d4182891b0497c33","size":114,"data":"","first_seen":"2025-07-07T15:32:00.311363Z","last_seen":"2025-09-24T03:05:07.51487Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.adobedtm.com/1d8526a1ddc2/cff7fdda0680/199d26c90464/RC11e68819bd7f4038bc0698ed903a1a0c-source.min.js","fqdn":"assets.adobedtm.com","domain":"adobedtm.com","tld":"com"},"ip":{"addr":"96.6.17.25","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b0a448a543d32ecf3e0d3cb8f630a62","sha1":"34821a5ab240ff02854e56ada34b36c40078aa89","sha256":"311ef064eac4d9eecb6cef14685f4f1d9b99aac450b1df40abe1cd541f9b4246","sha512":"5ae698fb84347d7f389eebd0a457b2cbdbf9395fd3ceee7b1b1566a6ab9bee03a54846fb9dd9bbc9cc22f3518a58197de18747df1b5bab836ff7747d0ea1b2e9","ssdeep":"","tlshash":"6621df4fd3c65410780e7097f32f67856c02df3a439852319bba1c9869b5023b25dabc","size":1217,"data":"","first_seen":"2025-09-20T03:59:22.785898Z","last_seen":"2025-09-24T03:05:07.331871Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"057fbec03ef5b3a2e55247d14707e95f","sha1":"7b52eb324885869e159e1d04e25cfd147dc1dd2a","sha256":"97f7a07efff5e2241ce0f77eec154f72aa004f15ab0b8a4ed4adb51059bce031","sha512":"349e469eee1aa845487e23f1750f05ebd512607ec6a09a60cf5131f23c08889101ff4c621068c44cf16fd5fedece3fd643d629df78971cdb700693fa9cacd477","ssdeep":"","tlshash":"ffd0a7c014c7641083776191c324b02652343b56812e3498312953649062103d199c99","size":207,"data":"","first_seen":"2025-09-20T03:59:22.864897Z","last_seen":"2025-09-24T03:05:07.516123Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"fbedd537a05fe6ff3db4970b7e60f1d6","sha1":"04b862fcba0d3530990b882835af806384c06b92","sha256":"19693d9abd7e244e892101c61625865d6fbb6305d16963e92b92e7059a0ca249","sha512":"62138e7e2d52f60fc5a0e7a9aad85b639bd42faef7c137f83b2b4a96cf30ed0a330ae96a5101d5c8fefe8f49d8a23baa16e77abf62107ab23a5cfc0e415a1a83","ssdeep":"","tlshash":"d0c08cc868c76a00c317b4c2c03a942762382e75917e48a42a39ab9495b3036d1accae","size":162,"data":"","first_seen":"2025-09-20T03:59:22.840965Z","last_seen":"2025-09-24T03:05:07.517339Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.ribn.com/v3/production/ribn.js","fqdn":"assets.ribn.com","domain":"ribn.com","tld":"com"},"ip":{"addr":"104.18.42.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7644e607a2c5ef9e60e45b7dbbcdecb9","sha1":"c80468cafa9fd4fe9580296b86e136296602aedc","sha256":"b78b6075b97ad97d1fb4669c7cd6ee7eef985c6753d7912cd4ad1a7b1ccfbb6b","sha512":"2f2bf74c58a5758d8041043c6432fba5db8344b35a7a4728f6313f2d05415a0af7aa0b63a1c2e6ebaab2da110aed3ac2d2ead3ef8c376104b05507bfde35d431","ssdeep":"768:dCI3BztpJyLjOhQKUPpGmQoKEj4eNEYxmCdKHKWA6JPAuPf:JJwjOiZ39NwYKHKKJPAuPf","tlshash":"ee23c689f6d5b0e013f774a4413f660ee1bb6a55b44ae9d1d262e0c0a87ca8f5027f3d","size":48471,"data":"","first_seen":"2025-07-07T15:32:00.345265Z","last_seen":"2025-09-24T03:05:07.356637Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-04-03T17:31:09.402024Z","times_seen":232660,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-04-03T17:31:09.402024Z","times_seen":232660,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7a26a11c08d2c696d8ad24fc2f72a2a6","sha1":"312c964bac7b6e9848856493f7e125feacdcec3b","sha256":"e97a97660515ecb7d85f1f7208143953709299c12cbb530fb4268ed2f11bdecf","sha512":"0de0a7f8fb8545b16693ccfcd4994ab35a0a160cdc5c5b10b3ae960913e33115f4c18e0fb3c5d3e95b80f888581331b6c058404b955c5f61281c72b33c872b5d","ssdeep":"","tlshash":"50115ef0fe5c36fb1e38b154cdb921c9242ce63bed0108723c4cc2c14965896c5a1e5b","size":997,"data":"","first_seen":"2025-07-07T15:32:00.313477Z","last_seen":"2025-09-24T03:05:07.518925Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f841f131fd0c46be6e271122b97fd91","sha1":"8412d6ecb40253a89a3d05fb849da925e88a2123","sha256":"a0cea7f39c5fbbf52832d518a6d4df66bfe652d93fb25d62e7494da179a1a4e5","sha512":"4f9f8beead2c81f2924beb238d3d86b2df331649817e4708421e4749c94379014e1962898c87b4efeb8769294a1d1f33538b64abb5ab5056879d7312252ee2ab","ssdeep":"","tlshash":"2d21f10de2bda122286b3473e31f639cf66085ff8611e004b5ada15c8f9027d11df6e6","size":1362,"data":"","first_seen":"2025-05-27T15:26:37.808536Z","last_seen":"2025-12-01T16:21:13.608991Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fcbae74ede393b1ca9f10d0977786f98","sha1":"d11e34efeba86ec4907f097423feb35a95e42e7e","sha256":"b23d2c3c2c7cbcb1578a24b13cd4017e58f5d2a404fe31fd7d01163e1d89e142","sha512":"a369ed681bf54f33daa541aa0fa0f06753fd228206aa879aac45f9e439407748471fcd6af3634e4bd1be2b2e779ec546c09543a877016177ecd8516cd6fb6eab","ssdeep":"","tlshash":"91119b4fd3c96414700e65abf32eab4628129f75479812300faa2c583af6427b259ba9","size":964,"data":"","first_seen":"2025-05-27T15:26:37.810071Z","last_seen":"2025-12-01T16:21:13.603696Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/expand-collapse/5544.js","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ad8d73810d836cb20c6956daa149b4e","sha1":"850a5f4494367e6ca92c584419b9b12f9c226e4e","sha256":"696d6ce9a834cf97ab57aaf8bd1274e3b9af25f198d9a4e18c2e09d7a92539a2","sha512":"49b4eda08c49ebb17a889e3cfde8c14cbf3067dd96cf9ef1a1df05f23c2a19c8ba0f5f675b86e4995dc9ba9528dc12fb2980a7c4a07734fbd57239c88d45400d","ssdeep":"","tlshash":"d4213525b18139996be5c070035aeb5ad37b388a08804a6c387019ddd8e178f27e1ffe","size":1365,"data":"","first_seen":"2025-09-20T03:59:22.791513Z","last_seen":"2025-09-24T03:05:07.358497Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepubads.g.doubleclick.net/tag/js/gpt.js","fqdn":"securepubads.g.doubleclick.net","domain":"doubleclick.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c9ed134ae3d5ffe972da2a3e59dc428","sha1":"620df222551395592e46e4c5f425cf23dcdad891","sha256":"5f9efa604bfe2aee8c1a90376125a098306ba390530a6f9b2ecb0a67cdac178d","sha512":"439231f58951b81e4a2587649aa79dbad9d39f64456569301ce3290cc5c537cea970eac765da2e60d4eb06b1d84012ce8e63b75cf5ee1c4d0742d92297946dba","ssdeep":"192:AzZ0ltIlcoaplEbajdKRFQ1A3kutlpg4m4EDac2AV7Lek8wVI+ZQkb8YkCavaun4:UqGbax07e4K22ykJUa8LHT7tBgG8h84","tlshash":"c1421e193af369ba55a3f0af0b6f510ab13888533d0df9407d6c92195f8d82d82f17e9","size":13104,"data":"","first_seen":"2023-04-05T04:46:03Z","last_seen":"2026-04-03T17:32:11.4995Z","times_seen":124180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/gsi/client","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.9.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"eba07952245a9cd75c3058e9c4e05676","sha1":"12f81cb8772ab1cdc8a100fad4d52e7832986dfa","sha256":"ec0648a945614f3853dcb8594f30d97cd9a57a53d475ed7c3efb5a9c35dc866d","sha512":"ab2a8d5f08e8834155db4637dd28d8e9baee42ec5aac2cae5019ec8ee17762c357bf0a2449f03287bdc80515563acc6c29af7c2c9c96d497854d0d33bb65140c","ssdeep":"6144:W+vK8mx15l12LT9t/C7AW/dn0qC4fsaCGFGH6XJ:W31eD/C7AWNHjfsaCG0QJ","tlshash":"c0345bdcb2e270355613f8b5d43f410ab076aa79f0498cacfa94c5f5acb09890167f7a","size":240331,"data":"","first_seen":"2025-09-17T05:29:00.600957Z","last_seen":"2025-09-25T00:48:45.84557Z","times_seen":788,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diffuser-cdn.app-us1.com/diffuser/diffuser.js","fqdn":"diffuser-cdn.app-us1.com","domain":"app-us1.com","tld":"com"},"ip":{"addr":"104.17.31.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"274303dc8790bba62abecc91ffe4b219","sha1":"eac79f2788461329bd2f974cdf4458f7fba7cbaf","sha256":"864bbaab9db5147e7737b81d4b5da99db6d33fb79c63250ed79fa1962c30837e","sha512":"dff2cdab291e0fbd0c45c6270173ae288fc76f98f299d8c80dfaf50fb53c63f27acf03ce2221268f82791df67607ce6e1e72d1d31adfb6adea71f494482bdf82","ssdeep":"384:+NRlCUNerPSlP9xOeHyZp0/qMF3+qeKtYY2Dee5indvfKNBxyhZ95CMGWi:6RlErCMe0OqMF3+NXsxfKpyhZnut","tlshash":"c9e264c87991f0e246d3a179003f110bb27969a6a8ecd4c0e771d4e0beba59e4353f6d","size":33374,"data":"","first_seen":"2025-06-30T17:37:26.892977Z","last_seen":"2026-04-03T16:38:25.625092Z","times_seen":5604,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/sandbox%20eval%20code","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"fb4eb094524daea58bf7f82331598541","sha1":"f5ca39eb98fa1685f8647514a627d3d7f216f7ef","sha256":"7cbf1e77bb9277bac7030ded2087246adf5c59564a5a1f28ce8c09be6ef48683","sha512":"316e84930b062a939f8ae6e0f256bf68257e8c01b0f56f499ccf557628a1fdc99258a069b0e11aa956b96109ccc6fd63225f13191abf42ea4f36b89485c66ba4","ssdeep":"","tlshash":"f4c02b63f77025dd1f183ab07511600363c6eb044bb74002f006003f5440fb519b80a4","size":136,"data":"","first_seen":"2023-04-11T21:23:25Z","last_seen":"2026-04-03T17:32:11.500538Z","times_seen":134708,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"e31a9e3094e0c8f963ebb09fa72541c0","sha1":"f7bb443352cb9499bcc297a0a2e53e35d8fbea91","sha256":"cf9e4f82e5f4282dc51372e2fd3c5d700ba492ec6b526d13518f8b2ea4b9a492","sha512":"37d3df41a2844942dc27185508e8ffebfbe710d4c4a227f67fef2c9a135206b20db041b781a1cfefa50bd75512c42797f10a70df2232afa54f4f2b9fade1c286","ssdeep":"","tlshash":"69c02bc058c31e00c3133494c136d037a13412708cbd4864173ca398c07321bd15ccbe","size":145,"data":"","first_seen":"2025-07-09T06:51:28.081488Z","last_seen":"2025-09-24T03:05:07.521712Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"3b1c4e4b6b044d8ee2312984584e4c7f","sha1":"bdae2d7f2ceea53c656bf24ec574a76acf5162df","sha256":"1369ce943b0904a6002b6eb05a7af82603b157363ab3fdbcb8e2311aab900fd0","sha512":"7459a9dbb8849498dfb1c77929163036150354d5c4487915a6e37bd1cd62b59b16e25ae717bdac8c789b8f0cb16eff929e407f869af53457080da030d1673f88","ssdeep":"","tlshash":"edd022c014c76410837372e2c324b13a62347f96c17e78a8323d9374a0b7102c1eacee","size":207,"data":"","first_seen":"2025-09-20T03:59:22.838868Z","last_seen":"2025-09-24T03:05:07.52279Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.smilewanted.com/js/decode_consent/decode_consent.js","fqdn":"static.smilewanted.com","domain":"smilewanted.com","tld":"com"},"ip":{"addr":"172.66.154.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"00ff8001302d3748ba139466fc3910c1","sha1":"8210e702fe525e6cddc84758ec51e96a4d703186","sha256":"eb4db95cf7c97ce22bd98d1b95dfd82204843cc8854cbe0b3b6b93be4fa41a2f","sha512":"4005e40f94ab0cab5968f759c0c3f2b25881439121ed9fdb8e4c7c9e652ee5f8652d64744d34aaa1f01aae0663a9d4f78c394140f2b661c04ad9a4e01d8d551d","ssdeep":"384:3P8RpA7Kh2sCPvthaGqxcv4Mpg7ZIxJzpbTxGkkk4JoaXUcnxfQpRX0uXbpuYF7f:spJrCzaGqK5g7ZIZb1DsXmtBKKyoOa","tlshash":"9523b88cb7f4b4b103d761b0841f100aa73d6464a81854e8bb65e9e2dcb534da67bfb8","size":49614,"data":"","first_seen":"2023-03-07T12:12:35Z","last_seen":"2026-04-03T17:04:17.808268Z","times_seen":4644,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4d1da2d4c387f5247975ea36a29e5454","sha1":"76918da9607a16c1ce97e44b61ec6655ad175050","sha256":"3fdd6b0834c6e74e1310a68d72e3336505d70d531530850b8a84ff1c8677db2c","sha512":"ee87713d051993bee37e06c14c97eeadb4e1b8dc709d520e207cef332bf2122fc4719da19a156d199406e0583f70c23bc3e17d0d543758231688c91aa6ef2924","ssdeep":"","tlshash":"b3300000000000000c00000000000c003000030000000000000000000000000000c000","size":4,"data":"","first_seen":"2023-03-07T01:17:50Z","last_seen":"2026-04-03T15:51:45.571756Z","times_seen":12422,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0cfaecba7447c30519d3bbd22eb0c637","sha1":"3381df7032beaa66c7a7d05f568b8d1f952942fd","sha256":"ec82b7c3760868d2d1549125e5110ceb4f0b5dc8953838cf6ded636a534fd1fd","sha512":"e1f4fd41a79e50c21a5b05a6a394cbcacb0842a69808728dfb0340d9de4034a653db4bee90b582acdf615179853611c79c74fcc79907d68d2f21152636b77498","ssdeep":"","tlshash":"46f0d87a28ab3560267720b85bff75243c5321270542cd217d5cc1456f31d63852655c","size":452,"data":"","first_seen":"2025-09-20T03:59:22.905919Z","last_seen":"2025-09-24T03:05:07.524381Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-04-03T17:31:09.402024Z","times_seen":232660,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"820562e85a98fd52e812f16205b6f97e","sha1":"8f03df7ad11af20a3a56d4f3506bf030c739d0e1","sha256":"0f142b855c4add8f3b30f767e3cc98fd140862420fea98ca267eda83f07fb249","sha512":"86dd5d0a1b374a06d31082edb42f2e936a15b4fa769e4c8285cdb404e664753ca4e83744349d3991f5a21111140c63bb027ed5eb27891504e87dca0c71db4605","ssdeep":"","tlshash":"c2019e1b1857a0ba1ae9607ee7373d493215224b7551c1073f8c81642fd88347e91add","size":742,"data":"","first_seen":"2025-07-07T15:32:00.305938Z","last_seen":"2025-09-24T03:05:07.525455Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raven-static.aditude.io/prod/1.10.3-jakljg/raven.js","fqdn":"raven-static.aditude.io","domain":"aditude.io","tld":"io"},"ip":{"addr":"172.66.168.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9bfea7b07328f1f1c8e014b0e0199980","sha1":"df34d94d00b0465a5a39c34779de6dcf048373de","sha256":"0045f623eed6eb783cdd190df61fa53a1a488aecdb15d5441160dee073139366","sha512":"f6c9566c6359404f9805fe49938b4008817445697a68c46a3802d4a9b3b55529c661938f32d54068e817eb733249e0095a0f27413be74e77d41af5fa57cd0d3d","ssdeep":"1536:hWZcbeajxhbTWpwTS2A/hQjyDJsdUHSR+6/pv0m1QQSMMDKPeZ4pEAC20SKC:suSaFhWph2wsdUHSI6/a87C2B","tlshash":"20c33adab2d6b13d83d896d5c4351005f3358d9a740c8078f3a86cd339a9d8b91baf3a","size":120407,"data":"","first_seen":"2025-09-19T20:50:46.561097Z","last_seen":"2025-09-24T13:10:57.785989Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#364","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b93b1c20de270a30d71ab3146f06a0d3","sha1":"1ac0e6f8b6ae4477e57b467de19c07061abfd499","sha256":"d8efbac1e3812225f055764ba830f0df9deddfe5ebc99205e05601cc76f48dd6","sha512":"5916749adeea515bd7509755ba367495379ddc10ae0e3baedbcb359a3ee672c0124b295b51e76bf547ff48c92ed8f53090ff6b4adcbb343195f5ab7f7db30561","ssdeep":"6144:1pMJcDdsRA7Dju9NSE+8/U59/8uKXwmlLwOD:zMJc5N7vu9NSE+8/W+wjC","tlshash":"3c14d5d12e6970da4aab1522c23f534aa02fd692d89d9850e271fd7c3d7810ef47fa31","size":202723,"data":"","first_seen":"2025-09-24T03:05:07.526598Z","last_seen":"2025-09-24T03:05:07.526598Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f4ad422831fc83cf5149cb586cb495e9","sha1":"73412dc9ab06f785040f44309ff72005e7f3a55c","sha256":"90dee1084cb69cad8d6f35dc2f07321e831236de01c6c0527f3630a96894ef93","sha512":"f50fb04a97fca1c28ff31d53b5933f705fb8367e2f5a5a34149688a689fa9f41ccce66080463904e653bffbe841e7b13a8e1af16a0f3fc38bfb829dbdecb5578","ssdeep":"","tlshash":"6ea0013d59647620045aa86695ab453c9268c2cab4888113b99a80a18b5046a5ea2aaa","size":79,"data":"","first_seen":"2025-09-20T03:59:22.926924Z","last_seen":"2025-09-24T03:05:07.52771Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/user-cookies.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"57620256b84a682e72bffb0411725d9d","sha1":"c5ba1a8a9505c157b387d10a2235b2f4feb95808","sha256":"e47c65fee501f26658d0f5ed23b4fab42a63ea9a5308d27318682c5128825c30","sha512":"57a75696a3fc1f18cbe97a09127011686c025f68f3ea060bab51b137fc79f96563fecb5225bfc22b8eeab46c6b6adb2dd8273c14deab9d525c2c977eeac46db8","ssdeep":"96:GYl4CQ49Q95GvGv6uk1HB+LKu5hzufKLbCIRZr54LV/SxhO4nw:zfQn+GvCYLKu5hzufYbCIRZro/SxhOEw","tlshash":"89a14524620478f958b720662bf6f38474e0c1207881ed14853eb169bd78ed7b8f1bfa","size":4760,"data":"","first_seen":"2025-07-07T15:32:00.268585Z","last_seen":"2025-09-24T03:05:07.420346Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9b905e553d7924fd35dad98a09250ce0","sha1":"4f073097faabbc07dee39d3c41ccf147a71c3842","sha256":"8fbd7c87ef29eb0e0d83a22031933fc07a03881e89f0f47ba6e6cd2b433244da","sha512":"a2f43d3b18a2b5f16ca703deb6af1f9c87323c9380b056e0400fe7e93fec49cc07e7c61764e81ecbff3afe6562b22d95d9044e229b0c52cad5faa2c1a81c1f32","ssdeep":"","tlshash":"60016b2914a3633c8865607bdfe6a74878368166841c40c28ed4c971762c9568e2ffdb","size":828,"data":"","first_seen":"2025-09-20T03:59:22.941658Z","last_seen":"2025-09-24T03:05:07.528863Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"ae426f49cd52479e33db5f3b3c034d4f","sha1":"14c00adc2f3bd95ce4eb3ee5db205837061e2bdc","sha256":"80f1b00b5b1e8c912edde065932864b069a545a0dba2ec77c21b66890cda1069","sha512":"5ebdb3c450b2c7c0aa49b0e765a93ad5cee6d03913fcd6a22c5e3662584f3757492668edfe0a5c6913d2d6a2c891c9212ae15f49e450138b986ad795b45cceee","ssdeep":"","tlshash":"d9c09bc45cc65900c2173591d035553761381765d17d8c65263de3549533156d15cc5d","size":131,"data":"","first_seen":"2023-07-06T12:22:59Z","last_seen":"2026-04-02T16:30:08.627669Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"1c44c1c97cd492c1a90e9e9b8a95fb87","sha1":"61f9b2320750618360d27f9ccb9c05e05c72b375","sha256":"a8adf5a30bc3bcb131243fd701b103b12168044740f0256aa76154266337d345","sha512":"21e08fb4d4df5f7392d367a6c79e305233f473b7ae4d3ef53efac826c4805135f8e59184a6ab1fcdf8fcf10f73b09758398fd37ba5048fd56e9ad6c9de7afb2a","ssdeep":"","tlshash":"7fb092c559c65a10c22739a1c03a943b6238266191be88a92a3db3b4a5b311ae15ccae","size":129,"data":"","first_seen":"2023-05-01T14:43:39Z","last_seen":"2026-04-03T02:29:51.315164Z","times_seen":158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-03T17:31:24.736646Z","times_seen":291316,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-HPYYC0GT7P","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"abb1312042dc38d122fb5db0b508cb52","sha1":"edec470595721897a42fefdbfbe92e9b6474c59f","sha256":"5224d79fb0d7141df56cc29126b62065a2d2ba9fe6083860e29730dc4979a15f","sha512":"ba3fbf843f9507307cf82cc281c20fe461af1865006c29c0ae4509017c525ff3d2ef758e709296069d9078e1da99183294fe67398b7f1c661f592d2aa6a39ebe","ssdeep":"6144:fBxwEqNrxY1D2im0DgfI2QNTs7eAT/PK1f2V:pq//YN2ixgMA1","tlshash":"47941bce73c674665396f078907f018ba5bb28a2b45cc895f189cce42e74a9a4137f7c","size":419216,"data":"","first_seen":"2025-09-24T03:05:07.401224Z","last_seen":"2025-09-24T03:05:07.401224Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"5ee807aa775493789b10da49da22693c","sha1":"29689617e5e380aa649f985b656b5c2087235175","sha256":"0db3e6a8838daaac5711653ef323e0719a9c06f2a812bc5ca06799458ff73d51","sha512":"a0b7bd0f9f7a6f1a979093dbe9e12676c114a28201ea29b5126af7ed8795dd78c4184ff34b5c29b1eb36a70d3e3c3c0cbf62c9be8e93e34c390d3144f2beff91","ssdeep":"","tlshash":"a2d0c2810787980841363063856070ba97742bebd9fa4d98753d97647276102e649c35","size":287,"data":"","first_seen":"2025-09-20T03:59:22.872671Z","last_seen":"2025-09-24T03:05:07.530817Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#362","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"cca7dd89444cf8ebfe353c6d0fab2708","sha1":"4718f2e02b8fe1118950e555a8be1cb38f20756b","sha256":"6c9dae222912aa31ce193fcda937d00ddcb13f5f07c3bddf65dacf0c241751e5","sha512":"953d21e990bff0dd9cbaff7737ea601578c7968ba6b5e1b0ff65525d3db8e825f7da14338d871e4998a1a1be4429ba52efc9020013fd4b3259c49fa781359aff","ssdeep":"6144:ypMJcDdsRA7Dju9NSE+8/U59/8uKXwmlUwOk:8MJc5N7vu9NSE+8/W+wwB","tlshash":"e914d5d12e6970da4aab1522c23f534aa02fd692d89d9850e271fd7c3d7810ef47fa31","size":202723,"data":"","first_seen":"2025-09-24T03:05:07.531914Z","last_seen":"2025-09-24T03:05:07.531914Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"909fe3b2f716f58099d46fc5d5ac9b16","sha1":"25bda553c84953d71d5cf7f34d1fba484886daf8","sha256":"b8c98b59342212f42676b4c916a57506cce2f14d1cd2499f9aec6edcffdf00b8","sha512":"a20117059cfdcec1fbad99aae068500b0496b0b71c8d092a1979f1f57c2cbb3f58dfc8af345a61c9617a6f771d70cb7556d2aa1696b878fd8b1b61b4242704fe","ssdeep":"","tlshash":"d7b092b8eb7f36fa3b32249869fa178d5668148142028cb20990eb4dc9aa5938658418","size":122,"data":"","first_seen":"2025-09-20T03:59:22.942858Z","last_seen":"2025-09-24T03:05:07.533015Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"08252dcfe8f5f58602433504ceb6749a","sha1":"485f8aa34ca53397e933c805c283348f8558295e","sha256":"d2df778c0622f94b2cbebe0d77bba0a90db300746c07f11dddbab8598e5d2728","sha512":"5120e326acdfd7f70d2bf702c3c30f182c5828877c52e38179f5a8f52ac8193ca53b589aa23cde8b8dce90733f47bd0cdb7cfe0c68275a88daf24b9b004b3f09","ssdeep":"","tlshash":"f731200d402a0caca6590548336fbd65331d129f6e96cde4b7accb09affa59c307600d","size":1504,"data":"","first_seen":"2025-09-20T03:59:22.948808Z","last_seen":"2025-09-24T03:05:07.534269Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"985ed4920fc1c7d86277edf8e556e641","sha1":"63e42515c2d8650a5ce46df832a42211832d3e97","sha256":"e7cca8d9bf86104b3f80471b281511f798c54939fd919b8ff3c30ad04263acdf","sha512":"8250d6c2e3265ac4c4bc02a90cf980190bef4c55902876066bcb28f540f8cc57aafd46a43441f7d37b8dfcd648a329f48139b982f9696ca441326ff3ef85dd04","ssdeep":"","tlshash":"2bc0923a96d62b74291b12586eee207808951027019b8c113d1cc2854fa19b410b5648","size":139,"data":"","first_seen":"2025-09-20T03:59:22.95193Z","last_seen":"2025-09-24T03:05:07.5356Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"eff6b93e35192b2aa7487848b7dbe626","sha1":"aa1a891c2c63adbc5e31093ffcef7f0635136f42","sha256":"100ab52f1f26be46d17bca4640024dc8b0f2ad1117657f98d93afdfe29f0ecad","sha512":"e518825f3d146e124787cab96bffba7bcddb29928d862ac85c9ea4be09ee4281edfc1d8b75a16b61d359eb3a0f58d0ad358a85f8b157f805f07874082023e281","ssdeep":"","tlshash":"17c080c408d55700d2033491c037552f61a42d32557d54785638575464f711ee05dc6d","size":166,"data":"","first_seen":"2025-07-09T06:51:28.079702Z","last_seen":"2025-09-24T03:05:07.536698Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"70735a0f43375bf8684abf1732fa9f13","sha1":"6d2cb2cf326918a274b8e26e1b3e587b345b205f","sha256":"e0ea6f9bb4dfd479b9bbc37f5e9dc37d25de1e67a9800a6fcdfb001cabb23d5f","sha512":"d9064efbc7c39ef33c5de3346baa48b5aec2ab60e56a26cfe58e85b7624a026f4e621d90b0a8698a5879e738f0f2bfb695c3eb4ef9b94808bac1f563eb37b0d4","ssdeep":"","tlshash":"4fc092059f8caf2420220183bee937043a9484030a882c8cf1844da9b8106efd8f2b6a","size":142,"data":"","first_seen":"2025-09-20T03:59:22.956788Z","last_seen":"2025-09-24T03:05:07.537698Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b740aabd0b955214f90b47bb0cef8825","sha1":"a5ba99134d89715f8019d225733fa705b3751df8","sha256":"02bcd3019446cbfd96f7c953517e725900239581b1655c7b249d5ed69e508a1c","sha512":"317dbfc6ce0d058c25394223f4da8201175d275553712185930e83dee78c14e0cb0a69dbd6b8dbcf9398d17cda9038e6663e04b683d98552221aba20be35bf94","ssdeep":"","tlshash":"f8e02dc4f6ab00f66741c08f32cfc48862aafa1c087e50e0edbe0bb89c3423a4043b50","size":333,"data":"","first_seen":"2025-09-24T03:05:07.538723Z","last_seen":"2025-09-24T03:05:07.538723Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"f1eb6ee4b5855140c0e7ee30180a80b9","sha1":"8321f8fcf7db412795b29e69aa00e8db3d05a203","sha256":"b74de2cd77424de803afc0ef3b1c662028876dfd114a305e31b75edc81d438e0","sha512":"2626f98da08ac761b04f5c23ab79386737e6866b05e4e5449394bde778d7b475144a33fc2b394bb17595840c5e0611da6ab9c013924cad17607d0e25d89b0b8c","ssdeep":"","tlshash":"f5c08cc028c76a00c31bb4c2c03a9467a2382f65917e48a42a3aa794d5b3027e19ccae","size":162,"data":"","first_seen":"2025-09-20T03:59:22.862996Z","last_seen":"2025-09-24T03:05:07.540637Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"995a6a5bf7725d2c3d3dc604fde44f4c","sha1":"ef374a146d0319fafb180ac1954fe46e2a4cccb1","sha256":"1d309d42c4370275010d03296513a9739e636149a3acae44de4e4424349cedb4","sha512":"f4bfca7b92b5ac597db88911470c0323ed64a8710acc9617912c1b0e79d27ed564a91fd532dce8d90453dbb06996e1dca59cc04bb7d138835e947ac98c5e57de","ssdeep":"","tlshash":"7cd0c2855787980841363063856070ba93752bebd9ba4d98753d97647272103e659c35","size":287,"data":"","first_seen":"2025-09-24T03:05:07.541717Z","last_seen":"2025-09-24T03:05:07.541717Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"411e297555c3f8b491390f3c2ea8d3aa","sha1":"9eb710d28b4906ae7a4a99844184aefd2cf507a1","sha256":"ade0030661d26937ae872b716e1df76d1c7d6c7151e8784350437d6b3303ce1a","sha512":"7d90bed9bec7333da3b4fd40308b5112f6c22275c73731a37d0ccb23cd4f769bb8c477d7922ba53ee2f9b187b9b4fd2aab25a25878778a462f153bbbe2bc5fdb","ssdeep":"","tlshash":"9bc09bd458c65e00c3133aa1c035553763b91665d1bd4575163de7a4953311bd15cc6d","size":137,"data":"","first_seen":"2023-06-27T02:39:54Z","last_seen":"2026-03-29T16:46:00.973635Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"4f064b49d9fefc210c5227ca046a358f","sha1":"76bd0c488c5a74c12fbbb0ab85c8ea848a36ef08","sha256":"62960641bc38d1a70b893459a576f7a2fcc839607d4684c64b4940bce75b5929","sha512":"e483164585b19c62a2a13c84f0c68d1fd9eed27c70a7c4f8ace8f5426ebd0b9ee2eeb39809645c8d3c0b6edcc889f6b33295e0420e0f8ff217b3f20e721f36f2","ssdeep":"","tlshash":"54c02bd04cc30d00c30334b0c0359037a2341230c17d8464173ce3589073106e05ccee","size":143,"data":"","first_seen":"2025-09-20T03:59:22.917755Z","last_seen":"2025-09-24T03:05:07.543661Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"fe5a8f03803cc40183e40b93723a3fc0","sha1":"074d0ccf0bef89e988e14bd60fce327760c98be7","sha256":"87fbf135140f270db6f2970d4b8941334d16ae81527785ba0ea6afcde82e5d08","sha512":"31f307b84412daa49738c34ac7c81c526fd1694595218e350673d6b824f4dd400063991a57d42b6c1408450b205233ff0459918e579e777b6d733e0e906e38bf","ssdeep":"","tlshash":"a8c02bd008c34d00c31334e0c035903772341270c07d8464173de3589073106d05ccee","size":143,"data":"","first_seen":"2025-09-20T03:59:22.966859Z","last_seen":"2025-09-24T03:05:07.544503Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dn0qt3r0xannq.cloudfront.net/moneywise-nZYQAA5Sy3/money-longform/prebid-wrapper.js","fqdn":"dn0qt3r0xannq.cloudfront.net","domain":"dn0qt3r0xannq.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.167.2.77","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd7f5e3a98c77642032f20afbc3a9afd","sha1":"79369545b5a34bd98196f35844688fdc3f6c58b5","sha256":"0d7f161b1861d4a42d625872e63b7dac84d86de8773ee472e83476b1ec552cb7","sha512":"2127e3ff94eaa019e004131ce62f90a020550ce36030fc696c9ec6802c1ad2efc243e6d3e0a2d00369e9181cb28139ad735d07bb7b3639863d32decdd1dbcd6e","ssdeep":"6144:wWYZd9cn5AMyxK1TH794TPCOcYWdK6MuF8VhWOrQX:w3ZW79dOcYIKBWf","tlshash":"0e644cab7355f96e43e250e8843f2302f2755865640e8018fa9dcce67be858d02f6fb5","size":319484,"data":"","first_seen":"2025-09-24T03:05:07.36397Z","last_seen":"2025-09-24T03:05:07.36397Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/expand-collapse/9212.js","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2756a0bfee20b4c01ce3abcd52d73d7","sha1":"bc4a77ede04ce50190c4d250b2dacb8fc170180c","sha256":"fd15eb4e6c84806a89720b7d2ed3c17783bbf15539f88b3932bee0569949ffd5","sha512":"218d823c64781a278d04b15086b2de25342fcea2ea2f04dc01218a5ae1fad8e4bd8bb151f181c18b842f50a4f7c3f8d4624441c70be90a136d577ff3ab5714bf","ssdeep":"","tlshash":"3631733079c8f4b5617f1a1e323723557b36620e5c0690183c2cc4c8aa70f87a42aafa","size":1856,"data":"","first_seen":"2025-09-20T03:59:22.66004Z","last_seen":"2025-09-24T03:05:07.429549Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/manifest.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0fa298848d69129ca05523de8ff67640","sha1":"ce0fa8ad473a40487beba427e7ac53665f9f6412","sha256":"20762ba7530ea8111fa93b473d48862d5d09c9d08ebbd5a0ca3e4f7c66997b7a","sha512":"06d17884b790b50e25bb8eb459e63669c6d156643de37ea58a218daaec17b18f33e0cddb4d9c202eb3fcfd7c66df02e630f4bacdfb16498da7b0b19360dec46a","ssdeep":"96:nfUqmsByhVwijpaB3MzkiB4hfDL6pMyt/pyf2:dmsByhVtjpaBcBqH/yt/82","tlshash":"71b196bef5107891728e27d4506b5005d23fe363242c84b4a72bf7782f609a76355eab","size":5161,"data":"","first_seen":"2025-09-20T03:59:22.730982Z","last_seen":"2025-09-24T03:05:07.439809Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/adobe-analytics.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"158acc704ed8d98f7d33a1ed8665ec7b","sha1":"8e30b61a837dbc6f76f173a9230845b6e2def70f","sha256":"8fd3affcb63fe0256c2c6f7daff68d5e9135f02e1127e9097664631fcd32fd2d","sha512":"5d28ff4459b7b75a9846834e45e5d6d1e7678be193cf3c54d11d4821f5109f3d4a5d449cf9cb79d4f85aa7ecf365b5d4f84e27f9d366448f847c3956f13091a9","ssdeep":"768:BAn1GcLmkcIZLGoCC/u6HUldMQOFhVdoH+iE+g1wHx8GlKVOFCapyl4w0n/qKOi+:GEcxZXw+nGFjo+mYOf+Vkh","tlshash":"d7434c99b244a8b853fa2468d36f2904b1361e8ae44dc048f1a5ddda7876c4f70b7f7c","size":55732,"data":"","first_seen":"2025-07-07T15:32:00.267774Z","last_seen":"2025-09-24T03:05:07.346371Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"2636c4d225c39cc0ea2cc0a82414e0a2","sha1":"a87c3381a164c6a6bc15f864d7d87ca17aaaf147","sha256":"a6a9a680d2152e3aaa04168c8042fc530222bbbc248fd68169c8db4682f61b8f","sha512":"3195680da5e6793d53195488805c1ccfb30581de28380a1da02916bf2e3943cda2ecf2b3c154fc22756ea32cb3fac7eaf864d2bb878ee503773e3d7487d36779","ssdeep":"","tlshash":"66c08c8048822e00c20338a08039942ab135162080bd48a51638a3a49873106d15dcde","size":147,"data":"","first_seen":"2025-07-09T06:51:28.088806Z","last_seen":"2025-09-24T03:05:07.54544Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e32dd02f0beaa73cef6ac6f212f09c7a","sha1":"fe09566ff06c6c40ca6220f3d3d4b5d374348324","sha256":"25979fd4910446f151b3c9cc6afeae7a421b74513c27be7078f00b6cbb6e966b","sha512":"f9b21baf695020b19837c6af710b2e0467fe63c74955a4e12004a9db58469a32fb09ef490550ed64afb8e57669c3806927fd13f8badfa75792553f2b529fa2f5","ssdeep":"","tlshash":"54d02b5bad60e06088664089907bc33d90d720175b71c04085d0cc55fe24ea5046959c","size":258,"data":"","first_seen":"2025-09-24T03:05:07.546491Z","last_seen":"2025-09-24T03:05:07.546491Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b7938e0621bc2e860514262335a2d39e","sha1":"3c4e53b20faa8ff6ffeaf4ed9841009025d20b05","sha256":"c0987a645b914de770cd08dde4f9aa4e208acb6a0c274b458da7bb11f85b209a","sha512":"e6fdab20ee0ac240e984d39e623625562c9969a76d7657543135c56286a72e9e4cfa0bb8b33c3bfa7b82630635d6eb94a084b8aadc4bc9b2374abb6a6bd20f34","ssdeep":"","tlshash":"d8f04839bbe71951aab77114e33f131435754963200bcd257c4dc748bf5471b42946fa","size":646,"data":"","first_seen":"2025-07-07T15:32:00.337246Z","last_seen":"2025-09-24T03:05:07.547529Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/vendor.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c3e854d0b9e889e376ab39c1b12e968","sha1":"854e734443e4b81006473077ec154e0f374d376a","sha256":"b087ab39016494fa3b1a8d21750901361b46f2441eddc650666e61203233084e","sha512":"43a982db23fafc29d88f69d9003f21bd252b077d5d0317c795e68dee096eb1ad183763621e7d6477b94dd038f368876f93e11e79761d6a4c3ebe7fff2855147c","ssdeep":"1536:jQ9VIo1GZGx+GQWaxsZFbMZozSvrakaYIUkEKsvBY9MLN1iuPQthXOgxQCBrM:jsVXgozia+TWMLNUFnQCZM","tlshash":"889309dd72cab02253a771ba40bf540bf236599d684d8400f115d8eabc78a4b923bf7d","size":88949,"data":"","first_seen":"2025-07-07T15:32:00.292017Z","last_seen":"2025-09-24T03:05:07.319362Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@alpinejs/ui@3.13.5-beta.0/dist/cdn.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"920ad5f5263cc1dbcf615e0f0b34651a","sha1":"933b7a15416a899d5cc7e3688c7a016b68b37738","sha256":"60dd4ad4f90ecf8dec0bca140f2f0922eb8cca7aa3a4cda6e2639f9f97ce3a87","sha512":"6c6e871164a119a7af5ac10872481a6f306a11cb10aa502fc87454c5f36b23ecf54b4f54bc22c4987400deffd31fc0ad74bda9cf1b6808c2b2a3bd86ab2599b4","ssdeep":"768:4/rb7TUsBgtVYWH/BbHGx7Fd8+ikVUdxfFT1J8WYxResSbbn2GmGAMXwT1I:4DmV7H/BbHGx7A+ikVkFT1+xResS32G9","tlshash":"2e03715b3195717643d9a17818b64843f21c3ad8b84f02bcf834edde71a9947e3b2a32","size":40985,"data":"","first_seen":"2025-09-20T03:59:22.752858Z","last_seen":"2025-09-24T03:05:07.322932Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"088fdb623a59272ea6f351fabf866ca5","sha1":"befafa20bbdfab51c484ab0bca4f86a4a508fb7a","sha256":"b9b9832b0384336adcfde7346238996b9b419f198d7eb339dec6b940c26ed65b","sha512":"59f322c0cc996bc488c24c5e6403e9673fe17fe770d367892f20b1dd884a1bc50377eec348e04ec90ff57121c63168a42a5b3957ebccce24ec06759d5dca1cbb","ssdeep":"","tlshash":"52c02bc008c20a00c20339a0c039503761342621807d44641a3cb360c433107e00cc5d","size":135,"data":"","first_seen":"2025-07-09T06:51:28.09006Z","last_seen":"2025-12-23T03:57:43.352595Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"bccdc1cf1c10900555aeebe25ad00807","sha1":"e0a591020fd68b7b445ac9bc5299cbb8853cc0ca","sha256":"8176ff0d8ab3696d6b1ad7c57e073386927dda059c64403991bfa61c522df41c","sha512":"7cb9f7ca0f6b1147f56a7d4e3b15536a1955d8fe1e1283f4f246bc1b3e499627d63d07e4c56268581f706caeae2b4429ab0d952ca06d857fb2556bfbd82561f2","ssdeep":"","tlshash":"bbc08cc4188b1a00c22339a4c2399437222a1a35d17e98a82679a3549473106e18dcae","size":155,"data":"","first_seen":"2025-09-20T03:59:22.930034Z","last_seen":"2025-09-24T03:05:07.549018Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"10a49d95304631c10252d4fefe2664b4","sha1":"f005fc4f8712fa4f1177ba04976f2f141f72096b","sha256":"7e9e10ec0da6c77caf8a32890a6bb472933f03802f5bf27d1b59d00e1219b303","sha512":"de56808e50214fb8988d6467edf93247708aff547294769bf47acc831970d538e135a7d3cbd43c733811132a65d01cfed19162ef8703dec3e39b776ca92ffd92","ssdeep":"","tlshash":"fb71aa9446f7135ea577003a4f0ea2066237c91b9888cd903eccd7524f4ec325e66adf","size":3637,"data":"","first_seen":"2025-09-24T03:05:07.550213Z","last_seen":"2025-09-24T03:05:07.550213Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"a16bdad319ed2a6aee6ae6f47286abf1","sha1":"2b56e488c7698e634a39f22209352a5a778eaa77","sha256":"8b28c9602151daf5f352b7fd60a7f4b443211c1b158a630ecd2bf8f082b76b2f","sha512":"d450b21d9dcb8246171c4d2daf3eb4f0503bfbe32fe5c3f52b5eb7add8b6177406f55b8c787d773ae38e596a202f5bbf1d370bb9c64dc3ef0c9873ab56343d22","ssdeep":"","tlshash":"35b02bc008c21900c2033490c039403721341270807d4464163cb3548433007e44cc5d","size":129,"data":"","first_seen":"2023-04-14T08:53:11Z","last_seen":"2026-03-31T21:50:49.167322Z","times_seen":660,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"snippet.maze.co/maze-universal-loader.js?apiKey=39c04b56-367f-42a0-b085-6d5c1e803145","fqdn":"snippet.maze.co","domain":"maze.co","tld":"co"},"ip":{"addr":"3.167.2.70","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a0d79b120cfff24a3dcc11ca9f39b476","sha1":"346f25883365e9d7b2959321977841b9927d6415","sha256":"69e69a893fab0769c15b66826f5a3b99fe672c9fa35f69dbb7efb5657c34b643","sha512":"c74dd4a2dc23378e325155af97cf3e5539a459b93820d1554b534a195e9dae3947df72030116f662728657d80d40d77c5ce89b2d5a8b5f98ac885e987cb9905e","ssdeep":"","tlshash":"1631750ae871e93a1bce4a2cb0f57018e3a710113e1ca452e2d5dc595bbcddc0172f4a","size":1783,"data":"","first_seen":"2025-09-23T19:07:56.294603Z","last_seen":"2025-09-24T13:09:16.674709Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7aaa6ab8e1dcfda5402105289e3aaec3","sha1":"b6a18d1222a9260ee9226a306c7a6d0dc0dc8388","sha256":"bdcfd272179873e04fadea4db9669b8ed9ba49fcd7bfbf172b493f4b7f3d2ae0","sha512":"ee46b02312d1c29e09311ca7f900b34c34c3bd810e3633c8310e64899900d2fc6c7b49fe1a63683cc313c84313606d624207e87f3bb26333feedb45c283f8e6f","ssdeep":"","tlshash":"94d0a740e76da0ed426a741e6fbc9048412c6034b875cd7e3e159032094256e2010e89","size":242,"data":"","first_seen":"2025-09-24T03:05:07.551798Z","last_seen":"2025-09-24T03:05:07.551798Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.wisepublishing.com/scottie/production/scottie.js","fqdn":"assets.wisepublishing.com","domain":"wisepublishing.com","tld":"com"},"ip":{"addr":"172.64.147.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f91e2c9834ac14a94ce39040b25a9b0","sha1":"a4ca0678abe220138b6b7910f0080a8c51c0dd61","sha256":"907cf715b649990a9064becdda95324a88d0758a38d8055ef2f8f3a1218b8c59","sha512":"3ff57363b84b626d6f86f815504cb5caacda691e6256e150751db51fa6d993d0b106e12591a4ecd2d8b3ff23e155bab8d074e20fceaf2db87bab4f543f8d135d","ssdeep":"768:4P6BlND4jdCz7GuuZYxdpTC17S7zbt1ZhuRA7/nexmdDbB5VCbWxhDrDiAW:4PclNOYz711aS3X7/5EW/rDjW","tlshash":"741393d8b6d6f06243a3b061803f150bf37a2d19a44e8554e265d9e6bc7c18ed233fb9","size":43106,"data":"","first_seen":"2025-09-20T03:59:22.69803Z","last_seen":"2025-09-24T03:05:07.376146Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"5653db2ce379d90fe366c65f88de448d","sha1":"b37b5d114a224d83cb251d88143eb72178d1e5c3","sha256":"218e3ff75d74007a789f840adcd1f9a47887a3202f00809ea68461375efe28d9","sha512":"e4d69eda6577048fe4aac3ac3013c04f3cb5769b6e2b094cc423c43ad31929215659390cf42975f7b581727eb449373dc3cd92885df6503769d1706f75ced352","ssdeep":"","tlshash":"7ac08cc018c76a00c31bb5c2c03a9427a2386f65917e48a43f39a79495b703ad19ccae","size":162,"data":"","first_seen":"2025-09-20T03:59:22.802859Z","last_seen":"2025-09-24T03:05:07.552898Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.kueezrtb.com/latest.js","fqdn":"static.kueezrtb.com","domain":"kueezrtb.com","tld":"com"},"ip":{"addr":"172.66.162.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bfed549a7a818520144d1b1e2f334d9b","sha1":"a07dd4834d83d381536884ffdb4a7c1b05de1993","sha256":"4eb79c43f4d736b305fdce8077dd70044483b58b779c58c9be3a4ab9ba4079d2","sha512":"5426d779711f4cf8f8caaeca40303aac3319aa379ed380a94997906b7d3705bc05e6c2133544ac8bb59037884dc021e5e5031b8aca96b082c28373e8abd6cb4b","ssdeep":"","tlshash":"50213096b6db5d6e49a421ac983abf21f1bb85143f4d5050c44789006b44e534b3ffee","size":1440,"data":"","first_seen":"2025-05-11T13:48:19.766573Z","last_seen":"2026-04-03T17:04:17.815926Z","times_seen":2286,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raven-edge.aditude.io/raven/moneywise-main-3MaE3/library.js","fqdn":"raven-edge.aditude.io","domain":"aditude.io","tld":"io"},"ip":{"addr":"172.66.168.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa6fe8c514f08a2eeaa43d047671e97b","sha1":"2b489b7d12baba2fa9ecb3983a9778d3b6ed1dde","sha256":"a1a5adf4cbb57cb44574cf505cb79995f637cdfc942b694a373c45f9d42e225a","sha512":"861f649efd561eb1fde42fc659fd9229433b2376e34bff679dc97a65436226d83fc359d367f53263b17c0bc2c640b33031d84178829b29653bfde41252001803","ssdeep":"96:58HLUXGQXwsFR5h9Fav5GwJhldk2J94XfaXt5nTpExozqsgx:0LUXtXw8PChAMXjnVEtr","tlshash":"1da1e89e72d0a4f20bd944d64a3b6353f3788a217a48c4ec310cb6db2a22eb75195d37","size":4756,"data":"","first_seen":"2025-09-24T03:05:07.434965Z","last_seen":"2025-09-24T03:05:07.434965Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"e7a8c9d456c61c17a3bb82d1ef153a42","sha1":"d9a390f559002c20d4881a181996580c1f9742f7","sha256":"bfa9c3f14386bf552d0e49206bf97ceba37e8e22e909ccc24a98587602362b03","sha512":"8d28f45e5b56c25ac903d49e08436b05ec99cf98b92c6b7f5379e491cb7ea9ddc451385fb1ae73fe9c43a0a99ac07b4837c685d0083236a4522377e3e5c6cf8b","ssdeep":"","tlshash":"8fd0a9c124cb6410837362e2c328b02a62343a96812e28a8352993a4a0a2106c1aacaa","size":207,"data":"","first_seen":"2025-09-24T03:05:07.553854Z","last_seen":"2025-09-24T03:05:07.553854Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"273e7ccb0bdc5629c87db52eb945a7da","sha1":"4cc656a55d72b54ef78b4051945715ec7b56972d","sha256":"f7d30a922e5f268406ab92e58852953b56e4336a645233d3670389611ca6f5ed","sha512":"f02a7529f0905bbafbd5cbff4e9a8bcd40c2a76e0b1e80bd7a585ec9ab351cfcabd605098147bb7e2c15c9d6d04e0d713e3bf812fa7b0963ef9b7873cc71c908","ssdeep":"","tlshash":"a9f024dc200ce1b5595e38ae3673918960a6ec8959cdf4d1c49ecec43e2db930208a1d","size":537,"data":"","first_seen":"2025-07-07T15:32:00.319718Z","last_seen":"2025-09-24T03:05:07.554906Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"37ebbd6be9b0bdb48705015fbab968c0","sha1":"4fc64a236d988709334e896c7e4ccb2743d9293c","sha256":"a77ff8883f47dd5f85d60b2e02be6a3a16f506a68e2b0111bb02ac79e4187690","sha512":"cc7b996426bef329dbde75a0dbb7dfb39edd2d08f92f274cfd676445fe9afb97659d8efbd8b9978d7d911bda3c3b4179d49dd3217792a2aac9f88fd15164b80d","ssdeep":"","tlshash":"83c02bc058c31e00c3133494c136d03761341270807d4464173ca35c807321ae05ccbe","size":142,"data":"","first_seen":"2025-07-09T06:51:28.0711Z","last_seen":"2025-09-24T03:05:07.555434Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"f657349c664c26fcb6ba03c580e4afdb","sha1":"100ec3fa0ddadb5e02643d4dd3f876f7cd1ec49a","sha256":"82369c1697fc464d3672b4133b5c8b24fcae6d17d191d109e735a38e6877cd24","sha512":"00186bbf9ad82db67d348d1366e76710469068a8f70e770b982190d61fcbff14260a2d8373a2c91094c80f003f30222a93e5c7d7c82ee5d17e79c7d19824dd6d","ssdeep":"","tlshash":"76c02bc008c30d00c30338a0c0399037f2341660c0bd4866263da3a4c973107d15ccde","size":143,"data":"","first_seen":"2025-07-09T06:51:28.123215Z","last_seen":"2025-09-24T03:05:07.556552Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"16db54fc12671e615d6b61eb9e058e1d","sha1":"d5e4e3360b723ffec8d24a152610248736522963","sha256":"257645c5f2bb33975eb99078d62115ba26c307af927144dba0aa9e44848846b3","sha512":"f2c31ff9f37e8c0c58f940df3c7ecc5e075238159e34bf78774ba6cc5db9c58ea8ad95dcb6968cb64e40c476d978f8ada2eb6ca93c59d7270cd511c2ee1ce081","ssdeep":"","tlshash":"d3c08c9008820900c20338a080399066f134166190bd48691638a3a4c873106d1accae","size":144,"data":"","first_seen":"2025-07-09T06:51:28.087917Z","last_seen":"2025-09-24T03:05:07.557085Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js-sec.indexww.com/um/ixmatch.html","fqdn":"js-sec.indexww.com","domain":"indexww.com","tld":"com"},"ip":{"addr":"104.18.24.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"991fa92994fb59c1943e848939264218","sha1":"148963a6b79653f89eee00194f7914fbc854cc38","sha256":"8dc602adfd55699ba525800a0115af7642407361ee5d51e3f46d04bb1c979f2e","sha512":"40b83950402c426cd0b270d329f664419490791b43ef2fec51fc77210d095a2775f3e755c6362c8cba0ebc7c4e8b429a679bbf00c03ba51efbef16f088923013","ssdeep":"","tlshash":"845175bf3250b9750b2b6271823ff505b75e5668391b88f0c384d9a6793880ad0b0fe5","size":2862,"data":"","first_seen":"2025-03-02T08:35:36.845377Z","last_seen":"2026-04-03T15:36:05.948985Z","times_seen":3401,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"f315f5f2c187a05af1ace62d5f6aa477","sha1":"47d77a2a1665cb6202028ecd89b50920287d9148","sha256":"166a4ec3cb90d525f7f744c7616c01b36bebd6dcecd486c8f5be14ccc0a7b3da","sha512":"6a12034c64743bf5c625ee993a758561284de5950504d61abbd5273500db08efd1b2b82d71f7b378ebd4c1b3c9c22bae645564357b96bbf4f69de03b6214865b","ssdeep":"","tlshash":"1c9002f990a10009ad203ad00dc213454c19935434014e041ac5387894843169c17384","size":54,"data":"","first_seen":"2023-03-07T01:02:50Z","last_seen":"2026-04-03T13:48:43.867258Z","times_seen":32262,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"prebid.admatic.de/setuid?bidder=membrana\u0026gdpr=\u0026gdpr_consent=\u0026f=i\u0026uid=13660fa4-e1e7-4d47-85bb-fed4b58cf9fd","fqdn":"prebid.admatic.de","domain":"admatic.de","tld":"de"},"ip":{"addr":"172.67.72.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://dsp-service.admatic.de/cookie_sync?r=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fadmatic%2F%24%7BUSER_ID%7D","date":"2025-09-24T03:04:29.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prebid.admatic.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Sep 2025 07:42:54 GMT","end":"Wed, 03 Dec 2025 07:42:53 GMT"},"fingerprint":{"sha1":"CC:9C:F8:02:B1:15:15:93:74:79:C8:B5:DE:02:6C:8B:7B:5B:4A:AC","sha256":"97:3C:A2:E3:50:C5:18:23:B7:F8:43:27:0E:AA:5B:32:53:FF:27:E2:A8:63:68:6D:13:A5:A4:64:D7:FB:3A:8C"}}},"request":{"raw":"GET /setuid?bidder=membrana\u0026gdpr=\u0026gdpr_consent=\u0026f=i\u0026uid=13660fa4-e1e7-4d47-85bb-fed4b58cf9fd HTTP/1.1\r\nHost: prebid.admatic.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dsp-service.admatic.de/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid=ec240dc9-4059-4ccd-b7f1-c00942a6ec97; uids=eyJ0ZW1wVUlEcyI6eyJhZG1hdGljZGUiOnsiZXhwaXJlcyI6IjIwMjUtMTAtMjRUMDM6MDQ6MjkuNTYzWiIsInVpZCI6IjdiNDU2ZTZkLTM4NmMtNDNmZC1iZGI0LWU2YWIxYzMzMDk1NCJ9fX0=\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\nlocation: https://static.cdn.admatic.de/cookie.html?bidder=membrana\u0026gdpr=\u0026gdpr_consent=\u0026f=i\u0026uid=13660fa4-e1e7-4d47-85bb-fed4b58cf9fd\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JSkvYnG5aba9RKYe4uoBT6l9tXV00x235YkzdjkRxCj%2FXkC5KeW4hbFZuNb5yIHpBJft4FlwQ4GxS4BxdbEDz8yEpbmuWjiYPT18a3vfY1I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 24 Sep 2025 03:04:29 GMT\r\nserver: cloudflare\r\ncf-ray: 983f0e00ebae8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1122,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cdn.admatic.de/cookie.html?bidder=membrana\u0026gdpr=\u0026gdpr_consent=\u0026f=i\u0026uid=dc9825f6-ddb2-4f6d-a7ac-f65e841470e8","fqdn":"static.cdn.admatic.de","domain":"admatic.de","tld":"de"},"ip":{"addr":"172.67.72.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://dsp-service.admatic.de/cookie_sync?r=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fadmatic_autres%2F%24%7BUSER_ID%7D","date":"2025-09-24T03:04:29.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.cdn.admatic.de","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Sep 2025 16:20:33 GMT","end":"Tue, 02 Dec 2025 16:20:32 GMT"},"fingerprint":{"sha1":"51:8F:C6:BA:EF:DB:F9:A9:62:B0:A4:96:38:FE:4C:51:79:DA:71:AD","sha256":"06:05:0A:2D:B8:99:97:31:AE:FD:B9:1B:60:23:47:08:C1:EF:4D:06:84:59:5E:2B:D2:28:E7:27:53:D5:3F:D8"}}},"request":{"raw":"GET /cookie.html?bidder=membrana\u0026gdpr=\u0026gdpr_consent=\u0026f=i\u0026uid=dc9825f6-ddb2-4f6d-a7ac-f65e841470e8 HTTP/1.1\r\nHost: static.cdn.admatic.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dsp-service.admatic.de/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid=ec240dc9-4059-4ccd-b7f1-c00942a6ec97; uids=eyJ0ZW1wVUlEcyI6eyJhZG1hdGljZGUiOnsiZXhwaXJlcyI6IjIwMjUtMTAtMjRUMDM6MDQ6MjkuNTYzWiIsInVpZCI6IjdiNDU2ZTZkLTM4NmMtNDNmZC1iZGI0LWU2YWIxYzMzMDk1NCJ9fX0=\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:29 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncdn-pullzone: 2526898\r\ncdn-uid: e7d0f040-08f3-443e-a640-656beb6c8b3b\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=25600000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wh%2B3hSGxLF%2FJpPAgrJHcvyQVysGA10bGOHhw5j0FYVKeE3P8Pjq4LoCXEFOZYm5KHbk7iU5ym0xOquxxitnPg5obdxGPYH%2F26hVArGK%2Br897Rkb1\"}]}\r\nlast-modified: Wed, 21 May 2025 13:27:10 GMT\r\ncdn-storageserver: DE-978\r\ncdn-fileserver: 988\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/22/2025 21:16:37\r\ncdn-edgestorageid: 1333\r\ncdn-requestid: f5a59bc0d5157fb79ac3bdf84dbbf1a5\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 983f0e010b0b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1122,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1122), with no line terminators","md5":"21947b7c68707b18d7d77214ee229db9","sha1":"2a6ace8708e500c3e9c911ca209b2d0c2aed4917","sha256":"481c8382889f68e105a819ab253cbea9e6a52e86d611edd9fde5feae25e1d8a7","sha512":"8eedf99a0df2a0f8f7e23dc44223609d8b4ac93721ee14da60ff3e884e4ef52c0914cc9b5cd6a3082951ebd07d30ddd9d882833f3d677e1de4d6ec563f3b75d1","ssdeep":"","tlshash":"5c2163407265ac9e860202f80f750d0ea8a1e1523cf5a068b8c9e5b03212817c7fa9ef","first_seen":"2025-05-21T22:21:34.380102Z","last_seen":"2026-03-27T07:05:51.569313Z","times_seen":2353,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dsp-service.admatic.de/cookie_sync?r=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fadmatic_autres%2F%24%7BUSER_ID%7D","fqdn":"dsp-service.admatic.de","domain":"admatic.de","tld":"de"},"ip":{"addr":"172.67.72.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://csync.smilewanted.com/","date":"2025-09-24T03:04:28.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsp-service.admatic.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Sep 2025 05:53:23 GMT","end":"Wed, 03 Dec 2025 05:53:22 GMT"},"fingerprint":{"sha1":"DF:34:D7:2B:E4:57:27:7B:89:7C:09:23:74:87:A2:DD:48:2F:23:D0","sha256":"4F:8E:0A:11:95:5F:2E:B9:94:1A:4B:29:F5:99:29:AD:E7:73:E0:B0:D2:1A:8E:08:B4:89:A4:EF:59:8D:C9:22"}}},"request":{"raw":"GET /cookie_sync?r=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fadmatic_autres%2F%24%7BUSER_ID%7D HTTP/1.1\r\nHost: dsp-service.admatic.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csync.smilewanted.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:28 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\nx-powered-by: Pixad\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nworking-on: admatic-k8s\r\nworking-app: admanager-report\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XfP2C4%2Ba40zYAJwgbI0YNM8VePXorACh%2BPI%2FY8YRbxGdQgz0owmdb5MNMzjHHyIhuC3xrVOi6B4XX8tXoMElWkArED51azOkTCdM87SDaWe2I19ThA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\nset-cookie: uid=ec240dc9-4059-4ccd-b7f1-c00942a6ec97; SameSite=None; Secure; Path=/; Domain=admatic.de; Max-Age=2592000; Expires=Fri, 24 Oct 2025 03:04:28 GMT\r\ncf-ray: 983f0dfc6f098deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2492,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2492), with no line terminators","md5":"4044a898c0f6abfb92514ad12d765433","sha1":"763cdc9b7c0070967564ea4be7536d5db2d3eecd","sha256":"ccc1479c2e4765df376b075e1fcc4856d07c10e30c1775dd7614ee0f7739ffb6","sha512":"c65f114f5630d557a7509f9c8d9d9bb2a0718e874ebb917ad323930bb02c38cfc6df1679b2be8e690c61d487cb6860fccc646e01fad6d97d2b1689937681fcb1","ssdeep":"","tlshash":"2c51b5bf1655131c474323a646e2a3ee7c76221939c145e5d6eccc1f10a8e3269d97dc","first_seen":"2025-09-24T03:05:07.318096Z","last_seen":"2025-09-24T03:05:07.318096Z","times_seen":1,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cdn.admatic.de/cookie.html?bidder=amx\u0026gdpr=0\u0026gdpr_consent=\u0026f=i\u0026uid=","fqdn":"static.cdn.admatic.de","domain":"admatic.de","tld":"de"},"ip":{"addr":"172.67.72.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://dsp-service.admatic.de/cookie_sync?r=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fadmatic%2F%24%7BUSER_ID%7D","date":"2025-09-24T03:04:29.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.cdn.admatic.de","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Sep 2025 16:20:33 GMT","end":"Tue, 02 Dec 2025 16:20:32 GMT"},"fingerprint":{"sha1":"51:8F:C6:BA:EF:DB:F9:A9:62:B0:A4:96:38:FE:4C:51:79:DA:71:AD","sha256":"06:05:0A:2D:B8:99:97:31:AE:FD:B9:1B:60:23:47:08:C1:EF:4D:06:84:59:5E:2B:D2:28:E7:27:53:D5:3F:D8"}}},"request":{"raw":"GET /cookie.html?bidder=amx\u0026gdpr=0\u0026gdpr_consent=\u0026f=i\u0026uid= HTTP/1.1\r\nHost: static.cdn.admatic.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dsp-service.admatic.de/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid=ec240dc9-4059-4ccd-b7f1-c00942a6ec97\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:29 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncdn-pullzone: 2526898\r\ncdn-uid: e7d0f040-08f3-443e-a640-656beb6c8b3b\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=25600000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B76n%2BkNlfeA1yo9a%2Bym0AdrxZkayRJCOegG%2BCfIVtaUNBdEBWNlogG0RsfsxG9MX6xibBmphZSldBM%2F9nWPmkyyUPl7ukha%2FjIWKizhscLuMXlyU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 21 May 2025 13:27:10 GMT\r\ncdn-storageserver: DE-588\r\ncdn-fileserver: 988\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/22/2025 21:16:37\r\ncdn-edgestorageid: 1333\r\ncdn-requestid: 3b9229a78bf37edf2bb6ea4d6f88d608\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 983f0dff2bc83181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1122,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1122), with no line terminators","md5":"21947b7c68707b18d7d77214ee229db9","sha1":"2a6ace8708e500c3e9c911ca209b2d0c2aed4917","sha256":"481c8382889f68e105a819ab253cbea9e6a52e86d611edd9fde5feae25e1d8a7","sha512":"8eedf99a0df2a0f8f7e23dc44223609d8b4ac93721ee14da60ff3e884e4ef52c0914cc9b5cd6a3082951ebd07d30ddd9d882833f3d677e1de4d6ec563f3b75d1","ssdeep":"","tlshash":"5c2163407265ac9e860202f80f750d0ea8a1e1523cf5a068b8c9e5b03212817c7fa9ef","first_seen":"2025-05-21T22:21:34.380102Z","last_seen":"2026-03-27T07:05:51.569313Z","times_seen":2353,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":39,"dns":11,"connect":3,"send":0,"wait":50,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/vendor.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:21.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"money.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:25:31 GMT","end":"Mon, 24 Nov 2025 16:25:29 GMT"},"fingerprint":{"sha1":"A5:8A:11:35:E2:18:EF:C0:E0:2A:61:E3:CE:0F:31:56:42:55:F0:FC","sha256":"C0:5A:4D:B1:BE:57:72:CF:9E:D8:17:5E:01:A3:0D:F8:4C:C1:16:16:8B:65:8B:CA:3B:CC:32:C3:E9:15:71:EF"}}},"request":{"raw":"GET /js/vendor.js?cb=432 HTTP/1.1\r\nHost: money.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account\r\nCookie: SSID_9H80=CQDn9B0AAAAAAAC0X9NohcaCGLRf02gBAAAAAAAAAAAAtF_TaADc7g; SSSC_9H80=1013.G7553486227140429445.1|0.0; SSRT_9H80=tF_TaAABAA; money_session=eyJpdiI6Inlqb015WmpKSkJhakh6SzMyN3VheFE9PSIsInZhbHVlIjoiT2pIcnNveGVobXNrS1FIUkZZZDd4ZWRNNkd0UTZPcnUveStFd09kNDY3T3ZtbEV0RXlLbXNadTFDS2Q0eC8wUGIyemFQaEdKVlVHb1MyRXNvb3NHYmN3ZkpwVy9ySHBBN1JCWEVmbkNraWhld3l1Rm5WTXd3VU53Zk52aHFEeGwiLCJtYWMiOiJmZDFlNmVjOGI0MDQxMmEzM2I4ZDAwMWNmMzY4Y2QyYjZlNzUyY2ZmODNiNjJhMDcxZjBhYzEwZTY3Yjk0ZjIwIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkVvY3h6L1FXSXBwbXVzYm1qUTlieXc9PSIsInZhbHVlIjoiSUM1b01ISkcyT0xMWFBCZVFsQUxUSitIbnNYNVhpTkRQR2wvcWJlQkx0a09hQVhxRXgwT3NFcXpVOWkzdkR2QTRRdkVJYzBlbU10VlpHb1RpYWhFNUhuMDBLaEs4L3BTVTBFYmIvNzJmekR3bmsrSzZJQkhtbDUzUDEySFhOU3kiLCJtYWMiOiJhMjFkMzNlZWRjMWJiMjcwOTY0YzY0NzQ0OTI2YWFiYTIwZWI2MGY4MDlkMTA2MzVlMjc2YTRhYzdiMGM5ZjJlIiwidGFnIjoiIn0%3D; __cf_bm=.U3YtFNih3m1w6FCrnkhu9tGuUHymVGomrTcpO.A40w-1758683061-1.0.1.1-HamIbNq.vNx7npxwSP0wqoYClS3Y3B42WO1UNnXOMO6bSheMocH.v_b7Q.nhvQVLVKnDsPdTSCXB4bPsND1B3RB70gSD0SuE2XX4dl_bXM0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 23 Sep 2025 13:52:06 GMT\r\netag: W/\"68d2a606-15b75\"\r\ncf-cache-status: HIT\r\nexpires: Wed, 24 Sep 2025 07:04:21 GMT\r\ncache-control: public, max-age=14400\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 983f0dce4e4b1a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88949,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"6c3e854d0b9e889e376ab39c1b12e968","sha1":"854e734443e4b81006473077ec154e0f374d376a","sha256":"b087ab39016494fa3b1a8d21750901361b46f2441eddc650666e61203233084e","sha512":"43a982db23fafc29d88f69d9003f21bd252b077d5d0317c795e68dee096eb1ad183763621e7d6477b94dd038f368876f93e11e79761d6a4c3ebe7fff2855147c","ssdeep":"1536:jQ9VIo1GZGx+GQWaxsZFbMZozSvrakaYIUkEKsvBY9MLN1iuPQthXOgxQCBrM:jsVXgozia+TWMLNUFnQCZM","tlshash":"889309dd72cab02253a771ba40bf540bf236599d684d8400f115d8eabc78a4b923bf7d","first_seen":"2025-07-07T15:32:00.292017Z","last_seen":"2025-09-24T03:05:07.319362Z","times_seen":4,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/geo","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:21.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"money.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:25:31 GMT","end":"Mon, 24 Nov 2025 16:25:29 GMT"},"fingerprint":{"sha1":"A5:8A:11:35:E2:18:EF:C0:E0:2A:61:E3:CE:0F:31:56:42:55:F0:FC","sha256":"C0:5A:4D:B1:BE:57:72:CF:9E:D8:17:5E:01:A3:0D:F8:4C:C1:16:16:8B:65:8B:CA:3B:CC:32:C3:E9:15:71:EF"}}},"request":{"raw":"GET /geo HTTP/1.1\r\nHost: money.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-NewRelic-ID: VQAPVVFbABABUVdaAQIEVFMI\r\nnewrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjE2ODQ3ODgiLCJhcCI6IjE1ODkxMDU2MTUiLCJpZCI6ImM4ZDVhNzU0MTY1ZTMwMGYiLCJ0ciI6ImQyNWUxNTkzNzg2MmQ2ZTA1YmY3ZjRmOWM3MTI1MTliIiwidGkiOjE3NTg2ODMwNjE2MDh9fQ==\r\ntraceparent: 00-d25e15937862d6e05bf7f4f9c712519b-c8d5a754165e300f-01\r\ntracestate: 1684788@nr=0-1-1684788-1589105615-c8d5a754165e300f----1758683061608\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account\r\nCookie: SSID_9H80=CQDn9B0AAAAAAAC0X9NohcaCGLRf02gBAAAAAAAAAAAAtF_TaADc7g; SSSC_9H80=1013.G7553486227140429445.1|0.0; SSRT_9H80=tF_TaAABAA; money_session=eyJpdiI6Inlqb015WmpKSkJhakh6SzMyN3VheFE9PSIsInZhbHVlIjoiT2pIcnNveGVobXNrS1FIUkZZZDd4ZWRNNkd0UTZPcnUveStFd09kNDY3T3ZtbEV0RXlLbXNadTFDS2Q0eC8wUGIyemFQaEdKVlVHb1MyRXNvb3NHYmN3ZkpwVy9ySHBBN1JCWEVmbkNraWhld3l1Rm5WTXd3VU53Zk52aHFEeGwiLCJtYWMiOiJmZDFlNmVjOGI0MDQxMmEzM2I4ZDAwMWNmMzY4Y2QyYjZlNzUyY2ZmODNiNjJhMDcxZjBhYzEwZTY3Yjk0ZjIwIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkVvY3h6L1FXSXBwbXVzYm1qUTlieXc9PSIsInZhbHVlIjoiSUM1b01ISkcyT0xMWFBCZVFsQUxUSitIbnNYNVhpTkRQR2wvcWJlQkx0a09hQVhxRXgwT3NFcXpVOWkzdkR2QTRRdkVJYzBlbU10VlpHb1RpYWhFNUhuMDBLaEs4L3BTVTBFYmIvNzJmekR3bmsrSzZJQkhtbDUzUDEySFhOU3kiLCJtYWMiOiJhMjFkMzNlZWRjMWJiMjcwOTY0YzY0NzQ0OTI2YWFiYTIwZWI2MGY4MDlkMTA2MzVlMjc2YTRhYzdiMGM5ZjJlIiwidGFnIjoiIn0%3D; __cf_bm=.U3YtFNih3m1w6FCrnkhu9tGuUHymVGomrTcpO.A40w-1758683061-1.0.1.1-HamIbNq.vNx7npxwSP0wqoYClS3Y3B42WO1UNnXOMO6bSheMocH.v_b7Q.nhvQVLVKnDsPdTSCXB4bPsND1B3RB70gSD0SuE2XX4dl_bXM0; utm_source=direct; user_meta=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22null%22%2C%22utm_campaign%22%3A%22null%22%2C%22utm_content%22%3A%22null%22%2C%22utm_term%22%3A%22null%22%2C%22device_category%22%3A%22unknown%22%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:21 GMT\r\ncontent-type: application/json\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 983f0dcf9f411a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":194,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"282d40193f524251d8be10f7b9ec524a","sha1":"7988869900725869d042372c42b263ddca151b05","sha256":"780be954d501c4e33068e88510eebd426ae9c1d442c1e9e8f93e338cad442cc8","sha512":"fbb512a46bde37279ea416e9ba0f5489cda9fb50f71dd2779e35d6d768cd43266bbb49fcaece7ea80e800b3fb51996c1c487e04e027e1784b61c10a1343e67fd","ssdeep":"","tlshash":"2fc0222835289d780f7c920e430ef44622ac301b838b0a82c792ef04d0853f07290015","first_seen":"2025-07-09T06:51:28.029309Z","last_seen":"2025-09-24T03:05:07.321095Z","times_seen":3,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/gsi/style","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.9.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"13:4A:0B:81:A8:A4:37:A9:D7:31:CB:DD:A6:76:53:21:8A:1B:2E:0C","sha256":"2D:8F:A1:B5:9A:60:F4:14:AD:1C:29:44:92:C7:8B:AF:4F:27:CD:EE:15:0F:A8:E4:E8:11:CD:41:8C:75:45:4B"}}},"request":{"raw":"GET /gsi/style HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nexpires: Wed, 24 Sep 2025 03:04:23 GMT\r\ndate: Wed, 24 Sep 2025 03:04:23 GMT\r\ncache-control: private, max-age=86400\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, script-src 'nonce-PE8rUMkOaVofw9GOAoTF_w' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http\r\nreport-to: {\"group\":\"coop_dd7de8473bddc59c6b748810a67a39b1\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1\"}]}\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_dd7de8473bddc59c6b748810a67a39b1\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":719,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (719), with no line terminators","md5":"fa096f673da30f4376837855ae5571e0","sha1":"fefa42a00b477dfd1c53e15c0629d4425d2a5c88","sha256":"0e0cd6f15de1d56e6ec8035f3d8b613e4d439e9960db744ddff94a308b77eada","sha512":"d04cba68608bc142070a0434f3bee5258fc6c559dadef8568bd61ddac98927743e752ddab1a84743b98f38dfb5a8e159cdb458a2fc3796ba50cad8b8538f97b9","ssdeep":"","tlshash":"75019c321aa1602eecb3eb3bf046dd8c0236a117eeb709ccb59cd925c38d95874a5041","first_seen":"2025-06-24T18:05:36.028038Z","last_seen":"2026-04-03T00:06:31.519139Z","times_seen":22304,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtrack.kueezrtb.com/dye?ac=2\u0026acm=G3L\u0026uid=be5cdac8e005e820\u0026sid=34ec2ed1ee696ea0\u0026pvi=89bcafefc05ee524\u0026h=money.ca\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=81\u0026uri=%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026furl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026sr=1280x1024\u0026type=latest:fpdrd\u0026_=1758683063567","fqdn":"gtrack.kueezrtb.com","domain":"kueezrtb.com","tld":"com"},"ip":{"addr":"172.66.162.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kueezrtb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 31 Jul 2025 04:22:42 GMT","end":"Wed, 29 Oct 2025 05:22:40 GMT"},"fingerprint":{"sha1":"72:9A:34:A6:6E:6C:F2:12:4C:CD:21:43:69:9D:B4:AE:A6:E2:BD:C1","sha256":"74:FD:00:85:48:5B:6D:03:90:97:6C:48:C6:0B:F9:7E:AB:0F:30:71:82:29:09:7B:3D:3A:D7:32:40:B2:4D:4D"}}},"request":{"raw":"GET /dye?ac=2\u0026acm=G3L\u0026uid=be5cdac8e005e820\u0026sid=34ec2ed1ee696ea0\u0026pvi=89bcafefc05ee524\u0026h=money.ca\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=81\u0026uri=%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026furl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026sr=1280x1024\u0026type=latest:fpdrd\u0026_=1758683063567 HTTP/1.1\r\nHost: gtrack.kueezrtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nCookie: kuid=b4c606a6d5e7c1f9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 24 Sep 2025 03:04:23 GMT\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 983f0ddb5b308be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?ep._fpm_parameters=%5Bobject%20Object%5D\u0026en=page_view\u0026dr=r.search.yahoo.com\u0026dl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=1276079448.1758683063\u0026dt=Wealthsimple%20Client%20Has%20Almost%20%245%2C000%20in%20Crypto%20Stolen%20From%20Account%20%E2%80%94%20What%20Investors%20Need%20to%20Know%20to%20Protect%20Their%20Assets\u0026auid=679143361.1758683063\u0026navt=n\u0026npa=1\u0026us_privacy=error\u0026gtm=45He59m1v835181373za200zd835181373xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tcfd=1000h\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~115480709\u0026tft=1758683063183\u0026tfd=3402\u0026apve=1\u0026apvf=sb","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:37:54 GMT","end":"Mon, 01 Dec 2025 08:37:53 GMT"},"fingerprint":{"sha1":"28:1C:E7:95:EC:8D:32:9E:63:9A:72:B2:8D:47:E5:13:F7:CA:5E:18","sha256":"52:99:CC:AA:BC:C4:15:12:9C:2B:FA:D7:97:2A:C4:D3:7D:B0:5C:E0:02:26:3C:8D:B2:4B:BE:89:1A:70:D6:31"}}},"request":{"raw":"POST /ccm/collect?ep._fpm_parameters=%5Bobject%20Object%5D\u0026en=page_view\u0026dr=r.search.yahoo.com\u0026dl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=1276079448.1758683063\u0026dt=Wealthsimple%20Client%20Has%20Almost%20%245%2C000%20in%20Crypto%20Stolen%20From%20Account%20%E2%80%94%20What%20Investors%20Need%20to%20Know%20to%20Protect%20Their%20Assets\u0026auid=679143361.1758683063\u0026navt=n\u0026npa=1\u0026us_privacy=error\u0026gtm=45He59m1v835181373za200zd835181373xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tcfd=1000h\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~115480709\u0026tft=1758683063183\u0026tfd=3402\u0026apve=1\u0026apvf=sb HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://money.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain\r\ndate: Wed, 24 Sep 2025 03:04:23 GMT\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://money.ca\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":381,"timings":{"blocked":166,"dns":0,"connect":31,"send":0,"wait":47,"receive":0,"ssl":134},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js-sec.indexww.com/um/ixmatch.html","fqdn":"js-sec.indexww.com","domain":"indexww.com","tld":"com"},"ip":{"addr":"104.18.24.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:28.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"indexww.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Sep 2025 06:45:18 GMT","end":"Sat, 20 Dec 2025 07:45:15 GMT"},"fingerprint":{"sha1":"FB:92:C7:3D:1F:8A:5A:96:9D:FB:42:F8:0F:3E:94:D4:AF:60:27:5E","sha256":"BB:EC:D8:9B:95:23:E5:49:01:10:E3:B8:46:D8:1D:C4:40:A9:70:B8:19:47:6D:91:E7:CB:BE:3E:59:5D:7B:E5"}}},"request":{"raw":"GET /um/ixmatch.html HTTP/1.1\r\nHost: js-sec.indexww.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:28 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 25 Jul 2022 19:18:19 GMT\r\np3p: policyref=\"/w3c/p3p.xml\", CP=\"NOI DSP COR DEVa TAIa OUR BUS UNI\"\r\ncf-cache-status: HIT\r\nage: 974\r\nexpires: Wed, 24 Sep 2025 07:04:28 GMT\r\ncache-control: public, max-age=14400\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 983f0df9094e569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2920,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (2920), with no line terminators","md5":"653708ad1bbae1579927b6391b2a28f3","sha1":"4261e415c23dfd9d925f071737fb0d236f856f4e","sha256":"82d2dc44aae1eda52abc17afd30c6031b7175c13ee6955410164c66ae755adfb","sha512":"4092d81beeaadb7eca73ee279af0a5289caf850253464baa4f7695c49670c05f7e89630807a2c41d3d9cad75d95a60719fdb1a16265537153952774f7450873c","ssdeep":"","tlshash":"ae5195bf3150b9710f2a62b1823ff505b75e5228391b88e0c384d9ba7d3880ac0b0fd5","first_seen":"2023-04-05T05:34:47Z","last_seen":"2026-04-03T15:36:05.890199Z","times_seen":3386,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":25,"dns":4,"connect":1,"send":0,"wait":10,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@alpinejs/ui@3.13.5-beta.0/dist/cdn.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:21.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 10:31:15 GMT","end":"Sun, 23 Nov 2025 11:31:12 GMT"},"fingerprint":{"sha1":"77:EF:87:8D:9A:D6:8C:EF:F9:8F:05:89:BF:F2:6B:C2:CF:78:19:EF","sha256":"3C:23:A9:CF:90:2C:6B:74:27:D0:FC:3B:92:A8:A9:AD:66:5F:B0:D4:DE:28:80:4D:49:D0:4C:22:AE:D2:F3:90"}}},"request":{"raw":"GET /@alpinejs/ui@3.13.5-beta.0/dist/cdn.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:21 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 983f0dcefdb58be6-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 7173183\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 24 Sep 2026 03:04:21 GMT\r\nlast-modified: Tue, 29 Apr 2025 17:16:22 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncontent-digest: sha256=:YN1K1PkOz43sC8oUDy8JIuuMynqjpM2m4mOfn5fOOoc=:\r\ncross-origin-resource-policy: cross-origin\r\nfly-request-id: 01JT18SD9D1MXGT9Y1TZGGEY5W-ord\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":40985,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (40984)","md5":"920ad5f5263cc1dbcf615e0f0b34651a","sha1":"933b7a15416a899d5cc7e3688c7a016b68b37738","sha256":"60dd4ad4f90ecf8dec0bca140f2f0922eb8cca7aa3a4cda6e2639f9f97ce3a87","sha512":"6c6e871164a119a7af5ac10872481a6f306a11cb10aa502fc87454c5f36b23ecf54b4f54bc22c4987400deffd31fc0ad74bda9cf1b6808c2b2a3bd86ab2599b4","ssdeep":"768:4/rb7TUsBgtVYWH/BbHGx7Fd8+ikVUdxfFT1J8WYxResSbbn2GmGAMXwT1I:4DmV7H/BbHGx7A+ikVkFT1+xResS32G9","tlshash":"2e03715b3195717643d9a17818b64843f21c3ad8b84f02bcf834edde71a9947e3b2a32","first_seen":"2025-09-20T03:59:22.752858Z","last_seen":"2025-09-24T03:05:07.322932Z","times_seen":2,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":7,"connect":19,"send":0,"wait":19,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csync.smilewanted.com/set_partner_userid_get/illumin/d7262573-7e7a-4a4f-abd8-a5a178d6273e","fqdn":"csync.smilewanted.com","domain":"smilewanted.com","tld":"com"},"ip":{"addr":"172.66.154.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://csync.smilewanted.com/","date":"2025-09-24T03:04:30.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smilewanted.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 Aug 2025 21:28:27 GMT","end":"Thu, 30 Oct 2025 22:28:25 GMT"},"fingerprint":{"sha1":"FB:44:58:7C:4E:4C:D7:15:3E:2A:CA:43:D5:E5:9A:4F:FE:1A:FD:C3","sha256":"29:04:62:7B:83:D3:74:91:86:5A:D4:7C:02:6D:09:C2:80:69:F3:6F:67:47:2F:4B:4D:36:97:99:91:6A:11:D5"}}},"request":{"raw":"GET /set_partner_userid_get/illumin/d7262573-7e7a-4a4f-abd8-a5a178d6273e HTTP/1.1\r\nHost: csync.smilewanted.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://csync.smilewanted.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sw_user_params_infos=avTYAHoMNgQB8VCG6I%2FasSlN2AIu1kJaLsYjr6b8gIZkuFjLanvKuMgImRwYnZcW1cb6Pjqkl8RypaXBNsjyEqFOCXNwz8ybLozG4cwD73LqvXyyLGHQDEDDkPfl0a0%2BacYlRkwRUbFAnd9qJwaFDll4j0%2BykyXYkr7i4WokkX2SDZNRgyKhamor4rk42FpQCcujBa457mFTxNGQ0SsBAYwQhWrYKss9Zsz20FWs9fn0OXl9qIBzF5pj26sRkuiyeQox3F1U6j11pO9nw0FviQTr6BaNB%2BCHR%2B9aSbjNfTs%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:30 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: sw_user_params_infos=6yaN6ejyrmczfX5yClfXotj807SqU3AQ2DZNuZSwB1Z1x8Bx6CDJiEeUff88fgJt3qIWMcZee0NtE4PaDwoD4uGIL3mTMlZm3ur0x3C2hVDQn%2FlPNK5sbbk2ICEhlwwYQcU4oqcC6aMJJBNMsGYuI3TXj6JhZqiYwTkhUIflZJol1cfLTVbJSgeEyAaUK5jApPJxuWPkxFYNuNAFdZpZ0sMgsNrdZwQRAMFW6%2B3qBozkE7LzcvNH4taRiWVAZUAqPjYAjICT6JHabElvRKtJDm4uP%2BCsVHMopH4qT1gV0nmXH5o7Pt2SEpsj%2BvsENZOytAnePLoe4Rzrx314TrIvhg%3D%3D; HttpOnly; SameSite=None; Secure; Path=/; Domain=smilewanted.com; Max-Age=31556952; Expires=Thu, 24 Sep 2026 08:53:42 GMT\r\ncf-ray: 983f0e05a94b7129-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otrack.kueezrtb.com/dye?ac=2\u0026acm=G3L\u0026uid=be5cdac8e005e820\u0026sid=34ec2ed1ee696ea0\u0026pvi=89bcafefc05ee524\u0026h=money.ca\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=81\u0026uri=%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026furl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026sr=1280x1024\u0026type=latest:fpdr\u0026_=1758683063364","fqdn":"otrack.kueezrtb.com","domain":"kueezrtb.com","tld":"com"},"ip":{"addr":"172.66.162.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kueezrtb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 31 Jul 2025 04:22:42 GMT","end":"Wed, 29 Oct 2025 05:22:40 GMT"},"fingerprint":{"sha1":"72:9A:34:A6:6E:6C:F2:12:4C:CD:21:43:69:9D:B4:AE:A6:E2:BD:C1","sha256":"74:FD:00:85:48:5B:6D:03:90:97:6C:48:C6:0B:F9:7E:AB:0F:30:71:82:29:09:7B:3D:3A:D7:32:40:B2:4D:4D"}}},"request":{"raw":"GET /dye?ac=2\u0026acm=G3L\u0026uid=be5cdac8e005e820\u0026sid=34ec2ed1ee696ea0\u0026pvi=89bcafefc05ee524\u0026h=money.ca\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=81\u0026uri=%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026furl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026sr=1280x1024\u0026type=latest:fpdr\u0026_=1758683063364 HTTP/1.1\r\nHost: otrack.kueezrtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 24 Sep 2025 03:04:23 GMT\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 983f0dda5ac38be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/checkUser","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:22.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"money.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:25:31 GMT","end":"Mon, 24 Nov 2025 16:25:29 GMT"},"fingerprint":{"sha1":"A5:8A:11:35:E2:18:EF:C0:E0:2A:61:E3:CE:0F:31:56:42:55:F0:FC","sha256":"C0:5A:4D:B1:BE:57:72:CF:9E:D8:17:5E:01:A3:0D:F8:4C:C1:16:16:8B:65:8B:CA:3B:CC:32:C3:E9:15:71:EF"}}},"request":{"raw":"GET /checkUser HTTP/1.1\r\nHost: money.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account\r\nnewrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjE2ODQ3ODgiLCJhcCI6IjE1ODkxMDU2MTUiLCJpZCI6IjVhOTI3ZDQwYWY0ODA3YmYiLCJ0ciI6IjAzOWU4ZjM1MmUyN2RiYjI3MDAyMzRiNjBmOTZkNThlIiwidGkiOjE3NTg2ODMwNjE5MTd9fQ==\r\ntraceparent: 00-039e8f352e27dbb2700234b60f96d58e-5a927d40af4807bf-01\r\ntracestate: 1684788@nr=0-1-1684788-1589105615-5a927d40af4807bf----1758683061917\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SSID_9H80=CQDn9B0AAAAAAAC0X9NohcaCGLRf02gBAAAAAAAAAAAAtF_TaADc7g; SSSC_9H80=1013.G7553486227140429445.1|0.0; SSRT_9H80=tF_TaAABAA; money_session=eyJpdiI6Inlqb015WmpKSkJhakh6SzMyN3VheFE9PSIsInZhbHVlIjoiT2pIcnNveGVobXNrS1FIUkZZZDd4ZWRNNkd0UTZPcnUveStFd09kNDY3T3ZtbEV0RXlLbXNadTFDS2Q0eC8wUGIyemFQaEdKVlVHb1MyRXNvb3NHYmN3ZkpwVy9ySHBBN1JCWEVmbkNraWhld3l1Rm5WTXd3VU53Zk52aHFEeGwiLCJtYWMiOiJmZDFlNmVjOGI0MDQxMmEzM2I4ZDAwMWNmMzY4Y2QyYjZlNzUyY2ZmODNiNjJhMDcxZjBhYzEwZTY3Yjk0ZjIwIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkVvY3h6L1FXSXBwbXVzYm1qUTlieXc9PSIsInZhbHVlIjoiSUM1b01ISkcyT0xMWFBCZVFsQUxUSitIbnNYNVhpTkRQR2wvcWJlQkx0a09hQVhxRXgwT3NFcXpVOWkzdkR2QTRRdkVJYzBlbU10VlpHb1RpYWhFNUhuMDBLaEs4L3BTVTBFYmIvNzJmekR3bmsrSzZJQkhtbDUzUDEySFhOU3kiLCJtYWMiOiJhMjFkMzNlZWRjMWJiMjcwOTY0YzY0NzQ0OTI2YWFiYTIwZWI2MGY4MDlkMTA2MzVlMjc2YTRhYzdiMGM5ZjJlIiwidGFnIjoiIn0%3D; __cf_bm=.U3YtFNih3m1w6FCrnkhu9tGuUHymVGomrTcpO.A40w-1758683061-1.0.1.1-HamIbNq.vNx7npxwSP0wqoYClS3Y3B42WO1UNnXOMO6bSheMocH.v_b7Q.nhvQVLVKnDsPdTSCXB4bPsND1B3RB70gSD0SuE2XX4dl_bXM0; utm_source=direct; user_meta=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22null%22%2C%22utm_campaign%22%3A%22null%22%2C%22utm_content%22%3A%22null%22%2C%22utm_term%22%3A%22null%22%2C%22device_category%22%3A%22unknown%22%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:22 GMT\r\ncontent-type: application/json\r\ncontent-encoding: gzip\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6ImNLQ0dNOHBFamlZbnI1QUV5Zzg2bUE9PSIsInZhbHVlIjoiMWtyRmhBTFkwdkduQlNwTStueldJY1ZWb0g5Ni9oaEhZSmIwWDVPS3FHKzR6T1hMUHhvUzFHNjE3WlBSTzBMYmNQQkt5N01mMkJFZjZTYXlPTjVxY3czd0prSThoNDNFYVRpNlJ5aXNBbGhEcUxWNEt4Z2UwMlpqRnVodW5UcFAiLCJtYWMiOiIyN2MxODA3Nzc5MWE3NmVhM2RlNjgwOTFjZWEyN2MzNDFjYWNlZWNlMmY2MWFhZTIzOTBjY2IyNGE0MDkzNjE2IiwidGFnIjoiIn0%3D; expires=Wed, 24 Sep 2025 05:04:22 GMT; Max-Age=7200; path=/; domain=money.ca; secure; samesite=lax\nmoney_session=eyJpdiI6ImxTWWgrS3RqYVRvUVFXWTMxSFJxeWc9PSIsInZhbHVlIjoiSTdQZkg3N1VtbUtUVHF2VUFJSWlnQ0tkN2tWUDJMSm5wVW1nWFZPL0hEbDFORGlRNXhndkc4WkFCQkpubmxhQnRTdVl0dkE0aHFDN2E1QlM0Rk1PdC9FSHVncHdqMUY4aHNiK0dSY3RiMHgyTEgrN2ZwZ1RlWnNscy8zT09KNlYiLCJtYWMiOiJmNTdlYTM2ZTQzOTRlMWYwYjg5NTBiYmJjNWM2MzZlY2E0OWIxZGM5ZTRmZGExM2Q5ZTRiODFhMTY4YWEzMjRiIiwidGFnIjoiIn0%3D; expires=Wed, 24 Sep 2025 05:04:22 GMT; Max-Age=7200; path=/; domain=money.ca; secure; httponly; samesite=lax\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 983f0dd199911a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b538cc239310cb0c764843f559467a99","sha1":"548105442b874117f049ba6e938fa22dd19e5a06","sha256":"3e58c6fcf10a31770582814c2babfd1ff71bb1a72cae32cdb1c1a428f406d47f","sha512":"d148955397ace842fcb8251fcef77b2fd8a331b3f45d0b02294f4a6083f871f75e12ba62f9b72319c89c90290d5e446863b31a11c15168d292f6c0a9dd04f653","ssdeep":"","tlshash":"e2700020c2800c0acb0002a08300028202002e30a0a0280880022820208b00880a8082","first_seen":"2023-06-04T09:43:36Z","last_seen":"2026-04-03T01:34:57.719138Z","times_seen":714,"resource_available":true,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-HPYYC0GT7P\u0026gtm=45je59m1v9100940049za200zd9100940049\u0026_p=1758683061733\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026tcfd=1000h\u0026cid=1612852284.1758683063\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_s=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528500~104684208~104684211~104948813~115480709~115497441\u0026sid=1758683062\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026dr=https%3A%2F%2Fr.search.yahoo.com%2F\u0026dt=Wealthsimple%20Client%20Has%20Almost%20%245%2C000%20in%20Crypto%20Stolen%20From%20Account%20%E2%80%94%20What%20Investors%20Need%20to%20Know%20to%20Protect%20Their%20Assets\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026ep.sitespect_experience_name=\u0026ep.sitespect_variation_name=\u0026ep.sitespect_campaign_id=\u0026tfd=3387","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"DF:7E:8A:F9:1C:B5:DC:9E:90:E3:71:A7:92:85:2C:8F:2B:B4:42:8E","sha256":"3A:65:11:10:B9:58:2F:E1:BF:38:98:8D:2E:3E:A2:01:9D:C6:BE:69:5B:AD:F7:99:53:F9:AB:A6:6B:82:47:F1"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-HPYYC0GT7P\u0026gtm=45je59m1v9100940049za200zd9100940049\u0026_p=1758683061733\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026tcfd=1000h\u0026cid=1612852284.1758683063\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_s=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528500~104684208~104684211~104948813~115480709~115497441\u0026sid=1758683062\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026dr=https%3A%2F%2Fr.search.yahoo.com%2F\u0026dt=Wealthsimple%20Client%20Has%20Almost%20%245%2C000%20in%20Crypto%20Stolen%20From%20Account%20%E2%80%94%20What%20Investors%20Need%20to%20Know%20to%20Protect%20Their%20Assets\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026ep.sitespect_experience_name=\u0026ep.sitespect_variation_name=\u0026ep.sitespect_campaign_id=\u0026tfd=3387 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.ca/\r\nOrigin: https://money.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://money.ca\r\ndate: Wed, 24 Sep 2025 03:04:23 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:158:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:158:0\r\nreport-to: {\"group\":\"ascnsrsggc:158:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:158:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":58,"dns":1,"connect":21,"send":0,"wait":30,"receive":1,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raven-static.aditude.io/prod/1.10.3-jakljg/raven.js","fqdn":"raven-static.aditude.io","domain":"aditude.io","tld":"io"},"ip":{"addr":"172.66.168.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:22.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aditude.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 Aug 2025 17:38:08 GMT","end":"Tue, 04 Nov 2025 18:38:05 GMT"},"fingerprint":{"sha1":"7E:39:52:3D:27:DF:CA:33:AD:56:A7:45:2D:03:C5:F8:44:A8:51:5D","sha256":"2C:86:9B:7E:3E:B2:04:3D:45:1D:F9:63:17:30:7E:6A:80:7F:2A:94:3D:88:F5:16:68:9F:1E:EA:2A:2C:FB:64"}}},"request":{"raw":"GET /prod/1.10.3-jakljg/raven.js HTTP/1.1\r\nHost: raven-static.aditude.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:22 GMT\r\ncontent-type: application/javascript\r\nx-amz-id-2: 7YL8GuwcM8MzhrxhhV+sZWECGjzVw07QEDT4bMgqu4j+Qkhbu6hD2id1//U4jC8zOdo8RuEZUeI=\r\nx-amz-request-id: 1R324WD3BGBTBKK7\r\nlast-modified: Fri, 19 Sep 2025 19:20:03 GMT\r\nx-amz-server-side-encryption: AES256\r\nvary: accept-encoding\r\nserver: cloudflare\r\nage: 2135\r\ncache-control: max-age=300\r\ncf-cache-status: HIT\r\netag: W/\"9bfea7b07328f1f1c8e014b0e0199980\"\r\ncontent-encoding: br\r\ncf-ray: 983f0dd2c95056ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120407,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65423)","md5":"9bfea7b07328f1f1c8e014b0e0199980","sha1":"df34d94d00b0465a5a39c34779de6dcf048373de","sha256":"0045f623eed6eb783cdd190df61fa53a1a488aecdb15d5441160dee073139366","sha512":"f6c9566c6359404f9805fe49938b4008817445697a68c46a3802d4a9b3b55529c661938f32d54068e817eb733249e0095a0f27413be74e77d41af5fa57cd0d3d","ssdeep":"1536:hWZcbeajxhbTWpwTS2A/hQjyDJsdUHSR+6/pv0m1QQSMMDKPeZ4pEAC20SKC:suSaFhWph2wsdUHSI6/a87C2B","tlshash":"20c33adab2d6b13d83d896d5c4351005f3358d9a740c8078f3a86cd339a9d8b91baf3a","first_seen":"2025-09-19T20:50:46.561097Z","last_seen":"2025-09-24T13:10:57.785989Z","times_seen":10,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-HPYYC0GT7P\u0026cid=1612852284.1758683063\u0026gtm=45je59m1v9100940049za200zd9100940049\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528500~104684208~104684211~104948813~115480709~115497441\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528500~104684208~104684211~104948813~115480709~115497441\u0026z=205502926","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:39:23 GMT","end":"Mon, 01 Dec 2025 08:39:22 GMT"},"fingerprint":{"sha1":"42:CA:DF:AC:84:77:2A:0C:CC:0B:0C:7D:2C:7F:F7:A4:90:1B:05:F3","sha256":"4E:E3:F5:47:6B:82:78:8F:EB:24:48:87:45:0A:2B:B2:1C:6C:5C:89:6A:E4:47:C7:0C:F5:35:47:93:B2:F2:BE"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-HPYYC0GT7P\u0026cid=1612852284.1758683063\u0026gtm=45je59m1v9100940049za200zd9100940049\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528500~104684208~104684211~104948813~115480709~115497441\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528500~104684208~104684211~104948813~115480709~115497441\u0026z=205502926 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Wed, 24 Sep 2025 03:04:23 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-03T17:31:09.369861Z","times_seen":760264,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":94,"dns":2,"connect":14,"send":0,"wait":35,"receive":0,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchange.kueezrtb.com/prebid/multi/64dcd6552888555c21f4eb75","fqdn":"exchange.kueezrtb.com","domain":"kueezrtb.com","tld":"com"},"ip":{"addr":"159.203.149.115","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kueezrtb.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 08 Sep 2025 00:00:00 GMT","end":"Fri, 09 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:6B:23:AC:12:9D:8F:23:91:F4:4E:D6:87:43:A7:68:FE:45:E7:33","sha256":"57:0E:D8:D7:08:6E:BA:F7:AB:45:7D:DB:A5:9C:E3:FB:BB:C5:E8:1F:D3:2F:72:7A:1B:08:D1:D5:8B:DB:EF:77"}}},"request":{"raw":"POST /prebid/multi/64dcd6552888555c21f4eb75 HTTP/1.1\r\nHost: exchange.kueezrtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.ca/\r\ncontent-type: text/plain\r\nContent-Length: 1013\r\nOrigin: https://money.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: kuid=b4c606a6d5e7c1f9\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Content-Range, Cache-Control\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-origin: https://money.ca\r\ncache-control: max-age=0, no-cache, must-revalidate, proxy-revalidate\r\ndate: Wed, 24 Sep 2025 03:04:24 GMT\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":745,"timings":{"blocked":314,"dns":55,"connect":105,"send":0,"wait":114,"receive":0,"ssl":155},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"server.smartytech.io/match?redirect=https%3A%2F%2Fprebid.admatic.de%2Fsetuid%3Fbidder%3Dmembrana%26gdpr%3D%26gdpr_consent%3D%26f%3Di%26uid%3D%7Buser_id%7D","fqdn":"server.smartytech.io","domain":"smartytech.io","tld":"io"},"ip":{"addr":"57.128.210.69","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://dsp-service.admatic.de/cookie_sync?r=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fadmatic%2F%24%7BUSER_ID%7D","date":"2025-09-24T03:04:29.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"smartytech.io","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 09:07:44 GMT","end":"Sun, 30 Nov 2025 09:07:43 GMT"},"fingerprint":{"sha1":"C1:79:BD:57:A6:88:9B:65:1E:23:BE:A3:9D:52:C6:BC:01:C9:48:E3","sha256":"98:6F:11:AF:78:92:88:1B:F6:E6:9E:EE:62:EE:E8:A3:2C:0B:E2:52:49:81:39:10:52:DF:FD:72:91:AB:5B:37"}}},"request":{"raw":"GET /match?redirect=https%3A%2F%2Fprebid.admatic.de%2Fsetuid%3Fbidder%3Dmembrana%26gdpr%3D%26gdpr_consent%3D%26f%3Di%26uid%3D%7Buser_id%7D HTTP/1.1\r\nHost: server.smartytech.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dsp-service.admatic.de/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Wed, 24 Sep 2025 03:04:29 GMT\r\ncontent-type: image/gif\r\ncontent-length: 195\r\nlocation: https://prebid.admatic.de/setuid?bidder=membrana\u0026gdpr=\u0026gdpr_consent=\u0026f=i\u0026uid=13660fa4-e1e7-4d47-85bb-fed4b58cf9fd\r\nexpires: Wed, 11 Nov 1998 11:11:11 GMT\r\nlast-modified: Wed, 24 Sep 2025 03:04:29 GMT\r\npragma: no-cache\r\nset-cookie: uid=13660fa4-e1e7-4d47-85bb-fed4b58cf9fd; Path=/; Expires=Thu, 24 Sep 2026 03:04:29 GMT; Secure; SameSite=None\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, no-store no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1122,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":369,"timings":{"blocked":152,"dns":0,"connect":50,"send":0,"wait":53,"receive":0,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetag-sys.com/usync/?pubId=7f5d22b0006ab5a","fqdn":"onetag-sys.com","domain":"onetag-sys.com","tld":"com"},"ip":{"addr":"51.75.86.98","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://csync.smilewanted.com/","date":"2025-09-24T03:04:29.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.onetag-sys.com","organization":"Onetag Limited"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Jan 2025 00:00:00 GMT","end":"Sat, 27 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"26:2D:63:1A:A7:C6:41:9C:A2:F5:39:CB:C4:F2:77:55:75:D9:90:82","sha256":"37:2A:F8:00:CE:63:ED:4D:93:6E:F0:22:00:0E:3E:2E:63:36:91:2D:B5:C8:81:FE:7D:02:B5:16:7C:3D:C1:48"}}},"request":{"raw":"GET /usync/?pubId=7f5d22b0006ab5a HTTP/1.1\r\nHost: onetag-sys.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csync.smilewanted.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ncache-control: no-store\r\nstrict-transport-security: max-age=15552000\r\nalt-svc: h3=\":443\"; ma=900, h3-29=\":443\"; ma=900\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":341,"timings":{"blocked":147,"dns":1,"connect":34,"send":0,"wait":34,"receive":0,"ssl":121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.clean.gg/1a","fqdn":"i.clean.gg","domain":"clean.gg","tld":"gg"},"ip":{"addr":"34.95.69.49","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:21.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"i.clean.gg","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 14 Aug 2025 06:56:30 GMT","end":"Wed, 12 Nov 2025 07:50:44 GMT"},"fingerprint":{"sha1":"9E:36:0C:B7:8B:44:DC:89:09:6C:D0:D4:BB:A5:71:17:44:C7:6A:F2","sha256":"70:6D:F6:EC:A2:7A:87:2C:0C:BB:52:97:72:BD:FA:C5:93:D9:24:3E:80:B2:B7:79:96:41:FD:B1:55:5F:5D:21"}}},"request":{"raw":"OPTIONS /1a HTTP/1.1\r\nHost: i.clean.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://money.ca/\r\nOrigin: https://money.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.29.0\r\ndate: Wed, 24 Sep 2025 03:04:21 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Origin,Accept,X-API-Key\r\naccess-control-max-age: 1728000\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.29.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":349,"timings":{"blocked":113,"dns":9,"connect":13,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otrack.kueezrtb.com/dye?ac=2\u0026acm=G3L\u0026uid=be5cdac8e005e820\u0026sid=34ec2ed1ee696ea0\u0026pvi=89bcafefc05ee524\u0026h=money.ca\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=81\u0026uri=%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026furl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026sr=1280x1024\u0026type=latest:init\u0026_=1758683063362","fqdn":"otrack.kueezrtb.com","domain":"kueezrtb.com","tld":"com"},"ip":{"addr":"172.66.162.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kueezrtb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 31 Jul 2025 04:22:42 GMT","end":"Wed, 29 Oct 2025 05:22:40 GMT"},"fingerprint":{"sha1":"72:9A:34:A6:6E:6C:F2:12:4C:CD:21:43:69:9D:B4:AE:A6:E2:BD:C1","sha256":"74:FD:00:85:48:5B:6D:03:90:97:6C:48:C6:0B:F9:7E:AB:0F:30:71:82:29:09:7B:3D:3A:D7:32:40:B2:4D:4D"}}},"request":{"raw":"GET /dye?ac=2\u0026acm=G3L\u0026uid=be5cdac8e005e820\u0026sid=34ec2ed1ee696ea0\u0026pvi=89bcafefc05ee524\u0026h=money.ca\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=81\u0026uri=%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026furl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026sr=1280x1024\u0026type=latest:init\u0026_=1758683063362 HTTP/1.1\r\nHost: otrack.kueezrtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 24 Sep 2025 03:04:23 GMT\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 983f0dda5abd8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.kueezrtb.com/api/sync/iframe/?cid=\u0026gdpr=0\u0026gdpr_consent=\u0026us_privacy=","fqdn":"sync.kueezrtb.com","domain":"kueezrtb.com","tld":"com"},"ip":{"addr":"157.230.5.61","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:28.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kueezrtb.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 08 Sep 2025 00:00:00 GMT","end":"Fri, 09 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:6B:23:AC:12:9D:8F:23:91:F4:4E:D6:87:43:A7:68:FE:45:E7:33","sha256":"57:0E:D8:D7:08:6E:BA:F7:AB:45:7D:DB:A5:9C:E3:FB:BB:C5:E8:1F:D3:2F:72:7A:1B:08:D1:D5:8B:DB:EF:77"}}},"request":{"raw":"GET /api/sync/iframe/?cid=\u0026gdpr=0\u0026gdpr_consent=\u0026us_privacy= HTTP/1.1\r\nHost: sync.kueezrtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nCookie: kuid=b4c606a6d5e7c1f9\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\np3p: CP=\"NOI DSP COR PSAo PSDo OUR IND UNI COM NAV ADMa\"\r\naccess-control-allow-methods: GET, HEAD, OPTIONS, POST\r\ncontent-type: text/html\r\ncontent-length: 109\r\ndate: Wed, 24 Sep 2025 03:04:28 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":109,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"9b7355ecddaf0c12398a48659278a7e6","sha1":"5181162df39733dda7a615293993d26df753d769","sha256":"a1aa01f31d4087317f5d4e5ef4ea70a73e38124a45f1553dbe8968ea16068b84","sha512":"4a50488beabb8bbe670d40ad513a3f549bbff88206c71395e53b9a6d0d91714113ce0b2a2a2ae339a481e49269cdc92c967876f297353e3a1b6f05dfe7d93a32","ssdeep":"","tlshash":"55b012f9a0425c0ae98137a34ce5d158840b358cf0805c64568e2773d049b326d210cd","first_seen":"2023-04-21T08:33:15Z","last_seen":"2026-04-03T17:04:17.829191Z","times_seen":4517,"resource_available":true,"data":null}},"time_used":716,"timings":{"blocked":303,"dns":75,"connect":107,"send":0,"wait":109,"receive":0,"ssl":118},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ib.adnxs.com/ut/v3/prebid","fqdn":"ib.adnxs.com","domain":"adnxs.com","tld":"com"},"ip":{"addr":"37.252.172.123","port":443,"asn":29990,"as":"ASN-APPNEX","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:24.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adnxs.com","organization":""},"issuer":{"commonName":"GeoTrust ECC CA 2018","organization":"DigiCert Inc"},"validity":{"start":"Fri, 21 Feb 2025 00:00:00 GMT","end":"Mon, 23 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:EE:89:C7:20:BA:61:AE:F3:AA:39:44:BE:B4:55:C2:57:AE:7B:2E","sha256":"75:02:F1:DD:99:91:E6:47:E3:EA:28:9B:73:F9:46:8F:F5:EC:38:2C:57:F0:81:E0:5A:51:ED:B6:81:B9:78:CC"}}},"request":{"raw":"POST /ut/v3/prebid HTTP/1.1\r\nHost: ib.adnxs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.ca/\r\ncontent-type: text/plain\r\nContent-Length: 912\r\nOrigin: https://money.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.25.5\r\ndate: Wed, 24 Sep 2025 03:04:24 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 19\r\ncache-control: no-store, no-cache, private\r\npragma: no-cache\r\nexpires: Sat, 15 Nov 2008 16:00:00 GMT\r\np3p: policyref=\"http://cdn.adnxs-simple.com/w3c/policy/p3p.xml\", CP=\"NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE\"\r\nx-xss-protection: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://money.ca\r\naccept-ch: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness\r\nan-x-request-uuid: 58d530f1-6070-4080-b145-669e725d1184\r\nx-proxy-origin: 91.90.42.154; 91.90.42.154; 868.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; *.adnxs.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f333cec2aef5c287691c1670f8207232","sha1":"6dafbe0bf001219999903a4ed5bd23af5b81e52d","sha256":"0c09c070833c786cb25be38bc30992b30bad578f817dbc9e34beacd8b8ea44c5","sha512":"99baef5b4101653b6c6e4dcc611091804059c9b85887cb782f7e653b2bdf5c0d3e7608206bf0d9661b2da08a6af0983f7ec01f76aa38e81e46f9d3a1c3c3148b","ssdeep":"","tlshash":"9d70000000a0003b2202000088000a8c0080828000220e208020220082002028a00000","first_seen":"2023-05-15T23:26:08Z","last_seen":"2026-03-30T00:15:43.067343Z","times_seen":3454,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":64,"dns":8,"connect":19,"send":0,"wait":33,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csync.smilewanted.com/","fqdn":"csync.smilewanted.com","domain":"smilewanted.com","tld":"com"},"ip":{"addr":"172.66.154.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:28.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smilewanted.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 Aug 2025 21:28:27 GMT","end":"Thu, 30 Oct 2025 22:28:25 GMT"},"fingerprint":{"sha1":"FB:44:58:7C:4E:4C:D7:15:3E:2A:CA:43:D5:E5:9A:4F:FE:1A:FD:C3","sha256":"29:04:62:7B:83:D3:74:91:86:5A:D4:7C:02:6D:09:C2:80:69:F3:6F:67:47:2F:4B:4D:36:97:99:91:6A:11:D5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: csync.smilewanted.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:28 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 983f0df97e427129-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9801,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5302)","md5":"bc7bf12a8977075fabf2b2ff20e0cd20","sha1":"956e20d90cea0243258f1837ae21455deaf8f776","sha256":"556419d707a9ff00b27fe9cd7457b710c79d365fbf50d6fb0be00ae0d4feec28","sha512":"dd1cfc730720098c6718053b5677ff50817606ae6d1d85b4050eae1457c10e760632706192d16b4fbeb615d068e11d1db625fff1b0a9d2fbe7fa0bf6ec4216cc","ssdeep":"192:R3elHi1d2/yfuvO+CMaimV+sXzC85GxGAUEpCqr28h1k:Rr1UauhWiKzC5w+Jh6","tlshash":"5612bb8a7aea271193877ef9096d640973a73607379cc8df7a8c91280fd140d06dde5b","first_seen":"2025-09-22T16:09:05.438116Z","last_seen":"2025-12-08T06:42:42.599586Z","times_seen":536,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"media1.money.ca/cdn-cgi/image/fit=cover,g=center,width=48,height=48,f=auto,quality=90/avatars/romana-king-1650956909.png","fqdn":"media1.money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:21.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"money.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:25:31 GMT","end":"Mon, 24 Nov 2025 16:25:29 GMT"},"fingerprint":{"sha1":"A5:8A:11:35:E2:18:EF:C0:E0:2A:61:E3:CE:0F:31:56:42:55:F0:FC","sha256":"C0:5A:4D:B1:BE:57:72:CF:9E:D8:17:5E:01:A3:0D:F8:4C:C1:16:16:8B:65:8B:CA:3B:CC:32:C3:E9:15:71:EF"}}},"request":{"raw":"GET /cdn-cgi/image/fit=cover,g=center,width=48,height=48,f=auto,quality=90/avatars/romana-king-1650956909.png HTTP/1.1\r\nHost: media1.money.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nCookie: SSID_9H80=CQDn9B0AAAAAAAC0X9NohcaCGLRf02gBAAAAAAAAAAAAtF_TaADc7g; SSSC_9H80=1013.G7553486227140429445.1|0.0; SSRT_9H80=tF_TaAABAA; money_session=eyJpdiI6Inlqb015WmpKSkJhakh6SzMyN3VheFE9PSIsInZhbHVlIjoiT2pIcnNveGVobXNrS1FIUkZZZDd4ZWRNNkd0UTZPcnUveStFd09kNDY3T3ZtbEV0RXlLbXNadTFDS2Q0eC8wUGIyemFQaEdKVlVHb1MyRXNvb3NHYmN3ZkpwVy9ySHBBN1JCWEVmbkNraWhld3l1Rm5WTXd3VU53Zk52aHFEeGwiLCJtYWMiOiJmZDFlNmVjOGI0MDQxMmEzM2I4ZDAwMWNmMzY4Y2QyYjZlNzUyY2ZmODNiNjJhMDcxZjBhYzEwZTY3Yjk0ZjIwIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkVvY3h6L1FXSXBwbXVzYm1qUTlieXc9PSIsInZhbHVlIjoiSUM1b01ISkcyT0xMWFBCZVFsQUxUSitIbnNYNVhpTkRQR2wvcWJlQkx0a09hQVhxRXgwT3NFcXpVOWkzdkR2QTRRdkVJYzBlbU10VlpHb1RpYWhFNUhuMDBLaEs4L3BTVTBFYmIvNzJmekR3bmsrSzZJQkhtbDUzUDEySFhOU3kiLCJtYWMiOiJhMjFkMzNlZWRjMWJiMjcwOTY0YzY0NzQ0OTI2YWFiYTIwZWI2MGY4MDlkMTA2MzVlMjc2YTRhYzdiMGM5ZjJlIiwidGFnIjoiIn0%3D; __cf_bm=.U3YtFNih3m1w6FCrnkhu9tGuUHymVGomrTcpO.A40w-1758683061-1.0.1.1-HamIbNq.vNx7npxwSP0wqoYClS3Y3B42WO1UNnXOMO6bSheMocH.v_b7Q.nhvQVLVKnDsPdTSCXB4bPsND1B3RB70gSD0SuE2XX4dl_bXM0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:21 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1720\r\nserver: cloudflare\r\ncf-ray: 983f0dce5e581a30-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2678400\r\netag: \"cfqGb2szrbNS3gpMzuSMXAClu3xai1B1wDBONKfKJfDQ:a3f040c0baa0c3c36c348c9eb392c175\"\r\nlast-modified: Thu, 22 Jun 2023 21:21:02 GMT\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept, Accept-Encoding\r\nvia: 1.1 9adf50a068a92adaab58cf6a21118640.cloudfront.net (CloudFront)\r\ncf-bgj: imgq:90,h2pri\r\ncf-resized: internal=ok/h q=0 n=19+10 c=1+8 v=2025.9.1 l=1720 f=false c2=0 wv=2025.8.1\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1720,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"ce3ddfe122be58c6c50ca3711bc4422e","sha1":"8de49c23c68d335d9ad0afedf33efbf11253ef2c","sha256":"eefe5fd1b8c93337b1a16dfe5bcffdb227102a89bd1dc5e9f72085bd7579479a","sha512":"7042287d06093b41f2b0d276205e9802c8f16bc1cc5d49b92488be190ce220ada19ab6ce8964d0c4d9037aac899b437dc3dcd86c9e8a211fc9a1b54b222f4548","ssdeep":"","tlshash":"bd31180893a00527c09c467485acbf33b13ee254a5a255a29d31bb9282a0797d925f3c","first_seen":"2025-09-20T03:59:22.675401Z","last_seen":"2025-09-24T03:05:07.328287Z","times_seen":2,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"media1.money.ca/cdn-cgi/image/fit=cover,g=center,width=257,height=176,f=auto,quality=90/a/72403/canadians-fear-retirement-savings-shortfall_hero_1800x800_v20241029102457.jpg","fqdn":"media1.money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:21.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"money.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:25:31 GMT","end":"Mon, 24 Nov 2025 16:25:29 GMT"},"fingerprint":{"sha1":"A5:8A:11:35:E2:18:EF:C0:E0:2A:61:E3:CE:0F:31:56:42:55:F0:FC","sha256":"C0:5A:4D:B1:BE:57:72:CF:9E:D8:17:5E:01:A3:0D:F8:4C:C1:16:16:8B:65:8B:CA:3B:CC:32:C3:E9:15:71:EF"}}},"request":{"raw":"GET /cdn-cgi/image/fit=cover,g=center,width=257,height=176,f=auto,quality=90/a/72403/canadians-fear-retirement-savings-shortfall_hero_1800x800_v20241029102457.jpg HTTP/1.1\r\nHost: media1.money.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nCookie: SSID_9H80=CQDn9B0AAAAAAAC0X9NohcaCGLRf02gBAAAAAAAAAAAAtF_TaADc7g; SSSC_9H80=1013.G7553486227140429445.1|0.0; SSRT_9H80=tF_TaAABAA; money_session=eyJpdiI6Inlqb015WmpKSkJhakh6SzMyN3VheFE9PSIsInZhbHVlIjoiT2pIcnNveGVobXNrS1FIUkZZZDd4ZWRNNkd0UTZPcnUveStFd09kNDY3T3ZtbEV0RXlLbXNadTFDS2Q0eC8wUGIyemFQaEdKVlVHb1MyRXNvb3NHYmN3ZkpwVy9ySHBBN1JCWEVmbkNraWhld3l1Rm5WTXd3VU53Zk52aHFEeGwiLCJtYWMiOiJmZDFlNmVjOGI0MDQxMmEzM2I4ZDAwMWNmMzY4Y2QyYjZlNzUyY2ZmODNiNjJhMDcxZjBhYzEwZTY3Yjk0ZjIwIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkVvY3h6L1FXSXBwbXVzYm1qUTlieXc9PSIsInZhbHVlIjoiSUM1b01ISkcyT0xMWFBCZVFsQUxUSitIbnNYNVhpTkRQR2wvcWJlQkx0a09hQVhxRXgwT3NFcXpVOWkzdkR2QTRRdkVJYzBlbU10VlpHb1RpYWhFNUhuMDBLaEs4L3BTVTBFYmIvNzJmekR3bmsrSzZJQkhtbDUzUDEySFhOU3kiLCJtYWMiOiJhMjFkMzNlZWRjMWJiMjcwOTY0YzY0NzQ0OTI2YWFiYTIwZWI2MGY4MDlkMTA2MzVlMjc2YTRhYzdiMGM5ZjJlIiwidGFnIjoiIn0%3D; __cf_bm=.U3YtFNih3m1w6FCrnkhu9tGuUHymVGomrTcpO.A40w-1758683061-1.0.1.1-HamIbNq.vNx7npxwSP0wqoYClS3Y3B42WO1UNnXOMO6bSheMocH.v_b7Q.nhvQVLVKnDsPdTSCXB4bPsND1B3RB70gSD0SuE2XX4dl_bXM0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:21 GMT\r\ncontent-type: image/avif\r\ncontent-length: 8702\r\nserver: cloudflare\r\ncf-ray: 983f0dce5e591a30-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2678400\r\netag: \"cfjpoj3yphwaO81cYUd7R28YpBi3Z8qEyJPKRNl7dODQ:0cdffb04876d6dc8f3e05dc1caa7011c\"\r\nlast-modified: Tue, 29 Oct 2024 14:24:58 GMT\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept, Accept-Encoding\r\nvia: 1.1 5b21c56dde1a436b4b6766d2406627d2.cloudfront.net (CloudFront)\r\ncf-bgj: imgq:90,h2pri\r\ncf-resized: internal=ok/h q=0 n=26+189 c=4+66 v=2025.9.1 l=8702 f=false c2=0 wv=2025.8.1\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":8702,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"1218e2d22849d9fde9aa8bd510354ae7","sha1":"17fe1f96fa9cbe83d03cb216206c3fcfc1ea3c94","sha256":"2ee13e7a31ad52c1b03d0fe9be5634a6e894861af404ecc5c51d1554320982c4","sha512":"5cc02c53587140a01b6e744b2117ad73d53b0bdef31b45a370681ef51c8bf4c784ea77019d8eca6ee1f91f7469bb9b8f26fa4a77db6397161349751a882d1c23","ssdeep":"192:2dG1gIvV5LVhU7DoPAcEg7zIaeaJu4UdI1yt1zrzgFu0YRH13EN:JPfRhc7ozIaD7uI1OnzpDRS","tlshash":"5502afab3f7ad887eb058f724055108e7097de6721109e2d5835f74ea5368e15817b84","first_seen":"2025-09-24T03:05:07.329639Z","last_seen":"2025-09-24T03:05:07.329639Z","times_seen":1,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/expand-collapse/2522.js","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:22.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"money.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:25:31 GMT","end":"Mon, 24 Nov 2025 16:25:29 GMT"},"fingerprint":{"sha1":"A5:8A:11:35:E2:18:EF:C0:E0:2A:61:E3:CE:0F:31:56:42:55:F0:FC","sha256":"C0:5A:4D:B1:BE:57:72:CF:9E:D8:17:5E:01:A3:0D:F8:4C:C1:16:16:8B:65:8B:CA:3B:CC:32:C3:E9:15:71:EF"}}},"request":{"raw":"GET /js/expand-collapse/2522.js HTTP/1.1\r\nHost: money.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account\r\nCookie: SSID_9H80=CQDn9B0AAAAAAAC0X9NohcaCGLRf02gBAAAAAAAAAAAAtF_TaADc7g; SSSC_9H80=1013.G7553486227140429445.1|0.0; SSRT_9H80=tF_TaAABAA; money_session=eyJpdiI6Inlqb015WmpKSkJhakh6SzMyN3VheFE9PSIsInZhbHVlIjoiT2pIcnNveGVobXNrS1FIUkZZZDd4ZWRNNkd0UTZPcnUveStFd09kNDY3T3ZtbEV0RXlLbXNadTFDS2Q0eC8wUGIyemFQaEdKVlVHb1MyRXNvb3NHYmN3ZkpwVy9ySHBBN1JCWEVmbkNraWhld3l1Rm5WTXd3VU53Zk52aHFEeGwiLCJtYWMiOiJmZDFlNmVjOGI0MDQxMmEzM2I4ZDAwMWNmMzY4Y2QyYjZlNzUyY2ZmODNiNjJhMDcxZjBhYzEwZTY3Yjk0ZjIwIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkVvY3h6L1FXSXBwbXVzYm1qUTlieXc9PSIsInZhbHVlIjoiSUM1b01ISkcyT0xMWFBCZVFsQUxUSitIbnNYNVhpTkRQR2wvcWJlQkx0a09hQVhxRXgwT3NFcXpVOWkzdkR2QTRRdkVJYzBlbU10VlpHb1RpYWhFNUhuMDBLaEs4L3BTVTBFYmIvNzJmekR3bmsrSzZJQkhtbDUzUDEySFhOU3kiLCJtYWMiOiJhMjFkMzNlZWRjMWJiMjcwOTY0YzY0NzQ0OTI2YWFiYTIwZWI2MGY4MDlkMTA2MzVlMjc2YTRhYzdiMGM5ZjJlIiwidGFnIjoiIn0%3D; __cf_bm=.U3YtFNih3m1w6FCrnkhu9tGuUHymVGomrTcpO.A40w-1758683061-1.0.1.1-HamIbNq.vNx7npxwSP0wqoYClS3Y3B42WO1UNnXOMO6bSheMocH.v_b7Q.nhvQVLVKnDsPdTSCXB4bPsND1B3RB70gSD0SuE2XX4dl_bXM0; utm_source=direct; user_meta=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22null%22%2C%22utm_campaign%22%3A%22null%22%2C%22utm_content%22%3A%22null%22%2C%22utm_term%22%3A%22null%22%2C%22device_category%22%3A%22unknown%22%7D; scottie_user_attributes=%7B%22nav%22%3A%7B%22uEntryPath%22%3A%22%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account%22%7D%2C%22user%22%3A%7B%22email%22%3Anull%2C%22first_name%22%3Anull%2C%22last_name%22%3Anull%7D%7D; scottie_session_attributes=%7B%22nav%22%3A%7B%22s_referrer%22%3A%22r.search.yahoo.com%22%2C%22page_count%22%3A1%2C%22sEntryPath%22%3A%22%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account%22%7D%2C%22ay_imp_s%22%3Afalse%2C%22created_at%22%3A1758683062%2C%22s_article_id%22%3A85597%2C%22nav_attrs%22%3A%7B%22siteSpectVariant%22%3Anull%2C%22siteSpectExperienceID%22%3Anull%2C%22siteSpectCampaignName%22%3Anull%7D%2C%22utm%22%3A%7B%22utm_source%22%3Anull%2C%22utm_medium%22%3Anull%2C%22utm_campaign%22%3Anull%2C%22utm_content%22%3Anull%2C%22utm_term%22%3Anull%7D%2C%22reporting_channel%22%3A%22organic_search%22%2C%22s_entry_channel%22%3A%22organic%20news%22%2C%22member_status%22%3A%22none%22%7D; suid=06864235-3ff4-4481-9403-3a43c185cfd3; scottie_session=c0fb5510-9f43-4eee-b60a-f30d4dc24e49\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 11 Aug 2025 16:41:44 GMT\r\netag: W/\"689a1d48-63a\"\r\ncf-cache-status: HIT\r\nexpires: Wed, 24 Sep 2025 07:04:22 GMT\r\ncache-control: public, max-age=14400\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 983f0dd40bab1a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1594,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1594), with no line terminators","md5":"5be65a9b2e1e87a5b9e87b49e0991eb3","sha1":"cb66890ebb96ea4d57ae1aa6900057cd1d3ee11b","sha256":"7076ad6aa572fb60be4939535966575ec57bedee72a08ea89b80728773603900","sha512":"3e5c9bfc804505bde616ec10dbc9222159abe405b37143ecf2f975c821bd4def2365e4b190341ed64f4d7212acde82800949acbecd4c3675bc64d505bedd8363","ssdeep":"","tlshash":"f53161973e40fee91f970432942a31c161b2356d08eee130a8190d90786ed2dbe2a27d","first_seen":"2025-09-20T03:59:22.667617Z","last_seen":"2025-09-24T03:05:07.330822Z","times_seen":2,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.adobedtm.com/1d8526a1ddc2/cff7fdda0680/199d26c90464/RC11e68819bd7f4038bc0698ed903a1a0c-source.min.js","fqdn":"assets.adobedtm.com","domain":"adobedtm.com","tld":"com"},"ip":{"addr":"96.6.17.25","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:22.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.adobedtm.com","organization":"Adobe Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Sat, 25 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2F:BD:F6:81:46:EE:C6:68:47:14:7F:F0:63:9A:CA:DE:F6:5D:C7:80","sha256":"F0:43:20:D8:ED:30:30:7B:92:0C:29:1B:07:12:29:EE:72:B4:10:4C:38:64:3C:9A:AD:BF:70:A4:DC:CE:5B:8E"}}},"request":{"raw":"GET /1d8526a1ddc2/cff7fdda0680/199d26c90464/RC11e68819bd7f4038bc0698ed903a1a0c-source.min.js HTTP/1.1\r\nHost: assets.adobedtm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: application/x-javascript\r\netag: \"23f0f4e552fe0cd6d8506dedd6543cbd:1757664033.41912\"\r\nlast-modified: Fri, 12 Sep 2025 08:00:33 GMT\r\nserver: AkamaiNetStorage\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 616\r\ncache-control: max-age=3600\r\nexpires: Wed, 24 Sep 2025 04:04:22 GMT\r\ndate: Wed, 24 Sep 2025 03:04:22 GMT\r\naccess-control-allow-origin: https://money.ca\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1217,"size_decoded":0,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (1070)","md5":"9b0a448a543d32ecf3e0d3cb8f630a62","sha1":"34821a5ab240ff02854e56ada34b36c40078aa89","sha256":"311ef064eac4d9eecb6cef14685f4f1d9b99aac450b1df40abe1cd541f9b4246","sha512":"5ae698fb84347d7f389eebd0a457b2cbdbf9395fd3ceee7b1b1566a6ab9bee03a54846fb9dd9bbc9cc22f3518a58197de18747df1b5bab836ff7747d0ea1b2e9","ssdeep":"","tlshash":"6621df4fd3c65410780e7097f32f67856c02df3a439852319bba1c9869b5023b25dabc","first_seen":"2025-09-20T03:59:22.785898Z","last_seen":"2025-09-24T03:05:07.331871Z","times_seen":2,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":10,"dns":1,"connect":1,"send":0,"wait":2,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prebid.a-mo.net/a/c","fqdn":"prebid.a-mo.net","domain":"a-mo.net","tld":"net"},"ip":{"addr":"163.5.194.35","port":443,"asn":60558,"as":"Phoenix Nap, LLC.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.a-mo.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 Aug 2025 05:58:12 GMT","end":"Wed, 26 Nov 2025 05:58:11 GMT"},"fingerprint":{"sha1":"46:30:17:D2:9C:C6:D3:FC:FF:17:43:1F:C7:14:FA:E7:1C:18:49:AB","sha256":"DD:21:EC:3E:CB:38:DD:A6:86:8F:0F:23:E9:EA:CC:A2:97:CD:68:B5:9E:76:40:4B:0D:0C:2D:E4:A6:10:F8:7D"}}},"request":{"raw":"POST /a/c HTTP/1.1\r\nHost: prebid.a-mo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.ca/\r\ncontent-type: text/plain\r\nContent-Length: 2242\r\nOrigin: https://money.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://money.ca\r\ncache-control: max-age=0, private, must-revalidate\r\ndate: Wed, 24 Sep 2025 03:04:23 GMT\r\nserver: envoy\r\nvary: origin, accept-encoding, Accept-Encoding\r\nx-nbr: 1\r\nx-envoy-upstream-service-time: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":127,"dns":83,"connect":16,"send":0,"wait":16,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/organic-v2-scripts.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:21.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"money.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:25:31 GMT","end":"Mon, 24 Nov 2025 16:25:29 GMT"},"fingerprint":{"sha1":"A5:8A:11:35:E2:18:EF:C0:E0:2A:61:E3:CE:0F:31:56:42:55:F0:FC","sha256":"C0:5A:4D:B1:BE:57:72:CF:9E:D8:17:5E:01:A3:0D:F8:4C:C1:16:16:8B:65:8B:CA:3B:CC:32:C3:E9:15:71:EF"}}},"request":{"raw":"GET /js/organic-v2-scripts.js?cb=432 HTTP/1.1\r\nHost: money.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account\r\nCookie: SSID_9H80=CQDn9B0AAAAAAAC0X9NohcaCGLRf02gBAAAAAAAAAAAAtF_TaADc7g; SSSC_9H80=1013.G7553486227140429445.1|0.0; SSRT_9H80=tF_TaAABAA; money_session=eyJpdiI6Inlqb015WmpKSkJhakh6SzMyN3VheFE9PSIsInZhbHVlIjoiT2pIcnNveGVobXNrS1FIUkZZZDd4ZWRNNkd0UTZPcnUveStFd09kNDY3T3ZtbEV0RXlLbXNadTFDS2Q0eC8wUGIyemFQaEdKVlVHb1MyRXNvb3NHYmN3ZkpwVy9ySHBBN1JCWEVmbkNraWhld3l1Rm5WTXd3VU53Zk52aHFEeGwiLCJtYWMiOiJmZDFlNmVjOGI0MDQxMmEzM2I4ZDAwMWNmMzY4Y2QyYjZlNzUyY2ZmODNiNjJhMDcxZjBhYzEwZTY3Yjk0ZjIwIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkVvY3h6L1FXSXBwbXVzYm1qUTlieXc9PSIsInZhbHVlIjoiSUM1b01ISkcyT0xMWFBCZVFsQUxUSitIbnNYNVhpTkRQR2wvcWJlQkx0a09hQVhxRXgwT3NFcXpVOWkzdkR2QTRRdkVJYzBlbU10VlpHb1RpYWhFNUhuMDBLaEs4L3BTVTBFYmIvNzJmekR3bmsrSzZJQkhtbDUzUDEySFhOU3kiLCJtYWMiOiJhMjFkMzNlZWRjMWJiMjcwOTY0YzY0NzQ0OTI2YWFiYTIwZWI2MGY4MDlkMTA2MzVlMjc2YTRhYzdiMGM5ZjJlIiwidGFnIjoiIn0%3D; __cf_bm=.U3YtFNih3m1w6FCrnkhu9tGuUHymVGomrTcpO.A40w-1758683061-1.0.1.1-HamIbNq.vNx7npxwSP0wqoYClS3Y3B42WO1UNnXOMO6bSheMocH.v_b7Q.nhvQVLVKnDsPdTSCXB4bPsND1B3RB70gSD0SuE2XX4dl_bXM0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 23 Sep 2025 12:33:48 GMT\r\netag: W/\"68d293ac-16726\"\r\ncf-cache-status: HIT\r\nexpires: Wed, 24 Sep 2025 07:04:21 GMT\r\ncache-control: public, max-age=14400\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 983f0dceae951a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91942,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65262)","md5":"314a69c5e55a480bedc9b1c31bb74d88","sha1":"87ec4c9666a94cd4cb05d203a1487022ed3fb7ef","sha256":"790297922a7b5112ca575e0c129a9a8cb5d9bc9308673171c53ead3824ac7d12","sha512":"b50911985d8aa10ef634c64a7dbbc81c5f4d81de1c253f77a2aa0640ad957bc51ea3b2d7975de02b8f468f3622ec59d47f28293174434b34a050b1b2a92ab485","ssdeep":"1536:0np+QFf9qCrw/IdISKdc0dlqu+JA56uYIwu6Vs+MaH73oGsxv:0np0Hqpses0Bo","tlshash":"61933dccb6d2f02583633475417f500bf33e6e69a84e8504d169e8e9bcb854ea277e6c","first_seen":"2025-09-20T03:59:22.783903Z","last_seen":"2025-09-24T03:05:07.333007Z","times_seen":2,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/css/header.css?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:21.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"money.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:25:31 GMT","end":"Mon, 24 Nov 2025 16:25:29 GMT"},"fingerprint":{"sha1":"A5:8A:11:35:E2:18:EF:C0:E0:2A:61:E3:CE:0F:31:56:42:55:F0:FC","sha256":"C0:5A:4D:B1:BE:57:72:CF:9E:D8:17:5E:01:A3:0D:F8:4C:C1:16:16:8B:65:8B:CA:3B:CC:32:C3:E9:15:71:EF"}}},"request":{"raw":"GET /css/header.css?cb=432 HTTP/1.1\r\nHost: money.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account\r\nCookie: SSID_9H80=CQDn9B0AAAAAAAC0X9NohcaCGLRf02gBAAAAAAAAAAAAtF_TaADc7g; SSSC_9H80=1013.G7553486227140429445.1|0.0; SSRT_9H80=tF_TaAABAA; money_session=eyJpdiI6Inlqb015WmpKSkJhakh6SzMyN3VheFE9PSIsInZhbHVlIjoiT2pIcnNveGVobXNrS1FIUkZZZDd4ZWRNNkd0UTZPcnUveStFd09kNDY3T3ZtbEV0RXlLbXNadTFDS2Q0eC8wUGIyemFQaEdKVlVHb1MyRXNvb3NHYmN3ZkpwVy9ySHBBN1JCWEVmbkNraWhld3l1Rm5WTXd3VU53Zk52aHFEeGwiLCJtYWMiOiJmZDFlNmVjOGI0MDQxMmEzM2I4ZDAwMWNmMzY4Y2QyYjZlNzUyY2ZmODNiNjJhMDcxZjBhYzEwZTY3Yjk0ZjIwIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkVvY3h6L1FXSXBwbXVzYm1qUTlieXc9PSIsInZhbHVlIjoiSUM1b01ISkcyT0xMWFBCZVFsQUxUSitIbnNYNVhpTkRQR2wvcWJlQkx0a09hQVhxRXgwT3NFcXpVOWkzdkR2QTRRdkVJYzBlbU10VlpHb1RpYWhFNUhuMDBLaEs4L3BTVTBFYmIvNzJmekR3bmsrSzZJQkhtbDUzUDEySFhOU3kiLCJtYWMiOiJhMjFkMzNlZWRjMWJiMjcwOTY0YzY0NzQ0OTI2YWFiYTIwZWI2MGY4MDlkMTA2MzVlMjc2YTRhYzdiMGM5ZjJlIiwidGFnIjoiIn0%3D; __cf_bm=.U3YtFNih3m1w6FCrnkhu9tGuUHymVGomrTcpO.A40w-1758683061-1.0.1.1-HamIbNq.vNx7npxwSP0wqoYClS3Y3B42WO1UNnXOMO6bSheMocH.v_b7Q.nhvQVLVKnDsPdTSCXB4bPsND1B3RB70gSD0SuE2XX4dl_bXM0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:21 GMT\r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 23 Sep 2025 12:33:48 GMT\r\netag: W/\"68d293ac-3d60\"\r\ncf-cache-status: HIT\r\nexpires: Wed, 24 Sep 2025 07:04:21 GMT\r\ncache-control: public, max-age=14400\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 983f0dce2e2e1a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15712,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (15709)","md5":"13bfb572f03cb29d3006df672ef495a6","sha1":"613a1cb85a87ff3f478e4b41ec0d03d6bb7b38e4","sha256":"997fb7573961f6e354f0c19cdee3a08d71b9f11ccf5db2499a023b5362f51925","sha512":"8f0f3e79a87e1d61d649c7870f28b8842ebda504c3debe079bd6faf3eb803c203a479dfb9a6150c64df85bd6ef6f6a2ff04671ebc52403e43de355b336c18de9","ssdeep":"192:uK2v11mzt7Hx/UJ5v7BRSzQ3PXBEaIUqW/E1hMRwLSzZNm/Vq6mnDMvFJrM0n0nr:Av10xc5cmiWqL42xQ0nI","tlshash":"94623fa24ffc31bdda9f4017f2c1ced82e29f0d1a2634cb9b93551ae91c6175272a325","first_seen":"2025-09-20T03:59:22.649759Z","last_seen":"2025-09-24T03:05:07.334803Z","times_seen":2,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d14pdm1b7fi5kh.cloudfront.net/script.js","fqdn":"d14pdm1b7fi5kh.cloudfront.net","domain":"d14pdm1b7fi5kh.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.167.7.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:21.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: d14pdm1b7fi5kh.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ndate: Wed, 24 Sep 2025 02:57:11 GMT\r\nlast-modified: Wed, 24 Sep 2025 02:48:16 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=600,public,must-revalidate\r\nx-amz-version-id: fmuHXY2n3pCk.NIVvUPBnlcc10balwaH\r\nserver: AmazonS3\r\netag: W/\"62681f14b46dff2b2fb1e1cfdfae8f95\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3da6f6abdf7146387ea7a7f42136c780.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: y_eKM41B58io94L-PgMyw02HAaM3I0CCqfZ_w6ucDmoo8MEkvwr1gA==\r\nage: 431\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":202073,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"62681f14b46dff2b2fb1e1cfdfae8f95","sha1":"e7d6f165cea8e172c74550d89b56ac7c106ec072","sha256":"c8874ed9fb31202b5e256dd635507ac8ee2de2a8ee839748a369fd306ad9eaf2","sha512":"80db88f259bd87f4806ae62513d7997d54eddd46c3988579b540c9ff7759f2d4b4c89cdb786dbfcef28b947c2335bd472f154b6c8c890994fe284f46e9016a62","ssdeep":"6144:MpMJcDdsRA7Dju9NSE+8/U59/8uKXwmlpwOj:qMJc5N7vu9NSE+8/W+wRc","tlshash":"0a14d5d12e6970da4aab1532c23f534aa02fd692d89d9850e271fd783d7810ef47fa31","first_seen":"2025-09-24T03:05:07.337226Z","last_seen":"2025-09-24T03:30:19.44948Z","times_seen":4,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":84,"dns":36,"connect":2,"send":0,"wait":24,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geo.aditude.io/raven","fqdn":"geo.aditude.io","domain":"aditude.io","tld":"io"},"ip":{"addr":"104.20.42.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:22.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aditude.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 05:26:07 GMT","end":"Tue, 09 Dec 2025 06:26:00 GMT"},"fingerprint":{"sha1":"91:4A:CB:E0:AA:CC:E8:F8:A2:38:3A:26:9A:02:54:63:CE:02:0C:7E","sha256":"62:CE:FC:27:15:DF:C6:35:19:37:2B:AA:27:7F:78:34:A5:41:9A:F7:23:71:91:CC:6D:9D:D6:DC:67:06:5E:7A"}}},"request":{"raw":"GET /raven HTTP/1.1\r\nHost: geo.aditude.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.ca/\r\nOrigin: https://money.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:22 GMT\r\ncontent-type: application/json\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, private\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 983f0dd36b311a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":272,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3e34bd9ddd44e114ed8b0a1812a80f5e","sha1":"4365617d0f333c4526117b1304cfb38fbe49201a","sha256":"42fb1da33c4ef23ec00e4add927f95054630e968af8a856748d7d765d56e1c37","sha512":"e9b0c2250704d93053c9035394126eb4b85e7dae988e5913ca1ca791a42eb620d2a079c7bbff9201fef12e4ab9833826cd5f20b0d5800df4d237d0db08144a58","ssdeep":"","tlshash":"99d0c22dd004efaca87843589215fb420e9c205a42cdad03d9c99f1192682fd2040002","first_seen":"2025-06-04T20:13:08.842004Z","last_seen":"2026-04-03T15:51:45.343006Z","times_seen":5856,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":20,"dns":5,"connect":1,"send":0,"wait":8,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smetrics.money.ca/ee/v1/interact?configId=352cd1c4-9de7-44e8-9af1-c5b91a5dd36e\u0026requestId=f7ad492e-7ad6-4d31-bb7b-fdf719d69548","fqdn":"smetrics.money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"63.140.62.139","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:22.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smetrics.money.ca","organization":"Adobe Systems Incorporated"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 08 Nov 2024 00:00:00 GMT","end":"Tue, 09 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"BD:9D:45:42:F1:51:B6:FC:C3:46:DD:91:63:F8:1C:08:DD:F8:C6:D2","sha256":"E8:E6:F4:32:80:A3:9E:EF:20:8A:23:85:E2:8F:CF:4D:57:4D:44:73:8E:38:09:E0:1F:E9:FA:DA:EF:BB:3E:95"}}},"request":{"raw":"POST /ee/v1/interact?configId=352cd1c4-9de7-44e8-9af1-c5b91a5dd36e\u0026requestId=f7ad492e-7ad6-4d31-bb7b-fdf719d69548 HTTP/1.1\r\nHost: smetrics.money.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account\r\nContent-Type: text/plain; charset=UTF-8\r\nContent-Length: 3219\r\nOrigin: https://money.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SSID_9H80=CQDn9B0AAAAAAAC0X9NohcaCGLRf02gBAAAAAAAAAAAAtF_TaADc7g; SSSC_9H80=1013.G7553486227140429445.1|0.0; SSRT_9H80=tF_TaAABAA; money_session=eyJpdiI6ImxTWWgrS3RqYVRvUVFXWTMxSFJxeWc9PSIsInZhbHVlIjoiSTdQZkg3N1VtbUtUVHF2VUFJSWlnQ0tkN2tWUDJMSm5wVW1nWFZPL0hEbDFORGlRNXhndkc4WkFCQkpubmxhQnRTdVl0dkE0aHFDN2E1QlM0Rk1PdC9FSHVncHdqMUY4aHNiK0dSY3RiMHgyTEgrN2ZwZ1RlWnNscy8zT09KNlYiLCJtYWMiOiJmNTdlYTM2ZTQzOTRlMWYwYjg5NTBiYmJjNWM2MzZlY2E0OWIxZGM5ZTRmZGExM2Q5ZTRiODFhMTY4YWEzMjRiIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6ImNLQ0dNOHBFamlZbnI1QUV5Zzg2bUE9PSIsInZhbHVlIjoiMWtyRmhBTFkwdkduQlNwTStueldJY1ZWb0g5Ni9oaEhZSmIwWDVPS3FHKzR6T1hMUHhvUzFHNjE3WlBSTzBMYmNQQkt5N01mMkJFZjZTYXlPTjVxY3czd0prSThoNDNFYVRpNlJ5aXNBbGhEcUxWNEt4Z2UwMlpqRnVodW5UcFAiLCJtYWMiOiIyN2MxODA3Nzc5MWE3NmVhM2RlNjgwOTFjZWEyN2MzNDFjYWNlZWNlMmY2MWFhZTIzOTBjY2IyNGE0MDkzNjE2IiwidGFnIjoiIn0%3D; __cf_bm=.U3YtFNih3m1w6FCrnkhu9tGuUHymVGomrTcpO.A40w-1758683061-1.0.1.1-HamIbNq.vNx7npxwSP0wqoYClS3Y3B42WO1UNnXOMO6bSheMocH.v_b7Q.nhvQVLVKnDsPdTSCXB4bPsND1B3RB70gSD0SuE2XX4dl_bXM0; _v_id_l={%22_v_id%22:%2236088682079960021758683062540%22%2C%22_la%22:1758683062540}\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nx-request-id: f7ad492e-7ad6-4d31-bb7b-fdf719d69548-e681c4bb96524955\r\nvary: Origin\r\naccess-control-allow-origin: https://money.ca\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID\r\ndate: Wed, 24 Sep 2025 03:04:22 GMT\r\nx-konductor: 25.7.27-HEAD-SNAPSHOT:da08a1db6\r\nx-adobe-edge: IRL1;6\r\nserver: jag\r\nset-cookie: kndctr_9CE579FD5DCD8B590A495E09_AdobeOrg_identity=CiY2NDMwMDQ5ODEyODI2NTcxNDQ4MjkyNDMxMTYyMzE5MDQwNTQ2N1ITCLjFt82XMxABGAEqBElSTDEwAPABuMW3zZcz; Max-Age=34128000; Domain=money.ca; Path=/; Secure; SameSite=None; $x-enc=URI_ENCODING\nkndctr_9CE579FD5DCD8B590A495E09_AdobeOrg_cluster=irl1; Max-Age=1800; Domain=money.ca; Path=/; Secure; SameSite=None; $x-enc=URI_ENCODING\r\ncontent-encoding: gzip\r\ncontent-type: application/json;charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, no-transform, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":388,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6674ee705b3226f3e69b340819be71ad","sha1":"c1581533bd5f366df1351fe82fc0fb50c3c8b2cb","sha256":"c670c192d74b4123f354fcee396e337b570b82e3c0557f8116f9c843043d9864","sha512":"42ff99ffdf85be91795392b4ae95bab979c53bc90b4dc36b0b1bf723083531bc0a989b57e44b155aad6275ef73eb5f65028391c91b28d9925f383ae1d15a3b40","ssdeep":"","tlshash":"3de022c62a8a9ee001eb3e81a687f471131a3202e9cb85051ab897a286cd4c1b108a1a","first_seen":"2025-09-24T03:05:07.340109Z","last_seen":"2025-09-24T03:05:07.340109Z","times_seen":1,"resource_available":false,"data":null}},"time_used":799,"timings":{"blocked":372,"dns":65,"connect":31,"send":0,"wait":54,"receive":0,"ssl":274},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"server.smartytech.io/match?redirect=https%3A%2F%2Fprebid.admatic.de%2Fsetuid%3Fbidder%3Dmembrana%26gdpr%3D%26gdpr_consent%3D%26f%3Di%26uid%3D%7Buser_id%7D","fqdn":"server.smartytech.io","domain":"smartytech.io","tld":"io"},"ip":{"addr":"57.128.210.69","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://dsp-service.admatic.de/cookie_sync?r=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fadmatic_autres%2F%24%7BUSER_ID%7D","date":"2025-09-24T03:04:29.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"smartytech.io","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 09:07:44 GMT","end":"Sun, 30 Nov 2025 09:07:43 GMT"},"fingerprint":{"sha1":"C1:79:BD:57:A6:88:9B:65:1E:23:BE:A3:9D:52:C6:BC:01:C9:48:E3","sha256":"98:6F:11:AF:78:92:88:1B:F6:E6:9E:EE:62:EE:E8:A3:2C:0B:E2:52:49:81:39:10:52:DF:FD:72:91:AB:5B:37"}}},"request":{"raw":"GET /match?redirect=https%3A%2F%2Fprebid.admatic.de%2Fsetuid%3Fbidder%3Dmembrana%26gdpr%3D%26gdpr_consent%3D%26f%3Di%26uid%3D%7Buser_id%7D HTTP/1.1\r\nHost: server.smartytech.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dsp-service.admatic.de/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Wed, 24 Sep 2025 03:04:29 GMT\r\ncontent-type: image/gif\r\ncontent-length: 195\r\nlocation: https://prebid.admatic.de/setuid?bidder=membrana\u0026gdpr=\u0026gdpr_consent=\u0026f=i\u0026uid=dc9825f6-ddb2-4f6d-a7ac-f65e841470e8\r\nexpires: Wed, 11 Nov 1998 11:11:11 GMT\r\nlast-modified: Wed, 24 Sep 2025 03:04:29 GMT\r\npragma: no-cache\r\nset-cookie: uid=dc9825f6-ddb2-4f6d-a7ac-f65e841470e8; Path=/; Expires=Thu, 24 Sep 2026 03:04:29 GMT; Secure; SameSite=None\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, no-store no-transform\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1122,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":393,"timings":{"blocked":157,"dns":14,"connect":52,"send":0,"wait":55,"receive":0,"ssl":111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtrack.kueezrtb.com/dye?ac=2\u0026acm=G3L\u0026uid=be5cdac8e005e820\u0026sid=34ec2ed1ee696ea0\u0026pvi=89bcafefc05ee524\u0026h=money.ca\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=81\u0026uri=%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026furl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026sr=1280x1024\u0026type=latest:preinit\u0026_=1758683063358","fqdn":"gtrack.kueezrtb.com","domain":"kueezrtb.com","tld":"com"},"ip":{"addr":"172.66.162.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kueezrtb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 31 Jul 2025 04:22:42 GMT","end":"Wed, 29 Oct 2025 05:22:40 GMT"},"fingerprint":{"sha1":"72:9A:34:A6:6E:6C:F2:12:4C:CD:21:43:69:9D:B4:AE:A6:E2:BD:C1","sha256":"74:FD:00:85:48:5B:6D:03:90:97:6C:48:C6:0B:F9:7E:AB:0F:30:71:82:29:09:7B:3D:3A:D7:32:40:B2:4D:4D"}}},"request":{"raw":"GET /dye?ac=2\u0026acm=G3L\u0026uid=be5cdac8e005e820\u0026sid=34ec2ed1ee696ea0\u0026pvi=89bcafefc05ee524\u0026h=money.ca\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=81\u0026uri=%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026furl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026sr=1280x1024\u0026type=latest:preinit\u0026_=1758683063358 HTTP/1.1\r\nHost: gtrack.kueezrtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 24 Sep 2025 03:04:23 GMT\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 983f0dda3ab08be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mp.4dex.io/prebid","fqdn":"mp.4dex.io","domain":"4dex.io","tld":"io"},"ip":{"addr":"172.64.153.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:24.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mp.4dex.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 06:13:28 GMT","end":"Sun, 16 Nov 2025 07:13:19 GMT"},"fingerprint":{"sha1":"35:C1:05:73:40:11:F0:9E:8D:4B:EF:29:CA:52:EF:11:E6:3B:0A:97","sha256":"35:2E:50:60:F3:02:A6:E4:E5:3C:80:50:2F:DF:15:F4:3E:E3:BA:43:02:DB:62:29:5C:9C:0F:C5:46:85:2F:D6"}}},"request":{"raw":"POST /prebid HTTP/1.1\r\nHost: mp.4dex.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.ca/\r\ncontent-type: text/plain\r\nContent-Length: 1391\r\nOrigin: https://money.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 24 Sep 2025 03:04:24 GMT\r\ncf-ray: 983f0dddcbb356b4-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://money.ca\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: 0\r\npragma: no-cache\r\nvary: Origin, Accept-Encoding\r\nx-err: Splits. no seat with adunits and mapping rule\r\nx-version: 3.0.0-gcp-ams\r\nx-warn: Process Splits. all case seats filetered for: ban_incontent-1\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otrack.kueezrtb.com/dye?ac=2\u0026acm=G3L\u0026uid=be5cdac8e005e820\u0026sid=34ec2ed1ee696ea0\u0026pvi=89bcafefc05ee524\u0026h=money.ca\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=81\u0026uri=%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026furl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026sr=1280x1024\u0026type=latest:fpdrd\u0026_=1758683063567","fqdn":"otrack.kueezrtb.com","domain":"kueezrtb.com","tld":"com"},"ip":{"addr":"172.66.162.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kueezrtb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 31 Jul 2025 04:22:42 GMT","end":"Wed, 29 Oct 2025 05:22:40 GMT"},"fingerprint":{"sha1":"72:9A:34:A6:6E:6C:F2:12:4C:CD:21:43:69:9D:B4:AE:A6:E2:BD:C1","sha256":"74:FD:00:85:48:5B:6D:03:90:97:6C:48:C6:0B:F9:7E:AB:0F:30:71:82:29:09:7B:3D:3A:D7:32:40:B2:4D:4D"}}},"request":{"raw":"GET /dye?ac=2\u0026acm=G3L\u0026uid=be5cdac8e005e820\u0026sid=34ec2ed1ee696ea0\u0026pvi=89bcafefc05ee524\u0026h=money.ca\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=81\u0026uri=%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026furl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026sr=1280x1024\u0026type=latest:fpdrd\u0026_=1758683063567 HTTP/1.1\r\nHost: otrack.kueezrtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nCookie: kuid=b4c606a6d5e7c1f9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 24 Sep 2025 03:04:23 GMT\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 983f0ddb5b358be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.smilewanted.com/js/decode_consent/decode_consent.js","fqdn":"static.smilewanted.com","domain":"smilewanted.com","tld":"com"},"ip":{"addr":"172.66.154.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://csync.smilewanted.com/","date":"2025-09-24T03:04:28.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smilewanted.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 Aug 2025 21:28:27 GMT","end":"Thu, 30 Oct 2025 22:28:25 GMT"},"fingerprint":{"sha1":"FB:44:58:7C:4E:4C:D7:15:3E:2A:CA:43:D5:E5:9A:4F:FE:1A:FD:C3","sha256":"29:04:62:7B:83:D3:74:91:86:5A:D4:7C:02:6D:09:C2:80:69:F3:6F:67:47:2F:4B:4D:36:97:99:91:6A:11:D5"}}},"request":{"raw":"GET /js/decode_consent/decode_consent.js HTTP/1.1\r\nHost: static.smilewanted.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csync.smilewanted.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:28 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: accept-encoding\r\nlast-modified: Thu, 15 Apr 2021 17:11:55 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nage: 1245159\r\netag: W/\"607873db-c1ce\"\r\ncontent-encoding: br\r\ncf-ray: 983f0dfa9e857129-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49614,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (49614), with no line terminators","md5":"00ff8001302d3748ba139466fc3910c1","sha1":"8210e702fe525e6cddc84758ec51e96a4d703186","sha256":"eb4db95cf7c97ce22bd98d1b95dfd82204843cc8854cbe0b3b6b93be4fa41a2f","sha512":"4005e40f94ab0cab5968f759c0c3f2b25881439121ed9fdb8e4c7c9e652ee5f8652d64744d34aaa1f01aae0663a9d4f78c394140f2b661c04ad9a4e01d8d551d","ssdeep":"384:3P8RpA7Kh2sCPvthaGqxcv4Mpg7ZIxJzpbTxGkkk4JoaXUcnxfQpRX0uXbpuYF7f:spJrCzaGqK5g7ZIZb1DsXmtBKKyoOa","tlshash":"9523b88cb7f4b4b103d761b0841f100aa73d6464a81854e8bb65e9e2dcb534da67bfb8","first_seen":"2023-03-07T12:12:35Z","last_seen":"2026-04-03T17:04:17.808268Z","times_seen":4644,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cdn.admatic.de/cookie.html?bidder=membrana\u0026gdpr=\u0026gdpr_consent=\u0026f=i\u0026uid=13660fa4-e1e7-4d47-85bb-fed4b58cf9fd","fqdn":"static.cdn.admatic.de","domain":"admatic.de","tld":"de"},"ip":{"addr":"172.67.72.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://dsp-service.admatic.de/cookie_sync?r=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fadmatic%2F%24%7BUSER_ID%7D","date":"2025-09-24T03:04:29.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.cdn.admatic.de","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Sep 2025 16:20:33 GMT","end":"Tue, 02 Dec 2025 16:20:32 GMT"},"fingerprint":{"sha1":"51:8F:C6:BA:EF:DB:F9:A9:62:B0:A4:96:38:FE:4C:51:79:DA:71:AD","sha256":"06:05:0A:2D:B8:99:97:31:AE:FD:B9:1B:60:23:47:08:C1:EF:4D:06:84:59:5E:2B:D2:28:E7:27:53:D5:3F:D8"}}},"request":{"raw":"GET /cookie.html?bidder=membrana\u0026gdpr=\u0026gdpr_consent=\u0026f=i\u0026uid=13660fa4-e1e7-4d47-85bb-fed4b58cf9fd HTTP/1.1\r\nHost: static.cdn.admatic.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dsp-service.admatic.de/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid=ec240dc9-4059-4ccd-b7f1-c00942a6ec97; uids=eyJ0ZW1wVUlEcyI6eyJhZG1hdGljZGUiOnsiZXhwaXJlcyI6IjIwMjUtMTAtMjRUMDM6MDQ6MjkuNTYzWiIsInVpZCI6IjdiNDU2ZTZkLTM4NmMtNDNmZC1iZGI0LWU2YWIxYzMzMDk1NCJ9fX0=\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:29 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncdn-pullzone: 2526898\r\ncdn-uid: e7d0f040-08f3-443e-a640-656beb6c8b3b\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=25600000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P13oaxWIzj93XxDX7dNN4cQQdtL45HUZfT2%2Buhe19S8XDHj2YCcGvr8uDE9Qt%2FmAAm3YP%2FHkLDp7HvK68aFuSG%2B7d%2B%2BWq4pC8X8HJ5gEzGn4auwu\"}]}\r\nlast-modified: Wed, 21 May 2025 13:27:10 GMT\r\ncdn-storageserver: DE-979\r\ncdn-fileserver: 988\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/22/2025 21:16:37\r\ncdn-edgestorageid: 1333\r\ncdn-requestid: a9c49d23f425e0b50d441dca1581a5ce\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 983f0e010b0c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1122,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1122), with no line terminators","md5":"21947b7c68707b18d7d77214ee229db9","sha1":"2a6ace8708e500c3e9c911ca209b2d0c2aed4917","sha256":"481c8382889f68e105a819ab253cbea9e6a52e86d611edd9fde5feae25e1d8a7","sha512":"8eedf99a0df2a0f8f7e23dc44223609d8b4ac93721ee14da60ff3e884e4ef52c0914cc9b5cd6a3082951ebd07d30ddd9d882833f3d677e1de4d6ec563f3b75d1","ssdeep":"","tlshash":"5c2163407265ac9e860202f80f750d0ea8a1e1523cf5a068b8c9e5b03212817c7fa9ef","first_seen":"2025-05-21T22:21:34.380102Z","last_seen":"2026-03-27T07:05:51.569313Z","times_seen":2353,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csync.smilewanted.com/set_partner_userid_get/loopme/231a0279-0d94-4b9e-bbfd-37fa78ec0a37?gdpr_consent=null\u0026gdpr=0","fqdn":"csync.smilewanted.com","domain":"smilewanted.com","tld":"com"},"ip":{"addr":"172.66.154.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://csync.smilewanted.com/","date":"2025-09-24T03:04:29.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smilewanted.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 Aug 2025 21:28:27 GMT","end":"Thu, 30 Oct 2025 22:28:25 GMT"},"fingerprint":{"sha1":"FB:44:58:7C:4E:4C:D7:15:3E:2A:CA:43:D5:E5:9A:4F:FE:1A:FD:C3","sha256":"29:04:62:7B:83:D3:74:91:86:5A:D4:7C:02:6D:09:C2:80:69:F3:6F:67:47:2F:4B:4D:36:97:99:91:6A:11:D5"}}},"request":{"raw":"GET /set_partner_userid_get/loopme/231a0279-0d94-4b9e-bbfd-37fa78ec0a37?gdpr_consent=null\u0026gdpr=0 HTTP/1.1\r\nHost: csync.smilewanted.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://csync.smilewanted.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sw_user_params_infos=74tWhle3MaLNbpUpVDmi5HZpNMeYBTpvBP3BYIT6S3E36%2BRVeAifIKu3mMAh%2Fw%2FD6iJyKuC3csC2lawwUICE7l3rTgJnXjChJL54RkcS0%2FtpCT6lBsMSSxM6f6Wy71fuKDSNFDm3ATx1yOTaQ5y4jsemFM8ctWr5AbATWgke21blaLwhCh8vGkvzCUL003uNK76siM15dURnyVd0RPkr%2B7Qlq%2B1S1NZgJefdJUDWazs%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:29 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: sw_user_params_infos=avTYAHoMNgQB8VCG6I%2FasSlN2AIu1kJaLsYjr6b8gIZkuFjLanvKuMgImRwYnZcW1cb6Pjqkl8RypaXBNsjyEqFOCXNwz8ybLozG4cwD73LqvXyyLGHQDEDDkPfl0a0%2BacYlRkwRUbFAnd9qJwaFDll4j0%2BykyXYkr7i4WokkX2SDZNRgyKhamor4rk42FpQCcujBa457mFTxNGQ0SsBAYwQhWrYKss9Zsz20FWs9fn0OXl9qIBzF5pj26sRkuiyeQox3F1U6j11pO9nw0FviQTr6BaNB%2BCHR%2B9aSbjNfTs%3D; HttpOnly; SameSite=None; Secure; Path=/; Domain=smilewanted.com; Max-Age=31556952; Expires=Thu, 24 Sep 2026 08:53:41 GMT\r\ncf-ray: 983f0e02384d7129-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prebid.cootlogix.com/prebid/multi/62c485faf7ad5949c061e201","fqdn":"prebid.cootlogix.com","domain":"cootlogix.com","tld":"com"},"ip":{"addr":"45.55.120.38","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cootlogix.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Sun, 13 Oct 2024 12:10:16 GMT","end":"Mon, 13 Oct 2025 12:10:16 GMT"},"fingerprint":{"sha1":"B1:96:69:A6:B9:3D:78:9F:77:E2:3E:E8:49:17:ED:C9:4A:6C:B7:B8","sha256":"93:11:14:16:F3:3F:87:FF:11:82:E4:E3:B8:49:A2:76:BD:49:9E:96:1F:59:66:94:16:85:F2:7F:04:A7:F6:B2"}}},"request":{"raw":"POST /prebid/multi/62c485faf7ad5949c061e201 HTTP/1.1\r\nHost: prebid.cootlogix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.ca/\r\ncontent-type: text/plain\r\nContent-Length: 976\r\nOrigin: https://money.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 204 No Content\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Content-Range, Cache-Control\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-origin: https://money.ca\r\ncache-control: max-age=0, no-cache, must-revalidate, proxy-revalidate\r\ndate: Wed, 24 Sep 2025 03:04:25 GMT\r\nvary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":2741,"timings":{"blocked":1304,"dns":27,"connect":99,"send":0,"wait":129,"receive":0,"ssl":1179},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/fonts/KonnectBold.woff","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:21.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"money.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:25:31 GMT","end":"Mon, 24 Nov 2025 16:25:29 GMT"},"fingerprint":{"sha1":"A5:8A:11:35:E2:18:EF:C0:E0:2A:61:E3:CE:0F:31:56:42:55:F0:FC","sha256":"C0:5A:4D:B1:BE:57:72:CF:9E:D8:17:5E:01:A3:0D:F8:4C:C1:16:16:8B:65:8B:CA:3B:CC:32:C3:E9:15:71:EF"}}},"request":{"raw":"GET /fonts/KonnectBold.woff HTTP/1.1\r\nHost: money.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/css/moneywise_organic.css?cb=432\r\nCookie: SSID_9H80=CQDn9B0AAAAAAAC0X9NohcaCGLRf02gBAAAAAAAAAAAAtF_TaADc7g; SSSC_9H80=1013.G7553486227140429445.1|0.0; SSRT_9H80=tF_TaAABAA; money_session=eyJpdiI6Inlqb015WmpKSkJhakh6SzMyN3VheFE9PSIsInZhbHVlIjoiT2pIcnNveGVobXNrS1FIUkZZZDd4ZWRNNkd0UTZPcnUveStFd09kNDY3T3ZtbEV0RXlLbXNadTFDS2Q0eC8wUGIyemFQaEdKVlVHb1MyRXNvb3NHYmN3ZkpwVy9ySHBBN1JCWEVmbkNraWhld3l1Rm5WTXd3VU53Zk52aHFEeGwiLCJtYWMiOiJmZDFlNmVjOGI0MDQxMmEzM2I4ZDAwMWNmMzY4Y2QyYjZlNzUyY2ZmODNiNjJhMDcxZjBhYzEwZTY3Yjk0ZjIwIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkVvY3h6L1FXSXBwbXVzYm1qUTlieXc9PSIsInZhbHVlIjoiSUM1b01ISkcyT0xMWFBCZVFsQUxUSitIbnNYNVhpTkRQR2wvcWJlQkx0a09hQVhxRXgwT3NFcXpVOWkzdkR2QTRRdkVJYzBlbU10VlpHb1RpYWhFNUhuMDBLaEs4L3BTVTBFYmIvNzJmekR3bmsrSzZJQkhtbDUzUDEySFhOU3kiLCJtYWMiOiJhMjFkMzNlZWRjMWJiMjcwOTY0YzY0NzQ0OTI2YWFiYTIwZWI2MGY4MDlkMTA2MzVlMjc2YTRhYzdiMGM5ZjJlIiwidGFnIjoiIn0%3D; __cf_bm=.U3YtFNih3m1w6FCrnkhu9tGuUHymVGomrTcpO.A40w-1758683061-1.0.1.1-HamIbNq.vNx7npxwSP0wqoYClS3Y3B42WO1UNnXOMO6bSheMocH.v_b7Q.nhvQVLVKnDsPdTSCXB4bPsND1B3RB70gSD0SuE2XX4dl_bXM0; utm_source=direct; user_meta=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22null%22%2C%22utm_campaign%22%3A%22null%22%2C%22utm_content%22%3A%22null%22%2C%22utm_term%22%3A%22null%22%2C%22device_category%22%3A%22unknown%22%7D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:22 GMT\r\ncontent-type: font/woff\r\ncontent-length: 56596\r\ncf-ray: 983f0dd0882b1a30-OSL\r\nlast-modified: Tue, 23 Sep 2025 10:33:18 GMT\r\netag: \"68d2776e-dd14\"\r\ncf-cache-status: REVALIDATED\r\nexpires: Wed, 24 Sep 2025 07:04:22 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56596,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 56596, version 1.0","md5":"2919d3b8077008e5478ff87b5ac052f6","sha1":"3b809b1ed24a005f7b1bbd7010f431efd2ed241e","sha256":"d3697b4b1a480827be51ce24dcaf355cdbea5cae383f7f52e7c4d3c12621e4fe","sha512":"05aad397222818b638b30c76e444266a7cde7725121b112a779c3229d48acfa45d261a2c33e765f8a68b120800db05022452164fe6540d0be204626773526d4a","ssdeep":"1536:KQ6oA1OrOmvlXuJnrypOZYkUfqn36kHgFjIu:b6oA1tPxrwtkB3oIu","tlshash":"d843f1113e674184d802c3e61bea29e8a5b6733fbe07d0de8cc4ddb87da42d9c115396","first_seen":"2025-07-09T06:51:28.022092Z","last_seen":"2025-09-24T03:05:07.342258Z","times_seen":3,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"media1.money.ca/creatives/559/PMXVSg437PLugLXMTl3x6nF9SCjakLhISppS4RLY.jpg","fqdn":"media1.money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:21.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"money.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:25:31 GMT","end":"Mon, 24 Nov 2025 16:25:29 GMT"},"fingerprint":{"sha1":"A5:8A:11:35:E2:18:EF:C0:E0:2A:61:E3:CE:0F:31:56:42:55:F0:FC","sha256":"C0:5A:4D:B1:BE:57:72:CF:9E:D8:17:5E:01:A3:0D:F8:4C:C1:16:16:8B:65:8B:CA:3B:CC:32:C3:E9:15:71:EF"}}},"request":{"raw":"GET /creatives/559/PMXVSg437PLugLXMTl3x6nF9SCjakLhISppS4RLY.jpg HTTP/1.1\r\nHost: media1.money.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nCookie: SSID_9H80=CQDn9B0AAAAAAAC0X9NohcaCGLRf02gBAAAAAAAAAAAAtF_TaADc7g; SSSC_9H80=1013.G7553486227140429445.1|0.0; SSRT_9H80=tF_TaAABAA; money_session=eyJpdiI6Inlqb015WmpKSkJhakh6SzMyN3VheFE9PSIsInZhbHVlIjoiT2pIcnNveGVobXNrS1FIUkZZZDd4ZWRNNkd0UTZPcnUveStFd09kNDY3T3ZtbEV0RXlLbXNadTFDS2Q0eC8wUGIyemFQaEdKVlVHb1MyRXNvb3NHYmN3ZkpwVy9ySHBBN1JCWEVmbkNraWhld3l1Rm5WTXd3VU53Zk52aHFEeGwiLCJtYWMiOiJmZDFlNmVjOGI0MDQxMmEzM2I4ZDAwMWNmMzY4Y2QyYjZlNzUyY2ZmODNiNjJhMDcxZjBhYzEwZTY3Yjk0ZjIwIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkVvY3h6L1FXSXBwbXVzYm1qUTlieXc9PSIsInZhbHVlIjoiSUM1b01ISkcyT0xMWFBCZVFsQUxUSitIbnNYNVhpTkRQR2wvcWJlQkx0a09hQVhxRXgwT3NFcXpVOWkzdkR2QTRRdkVJYzBlbU10VlpHb1RpYWhFNUhuMDBLaEs4L3BTVTBFYmIvNzJmekR3bmsrSzZJQkhtbDUzUDEySFhOU3kiLCJtYWMiOiJhMjFkMzNlZWRjMWJiMjcwOTY0YzY0NzQ0OTI2YWFiYTIwZWI2MGY4MDlkMTA2MzVlMjc2YTRhYzdiMGM5ZjJlIiwidGFnIjoiIn0%3D; __cf_bm=.U3YtFNih3m1w6FCrnkhu9tGuUHymVGomrTcpO.A40w-1758683061-1.0.1.1-HamIbNq.vNx7npxwSP0wqoYClS3Y3B42WO1UNnXOMO6bSheMocH.v_b7Q.nhvQVLVKnDsPdTSCXB4bPsND1B3RB70gSD0SuE2XX4dl_bXM0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:21 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 26464\r\ncf-ray: 983f0dce5e551a30-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: degrade=85, origSize=31335, status=vary_header_present\r\netag: \"9fa37a242f0499d1cb67e0f4d8f61c16\"\r\nlast-modified: Tue, 09 Sep 2025 16:30:49 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 2fea9bb55456bdcc8f2da3765c8fd6ea.cloudfront.net (CloudFront)\r\nx-amz-cf-id: 4UfxNtOW2wX-AU42PKhXn2x9IwJLWBrC2NlRAr1cvZlInKndq8-K_w==\r\nx-amz-cf-pop: ZRH52-P1\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 9hdzRSZnO5GCSVd2TbN55pF83vJGRrlm\r\nx-cache: RefreshHit from cloudfront\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: HIT\r\nexpires: Sat, 25 Oct 2025 03:04:21 GMT\r\ncache-control: public, max-age=2678400\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":26464,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"d357d19176c12d1e50def0a33065585f","sha1":"ad468060b2ccb9b1dc3f28337a2a835ee169a5db","sha256":"14bb4841cad550a676254cdbfb35d395b4e559163bc43f0454866a6387bae3b3","sha512":"04446e5854f1daf37103a2e1f0af4683b8ae5be24a283c0f5659ab3576fb57b70410bf764fa777eb217484b51278c47bd57181cf3c43b8a04acb595ea8eec482","ssdeep":"768:m0Fqllv36QWRrUPF3GkomJhZx3hkcqwTGx7R0C4vXABFUf/j:zFql10RrUPhP1ZFhHfT07sEFUf/j","tlshash":"52c2e1772e2d9e374b000799a0ccb99dfdc172dbb86ad1850e983c65b43616cf764a28","first_seen":"2025-09-20T03:59:22.68163Z","last_seen":"2025-09-24T03:05:07.344074Z","times_seen":2,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/adobe-analytics.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:21.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"money.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:25:31 GMT","end":"Mon, 24 Nov 2025 16:25:29 GMT"},"fingerprint":{"sha1":"A5:8A:11:35:E2:18:EF:C0:E0:2A:61:E3:CE:0F:31:56:42:55:F0:FC","sha256":"C0:5A:4D:B1:BE:57:72:CF:9E:D8:17:5E:01:A3:0D:F8:4C:C1:16:16:8B:65:8B:CA:3B:CC:32:C3:E9:15:71:EF"}}},"request":{"raw":"GET /js/adobe-analytics.js?cb=432 HTTP/1.1\r\nHost: money.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account\r\nCookie: SSID_9H80=CQDn9B0AAAAAAAC0X9NohcaCGLRf02gBAAAAAAAAAAAAtF_TaADc7g; SSSC_9H80=1013.G7553486227140429445.1|0.0; SSRT_9H80=tF_TaAABAA; money_session=eyJpdiI6Inlqb015WmpKSkJhakh6SzMyN3VheFE9PSIsInZhbHVlIjoiT2pIcnNveGVobXNrS1FIUkZZZDd4ZWRNNkd0UTZPcnUveStFd09kNDY3T3ZtbEV0RXlLbXNadTFDS2Q0eC8wUGIyemFQaEdKVlVHb1MyRXNvb3NHYmN3ZkpwVy9ySHBBN1JCWEVmbkNraWhld3l1Rm5WTXd3VU53Zk52aHFEeGwiLCJtYWMiOiJmZDFlNmVjOGI0MDQxMmEzM2I4ZDAwMWNmMzY4Y2QyYjZlNzUyY2ZmODNiNjJhMDcxZjBhYzEwZTY3Yjk0ZjIwIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkVvY3h6L1FXSXBwbXVzYm1qUTlieXc9PSIsInZhbHVlIjoiSUM1b01ISkcyT0xMWFBCZVFsQUxUSitIbnNYNVhpTkRQR2wvcWJlQkx0a09hQVhxRXgwT3NFcXpVOWkzdkR2QTRRdkVJYzBlbU10VlpHb1RpYWhFNUhuMDBLaEs4L3BTVTBFYmIvNzJmekR3bmsrSzZJQkhtbDUzUDEySFhOU3kiLCJtYWMiOiJhMjFkMzNlZWRjMWJiMjcwOTY0YzY0NzQ0OTI2YWFiYTIwZWI2MGY4MDlkMTA2MzVlMjc2YTRhYzdiMGM5ZjJlIiwidGFnIjoiIn0%3D; __cf_bm=.U3YtFNih3m1w6FCrnkhu9tGuUHymVGomrTcpO.A40w-1758683061-1.0.1.1-HamIbNq.vNx7npxwSP0wqoYClS3Y3B42WO1UNnXOMO6bSheMocH.v_b7Q.nhvQVLVKnDsPdTSCXB4bPsND1B3RB70gSD0SuE2XX4dl_bXM0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 23 Sep 2025 12:33:48 GMT\r\netag: W/\"68d293ac-d9b4\"\r\ncf-cache-status: HIT\r\nexpires: Wed, 24 Sep 2025 07:04:21 GMT\r\ncache-control: public, max-age=14400\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 983f0dce8e7d1a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55732,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55649)","md5":"158acc704ed8d98f7d33a1ed8665ec7b","sha1":"8e30b61a837dbc6f76f173a9230845b6e2def70f","sha256":"8fd3affcb63fe0256c2c6f7daff68d5e9135f02e1127e9097664631fcd32fd2d","sha512":"5d28ff4459b7b75a9846834e45e5d6d1e7678be193cf3c54d11d4821f5109f3d4a5d449cf9cb79d4f85aa7ecf365b5d4f84e27f9d366448f847c3956f13091a9","ssdeep":"768:BAn1GcLmkcIZLGoCC/u6HUldMQOFhVdoH+iE+g1wHx8GlKVOFCapyl4w0n/qKOi+:GEcxZXw+nGFjo+mYOf+Vkh","tlshash":"d7434c99b244a8b853fa2468d36f2904b1361e8ae44dc048f1a5ddda7876c4f70b7f7c","first_seen":"2025-07-07T15:32:00.267774Z","last_seen":"2025-09-24T03:05:07.346371Z","times_seen":4,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prebid.admatic.de/setuid?bidder=amx\u0026gdpr=0\u0026gdpr_consent=\u0026f=i\u0026uid=","fqdn":"prebid.admatic.de","domain":"admatic.de","tld":"de"},"ip":{"addr":"172.67.72.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://dsp-service.admatic.de/cookie_sync?r=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fadmatic_autres%2F%24%7BUSER_ID%7D","date":"2025-09-24T03:04:29.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prebid.admatic.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Sep 2025 07:42:54 GMT","end":"Wed, 03 Dec 2025 07:42:53 GMT"},"fingerprint":{"sha1":"CC:9C:F8:02:B1:15:15:93:74:79:C8:B5:DE:02:6C:8B:7B:5B:4A:AC","sha256":"97:3C:A2:E3:50:C5:18:23:B7:F8:43:27:0E:AA:5B:32:53:FF:27:E2:A8:63:68:6D:13:A5:A4:64:D7:FB:3A:8C"}}},"request":{"raw":"GET /setuid?bidder=amx\u0026gdpr=0\u0026gdpr_consent=\u0026f=i\u0026uid= HTTP/1.1\r\nHost: prebid.admatic.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dsp-service.admatic.de/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid=ec240dc9-4059-4ccd-b7f1-c00942a6ec97\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 24 Sep 2025 03:04:29 GMT\r\nlocation: https://static.cdn.admatic.de/cookie.html?bidder=amx\u0026gdpr=0\u0026gdpr_consent=\u0026f=i\u0026uid=\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EvKlQMR2v%2FjzpdwCVaTCclCE3DM0nDiMxjussyWV%2FQFhZ1d3jLCfo7BGdEHYmLnsU8%2BOUmOa7x68We1hUG4EGdf73XeLPt8%2Fhc4Cqvb6O8Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 983f0dfec8bc49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1122,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":16,"dns":4,"connect":1,"send":0,"wait":5,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dsp-service.admatic.de/users/sync/?redir=https%3A%2F%2Fprebid.admatic.de%2Fsetuid%3Fbidder%3Dadmaticde%26gdpr%3D%26gdpr_consent%3D%26f%3Db%26uid%3D7b456e6d-386c-43fd-bdb4-e6ab1c330954","fqdn":"dsp-service.admatic.de","domain":"admatic.de","tld":"de"},"ip":{"addr":"172.67.72.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://dsp-service.admatic.de/cookie_sync?r=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fadmatic%2F%24%7BUSER_ID%7D","date":"2025-09-24T03:04:29.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsp-service.admatic.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Sep 2025 05:53:23 GMT","end":"Wed, 03 Dec 2025 05:53:22 GMT"},"fingerprint":{"sha1":"DF:34:D7:2B:E4:57:27:7B:89:7C:09:23:74:87:A2:DD:48:2F:23:D0","sha256":"4F:8E:0A:11:95:5F:2E:B9:94:1A:4B:29:F5:99:29:AD:E7:73:E0:B0:D2:1A:8E:08:B4:89:A4:EF:59:8D:C9:22"}}},"request":{"raw":"GET /users/sync/?redir=https%3A%2F%2Fprebid.admatic.de%2Fsetuid%3Fbidder%3Dadmaticde%26gdpr%3D%26gdpr_consent%3D%26f%3Db%26uid%3D7b456e6d-386c-43fd-bdb4-e6ab1c330954 HTTP/1.1\r\nHost: dsp-service.admatic.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dsp-service.admatic.de/cookie_sync?r=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fadmatic%2F%24%7BUSER_ID%7D\r\nCookie: uid=ec240dc9-4059-4ccd-b7f1-c00942a6ec97\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Wed, 24 Sep 2025 03:04:29 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rPOAgN4OsN%2BZQq%2FUg7x9W5P1OBAamv4oGNwvX4jQYqX2pUOcMRCdeedw2LIkakpzH8imXgPMystngJ%2FVXPqhtIwIdSP9LU1f3x5ziGBq%2B6gFiy8%3D\"}]}\r\nlocation: https://prebid.admatic.de/setuid?bidder=admaticde\u0026gdpr=\u0026gdpr_consent=\u0026f=b\u0026uid=7b456e6d-386c-43fd-bdb4-e6ab1c330954\r\naccess-control-allow-origin: *\r\nx-powered-by: Pixad\r\nvary: Accept\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nworking-on: admatic-k8s\r\nworking-app: admanager-report\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 983f0dfe4c2b569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1122,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"media1.money.ca/cdn-cgi/image/fit=cover,g=center,width=32,height=32,f=auto,quality=90/avatars/romana-king-1650956909.png","fqdn":"media1.money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:21.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"money.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:25:31 GMT","end":"Mon, 24 Nov 2025 16:25:29 GMT"},"fingerprint":{"sha1":"A5:8A:11:35:E2:18:EF:C0:E0:2A:61:E3:CE:0F:31:56:42:55:F0:FC","sha256":"C0:5A:4D:B1:BE:57:72:CF:9E:D8:17:5E:01:A3:0D:F8:4C:C1:16:16:8B:65:8B:CA:3B:CC:32:C3:E9:15:71:EF"}}},"request":{"raw":"GET /cdn-cgi/image/fit=cover,g=center,width=32,height=32,f=auto,quality=90/avatars/romana-king-1650956909.png HTTP/1.1\r\nHost: media1.money.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nCookie: SSID_9H80=CQDn9B0AAAAAAAC0X9NohcaCGLRf02gBAAAAAAAAAAAAtF_TaADc7g; SSSC_9H80=1013.G7553486227140429445.1|0.0; SSRT_9H80=tF_TaAABAA; money_session=eyJpdiI6Inlqb015WmpKSkJhakh6SzMyN3VheFE9PSIsInZhbHVlIjoiT2pIcnNveGVobXNrS1FIUkZZZDd4ZWRNNkd0UTZPcnUveStFd09kNDY3T3ZtbEV0RXlLbXNadTFDS2Q0eC8wUGIyemFQaEdKVlVHb1MyRXNvb3NHYmN3ZkpwVy9ySHBBN1JCWEVmbkNraWhld3l1Rm5WTXd3VU53Zk52aHFEeGwiLCJtYWMiOiJmZDFlNmVjOGI0MDQxMmEzM2I4ZDAwMWNmMzY4Y2QyYjZlNzUyY2ZmODNiNjJhMDcxZjBhYzEwZTY3Yjk0ZjIwIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkVvY3h6L1FXSXBwbXVzYm1qUTlieXc9PSIsInZhbHVlIjoiSUM1b01ISkcyT0xMWFBCZVFsQUxUSitIbnNYNVhpTkRQR2wvcWJlQkx0a09hQVhxRXgwT3NFcXpVOWkzdkR2QTRRdkVJYzBlbU10VlpHb1RpYWhFNUhuMDBLaEs4L3BTVTBFYmIvNzJmekR3bmsrSzZJQkhtbDUzUDEySFhOU3kiLCJtYWMiOiJhMjFkMzNlZWRjMWJiMjcwOTY0YzY0NzQ0OTI2YWFiYTIwZWI2MGY4MDlkMTA2MzVlMjc2YTRhYzdiMGM5ZjJlIiwidGFnIjoiIn0%3D; __cf_bm=.U3YtFNih3m1w6FCrnkhu9tGuUHymVGomrTcpO.A40w-1758683061-1.0.1.1-HamIbNq.vNx7npxwSP0wqoYClS3Y3B42WO1UNnXOMO6bSheMocH.v_b7Q.nhvQVLVKnDsPdTSCXB4bPsND1B3RB70gSD0SuE2XX4dl_bXM0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:21 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1206\r\nserver: cloudflare\r\ncf-ray: 983f0dce5e561a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2678400\r\netag: \"cfqGb2szrbNS3gpMzuSMXAClu3iLIZ8BWtr1lXIaVxDQ:a3f040c0baa0c3c36c348c9eb392c175\"\r\nlast-modified: Thu, 22 Jun 2023 21:21:02 GMT\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept, Accept-Encoding\r\nvia: 1.1 9adf50a068a92adaab58cf6a21118640.cloudfront.net (CloudFront)\r\ncf-bgj: imgq:90,h2pri\r\ncf-resized: internal=ok/h q=0 n=26+6 c=1+4 v=2025.9.1 l=1206 f=false c2=0 wv=2025.8.1\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1206,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"62935c3cf39e87798814032d3892b772","sha1":"60be77ee99e3c1e2b3788050f0b4bd07065f7799","sha256":"ed4a7e2ffae6551db6d03e2f4be50544da6f9b3b61daae031873e9e0359de301","sha512":"c3e18a76b8a973ef7a2ba67790b3e9972129ed5b9aa2e9d302f71e309080c8095e4bc90f11cd81f635062a70e29c569349609917a7514b38e4fe6de635dc3db5","ssdeep":"","tlshash":"7221961543d60c15d09d6b308e5f836a31a2f9ecc0bb56c5ad9372044676f91f822e54","first_seen":"2025-09-20T03:59:22.690236Z","last_seen":"2025-09-24T03:05:07.348695Z","times_seen":2,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ex.ingage.tech/v1/openrtb","fqdn":"ex.ingage.tech","domain":"ingage.tech","tld":"tech"},"ip":{"addr":"104.18.26.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:24.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ingage.tech","organization":"Insticator, Inc"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 01 Aug 2025 00:00:00 GMT","end":"Fri, 21 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"11:CE:C7:8C:E7:D7:B4:B1:19:4D:9C:26:9C:AD:73:AC:BA:12:FA:18","sha256":"E2:A2:BE:73:E9:41:97:77:34:F4:2C:35:01:2D:7E:C4:1E:C4:12:19:9C:1B:08:D1:F8:2E:2C:40:9A:31:D3:C0"}}},"request":{"raw":"POST /v1/openrtb HTTP/1.1\r\nHost: ex.ingage.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.ca/\r\ncontent-type: application/json\r\nContent-Length: 1022\r\nOrigin: https://money.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:24 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\nvary: Origin\r\naccess-control-allow-origin: https://money.ca\r\naccess-control-allow-credentials: true\r\nset-cookie: cookieRegion=; Domain=.ingage.tech; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT\ninstUid=; Domain=.ingage.tech; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 983f0dde2d020b45-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"77036bc6f5619a1270ad15c303590e5d","sha1":"01961f559df7bfc344f449d5ba051c24e6e755b8","sha256":"144647ad8afb79fd265ce8cb7ff2e4518eba3ab4c6f772ece69a8d49bf309e0c","sha512":"db241dfb8aa1cc02bc78189c30b4023a1e649cba229f9cc0c07d588b9d2146490c25ac024ecd4c26da34a7c2cb9cf257378047152f22c93defd40bd46f76b027","ssdeep":"","tlshash":"8fa01214893880378240d68b5044433047051b016288283a950718114408108c510184","first_seen":"2025-09-24T03:05:07.350152Z","last_seen":"2025-09-24T03:05:07.350152Z","times_seen":1,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csync.smilewanted.com/set_partner_userid_get/videoheroes_us/4aca0c30-6d1f-56a2-8131-a46aec2baa38","fqdn":"csync.smilewanted.com","domain":"smilewanted.com","tld":"com"},"ip":{"addr":"172.66.154.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://measureadv.com/userIframe?gdpr=0\u0026gdpr_consent=\u0026p=3\u0026redirect=https://csync.smilewanted.com/set_partner_userid_get/videoheroes_us/{UID}","date":"2025-09-24T03:04:30.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smilewanted.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 Aug 2025 21:28:27 GMT","end":"Thu, 30 Oct 2025 22:28:25 GMT"},"fingerprint":{"sha1":"FB:44:58:7C:4E:4C:D7:15:3E:2A:CA:43:D5:E5:9A:4F:FE:1A:FD:C3","sha256":"29:04:62:7B:83:D3:74:91:86:5A:D4:7C:02:6D:09:C2:80:69:F3:6F:67:47:2F:4B:4D:36:97:99:91:6A:11:D5"}}},"request":{"raw":"GET /set_partner_userid_get/videoheroes_us/4aca0c30-6d1f-56a2-8131-a46aec2baa38 HTTP/1.1\r\nHost: csync.smilewanted.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://measureadv.com/\r\nCookie: sw_user_params_infos=6yaN6ejyrmczfX5yClfXotj807SqU3AQ2DZNuZSwB1Z1x8Bx6CDJiEeUff88fgJt3qIWMcZee0NtE4PaDwoD4uGIL3mTMlZm3ur0x3C2hVDQn%2FlPNK5sbbk2ICEhlwwYQcU4oqcC6aMJJBNMsGYuI3TXj6JhZqiYwTkhUIflZJol1cfLTVbJSgeEyAaUK5jApPJxuWPkxFYNuNAFdZpZ0sMgsNrdZwQRAMFW6%2B3qBozkE7LzcvNH4taRiWVAZUAqPjYAjICT6JHabElvRKtJDm4uP%2BCsVHMopH4qT1gV0nmXH5o7Pt2SEpsj%2BvsENZOytAnePLoe4Rzrx314TrIvhg%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:30 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: sw_user_params_infos=iU16DNvo68KRsm0ceT9VGD6kKbC7WD91VjwK06Te0ZFQ5TdauC3nrCz%2Fmh2YEqKyLSrabYNiw35InXsPJ6Qx7uiAPqaiTQ5dijTahrTYdG7kl5EqWTBzgG1RfNaG7IwACXU%2B9nnJQfYSqPTg8t%2B3u2X1hKcjvt4mZfsWUrlO4B9UqA%2FU8bROa0DPePbDORd1i2Kru5SY%2BuluT9qpYJXP%2FlZAyKHznTd7l%2Fh5TvKQS2hN7uScYbkaFv00B6WPIhJqtPf2O2qgbfWapaj%2BuWY1pyJEFLnxWKkaeObcQERXybukAS%2BMVUcUNbIRCBOvmgFKnwAQ%2BErATHJYvbiNWEhfvQN7rlCAYdKbREMTnmHH0DeAZ9Pi9MxdwdosFi4trku1pJCyyKLT0jW%2FilBYF7uh1w%3D%3D; HttpOnly; SameSite=None; Secure; Path=/; Domain=smilewanted.com; Max-Age=31556952; Expires=Thu, 24 Sep 2026 08:53:42 GMT\r\ncf-ray: 983f0e0709e97129-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ex.ingage.tech/v1/openrtb","fqdn":"ex.ingage.tech","domain":"ingage.tech","tld":"tech"},"ip":{"addr":"104.18.26.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:24.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ingage.tech","organization":"Insticator, Inc"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 01 Aug 2025 00:00:00 GMT","end":"Fri, 21 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"11:CE:C7:8C:E7:D7:B4:B1:19:4D:9C:26:9C:AD:73:AC:BA:12:FA:18","sha256":"E2:A2:BE:73:E9:41:97:77:34:F4:2C:35:01:2D:7E:C4:1E:C4:12:19:9C:1B:08:D1:F8:2E:2C:40:9A:31:D3:C0"}}},"request":{"raw":"POST /v1/openrtb HTTP/1.1\r\nHost: ex.ingage.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.ca/\r\ncontent-type: application/json\r\nContent-Length: 999\r\nOrigin: https://money.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:24 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\nvary: Origin\r\naccess-control-allow-origin: https://money.ca\r\naccess-control-allow-credentials: true\r\nset-cookie: cookieRegion=; Domain=.ingage.tech; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT\ninstUid=; Domain=.ingage.tech; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 983f0ddddcfc0b45-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"838c70a7acacdf52e9e6582ae18e0689","sha1":"909fcf5feb8921e6a9a02e34e8cd475a1da328fc","sha256":"cc6f5e0f6fae671b8133097496af311f72e155a2ec0f1abba68e1c18786f6535","sha512":"6c2d443be56b9d58ec9da1ffe2c3ae70c25789bfca5c54796f7e427771da43d6596837c51991644601caf347b69536b76e33f08dd003fe5afa5aa18231f2aaf5","ssdeep":"","tlshash":"c5a024040cc540330150d50f14504730c101d1c5d0cc1d7d1c114477cdcc010c0010c3","first_seen":"2025-09-24T03:05:07.352183Z","last_seen":"2025-09-24T03:05:07.352183Z","times_seen":1,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":5,"connect":1,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"r92p84zajxs4zgxny.ay.delivery/floorPrice/r92p84zAJxS4zgXNY/js/floorPrice/linreg_da.min.js","fqdn":"r92p84zajxs4zgxny.ay.delivery","domain":"ay.delivery","tld":"delivery"},"ip":{"addr":"104.21.41.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ay.delivery","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 16:19:54 GMT","end":"Thu, 06 Nov 2025 17:17:35 GMT"},"fingerprint":{"sha1":"3D:8C:44:1B:65:E8:28:DC:76:64:B1:41:3A:AB:BF:94:F0:F3:7B:12","sha256":"FA:D7:73:BF:A2:48:F8:E2:BD:1F:72:C3:6E:6F:B9:B6:D0:07:0E:35:76:B0:4B:4D:7B:0F:63:ED:BE:02:61:AF"}}},"request":{"raw":"GET /floorPrice/r92p84zAJxS4zgXNY/js/floorPrice/linreg_da.min.js HTTP/1.1\r\nHost: r92p84zajxs4zgxny.ay.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 24 Sep 2025 03:04:23 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kft89y4SufUatm9V2PY95jpr90asW0c8368jNkG2GNq1xRtJ6dfdOAhRAOVKyN%2ButB5dLa7YiLnLPvlDwFKjZtT4US%2BPIq%2FHk7QbvVyHVoX18mZ%2F11r2pxwg3Q%3D%3D\"}]}\r\ncf-ray: 983f0ddafed5b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hb.minutemedia-prebid.com/hb-mm-multi","fqdn":"hb.minutemedia-prebid.com","domain":"minutemedia-prebid.com","tld":"com"},"ip":{"addr":"35.207.179.213","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.minutemedia-prebid.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 09:59:02 GMT","end":"Wed, 03 Dec 2025 10:54:58 GMT"},"fingerprint":{"sha1":"E0:42:C4:95:FD:CA:9F:E5:66:17:83:4A:94:23:66:87:D9:F7:92:B7","sha256":"2C:65:20:2B:91:7A:85:4E:76:46:98:05:1D:AA:E0:64:E5:FB:1C:8A:8A:37:58:5C:07:63:84:74:51:CA:A0:59"}}},"request":{"raw":"POST /hb-mm-multi HTTP/1.1\r\nHost: hb.minutemedia-prebid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.ca/\r\ncontent-type: text/plain\r\nContent-Length: 1693\r\nOrigin: https://money.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF, X-Requested-With\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: https://money.ca\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\nx-reason: do not track ifa\r\ndate: Wed, 24 Sep 2025 03:04:23 GMT\r\ncontent-length: 108\r\nx-envoy-upstream-service-time: 0\r\nserver: istio-envoy\r\nvia: 1.1 google\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":83,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"464525c61386c1d9c05324da81e7d778","sha1":"5323973854ebd1e54576b238e715a9d3b20f9100","sha256":"42c0dbe3ca25dd57e86dad40185e314905c9d833780c54e3aa2302ae2d859220","sha512":"56ada6933cb059c879a83ddb32c65060fffc1084f6ec657f18ef771de8c3603ab1d009198e37390818227413f5b6ce969f2c570a9694381e301ae4cfd3390958","ssdeep":"","tlshash":"84a0120123c0a0da408c9830092009702362d215b6a5460170f1040101c48502070910","first_seen":"2025-09-24T03:05:07.353782Z","last_seen":"2025-09-24T03:05:07.353782Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":2,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cdn.admatic.de/cookie.html?bidder=amx\u0026gdpr=0\u0026gdpr_consent=\u0026f=i\u0026uid=","fqdn":"static.cdn.admatic.de","domain":"admatic.de","tld":"de"},"ip":{"addr":"172.67.72.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://dsp-service.admatic.de/cookie_sync?r=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fadmatic_autres%2F%24%7BUSER_ID%7D","date":"2025-09-24T03:04:29.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.cdn.admatic.de","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Sep 2025 16:20:33 GMT","end":"Tue, 02 Dec 2025 16:20:32 GMT"},"fingerprint":{"sha1":"51:8F:C6:BA:EF:DB:F9:A9:62:B0:A4:96:38:FE:4C:51:79:DA:71:AD","sha256":"06:05:0A:2D:B8:99:97:31:AE:FD:B9:1B:60:23:47:08:C1:EF:4D:06:84:59:5E:2B:D2:28:E7:27:53:D5:3F:D8"}}},"request":{"raw":"GET /cookie.html?bidder=amx\u0026gdpr=0\u0026gdpr_consent=\u0026f=i\u0026uid= HTTP/1.1\r\nHost: static.cdn.admatic.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dsp-service.admatic.de/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid=ec240dc9-4059-4ccd-b7f1-c00942a6ec97\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:29 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncdn-pullzone: 2526898\r\ncdn-uid: e7d0f040-08f3-443e-a640-656beb6c8b3b\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=25600000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zjphzm0a3g7zf5lahiwXpiN1ocCUV96z3EcpA6GKKWO6JzzyUg%2BFq035byOgK9am4aPJpSsBcv3Faw8SCXvnW1CFSR1wIFU9wurL3ZU15fuQUAsd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 21 May 2025 13:27:10 GMT\r\ncdn-storageserver: DE-588\r\ncdn-fileserver: 988\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/22/2025 21:16:37\r\ncdn-edgestorageid: 1333\r\ncdn-requestid: 72b1056dc7e9c90a42646c7d523732ac\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 983f0dff3bcf3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1122,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1122), with no line terminators","md5":"21947b7c68707b18d7d77214ee229db9","sha1":"2a6ace8708e500c3e9c911ca209b2d0c2aed4917","sha256":"481c8382889f68e105a819ab253cbea9e6a52e86d611edd9fde5feae25e1d8a7","sha512":"8eedf99a0df2a0f8f7e23dc44223609d8b4ac93721ee14da60ff3e884e4ef52c0914cc9b5cd6a3082951ebd07d30ddd9d882833f3d677e1de4d6ec563f3b75d1","ssdeep":"","tlshash":"5c2163407265ac9e860202f80f750d0ea8a1e1523cf5a068b8c9e5b03212817c7fa9ef","first_seen":"2025-05-21T22:21:34.380102Z","last_seen":"2026-03-27T07:05:51.569313Z","times_seen":2353,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":46,"dns":2,"connect":4,"send":0,"wait":47,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prebid.admatic.de/setuid?bidder=membrana\u0026gdpr=\u0026gdpr_consent=\u0026f=i\u0026uid=dc9825f6-ddb2-4f6d-a7ac-f65e841470e8","fqdn":"prebid.admatic.de","domain":"admatic.de","tld":"de"},"ip":{"addr":"172.67.72.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://dsp-service.admatic.de/cookie_sync?r=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fadmatic_autres%2F%24%7BUSER_ID%7D","date":"2025-09-24T03:04:29.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prebid.admatic.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Sep 2025 07:42:54 GMT","end":"Wed, 03 Dec 2025 07:42:53 GMT"},"fingerprint":{"sha1":"CC:9C:F8:02:B1:15:15:93:74:79:C8:B5:DE:02:6C:8B:7B:5B:4A:AC","sha256":"97:3C:A2:E3:50:C5:18:23:B7:F8:43:27:0E:AA:5B:32:53:FF:27:E2:A8:63:68:6D:13:A5:A4:64:D7:FB:3A:8C"}}},"request":{"raw":"GET /setuid?bidder=membrana\u0026gdpr=\u0026gdpr_consent=\u0026f=i\u0026uid=dc9825f6-ddb2-4f6d-a7ac-f65e841470e8 HTTP/1.1\r\nHost: prebid.admatic.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dsp-service.admatic.de/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid=ec240dc9-4059-4ccd-b7f1-c00942a6ec97; uids=eyJ0ZW1wVUlEcyI6eyJhZG1hdGljZGUiOnsiZXhwaXJlcyI6IjIwMjUtMTAtMjRUMDM6MDQ6MjkuNTYzWiIsInVpZCI6IjdiNDU2ZTZkLTM4NmMtNDNmZC1iZGI0LWU2YWIxYzMzMDk1NCJ9fX0=\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\nlocation: https://static.cdn.admatic.de/cookie.html?bidder=membrana\u0026gdpr=\u0026gdpr_consent=\u0026f=i\u0026uid=dc9825f6-ddb2-4f6d-a7ac-f65e841470e8\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ox1NX%2BMDaJDYnR%2BOAlH843opkpu%2BNKAcAp4ivaViSuTFmZj9Z8YGehMTL6UaQzlTQVdPUJio0f7iNxJ4k19wGbi%2BZXw4FZIbmak%2FHpoEB2g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 24 Sep 2025 03:04:29 GMT\r\nserver: cloudflare\r\ncf-ray: 983f0e00ebad8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1122,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geo-location.prebid.cloud/v1/geo","fqdn":"geo-location.prebid.cloud","domain":"prebid.cloud","tld":"cloud"},"ip":{"addr":"3.167.2.73","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:21.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geo-location.prebid.cloud","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 29 Jun 2025 00:00:00 GMT","end":"Tue, 28 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C1:4E:4F:A9:ED:22:86:71:8A:71:C7:D1:88:A7:A9:B4:5E:5A:69:7A","sha256":"8A:80:C3:25:04:BF:57:AF:C8:E0:71:BB:1A:F3:D5:01:1A:61:26:CC:64:B4:1A:A1:38:1C:C7:DB:26:9C:4E:71"}}},"request":{"raw":"GET /v1/geo HTTP/1.1\r\nHost: geo-location.prebid.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.ca/\r\nOrigin: https://money.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 84\r\ndate: Tue, 23 Sep 2025 05:16:24 GMT\r\nx-amz-apigw-id: RVv-UEpOoAMErfg=\r\nx-amzn-requestid: febf658e-9147-4e16-b651-f897dcdffff1\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 bb7e95405d9101d4320e2582fcead450.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: YxIb_MKEJBdKpkljld1nQ6gJJEQ6rwL-K_SpIBc0nQmMdHpwFhxZeg==\r\nage: 78477\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":84,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ce8464f1af98138d30c444a7bb04dbef","sha1":"a3229178d13083d17942bbbfface3719c503d936","sha256":"f6109a09ad4bc334372c01a68b9e7e0416d05da4103e94e20dc622627f13e8a4","sha512":"05e4c0a1856abc3ae6bd38354690b28edfdf52303b6046057e8821e122a0b6f25048afc793328f2363de3b36a5eec165c63bb53b72cdba7b1c5b66cbad66ada0","ssdeep":"","tlshash":"02a01128b0280ea08ce0230c222ac00288ab2f0a2380308283830f282bac83320e200c","first_seen":"2025-08-23T12:12:23.95023Z","last_seen":"2025-11-07T03:41:09.889043Z","times_seen":1464,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":55,"dns":37,"connect":1,"send":0,"wait":1,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.ribn.com/v3/production/ribn.js","fqdn":"assets.ribn.com","domain":"ribn.com","tld":"com"},"ip":{"addr":"104.18.42.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:21.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ribn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 Aug 2025 05:21:30 GMT","end":"Sat, 01 Nov 2025 06:21:26 GMT"},"fingerprint":{"sha1":"F8:C0:EF:B8:2F:0B:43:D3:E1:BC:FE:D4:16:9B:E5:79:17:80:FF:20","sha256":"76:70:3F:67:F3:DC:B0:F8:25:01:0D:40:29:94:C0:08:29:CF:0B:E5:71:74:2D:6C:75:34:9E:BD:97:47:40:59"}}},"request":{"raw":"GET /v3/production/ribn.js HTTP/1.1\r\nHost: assets.ribn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:22 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 29 Aug 2024 17:08:53 GMT\r\netag: W/\"7644e607a2c5ef9e60e45b7dbbcdecb9\"\r\nx-amz-server-side-encryption: AES256\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 419f3eb3d74bedebbef6fc91b3f54a36.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: 86oWiYJjDlF6n-Swmh3oTmvHM4v9MuEjZrgyCCojFnN0LrE3DO4G2g==\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nvary: Origin, Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4683\r\nexpires: Wed, 24 Sep 2025 07:04:22 GMT\r\ncache-control: public, max-age=14400\r\nserver: cloudflare\r\ncf-ray: 983f0dd1da4d0b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":48471,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48470), with no line terminators","md5":"7644e607a2c5ef9e60e45b7dbbcdecb9","sha1":"c80468cafa9fd4fe9580296b86e136296602aedc","sha256":"b78b6075b97ad97d1fb4669c7cd6ee7eef985c6753d7912cd4ad1a7b1ccfbb6b","sha512":"2f2bf74c58a5758d8041043c6432fba5db8344b35a7a4728f6313f2d05415a0af7aa0b63a1c2e6ebaab2da110aed3ac2d2ead3ef8c376104b05507bfde35d431","ssdeep":"768:dCI3BztpJyLjOhQKUPpGmQoKEj4eNEYxmCdKHKWA6JPAuPf:JJwjOiZ39NwYKHKKJPAuPf","tlshash":"ee23c689f6d5b0e013f774a4413f660ee1bb6a55b44ae9d1d262e0c0a87ca8f5027f3d","first_seen":"2025-07-07T15:32:00.345265Z","last_seen":"2025-09-24T03:05:07.356637Z","times_seen":4,"resource_available":true,"data":null}},"time_used":483,"timings":{"blocked":230,"dns":18,"connect":1,"send":0,"wait":13,"receive":0,"ssl":217},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/expand-collapse/5544.js","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:22.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"money.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:25:31 GMT","end":"Mon, 24 Nov 2025 16:25:29 GMT"},"fingerprint":{"sha1":"A5:8A:11:35:E2:18:EF:C0:E0:2A:61:E3:CE:0F:31:56:42:55:F0:FC","sha256":"C0:5A:4D:B1:BE:57:72:CF:9E:D8:17:5E:01:A3:0D:F8:4C:C1:16:16:8B:65:8B:CA:3B:CC:32:C3:E9:15:71:EF"}}},"request":{"raw":"GET /js/expand-collapse/5544.js HTTP/1.1\r\nHost: money.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account\r\nCookie: SSID_9H80=CQDn9B0AAAAAAAC0X9NohcaCGLRf02gBAAAAAAAAAAAAtF_TaADc7g; SSSC_9H80=1013.G7553486227140429445.1|0.0; SSRT_9H80=tF_TaAABAA; money_session=eyJpdiI6Inlqb015WmpKSkJhakh6SzMyN3VheFE9PSIsInZhbHVlIjoiT2pIcnNveGVobXNrS1FIUkZZZDd4ZWRNNkd0UTZPcnUveStFd09kNDY3T3ZtbEV0RXlLbXNadTFDS2Q0eC8wUGIyemFQaEdKVlVHb1MyRXNvb3NHYmN3ZkpwVy9ySHBBN1JCWEVmbkNraWhld3l1Rm5WTXd3VU53Zk52aHFEeGwiLCJtYWMiOiJmZDFlNmVjOGI0MDQxMmEzM2I4ZDAwMWNmMzY4Y2QyYjZlNzUyY2ZmODNiNjJhMDcxZjBhYzEwZTY3Yjk0ZjIwIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkVvY3h6L1FXSXBwbXVzYm1qUTlieXc9PSIsInZhbHVlIjoiSUM1b01ISkcyT0xMWFBCZVFsQUxUSitIbnNYNVhpTkRQR2wvcWJlQkx0a09hQVhxRXgwT3NFcXpVOWkzdkR2QTRRdkVJYzBlbU10VlpHb1RpYWhFNUhuMDBLaEs4L3BTVTBFYmIvNzJmekR3bmsrSzZJQkhtbDUzUDEySFhOU3kiLCJtYWMiOiJhMjFkMzNlZWRjMWJiMjcwOTY0YzY0NzQ0OTI2YWFiYTIwZWI2MGY4MDlkMTA2MzVlMjc2YTRhYzdiMGM5ZjJlIiwidGFnIjoiIn0%3D; __cf_bm=.U3YtFNih3m1w6FCrnkhu9tGuUHymVGomrTcpO.A40w-1758683061-1.0.1.1-HamIbNq.vNx7npxwSP0wqoYClS3Y3B42WO1UNnXOMO6bSheMocH.v_b7Q.nhvQVLVKnDsPdTSCXB4bPsND1B3RB70gSD0SuE2XX4dl_bXM0; utm_source=direct; user_meta=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22null%22%2C%22utm_campaign%22%3A%22null%22%2C%22utm_content%22%3A%22null%22%2C%22utm_term%22%3A%22null%22%2C%22device_category%22%3A%22unknown%22%7D; scottie_user_attributes=%7B%22nav%22%3A%7B%22uEntryPath%22%3A%22%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account%22%7D%2C%22user%22%3A%7B%22email%22%3Anull%2C%22first_name%22%3Anull%2C%22last_name%22%3Anull%7D%7D; scottie_session_attributes=%7B%22nav%22%3A%7B%22s_referrer%22%3A%22r.search.yahoo.com%22%2C%22page_count%22%3A1%2C%22sEntryPath%22%3A%22%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account%22%7D%2C%22ay_imp_s%22%3Afalse%2C%22created_at%22%3A1758683062%2C%22s_article_id%22%3A85597%2C%22nav_attrs%22%3A%7B%22siteSpectVariant%22%3Anull%2C%22siteSpectExperienceID%22%3Anull%2C%22siteSpectCampaignName%22%3Anull%7D%2C%22utm%22%3A%7B%22utm_source%22%3Anull%2C%22utm_medium%22%3Anull%2C%22utm_campaign%22%3Anull%2C%22utm_content%22%3Anull%2C%22utm_term%22%3Anull%7D%2C%22reporting_channel%22%3A%22organic_search%22%2C%22s_entry_channel%22%3A%22organic%20news%22%2C%22member_status%22%3A%22none%22%7D; suid=06864235-3ff4-4481-9403-3a43c185cfd3; scottie_session=c0fb5510-9f43-4eee-b60a-f30d4dc24e49\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 19 Sep 2025 14:47:54 GMT\r\netag: W/\"68cd6d1a-555\"\r\ncf-cache-status: HIT\r\nexpires: Wed, 24 Sep 2025 07:04:22 GMT\r\ncache-control: public, max-age=14400\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 983f0dd40ba71a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1365,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1365), with no line terminators","md5":"8ad8d73810d836cb20c6956daa149b4e","sha1":"850a5f4494367e6ca92c584419b9b12f9c226e4e","sha256":"696d6ce9a834cf97ab57aaf8bd1274e3b9af25f198d9a4e18c2e09d7a92539a2","sha512":"49b4eda08c49ebb17a889e3cfde8c14cbf3067dd96cf9ef1a1df05f23c2a19c8ba0f5f675b86e4995dc9ba9528dc12fb2980a7c4a07734fbd57239c88d45400d","ssdeep":"","tlshash":"d4213525b18139996be5c070035aeb5ad37b388a08804a6c387019ddd8e178f27e1ffe","first_seen":"2025-09-20T03:59:22.791513Z","last_seen":"2025-09-24T03:05:07.358497Z","times_seen":2,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geo-location.prebid.cloud/v1/geo","fqdn":"geo-location.prebid.cloud","domain":"prebid.cloud","tld":"cloud"},"ip":{"addr":"3.167.2.73","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geo-location.prebid.cloud","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 29 Jun 2025 00:00:00 GMT","end":"Tue, 28 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C1:4E:4F:A9:ED:22:86:71:8A:71:C7:D1:88:A7:A9:B4:5E:5A:69:7A","sha256":"8A:80:C3:25:04:BF:57:AF:C8:E0:71:BB:1A:F3:D5:01:1A:61:26:CC:64:B4:1A:A1:38:1C:C7:DB:26:9C:4E:71"}}},"request":{"raw":"GET /v1/geo HTTP/1.1\r\nHost: geo-location.prebid.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.ca/\r\nOrigin: https://money.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 84\r\ndate: Tue, 23 Sep 2025 05:16:24 GMT\r\nx-amz-apigw-id: RVv-UEpOoAMErfg=\r\nx-amzn-requestid: febf658e-9147-4e16-b651-f897dcdffff1\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 bb7e95405d9101d4320e2582fcead450.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: nagaOCa5PqG_1TjzHLSW6zWkFy7Zgj3SxezjVF4_Ldo4JsW_TzvuJg==\r\nage: 78479\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":84,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ce8464f1af98138d30c444a7bb04dbef","sha1":"a3229178d13083d17942bbbfface3719c503d936","sha256":"f6109a09ad4bc334372c01a68b9e7e0416d05da4103e94e20dc622627f13e8a4","sha512":"05e4c0a1856abc3ae6bd38354690b28edfdf52303b6046057e8821e122a0b6f25048afc793328f2363de3b36a5eec165c63bb53b72cdba7b1c5b66cbad66ada0","ssdeep":"","tlshash":"02a01128b0280ea08ce0230c222ac00288ab2f0a2380308283830f282bac83320e200c","first_seen":"2025-08-23T12:12:23.95023Z","last_seen":"2025-11-07T03:41:09.889043Z","times_seen":1464,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"track.kueezrtb.com/dye?ac=2\u0026acm=G3L\u0026uid=be5cdac8e005e820\u0026sid=34ec2ed1ee696ea0\u0026pvi=89bcafefc05ee524\u0026h=money.ca\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=81\u0026cc=NO\u0026ig=0\u0026uri=%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026furl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026sr=1280x1024\u0026type=latest:br\u0026_=1758683063798\u0026bidder=kueezrtb\u0026at=display\u0026v=1\u0026acid=64dcd6552888555c21f4eb75","fqdn":"track.kueezrtb.com","domain":"kueezrtb.com","tld":"com"},"ip":{"addr":"172.66.162.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kueezrtb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 31 Jul 2025 04:22:42 GMT","end":"Wed, 29 Oct 2025 05:22:40 GMT"},"fingerprint":{"sha1":"72:9A:34:A6:6E:6C:F2:12:4C:CD:21:43:69:9D:B4:AE:A6:E2:BD:C1","sha256":"74:FD:00:85:48:5B:6D:03:90:97:6C:48:C6:0B:F9:7E:AB:0F:30:71:82:29:09:7B:3D:3A:D7:32:40:B2:4D:4D"}}},"request":{"raw":"GET /dye?ac=2\u0026acm=G3L\u0026uid=be5cdac8e005e820\u0026sid=34ec2ed1ee696ea0\u0026pvi=89bcafefc05ee524\u0026h=money.ca\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=81\u0026cc=NO\u0026ig=0\u0026uri=%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026furl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026sr=1280x1024\u0026type=latest:br\u0026_=1758683063798\u0026bidder=kueezrtb\u0026at=display\u0026v=1\u0026acid=64dcd6552888555c21f4eb75 HTTP/1.1\r\nHost: track.kueezrtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nCookie: kuid=b4c606a6d5e7c1f9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 24 Sep 2025 03:04:23 GMT\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 983f0ddcdbe38be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csync.smilewanted.com/set_partner_userid_get/videoheroes/4aca0c30-6d1f-56a2-8131-a46aec2baa38","fqdn":"csync.smilewanted.com","domain":"smilewanted.com","tld":"com"},"ip":{"addr":"172.66.154.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://measureadv.com/userIframe?gdpr=0\u0026gdpr_consent=\u0026p=3\u0026redirect=https://csync.smilewanted.com/set_partner_userid_get/videoheroes/{UID}","date":"2025-09-24T03:04:30.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smilewanted.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 Aug 2025 21:28:27 GMT","end":"Thu, 30 Oct 2025 22:28:25 GMT"},"fingerprint":{"sha1":"FB:44:58:7C:4E:4C:D7:15:3E:2A:CA:43:D5:E5:9A:4F:FE:1A:FD:C3","sha256":"29:04:62:7B:83:D3:74:91:86:5A:D4:7C:02:6D:09:C2:80:69:F3:6F:67:47:2F:4B:4D:36:97:99:91:6A:11:D5"}}},"request":{"raw":"GET /set_partner_userid_get/videoheroes/4aca0c30-6d1f-56a2-8131-a46aec2baa38 HTTP/1.1\r\nHost: csync.smilewanted.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://measureadv.com/\r\nCookie: sw_user_params_infos=6yaN6ejyrmczfX5yClfXotj807SqU3AQ2DZNuZSwB1Z1x8Bx6CDJiEeUff88fgJt3qIWMcZee0NtE4PaDwoD4uGIL3mTMlZm3ur0x3C2hVDQn%2FlPNK5sbbk2ICEhlwwYQcU4oqcC6aMJJBNMsGYuI3TXj6JhZqiYwTkhUIflZJol1cfLTVbJSgeEyAaUK5jApPJxuWPkxFYNuNAFdZpZ0sMgsNrdZwQRAMFW6%2B3qBozkE7LzcvNH4taRiWVAZUAqPjYAjICT6JHabElvRKtJDm4uP%2BCsVHMopH4qT1gV0nmXH5o7Pt2SEpsj%2BvsENZOytAnePLoe4Rzrx314TrIvhg%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:30 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: sw_user_params_infos=HBG7QB5Pi5eg8wqMYN3RUY5CHwVUF9RUeZkhGzu2xxQSbW6XWKnaLfVTke2L%2Ff3dCOK0cqTA23sjuE6H8HmxzIaY2wwGEnXhDNi57CULkYV2dg58UmxJVDQtHowdifN7HSRp9Y8k4LOvfBX4I3rRG0nM2EXQbrVdEl5haZonA1jVCxt0A5IvCKSETe43cUZYR0v0lZ9%2Fqol9oruSgp6mUWr9kiYKCJv1XKileTx4uAREBM3OUFXRIDuCTU7PmRBHjaTO0oPs5CdPu7TVIF50ov0BeZX%2FJVeZxeIA3DX8idDVspl4KShX3pxUIu5eBdxG2o%2FzIhsUalbMfSaqIPk3ELBz4gNWWQq2cuzBNHBLvu1gpv3nj%2FMYTWJH21PHNh0Cykr5BaB5fymjLCxc7A%2F6qg%3D%3D; HttpOnly; SameSite=None; Secure; Path=/; Domain=smilewanted.com; Max-Age=31556952; Expires=Thu, 24 Sep 2026 08:53:42 GMT\r\ncf-ray: 983f0e06f9e57129-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dn0qt3r0xannq.cloudfront.net/moneywise-nZYQAA5Sy3/money-longform/prebid-wrapper.js","fqdn":"dn0qt3r0xannq.cloudfront.net","domain":"dn0qt3r0xannq.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.167.2.77","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:21.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /moneywise-nZYQAA5Sy3/money-longform/prebid-wrapper.js HTTP/1.1\r\nHost: dn0qt3r0xannq.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 23 Sep 2025 22:18:51 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: BIqDhm5zlSJbsUknUjeOVLlFYe_Cl1Ua\r\nserver: AmazonS3\r\ndate: Wed, 24 Sep 2025 02:50:11 GMT\r\ncache-control: max-age=3600\r\netag: W/\"fd7f5e3a98c77642032f20afbc3a9afd\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ac3e1d7135d19671e1860c67a45b3f70.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: iRRePL8BRLp-Rmd5sTTbA8yYze8hqegHpebsdHM1SUhj-DmmHhUZhA==\r\nage: 2390\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":319484,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65341)","md5":"fd7f5e3a98c77642032f20afbc3a9afd","sha1":"79369545b5a34bd98196f35844688fdc3f6c58b5","sha256":"0d7f161b1861d4a42d625872e63b7dac84d86de8773ee472e83476b1ec552cb7","sha512":"2127e3ff94eaa019e004131ce62f90a020550ce36030fc696c9ec6802c1ad2efc243e6d3e0a2d00369e9181cb28139ad735d07bb7b3639863d32decdd1dbcd6e","ssdeep":"6144:wWYZd9cn5AMyxK1TH794TPCOcYWdK6MuF8VhWOrQX:w3ZW79dOcYIKBWf","tlshash":"0e644cab7355f96e43e250e8843f2302f2755865640e8018fa9dcce67be858d02f6fb5","first_seen":"2025-09-24T03:05:07.36397Z","last_seen":"2025-09-24T03:05:07.36397Z","times_seen":1,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":24,"dns":16,"connect":1,"send":0,"wait":42,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-T77L5RT","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:21.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"DF:7E:8A:F9:1C:B5:DC:9E:90:E3:71:A7:92:85:2C:8F:2B:B4:42:8E","sha256":"3A:65:11:10:B9:58:2F:E1:BF:38:98:8D:2E:3E:A2:01:9D:C6:BE:69:5B:AD:F7:99:53:F9:AB:A6:6B:82:47:F1"}}},"request":{"raw":"GET /gtm.js?id=GTM-T77L5RT HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 24 Sep 2025 03:04:21 GMT\r\nexpires: Wed, 24 Sep 2025 03:04:21 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 139401\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":425177,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (23809)","md5":"a2fcdc85c51ace400bf38add892c0672","sha1":"33f0d1f2a388e4cd474711b833381b72a9c4e923","sha256":"6ba0edece0e3c5eee40437fc0130d84d56f952e3f5d9650638a3a96bee8f37eb","sha512":"446ed62d3a36b5622202c0771452b992c721efa1bbc760290e0c91d24b7e742a00b0c0c88082de6d032db947502d63931a71947668a6644188de6db8faa412dd","ssdeep":"6144:Y8YEFp5Y1D2im068gZqI2QNTs7eBnhsVa6H:YRuYN2iNgtBq","tlshash":"0f9419cd73c674664392b478903f018bb5bb68a2b44cd895f189dce42e74aaa4137f7c","first_seen":"2025-09-24T03:05:07.36509Z","last_seen":"2025-09-24T03:05:07.36509Z","times_seen":1,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prebid.admatic.de/setuid?bidder=amx\u0026gdpr=0\u0026gdpr_consent=\u0026f=i\u0026uid=","fqdn":"prebid.admatic.de","domain":"admatic.de","tld":"de"},"ip":{"addr":"172.67.72.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://dsp-service.admatic.de/cookie_sync?r=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fadmatic%2F%24%7BUSER_ID%7D","date":"2025-09-24T03:04:29.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prebid.admatic.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Sep 2025 07:42:54 GMT","end":"Wed, 03 Dec 2025 07:42:53 GMT"},"fingerprint":{"sha1":"CC:9C:F8:02:B1:15:15:93:74:79:C8:B5:DE:02:6C:8B:7B:5B:4A:AC","sha256":"97:3C:A2:E3:50:C5:18:23:B7:F8:43:27:0E:AA:5B:32:53:FF:27:E2:A8:63:68:6D:13:A5:A4:64:D7:FB:3A:8C"}}},"request":{"raw":"GET /setuid?bidder=amx\u0026gdpr=0\u0026gdpr_consent=\u0026f=i\u0026uid= HTTP/1.1\r\nHost: prebid.admatic.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dsp-service.admatic.de/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid=ec240dc9-4059-4ccd-b7f1-c00942a6ec97\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 24 Sep 2025 03:04:29 GMT\r\nlocation: https://static.cdn.admatic.de/cookie.html?bidder=amx\u0026gdpr=0\u0026gdpr_consent=\u0026f=i\u0026uid=\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3rLp2iUI9H6HzMrSzIszzOtweB%2B3nxsHUmvGJick3vD%2Bnu4vgBP1yagaw2yYW80yYKVJN78CPdZChqUaPZ2MLIgQvHVnudVXF6y%2B1LIyM8c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 983f0dfec8be49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1122,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prebid.a-mo.net/a/c","fqdn":"prebid.a-mo.net","domain":"a-mo.net","tld":"net"},"ip":{"addr":"163.5.194.35","port":443,"asn":60558,"as":"Phoenix Nap, LLC.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:24.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.a-mo.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 Aug 2025 05:58:12 GMT","end":"Wed, 26 Nov 2025 05:58:11 GMT"},"fingerprint":{"sha1":"46:30:17:D2:9C:C6:D3:FC:FF:17:43:1F:C7:14:FA:E7:1C:18:49:AB","sha256":"DD:21:EC:3E:CB:38:DD:A6:86:8F:0F:23:E9:EA:CC:A2:97:CD:68:B5:9E:76:40:4B:0D:0C:2D:E4:A6:10:F8:7D"}}},"request":{"raw":"POST /a/c HTTP/1.1\r\nHost: prebid.a-mo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.ca/\r\ncontent-type: text/plain\r\nContent-Length: 2299\r\nOrigin: https://money.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://money.ca\r\ncache-control: max-age=0, private, must-revalidate\r\ndate: Wed, 24 Sep 2025 03:04:23 GMT\r\nserver: envoy\r\nvary: origin, accept-encoding, Accept-Encoding\r\nx-nbr: 1\r\nx-envoy-upstream-service-time: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"measureadv.com/userIframe?gdpr=0\u0026gdpr_consent=\u0026p=3\u0026redirect=https://csync.smilewanted.com/set_partner_userid_get/videoheroes_us/{UID}","fqdn":"measureadv.com","domain":"measureadv.com","tld":"com"},"ip":{"addr":"204.62.14.130","port":443,"asn":46636,"as":"NATCOWEB","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://csync.smilewanted.com/","date":"2025-09-24T03:04:29.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"measureadv.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 21 Jul 2025 11:25:02 GMT","end":"Sun, 19 Oct 2025 11:25:02 GMT"},"fingerprint":{"sha1":"7E:05:8D:8A:84:BD:68:38:FF:D5:7E:2C:86:E1:46:15:2A:69:97:6A","sha256":"CB:B4:A7:C0:8B:DE:85:F0:5C:B2:71:CC:15:1A:C2:D9:DB:35:2C:01:F5:88:E1:B4:3E:07:87:95:CF:84:E7:1E"}}},"request":{"raw":"GET /userIframe?gdpr=0\u0026gdpr_consent=\u0026p=3\u0026redirect=https://csync.smilewanted.com/set_partner_userid_get/videoheroes_us/{UID} HTTP/1.1\r\nHost: measureadv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csync.smilewanted.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nSet-Cookie: new=1; path=/; expires=Wed, 24 Sep 2025 03:34:30 GMT; samesite=none; secure; httponly\nuid=4aca0c30-6d1f-56a2-8131-a46aec2baa38; path=/; expires=Fri, 24 Oct 2025 03:04:30 GMT; samesite=none; secure; httponly\r\nAccess-Control-Allow-Origin: https://csync.smilewanted.com\r\nAccess-Control-Allow-Credentials: true\r\nDate: Wed, 24 Sep 2025 03:04:30 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1089,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1089), with no line terminators","md5":"9e2a8f8b12af2f78c280b00a82bcf612","sha1":"578ea843c6aad259b2ffc6cbded553d63decc347","sha256":"67918ad71b8f58c8b8f38120b84b4ad71d0543baa07639f903e52a4a1e8299f4","sha512":"3b1b61bd83d8331d17e664f742499f85588c925189e328268c29bc0749ba784c1e5d07ff0486182825f2cbffbf1a6bf46aa47cd363f371e358dde54df2ebfca4","ssdeep":"","tlshash":"6011ddfbd18d086fe60269f5c4c0946c589ba59b7f9000889fbe207f31184dbc8b224c","first_seen":"2025-09-22T16:09:05.252883Z","last_seen":"2025-09-24T03:23:40.931912Z","times_seen":17,"resource_available":false,"data":null}},"time_used":2379,"timings":{"blocked":1168,"dns":0,"connect":0,"send":0,"wait":100,"receive":1,"ssl":1110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-24T03:04:19.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"money.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:25:31 GMT","end":"Mon, 24 Nov 2025 16:25:29 GMT"},"fingerprint":{"sha1":"A5:8A:11:35:E2:18:EF:C0:E0:2A:61:E3:CE:0F:31:56:42:55:F0:FC","sha256":"C0:5A:4D:B1:BE:57:72:CF:9E:D8:17:5E:01:A3:0D:F8:4C:C1:16:16:8B:65:8B:CA:3B:CC:32:C3:E9:15:71:EF"}}},"request":{"raw":"GET /investing/client-has-almost-5000-in-crypto-stolen-from-account HTTP/1.1\r\nHost: money.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://r.search.yahoo.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:21 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\nset-cookie: SSID_9H80=CQDn9B0AAAAAAAC0X9NohcaCGLRf02gBAAAAAAAAAAAAtF_TaADc7g; path=/; domain=.money.ca; expires=Thu, 24-Sep-2026 03:04:20 GMT\nSSSC_9H80=1013.G7553486227140429445.1|0.0; path=/; domain=.money.ca\nSSRT_9H80=tF_TaAABAA; path=/; domain=.money.ca; expires=Thu, 24-Sep-2026 03:04:20 GMT\nmoney_session=eyJpdiI6Inlqb015WmpKSkJhakh6SzMyN3VheFE9PSIsInZhbHVlIjoiT2pIcnNveGVobXNrS1FIUkZZZDd4ZWRNNkd0UTZPcnUveStFd09kNDY3T3ZtbEV0RXlLbXNadTFDS2Q0eC8wUGIyemFQaEdKVlVHb1MyRXNvb3NHYmN3ZkpwVy9ySHBBN1JCWEVmbkNraWhld3l1Rm5WTXd3VU53Zk52aHFEeGwiLCJtYWMiOiJmZDFlNmVjOGI0MDQxMmEzM2I4ZDAwMWNmMzY4Y2QyYjZlNzUyY2ZmODNiNjJhMDcxZjBhYzEwZTY3Yjk0ZjIwIiwidGFnIjoiIn0%3D; expires=Wed, 24 Sep 2025 05:04:20 GMT; Max-Age=7200; path=/; domain=money.ca; secure; httponly; samesite=lax\nXSRF-TOKEN=eyJpdiI6IkVvY3h6L1FXSXBwbXVzYm1qUTlieXc9PSIsInZhbHVlIjoiSUM1b01ISkcyT0xMWFBCZVFsQUxUSitIbnNYNVhpTkRQR2wvcWJlQkx0a09hQVhxRXgwT3NFcXpVOWkzdkR2QTRRdkVJYzBlbU10VlpHb1RpYWhFNUhuMDBLaEs4L3BTVTBFYmIvNzJmekR3bmsrSzZJQkhtbDUzUDEySFhOU3kiLCJtYWMiOiJhMjFkMzNlZWRjMWJiMjcwOTY0YzY0NzQ0OTI2YWFiYTIwZWI2MGY4MDlkMTA2MzVlMjc2YTRhYzdiMGM5ZjJlIiwidGFnIjoiIn0%3D; expires=Wed, 24 Sep 2025 05:04:20 GMT; Max-Age=7200; path=/; domain=money.ca; secure; samesite=lax\n__cf_bm=.U3YtFNih3m1w6FCrnkhu9tGuUHymVGomrTcpO.A40w-1758683061-1.0.1.1-HamIbNq.vNx7npxwSP0wqoYClS3Y3B42WO1UNnXOMO6bSheMocH.v_b7Q.nhvQVLVKnDsPdTSCXB4bPsND1B3RB70gSD0SuE2XX4dl_bXM0; path=/; expires=Wed, 24-Sep-25 03:34:21 GMT; domain=.money.ca; HttpOnly; Secure; SameSite=None\r\nrtss: 2-9-98\r\ncache-control: private, max-age=0, proxy-revalidate, no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nexpires: Thu, 27 Mar 2025 21:15:31 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 983f0dc52da11a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]},{"name":"Teads","description":"Teads is a technology provider that sells ads on publisher websites.","website":"https://www.teads.com","common_platform_enumeration":"","icon":"Teads.svg","categories":["Advertising"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}],"data":{"size":303813,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (62387)","md5":"50e9ba2f2d7fc06efb8a5fddec782372","sha1":"168304a14f896375e7be47ccc76efb9c5a5a3d98","sha256":"1dd98338afe5b20568b375c102b31c9ecd78b89ee845e486180a3a7e4cfe6a11","sha512":"b67f5efe42cc3377f6edfe7e7837c27442769a69b55199bf31736f0a88d71239d21f00b899caf936fbb5e289b37b46339aa52449eb17145f3fce40e0dcfec5ba","ssdeep":"3072:No+VLthQWZGllw55GW9VtjGS6hi5xi5RotjkhW:DglwfGEGi5xi58jkhW","tlshash":"6c542aa4b2fe6cbd022f7259f034b385e03fb737e69293d5b1be44955384c898913968","first_seen":"2025-09-24T03:05:07.368847Z","last_seen":"2025-09-24T03:05:07.368847Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1761,"timings":{"blocked":215,"dns":27,"connect":1,"send":0,"wait":1327,"receive":0,"ssl":189},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dn0qt3r0xannq.cloudfront.net/moneywise-nZYQAA5Sy3/money-longform/prebid-load.js","fqdn":"dn0qt3r0xannq.cloudfront.net","domain":"dn0qt3r0xannq.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.167.2.77","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:21.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /moneywise-nZYQAA5Sy3/money-longform/prebid-load.js HTTP/1.1\r\nHost: dn0qt3r0xannq.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 23 Sep 2025 22:18:51 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: rD2_AzmDzZz2TrQm8c59R1RK_DuwtjSx\r\nserver: AmazonS3\r\ndate: Wed, 24 Sep 2025 02:29:17 GMT\r\ncache-control: max-age=3600\r\netag: W/\"9ab004c9800c6cd59f566cc9410300cd\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ac3e1d7135d19671e1860c67a45b3f70.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: sTcWiIFmJbhQY_gorxWPjF5w-ggT9oB6Jv1y_wJQaKHuGREi8gqCEw==\r\nage: 2105\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":32787,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32594)","md5":"9ab004c9800c6cd59f566cc9410300cd","sha1":"70030d8f81905144fecb753542f0bc27c14b771b","sha256":"8e4ed5a4182c0df946aabba69c38df5a3f82650501fe058bbbffad6909c73181","sha512":"4e86aa549ebbd8f9c926a68080f8f636b780d1bcf00192e134e9af0e37123eac8067348317b2200878f5acb3167a729f49953ec2c800e50024e9282bd8612662","ssdeep":"768:c66iirXYyvbp+V5UcnaLSn6Fgbtn/hXQXu:T6iRyvbp9cnaL26g/qXu","tlshash":"11e209973765b06203eb90fde03f1107f271d669581e843cf188aceb656e64692a3f36","first_seen":"2025-09-24T03:05:07.370716Z","last_seen":"2025-09-24T03:05:07.370716Z","times_seen":1,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":46,"dns":15,"connect":6,"send":0,"wait":118,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.pmbmonetize.live/psync?t=s\u0026e=106\u0026cb=https%3A%2F%2Fmeasureadv.com%2FuserBackIframe%3Fuid%3D%25USER_ID%25%26p%3D1","fqdn":"sync.pmbmonetize.live","domain":"pmbmonetize.live","tld":"live"},"ip":{"addr":"173.208.96.74","port":443,"asn":396362,"as":"LEASEWEB-USA-NYC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://measureadv.com/userIframe?gdpr=0\u0026gdpr_consent=\u0026p=3\u0026redirect=https://csync.smilewanted.com/set_partner_userid_get/videoheroes/{UID}","date":"2025-09-24T03:04:30.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.pmbmonetize.live","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 23 Jul 2025 17:19:41 GMT","end":"Mon, 24 Aug 2026 17:19:40 GMT"},"fingerprint":{"sha1":"88:0F:37:29:17:54:F0:D8:65:53:84:0E:5F:D4:79:A1:08:B3:E6:83","sha256":"0F:DA:A6:F5:BB:D9:29:A5:04:34:45:65:4C:FF:B3:C5:85:E2:D7:44:D5:F0:96:BA:5D:DD:73:7A:D0:B8:A7:49"}}},"request":{"raw":"GET /psync?t=s\u0026e=106\u0026cb=https%3A%2F%2Fmeasureadv.com%2FuserBackIframe%3Fuid%3D%25USER_ID%25%26p%3D1 HTTP/1.1\r\nHost: sync.pmbmonetize.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://measureadv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Wed, 24 Sep 2025 03:04:30 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLocation: https://measureadv.com/userBackIframe?uid=612553.c8153598-755f-4d03-884e-72911e388c15\u0026p=1\r\nSet-Cookie: xeadiu=612553.c8153598-755f-4d03-884e-72911e388c15; Max-Age=31536000; Domain=.pmbmonetize.live; HttpOnly; Secure; SameSite=None\nxeadiu_106=none; Max-Age=86400; Domain=.pmbmonetize.live; HttpOnly; Secure; SameSite=None\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":716,"timings":{"blocked":308,"dns":3,"connect":89,"send":0,"wait":89,"receive":1,"ssl":223},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/__ssobj/static/campaignData.json?cb=1758683062796","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:22.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"money.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:25:31 GMT","end":"Mon, 24 Nov 2025 16:25:29 GMT"},"fingerprint":{"sha1":"A5:8A:11:35:E2:18:EF:C0:E0:2A:61:E3:CE:0F:31:56:42:55:F0:FC","sha256":"C0:5A:4D:B1:BE:57:72:CF:9E:D8:17:5E:01:A3:0D:F8:4C:C1:16:16:8B:65:8B:CA:3B:CC:32:C3:E9:15:71:EF"}}},"request":{"raw":"GET /__ssobj/static/campaignData.json?cb=1758683062796 HTTP/1.1\r\nHost: money.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account\r\nnewrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjE2ODQ3ODgiLCJhcCI6IjE1ODkxMDU2MTUiLCJpZCI6ImQ4MjY3M2QxMjdlNDQ4MTkiLCJ0ciI6IjgyZTA3NDQxYmQ1YTgwNzU5NjBiOGE1NzM4MmY1NzEyIiwidGkiOjE3NTg2ODMwNjI3OTZ9fQ==\r\ntraceparent: 00-82e07441bd5a8075960b8a57382f5712-d82673d127e44819-01\r\ntracestate: 1684788@nr=0-1-1684788-1589105615-d82673d127e44819----1758683062796\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SSID_9H80=CQDn9B0AAAAAAAC0X9NohcaCGLRf02gBAAAAAAAAAAAAtF_TaADc7g; SSSC_9H80=1013.G7553486227140429445.1|0.0; SSRT_9H80=tF_TaAABAA; money_session=eyJpdiI6ImxTWWgrS3RqYVRvUVFXWTMxSFJxeWc9PSIsInZhbHVlIjoiSTdQZkg3N1VtbUtUVHF2VUFJSWlnQ0tkN2tWUDJMSm5wVW1nWFZPL0hEbDFORGlRNXhndkc4WkFCQkpubmxhQnRTdVl0dkE0aHFDN2E1QlM0Rk1PdC9FSHVncHdqMUY4aHNiK0dSY3RiMHgyTEgrN2ZwZ1RlWnNscy8zT09KNlYiLCJtYWMiOiJmNTdlYTM2ZTQzOTRlMWYwYjg5NTBiYmJjNWM2MzZlY2E0OWIxZGM5ZTRmZGExM2Q5ZTRiODFhMTY4YWEzMjRiIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6ImNLQ0dNOHBFamlZbnI1QUV5Zzg2bUE9PSIsInZhbHVlIjoiMWtyRmhBTFkwdkduQlNwTStueldJY1ZWb0g5Ni9oaEhZSmIwWDVPS3FHKzR6T1hMUHhvUzFHNjE3WlBSTzBMYmNQQkt5N01mMkJFZjZTYXlPTjVxY3czd0prSThoNDNFYVRpNlJ5aXNBbGhEcUxWNEt4Z2UwMlpqRnVodW5UcFAiLCJtYWMiOiIyN2MxODA3Nzc5MWE3NmVhM2RlNjgwOTFjZWEyN2MzNDFjYWNlZWNlMmY2MWFhZTIzOTBjY2IyNGE0MDkzNjE2IiwidGFnIjoiIn0%3D; __cf_bm=.U3YtFNih3m1w6FCrnkhu9tGuUHymVGomrTcpO.A40w-1758683061-1.0.1.1-HamIbNq.vNx7npxwSP0wqoYClS3Y3B42WO1UNnXOMO6bSheMocH.v_b7Q.nhvQVLVKnDsPdTSCXB4bPsND1B3RB70gSD0SuE2XX4dl_bXM0; utm_source=direct; user_meta=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22null%22%2C%22utm_campaign%22%3A%22null%22%2C%22utm_content%22%3A%22null%22%2C%22utm_term%22%3A%22null%22%2C%22device_category%22%3A%22unknown%22%2C%22geo%22%3A%7B%22query%22%3A%2291.90.42.154%22%2C%22country%22%3A%22NO%22%2C%22regionName%22%3A%22Oslo%22%2C%22timezone%22%3A%22Europe%2FOslo%22%2C%22region%22%3A%2203%22%2C%22city%22%3A%22Oslo%22%2C%22zip%22%3A%220001%22%2C%22metro-code%22%3Anull%2C%22lon%22%3A%2210.74609%22%2C%22lat%22%3A%2259.91273%22%2C%22continent%22%3A%22EU%22%7D%7D; scottie_user_attributes=%7B%22nav%22%3A%7B%22uEntryPath%22%3A%22%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account%22%7D%2C%22user%22%3A%7B%22email%22%3Anull%2C%22first_name%22%3Anull%2C%22last_name%22%3Anull%7D%7D; scottie_session_attributes=%7B%22nav%22%3A%7B%22s_referrer%22%3A%22r.search.yahoo.com%22%2C%22page_count%22%3A1%2C%22sEntryPath%22%3A%22%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account%22%7D%2C%22ay_imp_s%22%3Afalse%2C%22created_at%22%3A1758683062%2C%22s_article_id%22%3A85597%2C%22nav_attrs%22%3A%7B%22siteSpectVariant%22%3Anull%2C%22siteSpectExperienceID%22%3Anull%2C%22siteSpectCampaignName%22%3Anull%7D%2C%22utm%22%3A%7B%22utm_source%22%3Anull%2C%22utm_medium%22%3Anull%2C%22utm_campaign%22%3Anull%2C%22utm_content%22%3Anull%2C%22utm_term%22%3Anull%7D%2C%22reporting_channel%22%3A%22organic_search%22%2C%22s_entry_channel%22%3A%22organic%20news%22%2C%22member_status%22%3A%22none%22%7D; suid=06864235-3ff4-4481-9403-3a43c185cfd3; scottie_session=c0fb5510-9f43-4eee-b60a-f30d4dc24e49; _v_id_l={%22_v_id%22:%2236088682079960021758683062540%22%2C%22_la%22:1758683062540}\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Wed, 24 Sep 2025 03:04:22 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-encoding: gzip\r\nsbss: 1\r\nrtss: 2-9-29\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 983f0dd68dc61a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"ASCII text, with no line terminators","md5":"9d1ead73e678fa2f51a70a933b0bf017","sha1":"d205cbd6783332a212c5ae92d73c77178c2d2f28","sha256":"0019dfc4b32d63c1392aa264aed2253c1e0c2fb09216f8e2cc269bbfb8bb49b5","sha512":"935b3d516e996f6d25948ba8a54c1b7f70f7f0e3f517e36481fdf0196c2c5cfc2841f86e891f3df9517746b7fb605db47cdded1b8ff78d9482ddaa621db43a34","ssdeep":"","tlshash":"a250000c0003c3cc0000003030c0000000000300300000300000c000000000000c000c","first_seen":"2023-03-08T03:03:03Z","last_seen":"2026-04-03T17:27:06.270675Z","times_seen":69130,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtrack.kueezrtb.com/dye?ac=2\u0026acm=G3L\u0026uid=be5cdac8e005e820\u0026sid=34ec2ed1ee696ea0\u0026pvi=89bcafefc05ee524\u0026h=money.ca\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=81\u0026cc=NO\u0026ig=0\u0026uri=%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026furl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026sr=1280x1024\u0026type=latest:br\u0026_=1758683063798\u0026bidder=kueezrtb\u0026at=display\u0026v=1\u0026acid=64dcd6552888555c21f4eb75","fqdn":"gtrack.kueezrtb.com","domain":"kueezrtb.com","tld":"com"},"ip":{"addr":"172.66.162.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kueezrtb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 31 Jul 2025 04:22:42 GMT","end":"Wed, 29 Oct 2025 05:22:40 GMT"},"fingerprint":{"sha1":"72:9A:34:A6:6E:6C:F2:12:4C:CD:21:43:69:9D:B4:AE:A6:E2:BD:C1","sha256":"74:FD:00:85:48:5B:6D:03:90:97:6C:48:C6:0B:F9:7E:AB:0F:30:71:82:29:09:7B:3D:3A:D7:32:40:B2:4D:4D"}}},"request":{"raw":"GET /dye?ac=2\u0026acm=G3L\u0026uid=be5cdac8e005e820\u0026sid=34ec2ed1ee696ea0\u0026pvi=89bcafefc05ee524\u0026h=money.ca\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=81\u0026cc=NO\u0026ig=0\u0026uri=%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026furl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026sr=1280x1024\u0026type=latest:br\u0026_=1758683063798\u0026bidder=kueezrtb\u0026at=display\u0026v=1\u0026acid=64dcd6552888555c21f4eb75 HTTP/1.1\r\nHost: gtrack.kueezrtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nCookie: kuid=b4c606a6d5e7c1f9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 24 Sep 2025 03:04:23 GMT\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 983f0ddcdbe78be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/__ssobj/ssdomvar.js+core.js+generic-adapter.js","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:22.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"money.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:25:31 GMT","end":"Mon, 24 Nov 2025 16:25:29 GMT"},"fingerprint":{"sha1":"A5:8A:11:35:E2:18:EF:C0:E0:2A:61:E3:CE:0F:31:56:42:55:F0:FC","sha256":"C0:5A:4D:B1:BE:57:72:CF:9E:D8:17:5E:01:A3:0D:F8:4C:C1:16:16:8B:65:8B:CA:3B:CC:32:C3:E9:15:71:EF"}}},"request":{"raw":"GET /__ssobj/ssdomvar.js+core.js+generic-adapter.js HTTP/1.1\r\nHost: money.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account\r\nCookie: SSID_9H80=CQDn9B0AAAAAAAC0X9NohcaCGLRf02gBAAAAAAAAAAAAtF_TaADc7g; SSSC_9H80=1013.G7553486227140429445.1|0.0; SSRT_9H80=tF_TaAABAA; money_session=eyJpdiI6Inlqb015WmpKSkJhakh6SzMyN3VheFE9PSIsInZhbHVlIjoiT2pIcnNveGVobXNrS1FIUkZZZDd4ZWRNNkd0UTZPcnUveStFd09kNDY3T3ZtbEV0RXlLbXNadTFDS2Q0eC8wUGIyemFQaEdKVlVHb1MyRXNvb3NHYmN3ZkpwVy9ySHBBN1JCWEVmbkNraWhld3l1Rm5WTXd3VU53Zk52aHFEeGwiLCJtYWMiOiJmZDFlNmVjOGI0MDQxMmEzM2I4ZDAwMWNmMzY4Y2QyYjZlNzUyY2ZmODNiNjJhMDcxZjBhYzEwZTY3Yjk0ZjIwIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkVvY3h6L1FXSXBwbXVzYm1qUTlieXc9PSIsInZhbHVlIjoiSUM1b01ISkcyT0xMWFBCZVFsQUxUSitIbnNYNVhpTkRQR2wvcWJlQkx0a09hQVhxRXgwT3NFcXpVOWkzdkR2QTRRdkVJYzBlbU10VlpHb1RpYWhFNUhuMDBLaEs4L3BTVTBFYmIvNzJmekR3bmsrSzZJQkhtbDUzUDEySFhOU3kiLCJtYWMiOiJhMjFkMzNlZWRjMWJiMjcwOTY0YzY0NzQ0OTI2YWFiYTIwZWI2MGY4MDlkMTA2MzVlMjc2YTRhYzdiMGM5ZjJlIiwidGFnIjoiIn0%3D; __cf_bm=.U3YtFNih3m1w6FCrnkhu9tGuUHymVGomrTcpO.A40w-1758683061-1.0.1.1-HamIbNq.vNx7npxwSP0wqoYClS3Y3B42WO1UNnXOMO6bSheMocH.v_b7Q.nhvQVLVKnDsPdTSCXB4bPsND1B3RB70gSD0SuE2XX4dl_bXM0; utm_source=direct; user_meta=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22null%22%2C%22utm_campaign%22%3A%22null%22%2C%22utm_content%22%3A%22null%22%2C%22utm_term%22%3A%22null%22%2C%22device_category%22%3A%22unknown%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:22 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\nsbss: 1\r\nrtss: 2-9-29\r\nlast-modified: Sun, 14 Sep 2025 00:00:00 GMT\r\nexpires: Thu, 25 Sep 2025 03:04:22 GMT\r\ncache-control: max-age=86400\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 983f0dd1a9a41a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19958,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11184)","md5":"46ed7e61ee232bd537ef2e349b1df36f","sha1":"74ba2d4aedb3a6a789a3d15dd5b346c506fa51b5","sha256":"b54592549433cee46c1a42a830a71bd04e105d8f16dbe18c760c22677f095da7","sha512":"5613e9e91a23ee398babb6891ff6f8e82c05e404dfaa412256d65b8ba2bf04824ba3adaef20ba8ae64a76b46fd1f47b0955ecf141ce3f023bbc47adde9e8ede5","ssdeep":"384:Kb29RIeIWdQ84dVSSygAm5MHiJD7Vk+V40Wx0h/MMmrMK7jLVaB:Kb29RhHk/6D+MHAD7VhK0Dh/M1TV0","tlshash":"b092c4e831c171379bdb20b2d46f620ab13975e31e8fc050e564e8a178bc92e4e77e59","first_seen":"2025-09-20T03:59:22.657908Z","last_seen":"2025-09-30T17:15:10.376229Z","times_seen":3,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otrack.kueezrtb.com/dye?ac=2\u0026acm=G3L\u0026uid=be5cdac8e005e820\u0026sid=34ec2ed1ee696ea0\u0026pvi=89bcafefc05ee524\u0026h=money.ca\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=81\u0026cc=NO\u0026ig=0\u0026uri=%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026furl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026sr=1280x1024\u0026type=latest:br\u0026_=1758683063864\u0026bidder=kueezrtb\u0026at=display\u0026v=1\u0026acid=64dcd6552888555c21f4eb75","fqdn":"otrack.kueezrtb.com","domain":"kueezrtb.com","tld":"com"},"ip":{"addr":"172.66.162.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kueezrtb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 31 Jul 2025 04:22:42 GMT","end":"Wed, 29 Oct 2025 05:22:40 GMT"},"fingerprint":{"sha1":"72:9A:34:A6:6E:6C:F2:12:4C:CD:21:43:69:9D:B4:AE:A6:E2:BD:C1","sha256":"74:FD:00:85:48:5B:6D:03:90:97:6C:48:C6:0B:F9:7E:AB:0F:30:71:82:29:09:7B:3D:3A:D7:32:40:B2:4D:4D"}}},"request":{"raw":"GET /dye?ac=2\u0026acm=G3L\u0026uid=be5cdac8e005e820\u0026sid=34ec2ed1ee696ea0\u0026pvi=89bcafefc05ee524\u0026h=money.ca\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=81\u0026cc=NO\u0026ig=0\u0026uri=%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026furl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026sr=1280x1024\u0026type=latest:br\u0026_=1758683063864\u0026bidder=kueezrtb\u0026at=display\u0026v=1\u0026acid=64dcd6552888555c21f4eb75 HTTP/1.1\r\nHost: otrack.kueezrtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nCookie: kuid=b4c606a6d5e7c1f9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 24 Sep 2025 03:04:24 GMT\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 983f0dddcc358be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moneywise.com/scottie/api/cdp/v1/event","fqdn":"moneywise.com","domain":"moneywise.com","tld":"com"},"ip":{"addr":"172.64.148.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:22.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moneywise.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 01:28:38 GMT","end":"Tue, 16 Dec 2025 02:28:35 GMT"},"fingerprint":{"sha1":"B0:B3:E7:F1:98:EF:BF:5D:72:AB:98:74:99:7D:6D:8A:E4:D4:3D:DC","sha256":"A3:B7:F8:A0:11:7B:51:4E:E7:3D:92:FB:83:16:6B:D4:38:78:29:68:C8:8F:6F:B2:72:DC:37:FB:B9:5B:5F:C0"}}},"request":{"raw":"POST /scottie/api/cdp/v1/event HTTP/1.1\r\nHost: moneywise.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.ca/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2248\r\nOrigin: https://money.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:22 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 25\r\ncf-ray: 983f0dd439ef4c11-OSL\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"7a75de56b53da70ca0778f073c0e2654","sha1":"a0e41cc7324217fc426731455fb2f5acdcbbae56","sha256":"34d944296faefaa4520083072d164ef98f63626375fd4e42674768b90476080d","sha512":"f523644a088454100ff2155772dd8364f90e8193b3b492b4915298d4c5385ef0ee045ebea2b64ed61351689cdf103431462ab97c82e6ca37520f3c8fd7e0b1d4","ssdeep":"","tlshash":"7b70000200200cc002088308e200080820e02ac320202200a08b8c008e0e02e32c2080","first_seen":"2025-07-09T06:51:28.018127Z","last_seen":"2025-09-24T03:05:07.374648Z","times_seen":3,"resource_available":false,"data":null}},"time_used":597,"timings":{"blocked":12,"dns":4,"connect":1,"send":0,"wait":561,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"snippet.maze.co/maze-universal-loader.js?apiKey=39c04b56-367f-42a0-b085-6d5c1e803145","fqdn":"snippet.maze.co","domain":"maze.co","tld":"co"},"ip":{"addr":"3.167.2.70","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:22.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maze.co","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Thu, 06 Feb 2025 00:00:00 GMT","end":"Sun, 08 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B4:BE:FD:47:42:9C:36:0C:12:50:AC:5B:8A:9C:04:80:96:8A:1C:C7","sha256":"DF:4F:DD:32:A3:BF:F7:D1:76:97:9F:0B:DA:9A:2A:02:D7:9E:69:0F:FD:5A:30:88:B1:5B:31:3D:95:D5:F7:15"}}},"request":{"raw":"GET /maze-universal-loader.js?apiKey=39c04b56-367f-42a0-b085-6d5c1e803145 HTTP/1.1\r\nHost: snippet.maze.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 23 Sep 2025 18:04:55 GMT\r\nContent-Encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: vxgpZnJdnmHydP8mWWwNB2VGifBMG9rJ\r\nServer: AmazonS3\r\nDate: Wed, 24 Sep 2025 02:55:02 GMT\r\nCache-Control: max-age=43200\r\nETag: W/\"a0d79b120cfff24a3dcc11ca9f39b476\"\r\nVary: accept-encoding\r\nX-Cache: Hit from cloudfront\r\nVia: 1.1 50a19afbefe1a01ca6a87078a2b119c2.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: OSL50-P2\r\nAlt-Svc: h3=\":443\"; ma=86400\r\nX-Amz-Cf-Id: jQyYaFTGUVyWnoWUN1ylBi-OppLcshAnd6Mf5WEUdHjOEykW70XUcw==\r\nAge: 561\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1783,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1782)","md5":"a0d79b120cfff24a3dcc11ca9f39b476","sha1":"346f25883365e9d7b2959321977841b9927d6415","sha256":"69e69a893fab0769c15b66826f5a3b99fe672c9fa35f69dbb7efb5657c34b643","sha512":"c74dd4a2dc23378e325155af97cf3e5539a459b93820d1554b534a195e9dae3947df72030116f662728657d80d40d77c5ce89b2d5a8b5f98ac885e987cb9905e","ssdeep":"","tlshash":"1631750ae871e93a1bce4a2cb0f57018e3a710113e1ca452e2d5dc595bbcddc0172f4a","first_seen":"2025-09-23T19:07:56.294603Z","last_seen":"2025-09-24T13:09:16.674709Z","times_seen":8,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":25,"dns":15,"connect":1,"send":0,"wait":1,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prism.app-us1.com/?a=612215866\u0026u=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026r=https%3A%2F%2Fr.search.yahoo.com%2F","fqdn":"prism.app-us1.com","domain":"app-us1.com","tld":"com"},"ip":{"addr":"104.18.128.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prism.app-us1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 08:51:24 GMT","end":"Sat, 22 Nov 2025 09:51:20 GMT"},"fingerprint":{"sha1":"9B:87:75:55:24:2C:4D:F8:B3:82:DE:A0:C2:24:16:1C:9D:7A:55:B5","sha256":"4F:6D:CF:B5:D3:D2:BA:BF:EC:02:7F:B1:19:A8:F7:6D:8D:0F:77:A1:A9:65:24:5E:7D:A0:C7:A6:8D:03:76:7E"}}},"request":{"raw":"GET /?a=612215866\u0026u=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026r=https%3A%2F%2Fr.search.yahoo.com%2F HTTP/1.1\r\nHost: prism.app-us1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:23 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 0\r\ncf-ray: 983f0ddb4803569d-OSL\r\ncache-control: no-cache, private\r\nset-cookie: prism_612215866=b17b3cf2-b2eb-4038-9f58-b221505b2c3e; expires=Fri, 24 Oct 2025 03:04:23 GMT; Max-Age=2592000; path=/; secure; httponly; samesite=none\r\nx-powered-by: PHP/8.1.33\r\nx-envoy-upstream-service-time: 16\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":527,"timings":{"blocked":62,"dns":1,"connect":1,"send":0,"wait":400,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csync.loopme.me/?pubid=11468\u0026gdpr=0\u0026gdpr_consent=\u0026redirect=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Floopme%2F{viewer_token}","fqdn":"csync.loopme.me","domain":"loopme.me","tld":"me"},"ip":{"addr":"34.1.233.77","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://csync.smilewanted.com/","date":"2025-09-24T03:04:29.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loopme.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 09:50:38 GMT","end":"Mon, 10 Nov 2025 09:50:37 GMT"},"fingerprint":{"sha1":"48:1D:D2:B0:59:09:15:9C:57:53:8F:1B:84:95:37:19:E7:2A:BC:2D","sha256":"9A:00:74:BF:45:7C:9B:AF:A0:2D:01:61:40:BC:CA:79:9C:04:06:7E:4E:60:9A:3D:92:C5:9C:E5:93:06:D2:63"}}},"request":{"raw":"GET /?pubid=11468\u0026gdpr=0\u0026gdpr_consent=\u0026redirect=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Floopme%2F{viewer_token} HTTP/1.1\r\nHost: csync.loopme.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csync.smilewanted.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\nset-cookie: viewer_token=231a0279-0d94-4b9e-bbfd-37fa78ec0a37; Max-Age=7776000; Expires=Tue, 23 Dec 2025 03:04:29 GMT; Domain=csync.loopme.me; Path=/; Secure; HttpOnly; SameSite=None\r\nlocation: https://csync.smilewanted.com/set_partner_userid_get/loopme/231a0279-0d94-4b9e-bbfd-37fa78ec0a37?gdpr_consent=null\u0026gdpr=0\r\ncontent-length: 0\r\ndate: Wed, 24 Sep 2025 03:04:29 GMT\r\nserver: _\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":50,"dns":2,"connect":19,"send":0,"wait":21,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.wisepublishing.com/scottie/production/scottie.js","fqdn":"assets.wisepublishing.com","domain":"wisepublishing.com","tld":"com"},"ip":{"addr":"172.64.147.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:21.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wisepublishing.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 11:30:01 GMT","end":"Sat, 13 Dec 2025 11:51:17 GMT"},"fingerprint":{"sha1":"68:0A:D1:E7:10:82:93:4A:89:02:1F:65:54:FB:65:B3:12:C0:D8:D4","sha256":"38:93:5B:D3:39:DE:62:0E:8B:A6:E5:4C:45:1D:34:F1:56:FA:09:E7:B1:AF:F7:66:BC:0A:B9:69:9A:59:63:8F"}}},"request":{"raw":"GET /scottie/production/scottie.js HTTP/1.1\r\nHost: assets.wisepublishing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:21 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\nlast-modified: Wed, 23 Jul 2025 14:20:10 GMT\r\netag: W/\"8f91e2c9834ac14a94ce39040b25a9b0\"\r\nx-amz-server-side-encryption: AES256\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 63da0bbf8b25d5b1660d6c41698bd6bc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: HEL51-P2\r\nx-amz-cf-id: 2z6w0lrJr1SLy50j__J5_C9EorzzLp5WULqDIyz5pdUlH202yo_e6g==\r\ncf-cache-status: HIT\r\nage: 4683\r\nexpires: Wed, 24 Sep 2025 07:04:21 GMT\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=LMyUickRe2CaOSJLQrTjCnsmgjmyzq4CCOD18uq.M1o-1758683061-1.0.1.1-F.tnozpjoUMicuhbxcooyocB_tHbV5yUkbQuSAkPpdK3JDi6GAS3_fe9OWNy8r.oZBeKJxc.aSkZwbYlT.Ao1CX88q4R9iu8g_NeAnA9CJ8; path=/; expires=Wed, 24-Sep-25 03:34:21 GMT; domain=.wisepublishing.com; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 983f0dcf98aa56a8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43106,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (43106), with no line terminators","md5":"8f91e2c9834ac14a94ce39040b25a9b0","sha1":"a4ca0678abe220138b6b7910f0080a8c51c0dd61","sha256":"907cf715b649990a9064becdda95324a88d0758a38d8055ef2f8f3a1218b8c59","sha512":"3ff57363b84b626d6f86f815504cb5caacda691e6256e150751db51fa6d993d0b106e12591a4ecd2d8b3ff23e155bab8d074e20fceaf2db87bab4f543f8d135d","ssdeep":"768:4P6BlND4jdCz7GuuZYxdpTC17S7zbt1ZhuRA7/nexmdDbB5VCbWxhDrDiAW:4PclNOYz711aS3X7/5EW/rDjW","tlshash":"741393d8b6d6f06243a3b061803f150bf37a2d19a44e8554e265d9e6bc7c18ed233fb9","first_seen":"2025-09-20T03:59:22.69803Z","last_seen":"2025-09-24T03:05:07.376146Z","times_seen":2,"resource_available":true,"data":null}},"time_used":471,"timings":{"blocked":212,"dns":5,"connect":1,"send":0,"wait":18,"receive":0,"ssl":232},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/fonts/KonnectMedium.woff","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:21.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"money.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:25:31 GMT","end":"Mon, 24 Nov 2025 16:25:29 GMT"},"fingerprint":{"sha1":"A5:8A:11:35:E2:18:EF:C0:E0:2A:61:E3:CE:0F:31:56:42:55:F0:FC","sha256":"C0:5A:4D:B1:BE:57:72:CF:9E:D8:17:5E:01:A3:0D:F8:4C:C1:16:16:8B:65:8B:CA:3B:CC:32:C3:E9:15:71:EF"}}},"request":{"raw":"GET /fonts/KonnectMedium.woff HTTP/1.1\r\nHost: money.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/css/moneywise_organic.css?cb=432\r\nCookie: SSID_9H80=CQDn9B0AAAAAAAC0X9NohcaCGLRf02gBAAAAAAAAAAAAtF_TaADc7g; SSSC_9H80=1013.G7553486227140429445.1|0.0; SSRT_9H80=tF_TaAABAA; money_session=eyJpdiI6Inlqb015WmpKSkJhakh6SzMyN3VheFE9PSIsInZhbHVlIjoiT2pIcnNveGVobXNrS1FIUkZZZDd4ZWRNNkd0UTZPcnUveStFd09kNDY3T3ZtbEV0RXlLbXNadTFDS2Q0eC8wUGIyemFQaEdKVlVHb1MyRXNvb3NHYmN3ZkpwVy9ySHBBN1JCWEVmbkNraWhld3l1Rm5WTXd3VU53Zk52aHFEeGwiLCJtYWMiOiJmZDFlNmVjOGI0MDQxMmEzM2I4ZDAwMWNmMzY4Y2QyYjZlNzUyY2ZmODNiNjJhMDcxZjBhYzEwZTY3Yjk0ZjIwIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkVvY3h6L1FXSXBwbXVzYm1qUTlieXc9PSIsInZhbHVlIjoiSUM1b01ISkcyT0xMWFBCZVFsQUxUSitIbnNYNVhpTkRQR2wvcWJlQkx0a09hQVhxRXgwT3NFcXpVOWkzdkR2QTRRdkVJYzBlbU10VlpHb1RpYWhFNUhuMDBLaEs4L3BTVTBFYmIvNzJmekR3bmsrSzZJQkhtbDUzUDEySFhOU3kiLCJtYWMiOiJhMjFkMzNlZWRjMWJiMjcwOTY0YzY0NzQ0OTI2YWFiYTIwZWI2MGY4MDlkMTA2MzVlMjc2YTRhYzdiMGM5ZjJlIiwidGFnIjoiIn0%3D; __cf_bm=.U3YtFNih3m1w6FCrnkhu9tGuUHymVGomrTcpO.A40w-1758683061-1.0.1.1-HamIbNq.vNx7npxwSP0wqoYClS3Y3B42WO1UNnXOMO6bSheMocH.v_b7Q.nhvQVLVKnDsPdTSCXB4bPsND1B3RB70gSD0SuE2XX4dl_bXM0; utm_source=direct; user_meta=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22null%22%2C%22utm_campaign%22%3A%22null%22%2C%22utm_content%22%3A%22null%22%2C%22utm_term%22%3A%22null%22%2C%22device_category%22%3A%22unknown%22%7D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:22 GMT\r\ncontent-type: font/woff\r\ncontent-length: 57788\r\ncf-ray: 983f0dd098451a30-OSL\r\nlast-modified: Tue, 23 Sep 2025 10:33:18 GMT\r\netag: \"68d2776e-e1bc\"\r\ncf-cache-status: REVALIDATED\r\nexpires: Wed, 24 Sep 2025 07:04:22 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57788,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 57788, version 1.0","md5":"6098b8bb8b6c8a0f4c463f5e6adf0b30","sha1":"1bd048aeb05918b31d69f6595c56fe59622c5f45","sha256":"58ed8ebbe7f2182ded0c837b7d1a751c438b9a078c86acb559523b00ca3770aa","sha512":"1fc3ac5c4dbac8021762107a0c803b67627e3f36a8e93082c5d37be11fc198fa9ad845d948d13a828cdd026abb578afb0c8730cf9f30b1e4cb599caf2563659e","ssdeep":"1536:wl6DzZq93vIIrEYbMKzEhn80yMx8GLLtFlTsmUqynpbbv:wcfI9/DrErhhTHxxLLtfbDSpX","tlshash":"b843026db9867342f12b7f6c18a18bd1567b2af7d232f2d3d84f64182c6229b2c445a4","first_seen":"2025-09-20T03:59:22.664331Z","last_seen":"2025-09-24T03:05:07.377572Z","times_seen":2,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":395,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.assertcom.de/error","fqdn":"api.assertcom.de","domain":"assertcom.de","tld":"de"},"ip":{"addr":"65.21.238.88","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:24.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.assertcom.de","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 Aug 2025 05:58:05 GMT","end":"Thu, 06 Nov 2025 05:58:04 GMT"},"fingerprint":{"sha1":"7E:C0:DC:43:CD:F3:4D:61:E2:4F:C3:9E:56:90:70:FA:B9:EE:DD:A9","sha256":"37:40:F5:C1:3C:7D:6E:5B:F7:81:80:A9:AB:90:5F:45:26:48:73:43:8B:B2:BA:3D:75:A5:BF:82:52:74:02:55"}}},"request":{"raw":"POST /error HTTP/1.1\r\nHost: api.assertcom.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Length: 10846\r\nOrigin: https://money.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 24 Sep 2025 03:04:24 GMT\r\ncontent-type: text/plain\r\ncontent-length: 0\r\ncache-control: no-store, no-cache, private, no-transform\r\nexpires: Thu, 01 Jan 1980 00:00:01 GMT\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: https://money.ca\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":71,"dns":10,"connect":27,"send":0,"wait":55,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"measureadv.com/userBackIframe?uid=612553.69f22179-4627-436b-ab00-a36c62a12a2d\u0026p=1","fqdn":"measureadv.com","domain":"measureadv.com","tld":"com"},"ip":{"addr":"204.62.14.130","port":443,"asn":46636,"as":"NATCOWEB","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://measureadv.com/userIframe?gdpr=0\u0026gdpr_consent=\u0026p=3\u0026redirect=https://csync.smilewanted.com/set_partner_userid_get/videoheroes_us/{UID}","date":"2025-09-24T03:04:31.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"measureadv.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 21 Jul 2025 11:25:02 GMT","end":"Sun, 19 Oct 2025 11:25:02 GMT"},"fingerprint":{"sha1":"7E:05:8D:8A:84:BD:68:38:FF:D5:7E:2C:86:E1:46:15:2A:69:97:6A","sha256":"CB:B4:A7:C0:8B:DE:85:F0:5C:B2:71:CC:15:1A:C2:D9:DB:35:2C:01:F5:88:E1:B4:3E:07:87:95:CF:84:E7:1E"}}},"request":{"raw":"GET /userBackIframe?uid=612553.69f22179-4627-436b-ab00-a36c62a12a2d\u0026p=1 HTTP/1.1\r\nHost: measureadv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://measureadv.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: new=1; uid=4aca0c30-6d1f-56a2-8131-a46aec2baa38\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nSet-Cookie: ids={\"175\":\"612553.69f22179-4627-436b-ab00-a36c62a12a2d\"}; path=/; expires=Wed, 24 Sep 2025 03:14:31 GMT; samesite=none; secure; httponly\r\nAccess-Control-Allow-Origin: https://measureadv.com\r\nAccess-Control-Allow-Credentials: true\r\nDate: Wed, 24 Sep 2025 03:04:31 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"media1.money.ca/cdn-cgi/image/fit=cover,g=center,width=32,height=32,f=auto,quality=90/avatars/amy-legate-wolfe-1649359466.png","fqdn":"media1.money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:21.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"money.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:25:31 GMT","end":"Mon, 24 Nov 2025 16:25:29 GMT"},"fingerprint":{"sha1":"A5:8A:11:35:E2:18:EF:C0:E0:2A:61:E3:CE:0F:31:56:42:55:F0:FC","sha256":"C0:5A:4D:B1:BE:57:72:CF:9E:D8:17:5E:01:A3:0D:F8:4C:C1:16:16:8B:65:8B:CA:3B:CC:32:C3:E9:15:71:EF"}}},"request":{"raw":"GET /cdn-cgi/image/fit=cover,g=center,width=32,height=32,f=auto,quality=90/avatars/amy-legate-wolfe-1649359466.png HTTP/1.1\r\nHost: media1.money.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nCookie: SSID_9H80=CQDn9B0AAAAAAAC0X9NohcaCGLRf02gBAAAAAAAAAAAAtF_TaADc7g; SSSC_9H80=1013.G7553486227140429445.1|0.0; SSRT_9H80=tF_TaAABAA; money_session=eyJpdiI6Inlqb015WmpKSkJhakh6SzMyN3VheFE9PSIsInZhbHVlIjoiT2pIcnNveGVobXNrS1FIUkZZZDd4ZWRNNkd0UTZPcnUveStFd09kNDY3T3ZtbEV0RXlLbXNadTFDS2Q0eC8wUGIyemFQaEdKVlVHb1MyRXNvb3NHYmN3ZkpwVy9ySHBBN1JCWEVmbkNraWhld3l1Rm5WTXd3VU53Zk52aHFEeGwiLCJtYWMiOiJmZDFlNmVjOGI0MDQxMmEzM2I4ZDAwMWNmMzY4Y2QyYjZlNzUyY2ZmODNiNjJhMDcxZjBhYzEwZTY3Yjk0ZjIwIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkVvY3h6L1FXSXBwbXVzYm1qUTlieXc9PSIsInZhbHVlIjoiSUM1b01ISkcyT0xMWFBCZVFsQUxUSitIbnNYNVhpTkRQR2wvcWJlQkx0a09hQVhxRXgwT3NFcXpVOWkzdkR2QTRRdkVJYzBlbU10VlpHb1RpYWhFNUhuMDBLaEs4L3BTVTBFYmIvNzJmekR3bmsrSzZJQkhtbDUzUDEySFhOU3kiLCJtYWMiOiJhMjFkMzNlZWRjMWJiMjcwOTY0YzY0NzQ0OTI2YWFiYTIwZWI2MGY4MDlkMTA2MzVlMjc2YTRhYzdiMGM5ZjJlIiwidGFnIjoiIn0%3D; __cf_bm=.U3YtFNih3m1w6FCrnkhu9tGuUHymVGomrTcpO.A40w-1758683061-1.0.1.1-HamIbNq.vNx7npxwSP0wqoYClS3Y3B42WO1UNnXOMO6bSheMocH.v_b7Q.nhvQVLVKnDsPdTSCXB4bPsND1B3RB70gSD0SuE2XX4dl_bXM0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:21 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1332\r\nserver: cloudflare\r\ncf-ray: 983f0dce5e5f1a30-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2678400\r\netag: \"cfkqD7JBWrqBC-WDnlcaIMTiL7iLIZ8BWtr1lXIaVxDQ:1787f9ddf1db87f4ecfbb237133b5e42\"\r\nlast-modified: Thu, 22 Jun 2023 21:20:59 GMT\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept, Accept-Encoding\r\nvia: 1.1 5b21c56dde1a436b4b6766d2406627d2.cloudfront.net (CloudFront)\r\ncf-bgj: imgq:90,h2pri\r\ncf-resized: internal=ok/h q=0 n=207+6 c=2+3 v=2025.9.1 l=1332 f=false c2=0 wv=2025.8.1\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1332,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"277a974f32731e205cb620ccc2aa1cca","sha1":"a4da0515392db92f78f3691158f3874bc60721ca","sha256":"0cfc3e51caada1e3819a0aaa0073e55b7a3704786d241987ab24fc3fba7b6976","sha512":"ce44d48964d0de3ff909e563be440f04c9ac5fc8742c7c5dc936f137657e149ac3ef80eeb79976293fd4c0e4b69cf59d2f0f5db030598a5b395686f97f2aa110","ssdeep":"","tlshash":"1c21ea1453ca9e14e00d1b30c44c465e229afacc903b6aa9cc43f92c0a77b96dc20f48","first_seen":"2025-09-24T03:05:07.382308Z","last_seen":"2025-09-24T03:05:07.382308Z","times_seen":1,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.clean.gg/1a","fqdn":"i.clean.gg","domain":"clean.gg","tld":"gg"},"ip":{"addr":"34.95.69.49","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:22.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"i.clean.gg","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 14 Aug 2025 06:56:30 GMT","end":"Wed, 12 Nov 2025 07:50:44 GMT"},"fingerprint":{"sha1":"9E:36:0C:B7:8B:44:DC:89:09:6C:D0:D4:BB:A5:71:17:44:C7:6A:F2","sha256":"70:6D:F6:EC:A2:7A:87:2C:0C:BB:52:97:72:BD:FA:C5:93:D9:24:3E:80:B2:B7:79:96:41:FD:B1:55:5F:5D:21"}}},"request":{"raw":"POST /1a HTTP/1.1\r\nHost: i.clean.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 704\r\nOrigin: https://money.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.29.0\r\ndate: Wed, 24 Sep 2025 03:04:22 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Origin,Accept,X-API-Key\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/fonts/KonnectRegular.woff","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:21.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"money.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:25:31 GMT","end":"Mon, 24 Nov 2025 16:25:29 GMT"},"fingerprint":{"sha1":"A5:8A:11:35:E2:18:EF:C0:E0:2A:61:E3:CE:0F:31:56:42:55:F0:FC","sha256":"C0:5A:4D:B1:BE:57:72:CF:9E:D8:17:5E:01:A3:0D:F8:4C:C1:16:16:8B:65:8B:CA:3B:CC:32:C3:E9:15:71:EF"}}},"request":{"raw":"GET /fonts/KonnectRegular.woff HTTP/1.1\r\nHost: money.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/css/moneywise_organic.css?cb=432\r\nCookie: SSID_9H80=CQDn9B0AAAAAAAC0X9NohcaCGLRf02gBAAAAAAAAAAAAtF_TaADc7g; SSSC_9H80=1013.G7553486227140429445.1|0.0; SSRT_9H80=tF_TaAABAA; money_session=eyJpdiI6Inlqb015WmpKSkJhakh6SzMyN3VheFE9PSIsInZhbHVlIjoiT2pIcnNveGVobXNrS1FIUkZZZDd4ZWRNNkd0UTZPcnUveStFd09kNDY3T3ZtbEV0RXlLbXNadTFDS2Q0eC8wUGIyemFQaEdKVlVHb1MyRXNvb3NHYmN3ZkpwVy9ySHBBN1JCWEVmbkNraWhld3l1Rm5WTXd3VU53Zk52aHFEeGwiLCJtYWMiOiJmZDFlNmVjOGI0MDQxMmEzM2I4ZDAwMWNmMzY4Y2QyYjZlNzUyY2ZmODNiNjJhMDcxZjBhYzEwZTY3Yjk0ZjIwIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkVvY3h6L1FXSXBwbXVzYm1qUTlieXc9PSIsInZhbHVlIjoiSUM1b01ISkcyT0xMWFBCZVFsQUxUSitIbnNYNVhpTkRQR2wvcWJlQkx0a09hQVhxRXgwT3NFcXpVOWkzdkR2QTRRdkVJYzBlbU10VlpHb1RpYWhFNUhuMDBLaEs4L3BTVTBFYmIvNzJmekR3bmsrSzZJQkhtbDUzUDEySFhOU3kiLCJtYWMiOiJhMjFkMzNlZWRjMWJiMjcwOTY0YzY0NzQ0OTI2YWFiYTIwZWI2MGY4MDlkMTA2MzVlMjc2YTRhYzdiMGM5ZjJlIiwidGFnIjoiIn0%3D; __cf_bm=.U3YtFNih3m1w6FCrnkhu9tGuUHymVGomrTcpO.A40w-1758683061-1.0.1.1-HamIbNq.vNx7npxwSP0wqoYClS3Y3B42WO1UNnXOMO6bSheMocH.v_b7Q.nhvQVLVKnDsPdTSCXB4bPsND1B3RB70gSD0SuE2XX4dl_bXM0; utm_source=direct; user_meta=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22null%22%2C%22utm_campaign%22%3A%22null%22%2C%22utm_content%22%3A%22null%22%2C%22utm_term%22%3A%22null%22%2C%22device_category%22%3A%22unknown%22%7D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:22 GMT\r\ncontent-type: font/woff\r\ncontent-length: 57100\r\ncf-ray: 983f0dd088321a30-OSL\r\nlast-modified: Tue, 23 Sep 2025 10:33:18 GMT\r\netag: \"68d2776e-df0c\"\r\ncf-cache-status: REVALIDATED\r\nexpires: Wed, 24 Sep 2025 07:04:22 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57100,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 57100, version 1.0","md5":"e5fbeae2bf030fdb57e7690687cd35c9","sha1":"4a75e43c9abcfbee7fb74ac0f560c53e53500fa5","sha256":"f8f85ec794379287fe36b5b5282d971148aab3790fa2e73656ab8811fc977e1a","sha512":"a3bc707b6c4e5de4fe45a6607c4ac3d7b43cd8edecca23b19201811fff24cf8e8e190f39803e203d845aebadf5e48684230a8ffea9ff1837e6f899c7253aae49","ssdeep":"1536:5vyI8vm19k22gdbftwTKOqE6Qf6tWN/u6jM:5QvU9928iTKOqE6o6oM","tlshash":"64430110e61db605cc7050364235ce359248ea2786afe2a5fbadd0a0ec74d794ce9fe7","first_seen":"2025-07-09T06:51:28.050737Z","last_seen":"2025-09-24T03:05:07.383521Z","times_seen":3,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/gsi/client","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.9.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:37:55 GMT","end":"Mon, 01 Dec 2025 08:37:54 GMT"},"fingerprint":{"sha1":"D6:CA:D9:3E:AA:21:3F:46:BD:DD:2C:06:2D:20:A1:D8:5F:AB:21:B2","sha256":"6C:68:26:80:36:50:C5:E4:B6:7C:60:D3:B6:13:10:1E:1B:6B:08:94:61:55:0A:E6:3D:BC:7E:1F:F0:DD:59:5A"}}},"request":{"raw":"GET /gsi/client HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nexpires: Wed, 24 Sep 2025 03:04:23 GMT\r\ndate: Wed, 24 Sep 2025 03:04:23 GMT\r\ncache-control: private, max-age=1800\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, script-src 'nonce-eYt3jDhsSUQnR2hGZ_2mAg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_dd7de8473bddc59c6b748810a67a39b1\"\r\nreport-to: {\"group\":\"coop_dd7de8473bddc59c6b748810a67a39b1\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":240331,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2261)","md5":"eba07952245a9cd75c3058e9c4e05676","sha1":"12f81cb8772ab1cdc8a100fad4d52e7832986dfa","sha256":"ec0648a945614f3853dcb8594f30d97cd9a57a53d475ed7c3efb5a9c35dc866d","sha512":"ab2a8d5f08e8834155db4637dd28d8e9baee42ec5aac2cae5019ec8ee17762c357bf0a2449f03287bdc80515563acc6c29af7c2c9c96d497854d0d33bb65140c","ssdeep":"6144:W+vK8mx15l12LT9t/C7AW/dn0qC4fsaCGFGH6XJ:W31eD/C7AWNHjfsaCG0QJ","tlshash":"c0345bdcb2e270355613f8b5d43f410ab076aa79f0498cacfa94c5f5acb09890167f7a","first_seen":"2025-09-17T05:29:00.600957Z","last_seen":"2025-09-25T00:48:45.84557Z","times_seen":788,"resource_available":true,"data":null}},"time_used":310,"timings":{"blocked":111,"dns":3,"connect":36,"send":0,"wait":80,"receive":0,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"track.kueezrtb.com/dye?ac=2\u0026acm=G3L\u0026uid=be5cdac8e005e820\u0026sid=34ec2ed1ee696ea0\u0026pvi=89bcafefc05ee524\u0026h=money.ca\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=81\u0026uri=%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026furl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026sr=1280x1024\u0026type=latest:fpdr\u0026_=1758683063364","fqdn":"track.kueezrtb.com","domain":"kueezrtb.com","tld":"com"},"ip":{"addr":"172.66.162.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kueezrtb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 31 Jul 2025 04:22:42 GMT","end":"Wed, 29 Oct 2025 05:22:40 GMT"},"fingerprint":{"sha1":"72:9A:34:A6:6E:6C:F2:12:4C:CD:21:43:69:9D:B4:AE:A6:E2:BD:C1","sha256":"74:FD:00:85:48:5B:6D:03:90:97:6C:48:C6:0B:F9:7E:AB:0F:30:71:82:29:09:7B:3D:3A:D7:32:40:B2:4D:4D"}}},"request":{"raw":"GET /dye?ac=2\u0026acm=G3L\u0026uid=be5cdac8e005e820\u0026sid=34ec2ed1ee696ea0\u0026pvi=89bcafefc05ee524\u0026h=money.ca\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=81\u0026uri=%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026furl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026sr=1280x1024\u0026type=latest:fpdr\u0026_=1758683063364 HTTP/1.1\r\nHost: track.kueezrtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 24 Sep 2025 03:04:23 GMT\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 983f0dda5abe8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtrack.kueezrtb.com/dye?ac=2\u0026acm=G3L\u0026uid=be5cdac8e005e820\u0026sid=34ec2ed1ee696ea0\u0026pvi=89bcafefc05ee524\u0026h=money.ca\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=81\u0026cc=NO\u0026ig=0\u0026uri=%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026furl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026sr=1280x1024\u0026type=latest:br\u0026_=1758683063864\u0026bidder=kueezrtb\u0026at=display\u0026v=1\u0026acid=64dcd6552888555c21f4eb75","fqdn":"gtrack.kueezrtb.com","domain":"kueezrtb.com","tld":"com"},"ip":{"addr":"172.66.162.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kueezrtb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 31 Jul 2025 04:22:42 GMT","end":"Wed, 29 Oct 2025 05:22:40 GMT"},"fingerprint":{"sha1":"72:9A:34:A6:6E:6C:F2:12:4C:CD:21:43:69:9D:B4:AE:A6:E2:BD:C1","sha256":"74:FD:00:85:48:5B:6D:03:90:97:6C:48:C6:0B:F9:7E:AB:0F:30:71:82:29:09:7B:3D:3A:D7:32:40:B2:4D:4D"}}},"request":{"raw":"GET /dye?ac=2\u0026acm=G3L\u0026uid=be5cdac8e005e820\u0026sid=34ec2ed1ee696ea0\u0026pvi=89bcafefc05ee524\u0026h=money.ca\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=81\u0026cc=NO\u0026ig=0\u0026uri=%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026furl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026sr=1280x1024\u0026type=latest:br\u0026_=1758683063864\u0026bidder=kueezrtb\u0026at=display\u0026v=1\u0026acid=64dcd6552888555c21f4eb75 HTTP/1.1\r\nHost: gtrack.kueezrtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nCookie: kuid=b4c606a6d5e7c1f9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 24 Sep 2025 03:04:24 GMT\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 983f0dddcc348be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ib.adnxs.com/ut/v3/prebid","fqdn":"ib.adnxs.com","domain":"adnxs.com","tld":"com"},"ip":{"addr":"37.252.172.123","port":443,"asn":29990,"as":"ASN-APPNEX","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:24.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adnxs.com","organization":""},"issuer":{"commonName":"GeoTrust ECC CA 2018","organization":"DigiCert Inc"},"validity":{"start":"Fri, 21 Feb 2025 00:00:00 GMT","end":"Mon, 23 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:EE:89:C7:20:BA:61:AE:F3:AA:39:44:BE:B4:55:C2:57:AE:7B:2E","sha256":"75:02:F1:DD:99:91:E6:47:E3:EA:28:9B:73:F9:46:8F:F5:EC:38:2C:57:F0:81:E0:5A:51:ED:B6:81:B9:78:CC"}}},"request":{"raw":"POST /ut/v3/prebid HTTP/1.1\r\nHost: ib.adnxs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.ca/\r\ncontent-type: text/plain\r\nContent-Length: 927\r\nOrigin: https://money.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.25.5\r\ndate: Wed, 24 Sep 2025 03:04:24 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 19\r\ncache-control: no-store, no-cache, private\r\npragma: no-cache\r\nexpires: Sat, 15 Nov 2008 16:00:00 GMT\r\np3p: policyref=\"http://cdn.adnxs-simple.com/w3c/policy/p3p.xml\", CP=\"NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE\"\r\nx-xss-protection: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://money.ca\r\naccept-ch: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness\r\nan-x-request-uuid: 09e618b1-9779-41d4-aa46-e7484468b783\r\nx-proxy-origin: 91.90.42.154; 91.90.42.154; 868.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; *.adnxs.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f333cec2aef5c287691c1670f8207232","sha1":"6dafbe0bf001219999903a4ed5bd23af5b81e52d","sha256":"0c09c070833c786cb25be38bc30992b30bad578f817dbc9e34beacd8b8ea44c5","sha512":"99baef5b4101653b6c6e4dcc611091804059c9b85887cb782f7e653b2bdf5c0d3e7608206bf0d9661b2da08a6af0983f7ec01f76aa38e81e46f9d3a1c3c3148b","ssdeep":"","tlshash":"9d70000000a0003b2202000088000a8c0080828000220e208020220082002028a00000","first_seen":"2023-05-15T23:26:08Z","last_seen":"2026-03-30T00:15:43.067343Z","times_seen":3454,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":66,"dns":1,"connect":19,"send":0,"wait":22,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dsp-service.admatic.de/cookie_sync?r=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fadmatic%2F%24%7BUSER_ID%7D","fqdn":"dsp-service.admatic.de","domain":"admatic.de","tld":"de"},"ip":{"addr":"172.67.72.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://csync.smilewanted.com/","date":"2025-09-24T03:04:28.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dsp-service.admatic.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Sep 2025 05:53:23 GMT","end":"Wed, 03 Dec 2025 05:53:22 GMT"},"fingerprint":{"sha1":"DF:34:D7:2B:E4:57:27:7B:89:7C:09:23:74:87:A2:DD:48:2F:23:D0","sha256":"4F:8E:0A:11:95:5F:2E:B9:94:1A:4B:29:F5:99:29:AD:E7:73:E0:B0:D2:1A:8E:08:B4:89:A4:EF:59:8D:C9:22"}}},"request":{"raw":"GET /cookie_sync?r=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fadmatic%2F%24%7BUSER_ID%7D HTTP/1.1\r\nHost: dsp-service.admatic.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csync.smilewanted.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:28 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\nx-powered-by: Pixad\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nworking-on: admatic-k8s\r\nworking-app: admanager-report\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FeVzmnmFOeyuHleOapqfnMQVjSI9RfSuIRpLfmPSEcQ8pV66awXTN5RdRu%2BVRg8hG0MYlI1cXKYHh9MYLjYh2DgWfb3c2x3qh9vhzOk%2Fipa30U5PPw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\nset-cookie: uid=7b456e6d-386c-43fd-bdb4-e6ab1c330954; SameSite=None; Secure; Path=/; Domain=admatic.de; Max-Age=2592000; Expires=Fri, 24 Oct 2025 03:04:28 GMT\r\ncf-ray: 983f0dfc4ee28deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2596,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2596), with no line terminators","md5":"f28107eb5af0f6f0b4b875716615e056","sha1":"fddf563ce162e43c3db4224061fafd30b05272fc","sha256":"097ff8c2360c35ed302f8a5bb62f1bd182e233ecb74c7a0bdda5664858e534bd","sha512":"56f98327c951f6a4cc175fe52768d3df354d9a82810f1a86569c7499fe8a94da43d6ef62b42c8c63010b8f7b04818c2ec0458986d5c9982f6f9c62ef977e1310","ssdeep":"","tlshash":"df5192bf1665131c478312a656f263ee7c66351c39c059e9d2accc2f11a8e3256c43cc","first_seen":"2025-09-24T03:05:07.386421Z","last_seen":"2025-09-24T03:05:07.386421Z","times_seen":1,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":24,"dns":4,"connect":1,"send":0,"wait":48,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"media1.money.ca/cdn-cgi/image/fit=cover,g=left,width=756,height=336,f=auto,quality=80/a/85597/client-has-almost-5000-in-crypto-stolen-from-account_hero_1800x800_v20250204233922.jpg","fqdn":"media1.money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:21.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"money.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:25:31 GMT","end":"Mon, 24 Nov 2025 16:25:29 GMT"},"fingerprint":{"sha1":"A5:8A:11:35:E2:18:EF:C0:E0:2A:61:E3:CE:0F:31:56:42:55:F0:FC","sha256":"C0:5A:4D:B1:BE:57:72:CF:9E:D8:17:5E:01:A3:0D:F8:4C:C1:16:16:8B:65:8B:CA:3B:CC:32:C3:E9:15:71:EF"}}},"request":{"raw":"GET /cdn-cgi/image/fit=cover,g=left,width=756,height=336,f=auto,quality=80/a/85597/client-has-almost-5000-in-crypto-stolen-from-account_hero_1800x800_v20250204233922.jpg HTTP/1.1\r\nHost: media1.money.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nCookie: SSID_9H80=CQDn9B0AAAAAAAC0X9NohcaCGLRf02gBAAAAAAAAAAAAtF_TaADc7g; SSSC_9H80=1013.G7553486227140429445.1|0.0; SSRT_9H80=tF_TaAABAA; money_session=eyJpdiI6Inlqb015WmpKSkJhakh6SzMyN3VheFE9PSIsInZhbHVlIjoiT2pIcnNveGVobXNrS1FIUkZZZDd4ZWRNNkd0UTZPcnUveStFd09kNDY3T3ZtbEV0RXlLbXNadTFDS2Q0eC8wUGIyemFQaEdKVlVHb1MyRXNvb3NHYmN3ZkpwVy9ySHBBN1JCWEVmbkNraWhld3l1Rm5WTXd3VU53Zk52aHFEeGwiLCJtYWMiOiJmZDFlNmVjOGI0MDQxMmEzM2I4ZDAwMWNmMzY4Y2QyYjZlNzUyY2ZmODNiNjJhMDcxZjBhYzEwZTY3Yjk0ZjIwIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkVvY3h6L1FXSXBwbXVzYm1qUTlieXc9PSIsInZhbHVlIjoiSUM1b01ISkcyT0xMWFBCZVFsQUxUSitIbnNYNVhpTkRQR2wvcWJlQkx0a09hQVhxRXgwT3NFcXpVOWkzdkR2QTRRdkVJYzBlbU10VlpHb1RpYWhFNUhuMDBLaEs4L3BTVTBFYmIvNzJmekR3bmsrSzZJQkhtbDUzUDEySFhOU3kiLCJtYWMiOiJhMjFkMzNlZWRjMWJiMjcwOTY0YzY0NzQ0OTI2YWFiYTIwZWI2MGY4MDlkMTA2MzVlMjc2YTRhYzdiMGM5ZjJlIiwidGFnIjoiIn0%3D; __cf_bm=.U3YtFNih3m1w6FCrnkhu9tGuUHymVGomrTcpO.A40w-1758683061-1.0.1.1-HamIbNq.vNx7npxwSP0wqoYClS3Y3B42WO1UNnXOMO6bSheMocH.v_b7Q.nhvQVLVKnDsPdTSCXB4bPsND1B3RB70gSD0SuE2XX4dl_bXM0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:22 GMT\r\ncontent-type: image/avif\r\ncontent-length: 12998\r\nserver: cloudflare\r\ncf-ray: 983f0dce5e611a30-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2678400\r\netag: \"cfJMwIGCx13O_0AXfLOZ_Tkr8gJ5-Oi8TZUDtJIbaLDQ:ee1ffb944f715c15387454d651e37e82\"\r\nlast-modified: Wed, 05 Feb 2025 04:39:23 GMT\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept, Accept-Encoding\r\nvia: 1.1 ab37fc2d73bd6e477f5652b6cb140162.cloudfront.net (CloudFront)\r\ncf-bgj: imgq:80,h2pri\r\ncf-resized: internal=ram/m q=0 n=738+127 c=0+0 v=2025.9.1 l=12998 f=false wv=2025.8.1\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12998,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"3d1b2a9d4493094bf185197e513df2d2","sha1":"842147a7c77ada3ef96d1d90d20c50e7c7befea6","sha256":"187489b54532631f13ea1f1a88bad364dd3e91cc11c1598971e17bb074dcab6b","sha512":"fb2cb7af2fcd86eb38cf6c3745ba6b46bbaf2effd9e33387ee2c672101484c13b6918f6131709d0f04c9d6e6636b92bea700dc4a4158695f6343ea0fb52b8360","ssdeep":"192:24Y2JFpTKNZbuH3VfQHmxPPZUC45PvGAD7sjJ2snJG7V2dU1yo18X8ziTEG:0IjGNluHaEXemAvw04wwC2X8GX","tlshash":"bf42c001747761c0e2627536093b227b973bb0b2b87e20b31c64b76b7b252fcdc0241a","first_seen":"2025-09-20T03:59:22.774023Z","last_seen":"2025-09-24T03:05:07.387934Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1032,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1031,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.pmbmonetize.live/psync?t=s\u0026e=106\u0026cb=https%3A%2F%2Fmeasureadv.com%2FuserBackIframe%3Fuid%3D%25USER_ID%25%26p%3D1","fqdn":"sync.pmbmonetize.live","domain":"pmbmonetize.live","tld":"live"},"ip":{"addr":"173.208.96.74","port":443,"asn":396362,"as":"LEASEWEB-USA-NYC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://measureadv.com/userIframe?gdpr=0\u0026gdpr_consent=\u0026p=3\u0026redirect=https://csync.smilewanted.com/set_partner_userid_get/videoheroes_us/{UID}","date":"2025-09-24T03:04:30.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.pmbmonetize.live","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 23 Jul 2025 17:19:41 GMT","end":"Mon, 24 Aug 2026 17:19:40 GMT"},"fingerprint":{"sha1":"88:0F:37:29:17:54:F0:D8:65:53:84:0E:5F:D4:79:A1:08:B3:E6:83","sha256":"0F:DA:A6:F5:BB:D9:29:A5:04:34:45:65:4C:FF:B3:C5:85:E2:D7:44:D5:F0:96:BA:5D:DD:73:7A:D0:B8:A7:49"}}},"request":{"raw":"GET /psync?t=s\u0026e=106\u0026cb=https%3A%2F%2Fmeasureadv.com%2FuserBackIframe%3Fuid%3D%25USER_ID%25%26p%3D1 HTTP/1.1\r\nHost: sync.pmbmonetize.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://measureadv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Wed, 24 Sep 2025 03:04:31 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLocation: https://measureadv.com/userBackIframe?uid=612553.69f22179-4627-436b-ab00-a36c62a12a2d\u0026p=1\r\nSet-Cookie: xeadiu=612553.69f22179-4627-436b-ab00-a36c62a12a2d; Max-Age=31536000; Domain=.pmbmonetize.live; HttpOnly; Secure; SameSite=None\nxeadiu_106=none; Max-Age=86400; Domain=.pmbmonetize.live; HttpOnly; Secure; SameSite=None\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":835,"timings":{"blocked":350,"dns":1,"connect":88,"send":0,"wait":125,"receive":0,"ssl":268},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prebid.smilewanted.com/","fqdn":"prebid.smilewanted.com","domain":"smilewanted.com","tld":"com"},"ip":{"addr":"172.66.154.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smilewanted.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 Aug 2025 21:28:27 GMT","end":"Thu, 30 Oct 2025 22:28:25 GMT"},"fingerprint":{"sha1":"FB:44:58:7C:4E:4C:D7:15:3E:2A:CA:43:D5:E5:9A:4F:FE:1A:FD:C3","sha256":"29:04:62:7B:83:D3:74:91:86:5A:D4:7C:02:6D:09:C2:80:69:F3:6F:67:47:2F:4B:4D:36:97:99:91:6A:11:D5"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: prebid.smilewanted.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.ca/\r\ncontent-type: text/plain\r\nContent-Length: 463\r\nOrigin: https://money.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 24 Sep 2025 03:04:23 GMT\r\nserver: cloudflare\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\naccess-control-allow-origin: https://money.ca\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 983f0ddcb8517129-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":32,"dns":4,"connect":1,"send":0,"wait":56,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtrack.kueezrtb.com/dye?ac=2\u0026acm=G3L\u0026uid=be5cdac8e005e820\u0026sid=34ec2ed1ee696ea0\u0026pvi=89bcafefc05ee524\u0026h=money.ca\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=81\u0026uri=%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026furl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026sr=1280x1024\u0026type=latest:fpdr\u0026_=1758683063364","fqdn":"gtrack.kueezrtb.com","domain":"kueezrtb.com","tld":"com"},"ip":{"addr":"172.66.162.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kueezrtb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 31 Jul 2025 04:22:42 GMT","end":"Wed, 29 Oct 2025 05:22:40 GMT"},"fingerprint":{"sha1":"72:9A:34:A6:6E:6C:F2:12:4C:CD:21:43:69:9D:B4:AE:A6:E2:BD:C1","sha256":"74:FD:00:85:48:5B:6D:03:90:97:6C:48:C6:0B:F9:7E:AB:0F:30:71:82:29:09:7B:3D:3A:D7:32:40:B2:4D:4D"}}},"request":{"raw":"GET /dye?ac=2\u0026acm=G3L\u0026uid=be5cdac8e005e820\u0026sid=34ec2ed1ee696ea0\u0026pvi=89bcafefc05ee524\u0026h=money.ca\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=81\u0026uri=%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026furl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026sr=1280x1024\u0026type=latest:fpdr\u0026_=1758683063364 HTTP/1.1\r\nHost: gtrack.kueezrtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 24 Sep 2025 03:04:23 GMT\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 983f0dda5ac18be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.ad.smaato.net/i/?adExInit=smile\u0026gdpr=[GDPR]\u0026gdpr_consent=[GDPR_CONSENT]\u0026redir=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fsmaato%2F%24UID","fqdn":"s.ad.smaato.net","domain":"smaato.net","tld":"net"},"ip":{"addr":"34.1.242.226","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://csync.smilewanted.com/","date":"2025-09-24T03:04:29.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smaato.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 01 Sep 2025 00:00:00 GMT","end":"Tue, 01 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AA:9F:AE:D5:EB:9D:36:2D:68:F6:F1:E0:A3:52:12:AA:5A:BE:6B:08","sha256":"66:8C:52:5F:1C:7B:4F:92:6D:E2:BC:90:18:13:AE:DD:97:01:40:56:E2:92:01:CB:DC:8F:AA:EF:45:54:C4:29"}}},"request":{"raw":"GET /i/?adExInit=smile\u0026gdpr=[GDPR]\u0026gdpr_consent=[GDPR_CONSENT]\u0026redir=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fsmaato%2F%24UID HTTP/1.1\r\nHost: s.ad.smaato.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csync.smilewanted.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 24 Sep 2025 03:04:29 GMT\r\nvia: 1.1 google\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":137,"dns":3,"connect":19,"send":0,"wait":21,"receive":0,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.kueezrtb.com/js/latest_cls.js?_=1758683062968","fqdn":"static.kueezrtb.com","domain":"kueezrtb.com","tld":"com"},"ip":{"addr":"172.66.162.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kueezrtb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 31 Jul 2025 04:22:42 GMT","end":"Wed, 29 Oct 2025 05:22:40 GMT"},"fingerprint":{"sha1":"72:9A:34:A6:6E:6C:F2:12:4C:CD:21:43:69:9D:B4:AE:A6:E2:BD:C1","sha256":"74:FD:00:85:48:5B:6D:03:90:97:6C:48:C6:0B:F9:7E:AB:0F:30:71:82:29:09:7B:3D:3A:D7:32:40:B2:4D:4D"}}},"request":{"raw":"GET /js/latest_cls.js?_=1758683062968 HTTP/1.1\r\nHost: static.kueezrtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:23 GMT\r\ncontent-type: text/javascript\r\nx-amz-id-2: tpIPdUb91q4T2vXb+Waj9xXOCthihp5rlZAna9Dld51dhUrZYcShjlFUoPBLGYO1uHUa5dUX6N0=\r\nx-amz-request-id: 22Q5R6DZFHXA2PSM\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-expose-headers: x-amz-meta-access-control-allow-origin, x-amz-meta-access-control-allow-methods\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, accept-encoding\r\nlast-modified: Tue, 09 Sep 2025 11:47:57 GMT\r\nserver: cloudflare\r\nage: 1264559\r\ncf-cache-status: HIT\r\netag: W/\"1786f7635ae5dd1838994eb70b319ce6\"\r\ncontent-encoding: br\r\ncf-ray: 983f0dd7b9c28be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":230182,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1786f7635ae5dd1838994eb70b319ce6","sha1":"e42917440b749c2bc2a6509386f618b0970f6f7d","sha256":"b2d4fd6ca97d67a9a637550873c5e70f34341d590111a59af86b3f07a976ef43","sha512":"29d445862477d2b0a3cff35d80b21a0241c0d4325543d5b75affde5dc0fdc7e431f43fd67f1e88b35fca3369290a50f604b5c9830ecd9576d90be310914cfc77","ssdeep":"3072:Y8SxxDqELfifL+lny+vcKyFxK9zJAJgddD7x41S70M2vxdI3RQpTebvC1NqKTvfT:Y8Wm1S7d2vxdI3+psNKvfT","tlshash":"e324088e2e0970d01362b5e7672561b5da80df41be8dc4e8fee87d1cf954e24ba78231","first_seen":"2025-09-09T18:23:27.462799Z","last_seen":"2025-12-13T17:25:33.04708Z","times_seen":697,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"r92p84zajxs4zgxny.ay.delivery/client-v2.js","fqdn":"r92p84zajxs4zgxny.ay.delivery","domain":"ay.delivery","tld":"delivery"},"ip":{"addr":"104.21.41.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ay.delivery","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 16:19:54 GMT","end":"Thu, 06 Nov 2025 17:17:35 GMT"},"fingerprint":{"sha1":"3D:8C:44:1B:65:E8:28:DC:76:64:B1:41:3A:AB:BF:94:F0:F3:7B:12","sha256":"FA:D7:73:BF:A2:48:F8:E2:BD:1F:72:C3:6E:6F:B9:B6:D0:07:0E:35:76:B0:4B:4D:7B:0F:63:ED:BE:02:61:AF"}}},"request":{"raw":"GET /client-v2.js HTTP/1.1\r\nHost: r92p84zajxs4zgxny.ay.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 23 Sep 2025 13:23:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncache-control: public, max-age=900, stale-while-revalidate=3600\r\ntiming-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cw%2FxXvCzAqDiQavggB89Z2xDvlP66haGlJD%2BO2Xiwmno74e%2FPM%2FIcEpHpcSJCUIOMpTOnuYB7WxY%2F7Z0lwztA33MGlgNEljpL72L0%2BLAUm5FUKdz8iqY7GcH0g%3D%3D\"}]}\r\ncf-cache-status: MISS\r\netag: W/\"68d29f6d-1b312\"\r\ncontent-encoding: br\r\ncf-ray: 983f0dd8dd1456a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111378,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65426)","md5":"264c7aa8744286646dfdf8960902b977","sha1":"95de1d22c99528281b663bca9aeb5870f40f6f48","sha256":"9f07a20dd7fa218ad622055d0184ae29537a87ea95854dbb0c0fa877a30a4b01","sha512":"e68e396520831aad06255007e531e857593f856bf5f545b7c9030a6c8a421669a809fc7351067959dd2bbc59d10130a041c2040a079975cdf3038295916528d8","ssdeep":"1536:kQKwcOprLlUFfPTLNVjuLGuWKdjyBKNVE03G63lijfTUsY:kQuqrLlUF/NR8Gz41H9YK","tlshash":"dfb3c69abb95b47501f3a0f5407f520bb3367b162568f040d622edd43c68a8f65a3e3b","first_seen":"2025-09-24T03:05:07.394091Z","last_seen":"2025-11-12T14:17:45.928553Z","times_seen":63,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":70,"dns":4,"connect":1,"send":0,"wait":94,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:21.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"money.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:25:31 GMT","end":"Mon, 24 Nov 2025 16:25:29 GMT"},"fingerprint":{"sha1":"A5:8A:11:35:E2:18:EF:C0:E0:2A:61:E3:CE:0F:31:56:42:55:F0:FC","sha256":"C0:5A:4D:B1:BE:57:72:CF:9E:D8:17:5E:01:A3:0D:F8:4C:C1:16:16:8B:65:8B:CA:3B:CC:32:C3:E9:15:71:EF"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: money.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account\r\nCookie: SSID_9H80=CQDn9B0AAAAAAAC0X9NohcaCGLRf02gBAAAAAAAAAAAAtF_TaADc7g; SSSC_9H80=1013.G7553486227140429445.1|0.0; SSRT_9H80=tF_TaAABAA; money_session=eyJpdiI6Inlqb015WmpKSkJhakh6SzMyN3VheFE9PSIsInZhbHVlIjoiT2pIcnNveGVobXNrS1FIUkZZZDd4ZWRNNkd0UTZPcnUveStFd09kNDY3T3ZtbEV0RXlLbXNadTFDS2Q0eC8wUGIyemFQaEdKVlVHb1MyRXNvb3NHYmN3ZkpwVy9ySHBBN1JCWEVmbkNraWhld3l1Rm5WTXd3VU53Zk52aHFEeGwiLCJtYWMiOiJmZDFlNmVjOGI0MDQxMmEzM2I4ZDAwMWNmMzY4Y2QyYjZlNzUyY2ZmODNiNjJhMDcxZjBhYzEwZTY3Yjk0ZjIwIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkVvY3h6L1FXSXBwbXVzYm1qUTlieXc9PSIsInZhbHVlIjoiSUM1b01ISkcyT0xMWFBCZVFsQUxUSitIbnNYNVhpTkRQR2wvcWJlQkx0a09hQVhxRXgwT3NFcXpVOWkzdkR2QTRRdkVJYzBlbU10VlpHb1RpYWhFNUhuMDBLaEs4L3BTVTBFYmIvNzJmekR3bmsrSzZJQkhtbDUzUDEySFhOU3kiLCJtYWMiOiJhMjFkMzNlZWRjMWJiMjcwOTY0YzY0NzQ0OTI2YWFiYTIwZWI2MGY4MDlkMTA2MzVlMjc2YTRhYzdiMGM5ZjJlIiwidGFnIjoiIn0%3D; __cf_bm=.U3YtFNih3m1w6FCrnkhu9tGuUHymVGomrTcpO.A40w-1758683061-1.0.1.1-HamIbNq.vNx7npxwSP0wqoYClS3Y3B42WO1UNnXOMO6bSheMocH.v_b7Q.nhvQVLVKnDsPdTSCXB4bPsND1B3RB70gSD0SuE2XX4dl_bXM0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 22 Sep 2025 10:13:36 GMT\r\netag: W/\"68d12150-4d7\"\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 983f0dce4e491a30-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nexpires: Fri, 26 Sep 2025 03:04:21 GMT\r\ncache-control: max-age=172800, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-03T17:31:24.736646Z","times_seen":291316,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prebid.a-mo.net/cchain/0?gdpr=0\u0026gdpr_consent=\u0026us_privacy=\u0026cb=https%3A%2F%2Fprebid.admatic.de%2Fsetuid%3Fbidder%3Damx%26gdpr%3D0%26gdpr_consent%3D%26f%3Di%26uid%3D","fqdn":"prebid.a-mo.net","domain":"a-mo.net","tld":"net"},"ip":{"addr":"163.5.194.36","port":443,"asn":60558,"as":"Phoenix Nap, LLC.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://dsp-service.admatic.de/cookie_sync?r=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fadmatic%2F%24%7BUSER_ID%7D","date":"2025-09-24T03:04:29.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.a-mo.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 Aug 2025 05:58:12 GMT","end":"Wed, 26 Nov 2025 05:58:11 GMT"},"fingerprint":{"sha1":"46:30:17:D2:9C:C6:D3:FC:FF:17:43:1F:C7:14:FA:E7:1C:18:49:AB","sha256":"DD:21:EC:3E:CB:38:DD:A6:86:8F:0F:23:E9:EA:CC:A2:97:CD:68:B5:9E:76:40:4B:0D:0C:2D:E4:A6:10:F8:7D"}}},"request":{"raw":"GET /cchain/0?gdpr=0\u0026gdpr_consent=\u0026us_privacy=\u0026cb=https%3A%2F%2Fprebid.admatic.de%2Fsetuid%3Fbidder%3Damx%26gdpr%3D0%26gdpr_consent%3D%26f%3Di%26uid%3D HTTP/1.1\r\nHost: prebid.a-mo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dsp-service.admatic.de/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncache-control: max-age=0, private, must-revalidate\r\ncontent-length: 0\r\ndate: Wed, 24 Sep 2025 03:04:28 GMT\r\nlocation: https://prebid.admatic.de/setuid?bidder=amx\u0026gdpr=0\u0026gdpr_consent=\u0026f=i\u0026uid=\r\nserver: envoy\r\nvary: accept-encoding\r\nx-envoy-upstream-service-time: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":1122,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":17,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script.4dex.io/a/latest/adagio.js","fqdn":"script.4dex.io","domain":"4dex.io","tld":"io"},"ip":{"addr":"104.26.9.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script.4dex.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 02:28:05 GMT","end":"Wed, 10 Dec 2025 03:27:58 GMT"},"fingerprint":{"sha1":"E5:21:4F:C6:7A:0F:7D:4F:5E:A8:DF:03:3F:F4:FB:30:2F:26:E9:E5","sha256":"8E:03:93:DA:5E:F5:6D:D9:E7:94:2A:F4:C8:57:55:93:7B:C7:BE:AA:82:2B:E4:47:DC:4F:3D:28:43:01:32:CD"}}},"request":{"raw":"GET /a/latest/adagio.js HTTP/1.1\r\nHost: script.4dex.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 24 Sep 2025 03:04:23 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lIVNaNY75AZZLdQqGkhM3k6U3FMyHbI8w6WptKv7EIx8vdXyERuPxyhHDE9%2B%2FBEadHBdI2U%2FN%2ByUi%2Bm5%2FFCgCb4vDNPcpocv2WjM\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nServer: cloudflare\r\ncf-cache-status: HIT\r\nCache-Control: public, max-age=1800\r\nAge: 1170786\r\nLast-Modified: Wed, 10 Sep 2025 13:49:52 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"b5ccbcc2259cdb10e0b65bbd0798ca7d\"\r\nContent-Encoding: br\r\nCF-RAY: 983f0ddc3ec0b51e-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61936,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (61753)","md5":"b5ccbcc2259cdb10e0b65bbd0798ca7d","sha1":"c623310abec6db091560fce2b48e6e9e4230c41e","sha256":"299314ceedf1362e55e1caf70d8ab51202c931224793b9b5463c86411ae42721","sha512":"fdc3817fac82065370ad9c15075d00618cf6066d1da3720e626385212fc72bf8bcde66b00faaf347b958988514ed47a93e7f3998f56b56fe36474a771978c23d","ssdeep":"1536:sh3T2Yu/M1SRJT83Kg4BOWnIWvqLE8bvspe:s2MGvg4qWvq48bvspe","tlshash":"ab53e7de7286703689d7a07b513f110a73366445b4588048b97adee62d7ce8fa322f7c","first_seen":"2025-09-11T05:25:24.167636Z","last_seen":"2025-11-17T15:50:22.25385Z","times_seen":825,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":14,"dns":4,"connect":1,"send":0,"wait":6,"receive":3,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"media1.money.ca/cdn-cgi/image/fit=cover,g=left,width=351,height=156,f=auto,quality=80/a/85597/client-has-almost-5000-in-crypto-stolen-from-account_hero_1800x800_v20250204233922.jpg","fqdn":"media1.money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:21.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"money.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:25:31 GMT","end":"Mon, 24 Nov 2025 16:25:29 GMT"},"fingerprint":{"sha1":"A5:8A:11:35:E2:18:EF:C0:E0:2A:61:E3:CE:0F:31:56:42:55:F0:FC","sha256":"C0:5A:4D:B1:BE:57:72:CF:9E:D8:17:5E:01:A3:0D:F8:4C:C1:16:16:8B:65:8B:CA:3B:CC:32:C3:E9:15:71:EF"}}},"request":{"raw":"GET /cdn-cgi/image/fit=cover,g=left,width=351,height=156,f=auto,quality=80/a/85597/client-has-almost-5000-in-crypto-stolen-from-account_hero_1800x800_v20250204233922.jpg HTTP/1.1\r\nHost: media1.money.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nCookie: SSID_9H80=CQDn9B0AAAAAAAC0X9NohcaCGLRf02gBAAAAAAAAAAAAtF_TaADc7g; SSSC_9H80=1013.G7553486227140429445.1|0.0; SSRT_9H80=tF_TaAABAA; money_session=eyJpdiI6Inlqb015WmpKSkJhakh6SzMyN3VheFE9PSIsInZhbHVlIjoiT2pIcnNveGVobXNrS1FIUkZZZDd4ZWRNNkd0UTZPcnUveStFd09kNDY3T3ZtbEV0RXlLbXNadTFDS2Q0eC8wUGIyemFQaEdKVlVHb1MyRXNvb3NHYmN3ZkpwVy9ySHBBN1JCWEVmbkNraWhld3l1Rm5WTXd3VU53Zk52aHFEeGwiLCJtYWMiOiJmZDFlNmVjOGI0MDQxMmEzM2I4ZDAwMWNmMzY4Y2QyYjZlNzUyY2ZmODNiNjJhMDcxZjBhYzEwZTY3Yjk0ZjIwIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkVvY3h6L1FXSXBwbXVzYm1qUTlieXc9PSIsInZhbHVlIjoiSUM1b01ISkcyT0xMWFBCZVFsQUxUSitIbnNYNVhpTkRQR2wvcWJlQkx0a09hQVhxRXgwT3NFcXpVOWkzdkR2QTRRdkVJYzBlbU10VlpHb1RpYWhFNUhuMDBLaEs4L3BTVTBFYmIvNzJmekR3bmsrSzZJQkhtbDUzUDEySFhOU3kiLCJtYWMiOiJhMjFkMzNlZWRjMWJiMjcwOTY0YzY0NzQ0OTI2YWFiYTIwZWI2MGY4MDlkMTA2MzVlMjc2YTRhYzdiMGM5ZjJlIiwidGFnIjoiIn0%3D; __cf_bm=.U3YtFNih3m1w6FCrnkhu9tGuUHymVGomrTcpO.A40w-1758683061-1.0.1.1-HamIbNq.vNx7npxwSP0wqoYClS3Y3B42WO1UNnXOMO6bSheMocH.v_b7Q.nhvQVLVKnDsPdTSCXB4bPsND1B3RB70gSD0SuE2XX4dl_bXM0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:22 GMT\r\ncontent-type: image/avif\r\ncontent-length: 4552\r\nserver: cloudflare\r\ncf-ray: 983f0dce5e661a30-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2678400\r\netag: \"cfJMwIGCx13O_0AXfLOZ_Tkr8ggg590DzelClRG1NeDQ:ee1ffb944f715c15387454d651e37e82\"\r\nlast-modified: Wed, 05 Feb 2025 04:39:23 GMT\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept, Accept-Encoding\r\nvia: 1.1 ab37fc2d73bd6e477f5652b6cb140162.cloudfront.net (CloudFront)\r\ncf-bgj: imgq:80,h2pri\r\ncf-resized: internal=ok/m q=0 n=777+137 c=0+0 v=2025.9.1 l=4552 f=false wv=2025.8.1\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4552,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"1fb00f7de35e4400d5362a52bad85dad","sha1":"bda2c2c95cca4dc8b04a9351f76dd83893e10cb1","sha256":"d545406264f7b4e174af7a8cf029035491c3356c858959901805ed2e580d1907","sha512":"d6cf1a94694518dc1cb8f8db7ab142951bdc3bf7932fd7ee9c16106b88cfab44d4e2fba0f5d9b0ae1351578b4abe65e20f599df5ceb9c8b791dbd435c98888c8","ssdeep":"96:2nkXJixYYEtVWkYXTf8/I1e4do2pKbYCgzk6D00+6nU+9A:2S0xYYEtVQXL8g1ekI0+p","tlshash":"87918e1d62a2e8cfc3dc8570017d25b318274e2db2926c1352c61b844e3d6ad7e10f6d","first_seen":"2025-09-20T03:59:22.678801Z","last_seen":"2025-09-24T03:05:07.397441Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1041,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":1036,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data.money.ca/custom-data.js","fqdn":"data.money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:22.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"money.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:25:31 GMT","end":"Mon, 24 Nov 2025 16:25:29 GMT"},"fingerprint":{"sha1":"A5:8A:11:35:E2:18:EF:C0:E0:2A:61:E3:CE:0F:31:56:42:55:F0:FC","sha256":"C0:5A:4D:B1:BE:57:72:CF:9E:D8:17:5E:01:A3:0D:F8:4C:C1:16:16:8B:65:8B:CA:3B:CC:32:C3:E9:15:71:EF"}}},"request":{"raw":"GET /custom-data.js HTTP/1.1\r\nHost: data.money.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nCookie: SSID_9H80=CQDn9B0AAAAAAAC0X9NohcaCGLRf02gBAAAAAAAAAAAAtF_TaADc7g; SSSC_9H80=1013.G7553486227140429445.1|0.0; SSRT_9H80=tF_TaAABAA; money_session=eyJpdiI6Inlqb015WmpKSkJhakh6SzMyN3VheFE9PSIsInZhbHVlIjoiT2pIcnNveGVobXNrS1FIUkZZZDd4ZWRNNkd0UTZPcnUveStFd09kNDY3T3ZtbEV0RXlLbXNadTFDS2Q0eC8wUGIyemFQaEdKVlVHb1MyRXNvb3NHYmN3ZkpwVy9ySHBBN1JCWEVmbkNraWhld3l1Rm5WTXd3VU53Zk52aHFEeGwiLCJtYWMiOiJmZDFlNmVjOGI0MDQxMmEzM2I4ZDAwMWNmMzY4Y2QyYjZlNzUyY2ZmODNiNjJhMDcxZjBhYzEwZTY3Yjk0ZjIwIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkVvY3h6L1FXSXBwbXVzYm1qUTlieXc9PSIsInZhbHVlIjoiSUM1b01ISkcyT0xMWFBCZVFsQUxUSitIbnNYNVhpTkRQR2wvcWJlQkx0a09hQVhxRXgwT3NFcXpVOWkzdkR2QTRRdkVJYzBlbU10VlpHb1RpYWhFNUhuMDBLaEs4L3BTVTBFYmIvNzJmekR3bmsrSzZJQkhtbDUzUDEySFhOU3kiLCJtYWMiOiJhMjFkMzNlZWRjMWJiMjcwOTY0YzY0NzQ0OTI2YWFiYTIwZWI2MGY4MDlkMTA2MzVlMjc2YTRhYzdiMGM5ZjJlIiwidGFnIjoiIn0%3D; __cf_bm=.U3YtFNih3m1w6FCrnkhu9tGuUHymVGomrTcpO.A40w-1758683061-1.0.1.1-HamIbNq.vNx7npxwSP0wqoYClS3Y3B42WO1UNnXOMO6bSheMocH.v_b7Q.nhvQVLVKnDsPdTSCXB4bPsND1B3RB70gSD0SuE2XX4dl_bXM0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:22 GMT\r\ncontent-type: application/x-javascript\r\ncontent-encoding: gzip\r\ncf-ray: 983f0dd1e9dd1a30-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\netag: W/\"58142a75e9762cd1fc8e6ec637f7f142:1757664031.493611\"\r\nexpires: Wed, 24 Sep 2025 07:04:22 GMT\r\nlast-modified: Fri, 12 Sep 2025 08:00:31 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":539747,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (32756)","md5":"58142a75e9762cd1fc8e6ec637f7f142","sha1":"e6a71d204d5d7d59355846f0c2f8ce7f8bda5e7b","sha256":"b0e6f9577c776b19745f303b0bd7bf81f02595e082027726287a96236c9519be","sha512":"3aced8da5e808c632acc072d5716347f9e41f3686c9c0a497598b22c3ef802e4807a8fa4438d97476f05f43c2e1bc01b4cb28b86d5baceccb417db1b7c4e27ed","ssdeep":"6144:BvQMGWlF1IwNxZ0pMWuRp9bvaZjBEYi9hIcUtTIQyhrOa2olLdva7CXhA3z:2WR+uWuRprSd1yIhohdnXh8z","tlshash":"bfb46c8a72e4f4651aeb25f8e03f1102b2b66c44740cc064fa9dedcd3d6d9496173faa","first_seen":"2025-09-20T03:59:22.662406Z","last_seen":"2025-09-24T03:05:07.398801Z","times_seen":2,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/api/scottie/event","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:22.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"money.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:25:31 GMT","end":"Mon, 24 Nov 2025 16:25:29 GMT"},"fingerprint":{"sha1":"A5:8A:11:35:E2:18:EF:C0:E0:2A:61:E3:CE:0F:31:56:42:55:F0:FC","sha256":"C0:5A:4D:B1:BE:57:72:CF:9E:D8:17:5E:01:A3:0D:F8:4C:C1:16:16:8B:65:8B:CA:3B:CC:32:C3:E9:15:71:EF"}}},"request":{"raw":"POST /api/scottie/event HTTP/1.1\r\nHost: money.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2248\r\nOrigin: https://money.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SSID_9H80=CQDn9B0AAAAAAAC0X9NohcaCGLRf02gBAAAAAAAAAAAAtF_TaADc7g; SSSC_9H80=1013.G7553486227140429445.1|0.0; SSRT_9H80=tF_TaAABAA; money_session=eyJpdiI6Inlqb015WmpKSkJhakh6SzMyN3VheFE9PSIsInZhbHVlIjoiT2pIcnNveGVobXNrS1FIUkZZZDd4ZWRNNkd0UTZPcnUveStFd09kNDY3T3ZtbEV0RXlLbXNadTFDS2Q0eC8wUGIyemFQaEdKVlVHb1MyRXNvb3NHYmN3ZkpwVy9ySHBBN1JCWEVmbkNraWhld3l1Rm5WTXd3VU53Zk52aHFEeGwiLCJtYWMiOiJmZDFlNmVjOGI0MDQxMmEzM2I4ZDAwMWNmMzY4Y2QyYjZlNzUyY2ZmODNiNjJhMDcxZjBhYzEwZTY3Yjk0ZjIwIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkVvY3h6L1FXSXBwbXVzYm1qUTlieXc9PSIsInZhbHVlIjoiSUM1b01ISkcyT0xMWFBCZVFsQUxUSitIbnNYNVhpTkRQR2wvcWJlQkx0a09hQVhxRXgwT3NFcXpVOWkzdkR2QTRRdkVJYzBlbU10VlpHb1RpYWhFNUhuMDBLaEs4L3BTVTBFYmIvNzJmekR3bmsrSzZJQkhtbDUzUDEySFhOU3kiLCJtYWMiOiJhMjFkMzNlZWRjMWJiMjcwOTY0YzY0NzQ0OTI2YWFiYTIwZWI2MGY4MDlkMTA2MzVlMjc2YTRhYzdiMGM5ZjJlIiwidGFnIjoiIn0%3D; __cf_bm=.U3YtFNih3m1w6FCrnkhu9tGuUHymVGomrTcpO.A40w-1758683061-1.0.1.1-HamIbNq.vNx7npxwSP0wqoYClS3Y3B42WO1UNnXOMO6bSheMocH.v_b7Q.nhvQVLVKnDsPdTSCXB4bPsND1B3RB70gSD0SuE2XX4dl_bXM0; utm_source=direct; user_meta=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22null%22%2C%22utm_campaign%22%3A%22null%22%2C%22utm_content%22%3A%22null%22%2C%22utm_term%22%3A%22null%22%2C%22device_category%22%3A%22unknown%22%7D; scottie_user_attributes=%7B%22nav%22%3A%7B%22uEntryPath%22%3A%22%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account%22%7D%2C%22user%22%3A%7B%22email%22%3Anull%2C%22first_name%22%3Anull%2C%22last_name%22%3Anull%7D%7D; scottie_session_attributes=%7B%22nav%22%3A%7B%22s_referrer%22%3A%22r.search.yahoo.com%22%2C%22page_count%22%3A1%2C%22sEntryPath%22%3A%22%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account%22%7D%2C%22ay_imp_s%22%3Afalse%2C%22created_at%22%3A1758683062%2C%22s_article_id%22%3A85597%2C%22nav_attrs%22%3A%7B%22siteSpectVariant%22%3Anull%2C%22siteSpectExperienceID%22%3Anull%2C%22siteSpectCampaignName%22%3Anull%7D%2C%22utm%22%3A%7B%22utm_source%22%3Anull%2C%22utm_medium%22%3Anull%2C%22utm_campaign%22%3Anull%2C%22utm_content%22%3Anull%2C%22utm_term%22%3Anull%7D%2C%22reporting_channel%22%3A%22organic_search%22%2C%22s_entry_channel%22%3A%22organic%20news%22%2C%22member_status%22%3A%22none%22%7D; suid=06864235-3ff4-4481-9403-3a43c185cfd3; scottie_session=c0fb5510-9f43-4eee-b60a-f30d4dc24e49\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 201 Created\r\ndate: Wed, 24 Sep 2025 03:04:22 GMT\r\ncontent-type: application/json\r\ncf-ray: 983f0dd41bbf1a30-OSL\r\ncache-control: no-cache, private\r\nx-ratelimit-limit: 100\r\nx-ratelimit-remaining: 99\r\naccess-control-allow-origin: https://money.ca\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"Created","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"611d1bb6044f929fe3e704a336f77240","sha1":"d81bc05bcfec4bf9a62e41a9bda11d0953c804e3","sha256":"dac520e7c5588d5c687228ff63dfa8085d88026881f65b0a001967161ff45d0f","sha512":"d3148cb6ee161a9ad471ef0d6c78a37a8e016d8b72ecf8803e6caddb87c053cd81de7767883adb4c63008a9748af50a1038429555114e195397e1627eb06be82","ssdeep":"","tlshash":"cd90022208173dc84296c287f946bc1624bc15c622502541505acc09464d47634d7940","first_seen":"2025-09-20T03:59:22.707222Z","last_seen":"2025-09-24T03:05:07.40009Z","times_seen":2,"resource_available":false,"data":null}},"time_used":450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":450,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.a-mo.net/cchain?gdpr=0\u0026gdpr_consent=\u0026cb=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fadaptmx_us%2F%24UID","fqdn":"sync.a-mo.net","domain":"a-mo.net","tld":"net"},"ip":{"addr":"163.5.194.37","port":443,"asn":60558,"as":"Phoenix Nap, LLC.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://csync.smilewanted.com/","date":"2025-09-24T03:04:28.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.a-mo.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 Aug 2025 05:58:12 GMT","end":"Wed, 26 Nov 2025 05:58:11 GMT"},"fingerprint":{"sha1":"46:30:17:D2:9C:C6:D3:FC:FF:17:43:1F:C7:14:FA:E7:1C:18:49:AB","sha256":"DD:21:EC:3E:CB:38:DD:A6:86:8F:0F:23:E9:EA:CC:A2:97:CD:68:B5:9E:76:40:4B:0D:0C:2D:E4:A6:10:F8:7D"}}},"request":{"raw":"GET /cchain?gdpr=0\u0026gdpr_consent=\u0026cb=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fadaptmx_us%2F%24UID HTTP/1.1\r\nHost: sync.a-mo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csync.smilewanted.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncache-control: max-age=0, private, must-revalidate\r\ncontent-length: 0\r\ndate: Wed, 24 Sep 2025 03:04:28 GMT\r\nlocation: https://csync.smilewanted.com/set_partner_userid_get/adaptmx_us/?gdpr=0\r\nserver: envoy\r\nvary: accept-encoding\r\nx-envoy-upstream-service-time: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":36,"dns":1,"connect":16,"send":0,"wait":16,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-HPYYC0GT7P","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:21.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"DF:7E:8A:F9:1C:B5:DC:9E:90:E3:71:A7:92:85:2C:8F:2B:B4:42:8E","sha256":"3A:65:11:10:B9:58:2F:E1:BF:38:98:8D:2E:3E:A2:01:9D:C6:BE:69:5B:AD:F7:99:53:F9:AB:A6:6B:82:47:F1"}}},"request":{"raw":"GET /gtag/js?id=G-HPYYC0GT7P HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 24 Sep 2025 03:04:21 GMT\r\nexpires: Wed, 24 Sep 2025 03:04:21 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 139513\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":419216,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"abb1312042dc38d122fb5db0b508cb52","sha1":"edec470595721897a42fefdbfbe92e9b6474c59f","sha256":"5224d79fb0d7141df56cc29126b62065a2d2ba9fe6083860e29730dc4979a15f","sha512":"ba3fbf843f9507307cf82cc281c20fe461af1865006c29c0ae4509017c525ff3d2ef758e709296069d9078e1da99183294fe67398b7f1c661f592d2aa6a39ebe","ssdeep":"6144:fBxwEqNrxY1D2im0DgfI2QNTs7eAT/PK1f2V:pq//YN2ixgMA1","tlshash":"47941bce73c674665396f078907f018ba5bb28a2b45cc895f189cce42e74a9a4137f7c","first_seen":"2025-09-24T03:05:07.401224Z","last_seen":"2025-09-24T03:05:07.401224Z","times_seen":1,"resource_available":true,"data":null}},"time_used":521,"timings":{"blocked":199,"dns":0,"connect":22,"send":0,"wait":37,"receive":58,"ssl":200},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/favicons/moc/apple-touch-icon.png","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"money.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:25:31 GMT","end":"Mon, 24 Nov 2025 16:25:29 GMT"},"fingerprint":{"sha1":"A5:8A:11:35:E2:18:EF:C0:E0:2A:61:E3:CE:0F:31:56:42:55:F0:FC","sha256":"C0:5A:4D:B1:BE:57:72:CF:9E:D8:17:5E:01:A3:0D:F8:4C:C1:16:16:8B:65:8B:CA:3B:CC:32:C3:E9:15:71:EF"}}},"request":{"raw":"GET /favicons/moc/apple-touch-icon.png HTTP/1.1\r\nHost: money.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account\r\nCookie: SSID_9H80=CQDn9B0AAAAAAAC0X9NohcaCGLRf02gBAAAAAAAAAAAAtF_TaADc7g; SSSC_9H80=1013.G7553486227140429445.1|0.0; SSRT_9H80=tF_TaAABAA; money_session=eyJpdiI6ImxTWWgrS3RqYVRvUVFXWTMxSFJxeWc9PSIsInZhbHVlIjoiSTdQZkg3N1VtbUtUVHF2VUFJSWlnQ0tkN2tWUDJMSm5wVW1nWFZPL0hEbDFORGlRNXhndkc4WkFCQkpubmxhQnRTdVl0dkE0aHFDN2E1QlM0Rk1PdC9FSHVncHdqMUY4aHNiK0dSY3RiMHgyTEgrN2ZwZ1RlWnNscy8zT09KNlYiLCJtYWMiOiJmNTdlYTM2ZTQzOTRlMWYwYjg5NTBiYmJjNWM2MzZlY2E0OWIxZGM5ZTRmZGExM2Q5ZTRiODFhMTY4YWEzMjRiIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6ImNLQ0dNOHBFamlZbnI1QUV5Zzg2bUE9PSIsInZhbHVlIjoiMWtyRmhBTFkwdkduQlNwTStueldJY1ZWb0g5Ni9oaEhZSmIwWDVPS3FHKzR6T1hMUHhvUzFHNjE3WlBSTzBMYmNQQkt5N01mMkJFZjZTYXlPTjVxY3czd0prSThoNDNFYVRpNlJ5aXNBbGhEcUxWNEt4Z2UwMlpqRnVodW5UcFAiLCJtYWMiOiIyN2MxODA3Nzc5MWE3NmVhM2RlNjgwOTFjZWEyN2MzNDFjYWNlZWNlMmY2MWFhZTIzOTBjY2IyNGE0MDkzNjE2IiwidGFnIjoiIn0%3D; __cf_bm=.U3YtFNih3m1w6FCrnkhu9tGuUHymVGomrTcpO.A40w-1758683061-1.0.1.1-HamIbNq.vNx7npxwSP0wqoYClS3Y3B42WO1UNnXOMO6bSheMocH.v_b7Q.nhvQVLVKnDsPdTSCXB4bPsND1B3RB70gSD0SuE2XX4dl_bXM0; utm_source=direct; user_meta=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22null%22%2C%22utm_campaign%22%3A%22null%22%2C%22utm_content%22%3A%22null%22%2C%22utm_term%22%3A%22null%22%2C%22device_category%22%3A%22unknown%22%2C%22geo%22%3A%7B%22query%22%3A%2291.90.42.154%22%2C%22country%22%3A%22NO%22%2C%22regionName%22%3A%22Oslo%22%2C%22timezone%22%3A%22Europe%2FOslo%22%2C%22region%22%3A%2203%22%2C%22city%22%3A%22Oslo%22%2C%22zip%22%3A%220001%22%2C%22metro-code%22%3Anull%2C%22lon%22%3A%2210.74609%22%2C%22lat%22%3A%2259.91273%22%2C%22continent%22%3A%22EU%22%7D%7D; scottie_user_attributes=%7B%22nav%22%3A%7B%22uEntryPath%22%3A%22%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account%22%7D%2C%22user%22%3A%7B%22email%22%3Anull%2C%22first_name%22%3Anull%2C%22last_name%22%3Anull%7D%7D; scottie_session_attributes=%7B%22nav%22%3A%7B%22s_referrer%22%3A%22r.search.yahoo.com%22%2C%22page_count%22%3A1%2C%22sEntryPath%22%3A%22%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account%22%7D%2C%22ay_imp_s%22%3Afalse%2C%22created_at%22%3A1758683062%2C%22s_article_id%22%3A85597%2C%22nav_attrs%22%3A%7B%22siteSpectVariant%22%3Anull%2C%22siteSpectExperienceID%22%3Anull%2C%22siteSpectCampaignName%22%3Anull%7D%2C%22utm%22%3A%7B%22utm_source%22%3Anull%2C%22utm_medium%22%3Anull%2C%22utm_campaign%22%3Anull%2C%22utm_content%22%3Anull%2C%22utm_term%22%3Anull%7D%2C%22reporting_channel%22%3A%22organic_search%22%2C%22s_entry_channel%22%3A%22organic%20news%22%2C%22member_status%22%3A%22none%22%7D; suid=06864235-3ff4-4481-9403-3a43c185cfd3; scottie_session=c0fb5510-9f43-4eee-b60a-f30d4dc24e49; _v_id_l={%22_v_id%22:%2236088682079960021758683062540%22%2C%22_la%22:1758683062540}; ribn_params=%7B%7D; kndctr_9CE579FD5DCD8B590A495E09_AdobeOrg_identity=CiY2NDMwMDQ5ODEyODI2NTcxNDQ4MjkyNDMxMTYyMzE5MDQwNTQ2N1ITCLjFt82XMxABGAEqBElSTDEwAPABuMW3zZcz; kndctr_9CE579FD5DCD8B590A495E09_AdobeOrg_cluster=irl1; cw-test-20250625_prebid-v2-test_1_99=control; cw-test-00000000_stand-alone-floors-facade-hardFloor_85_15=fallo; cw-test-00000000_stand-alone-floors-facade-multiplier_90_10=multa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1598\r\ncf-ray: 983f0dd9a8ee1a30-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=2005\r\ncontent-disposition: inline; filename=\"apple-touch-icon.webp\"\r\nvary: Accept\r\netag: \"66b4edc4-7d5\"\r\nlast-modified: Thu, 08 Aug 2024 16:09:40 GMT\r\ncf-cache-status: REVALIDATED\r\nexpires: Wed, 24 Sep 2025 07:04:23 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1598,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f16e2feb98a87d176bc1ac0bbc1e4bec","sha1":"7465eb435be230041b680596b5ac28eaca709b05","sha256":"15aca2eb8640e1ec4823535a2b4adc3e76d049450dcd28021af9881d08e647a4","sha512":"66b722d2f961db3040d0bc312fc2cd2df7cef08eaff7e62a4dd28c357d55af1250153f1db16ad5e51e6387d9f1f30271beb6dda6aeadc8beeb837b810ddf0300","ssdeep":"","tlshash":"3331eab832f5e8dd11ed7898a6151dc56c4c851150571587363558ffc5249831372d6f","first_seen":"2025-09-20T03:59:22.787726Z","last_seen":"2025-09-24T03:05:07.403521Z","times_seen":2,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":480,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prompts.maze.co/api/widgets","fqdn":"prompts.maze.co","domain":"maze.co","tld":"co"},"ip":{"addr":"52.20.24.97","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:24.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maze.co","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Thu, 06 Feb 2025 00:00:00 GMT","end":"Sun, 08 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B4:BE:FD:47:42:9C:36:0C:12:50:AC:5B:8A:9C:04:80:96:8A:1C:C7","sha256":"DF:4F:DD:32:A3:BF:F7:D1:76:97:9F:0B:DA:9A:2A:02:D7:9E:69:0F:FD:5A:30:88:B1:5B:31:3D:95:D5:F7:15"}}},"request":{"raw":"OPTIONS /api/widgets HTTP/1.1\r\nHost: prompts.maze.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-api-key,x-maze-correlation-id,x-maze-snippet-src\r\nReferer: https://money.ca/\r\nOrigin: https://money.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 24 Sep 2025 03:04:24 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: content-type,x-api-key,x-maze-correlation-id,x-maze-snippet-src\r\naccess-control-max-age: 600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":488,"timings":{"blocked":196,"dns":4,"connect":93,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"track.kueezrtb.com/dye?_=1758683062968\u0026type=latest:boot\u0026ac=2\u0026acm=g3l\u0026h=money.ca\u0026uri=%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026furl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026beacon=1","fqdn":"track.kueezrtb.com","domain":"kueezrtb.com","tld":"com"},"ip":{"addr":"172.66.162.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:22.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kueezrtb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 31 Jul 2025 04:22:42 GMT","end":"Wed, 29 Oct 2025 05:22:40 GMT"},"fingerprint":{"sha1":"72:9A:34:A6:6E:6C:F2:12:4C:CD:21:43:69:9D:B4:AE:A6:E2:BD:C1","sha256":"74:FD:00:85:48:5B:6D:03:90:97:6C:48:C6:0B:F9:7E:AB:0F:30:71:82:29:09:7B:3D:3A:D7:32:40:B2:4D:4D"}}},"request":{"raw":"POST /dye?_=1758683062968\u0026type=latest:boot\u0026ac=2\u0026acm=g3l\u0026h=money.ca\u0026uri=%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026furl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026beacon=1 HTTP/1.1\r\nHost: track.kueezrtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://money.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 24 Sep 2025 03:04:23 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://money.ca\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 983f0dd7d9d08be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prebid.cootlogix.com/prebid/multi/62c485faf7ad5949c061e201","fqdn":"prebid.cootlogix.com","domain":"cootlogix.com","tld":"com"},"ip":{"addr":"45.55.120.38","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cootlogix.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Sun, 13 Oct 2024 12:10:16 GMT","end":"Mon, 13 Oct 2025 12:10:16 GMT"},"fingerprint":{"sha1":"B1:96:69:A6:B9:3D:78:9F:77:E2:3E:E8:49:17:ED:C9:4A:6C:B7:B8","sha256":"93:11:14:16:F3:3F:87:FF:11:82:E4:E3:B8:49:A2:76:BD:49:9E:96:1F:59:66:94:16:85:F2:7F:04:A7:F6:B2"}}},"request":{"raw":"POST /prebid/multi/62c485faf7ad5949c061e201 HTTP/1.1\r\nHost: prebid.cootlogix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.ca/\r\ncontent-type: text/plain\r\nContent-Length: 999\r\nOrigin: https://money.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 204 No Content\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Content-Range, Cache-Control\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-origin: https://money.ca\r\ncache-control: max-age=0, no-cache, must-revalidate, proxy-revalidate\r\ndate: Wed, 24 Sep 2025 03:04:25 GMT\r\nvary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":2497,"timings":{"blocked":1164,"dns":0,"connect":97,"send":0,"wait":127,"receive":0,"ssl":1106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-586127439\u0026cx=c\u0026gtm=4e59m1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:22.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"DF:7E:8A:F9:1C:B5:DC:9E:90:E3:71:A7:92:85:2C:8F:2B:B4:42:8E","sha256":"3A:65:11:10:B9:58:2F:E1:BF:38:98:8D:2E:3E:A2:01:9D:C6:BE:69:5B:AD:F7:99:53:F9:AB:A6:6B:82:47:F1"}}},"request":{"raw":"GET /gtag/destination?id=AW-586127439\u0026cx=c\u0026gtm=4e59m1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 24 Sep 2025 03:04:22 GMT\r\nexpires: Wed, 24 Sep 2025 03:04:22 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:72:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:72:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:72:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:72:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 119630\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":343007,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"6a8ed97cca3d7b4199012de1dee135f0","sha1":"6e29b82dd98f143347e2d1153a80222d35db5c51","sha256":"bb2b74e42fa5b09eaf16044a65a56953dbbab861c87530fb3b49b19dacc7b07b","sha512":"f6a7ca36fdcd7f943c1c08fd2e378a8d4c742103096fedcaba933dfdd0ebec7f41c72eb71a852da7cee4f693dadda88dbb92f13d22d2472aa7d6684fbef6e3bb","ssdeep":"3072:q7KiunNrW6EuqEFpz0B+DsYzZD7XkkEiEJnTOvSw665zoxStgW5+K54yI2QNTs7O:fwEFp0Y1D2im068gZ4I2QNTs7eQCTt5","tlshash":"557418cd73d674668393a478907f018bb1bb6892f44cc899f185d8e42e74a9a4237f7c","first_seen":"2025-09-24T03:05:07.405844Z","last_seen":"2025-09-24T03:05:07.405844Z","times_seen":1,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"measureadv.com/userBackIframe?uid=612553.c8153598-755f-4d03-884e-72911e388c15\u0026p=1","fqdn":"measureadv.com","domain":"measureadv.com","tld":"com"},"ip":{"addr":"204.62.14.130","port":443,"asn":46636,"as":"NATCOWEB","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://measureadv.com/userIframe?gdpr=0\u0026gdpr_consent=\u0026p=3\u0026redirect=https://csync.smilewanted.com/set_partner_userid_get/videoheroes/{UID}","date":"2025-09-24T03:04:30.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"measureadv.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 21 Jul 2025 11:25:02 GMT","end":"Sun, 19 Oct 2025 11:25:02 GMT"},"fingerprint":{"sha1":"7E:05:8D:8A:84:BD:68:38:FF:D5:7E:2C:86:E1:46:15:2A:69:97:6A","sha256":"CB:B4:A7:C0:8B:DE:85:F0:5C:B2:71:CC:15:1A:C2:D9:DB:35:2C:01:F5:88:E1:B4:3E:07:87:95:CF:84:E7:1E"}}},"request":{"raw":"GET /userBackIframe?uid=612553.c8153598-755f-4d03-884e-72911e388c15\u0026p=1 HTTP/1.1\r\nHost: measureadv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://measureadv.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: new=1; uid=4aca0c30-6d1f-56a2-8131-a46aec2baa38\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nSet-Cookie: ids={\"175\":\"612553.c8153598-755f-4d03-884e-72911e388c15\"}; path=/; expires=Wed, 24 Sep 2025 03:14:31 GMT; samesite=none; secure; httponly\r\nAccess-Control-Allow-Origin: https://measureadv.com\r\nAccess-Control-Allow-Credentials: true\r\nDate: Wed, 24 Sep 2025 03:04:31 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.adobedtm.com/1d8526a1ddc2/cff7fdda0680/199d26c90464/RC787ced493be54519a55bfc4eed61a995-source.min.js","fqdn":"assets.adobedtm.com","domain":"adobedtm.com","tld":"com"},"ip":{"addr":"96.6.17.25","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:32.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.adobedtm.com","organization":"Adobe Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Sat, 25 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2F:BD:F6:81:46:EE:C6:68:47:14:7F:F0:63:9A:CA:DE:F6:5D:C7:80","sha256":"F0:43:20:D8:ED:30:30:7B:92:0C:29:1B:07:12:29:EE:72:B4:10:4C:38:64:3C:9A:AD:BF:70:A4:DC:CE:5B:8E"}}},"request":{"raw":"GET /1d8526a1ddc2/cff7fdda0680/199d26c90464/RC787ced493be54519a55bfc4eed61a995-source.min.js HTTP/1.1\r\nHost: assets.adobedtm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: application/x-javascript\r\netag: \"23f0f4e552fe0cd6d8506dedd6543cbd:1757664033.41912\"\r\nlast-modified: Fri, 12 Sep 2025 08:00:33 GMT\r\nserver: AkamaiNetStorage\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 462\r\ncache-control: max-age=3600\r\nexpires: Wed, 24 Sep 2025 04:04:32 GMT\r\ndate: Wed, 24 Sep 2025 03:04:32 GMT\r\naccess-control-allow-origin: https://money.ca\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":907,"size_decoded":0,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (760)","md5":"30f93f24408bae9f0a8c27036a9eab26","sha1":"f7deec029f6b665c498d930c5bc589fa6df1c96f","sha256":"0e744ec7d7760f26f1a54a84aa42a6513a253d538db0c7b8bf73aa618167b146","sha512":"ad093e31425ab9d9270dffd24feee7b94877851a8d3d617c71e0c59acd89393de12226305de95180971c8a457339a7f02a1ed682f39c7421a482dfa3743010cc","ssdeep":"","tlshash":"0b11405ff3a44530616c22cbb31fb1943422d33a0b94c2a7cef20c64a9a2913a0897f5","first_seen":"2025-09-20T03:59:22.693727Z","last_seen":"2025-09-24T03:05:07.406988Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csync.smilewanted.com/set_partner_userid_get/adaptmx_us/?gdpr=0","fqdn":"csync.smilewanted.com","domain":"smilewanted.com","tld":"com"},"ip":{"addr":"172.66.154.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://csync.smilewanted.com/","date":"2025-09-24T03:04:29.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smilewanted.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 Aug 2025 21:28:27 GMT","end":"Thu, 30 Oct 2025 22:28:25 GMT"},"fingerprint":{"sha1":"FB:44:58:7C:4E:4C:D7:15:3E:2A:CA:43:D5:E5:9A:4F:FE:1A:FD:C3","sha256":"29:04:62:7B:83:D3:74:91:86:5A:D4:7C:02:6D:09:C2:80:69:F3:6F:67:47:2F:4B:4D:36:97:99:91:6A:11:D5"}}},"request":{"raw":"GET /set_partner_userid_get/adaptmx_us/?gdpr=0 HTTP/1.1\r\nHost: csync.smilewanted.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://csync.smilewanted.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sw_user_params_infos=8sdRREvsw7LjLys0YvGw88Qvf8KI6CprYb7x6Tbn5SpVMe1oK%2FtWbXBuThY9EwOGtUU9ch7dv0NSWAgUINoXhAETzxb2ORoHNPFOLNmDEN6Mia0dNse%2BBrdIA0FOk2u6pWNLBRGCM3s0YSLWtr12PQ%3D%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:29 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 983f0dfd8f297129-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mp.4dex.io/prebid","fqdn":"mp.4dex.io","domain":"4dex.io","tld":"io"},"ip":{"addr":"172.64.153.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mp.4dex.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 06:13:28 GMT","end":"Sun, 16 Nov 2025 07:13:19 GMT"},"fingerprint":{"sha1":"35:C1:05:73:40:11:F0:9E:8D:4B:EF:29:CA:52:EF:11:E6:3B:0A:97","sha256":"35:2E:50:60:F3:02:A6:E4:E5:3C:80:50:2F:DF:15:F4:3E:E3:BA:43:02:DB:62:29:5C:9C:0F:C5:46:85:2F:D6"}}},"request":{"raw":"POST /prebid HTTP/1.1\r\nHost: mp.4dex.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.ca/\r\ncontent-type: text/plain\r\nContent-Length: 1363\r\nOrigin: https://money.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 24 Sep 2025 03:04:23 GMT\r\ncf-ray: 983f0ddcfb7656b4-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://money.ca\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: 0\r\npragma: no-cache\r\nvary: Origin, Accept-Encoding\r\nx-err: Splits. no seat with adunits and mapping rule\r\nx-version: 3.0.0-gcp-ams\r\nx-warn: Process Splits. all case seats filetered for: ban_right\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":75,"dns":4,"connect":1,"send":0,"wait":46,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"r92p84zajxs4zgxny.ay.delivery/hash?e=r92p84zAJxS4zgXNY\u0026k=\u0026v=5000","fqdn":"r92p84zajxs4zgxny.ay.delivery","domain":"ay.delivery","tld":"delivery"},"ip":{"addr":"104.21.41.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ay.delivery","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 16:19:54 GMT","end":"Thu, 06 Nov 2025 17:17:35 GMT"},"fingerprint":{"sha1":"3D:8C:44:1B:65:E8:28:DC:76:64:B1:41:3A:AB:BF:94:F0:F3:7B:12","sha256":"FA:D7:73:BF:A2:48:F8:E2:BD:1F:72:C3:6E:6F:B9:B6:D0:07:0E:35:76:B0:4B:4D:7B:0F:63:ED:BE:02:61:AF"}}},"request":{"raw":"GET /hash?e=r92p84zAJxS4zgXNY\u0026k=\u0026v=5000 HTTP/1.1\r\nHost: r92p84zajxs4zgxny.ay.delivery\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://money.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 24 Sep 2025 03:04:23 GMT\r\ncontent-type: application/json\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: public, max-age=1800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-headers: Content-Type, Content-Length, Accept-Encoding\r\naccess-control-max-age: 86400\r\ncf-cache-status: MISS\r\nlast-modified: Wed, 24 Sep 2025 03:04:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hHz3DdFoSqm%2BRLP1FhdPNafE%2Bqadxky55a72P5aASeWwBL8WRsQCiDyCRVvnqaX5E0Yu2PJ%2FgwyDYt3NVKCG2qO6sSrTeQP%2BOGjYUhUTENVDK0WuC0HQ6Pi5zWgz\"}]}\r\ncf-ray: 983f0ddb1f85c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":0,"mime_type":"application/json","magic":"very short file (no magic)","md5":"cfcd208495d565ef66e7dff9f98764da","sha1":"b6589fc6ab0dc82cf12099d1c2d40ab994e8410c","sha256":"5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9","sha512":"31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-03-07T01:37:31Z","last_seen":"2026-04-03T16:56:45.524069Z","times_seen":103472,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":28,"dns":3,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hb.minutemedia-prebid.com/hb-mm-multi","fqdn":"hb.minutemedia-prebid.com","domain":"minutemedia-prebid.com","tld":"com"},"ip":{"addr":"35.207.179.213","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.minutemedia-prebid.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 09:59:02 GMT","end":"Wed, 03 Dec 2025 10:54:58 GMT"},"fingerprint":{"sha1":"E0:42:C4:95:FD:CA:9F:E5:66:17:83:4A:94:23:66:87:D9:F7:92:B7","sha256":"2C:65:20:2B:91:7A:85:4E:76:46:98:05:1D:AA:E0:64:E5:FB:1C:8A:8A:37:58:5C:07:63:84:74:51:CA:A0:59"}}},"request":{"raw":"POST /hb-mm-multi HTTP/1.1\r\nHost: hb.minutemedia-prebid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.ca/\r\ncontent-type: text/plain\r\nContent-Length: 1670\r\nOrigin: https://money.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-WL-CONF, X-Requested-With\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: https://money.ca\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\nx-reason: do not track ifa\r\ndate: Wed, 24 Sep 2025 03:04:23 GMT\r\ncontent-length: 108\r\nx-envoy-upstream-service-time: 6\r\nserver: istio-envoy\r\nvia: 1.1 google\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":83,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ef1746a6be7ed18e2da5a553226c4e54","sha1":"8a9ecad0838c30e6067f23148e66407e287a7d32","sha256":"37c624254e883539300e582b2a9d3a5e46cd7510aedc27b576b747d178892de5","sha512":"d06571a0f8c739b25cf021dff94cd60d996e76adb7c795a6defc457462170b77a59156917e6edc19b1e065f2d04f809a5c37cd7426588c2d1f0d3601a18c9f17","ssdeep":"","tlshash":"e6a011002282b28a02ccca20282008a22222ea02baa8882a30f2080280c88802020220","first_seen":"2025-09-24T03:05:07.408494Z","last_seen":"2025-09-24T03:05:07.408494Z","times_seen":1,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":208,"dns":41,"connect":27,"send":0,"wait":35,"receive":0,"ssl":136},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/css/moneywise_organic.css?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:21.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"money.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:25:31 GMT","end":"Mon, 24 Nov 2025 16:25:29 GMT"},"fingerprint":{"sha1":"A5:8A:11:35:E2:18:EF:C0:E0:2A:61:E3:CE:0F:31:56:42:55:F0:FC","sha256":"C0:5A:4D:B1:BE:57:72:CF:9E:D8:17:5E:01:A3:0D:F8:4C:C1:16:16:8B:65:8B:CA:3B:CC:32:C3:E9:15:71:EF"}}},"request":{"raw":"GET /css/moneywise_organic.css?cb=432 HTTP/1.1\r\nHost: money.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account\r\nCookie: SSID_9H80=CQDn9B0AAAAAAAC0X9NohcaCGLRf02gBAAAAAAAAAAAAtF_TaADc7g; SSSC_9H80=1013.G7553486227140429445.1|0.0; SSRT_9H80=tF_TaAABAA; money_session=eyJpdiI6Inlqb015WmpKSkJhakh6SzMyN3VheFE9PSIsInZhbHVlIjoiT2pIcnNveGVobXNrS1FIUkZZZDd4ZWRNNkd0UTZPcnUveStFd09kNDY3T3ZtbEV0RXlLbXNadTFDS2Q0eC8wUGIyemFQaEdKVlVHb1MyRXNvb3NHYmN3ZkpwVy9ySHBBN1JCWEVmbkNraWhld3l1Rm5WTXd3VU53Zk52aHFEeGwiLCJtYWMiOiJmZDFlNmVjOGI0MDQxMmEzM2I4ZDAwMWNmMzY4Y2QyYjZlNzUyY2ZmODNiNjJhMDcxZjBhYzEwZTY3Yjk0ZjIwIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkVvY3h6L1FXSXBwbXVzYm1qUTlieXc9PSIsInZhbHVlIjoiSUM1b01ISkcyT0xMWFBCZVFsQUxUSitIbnNYNVhpTkRQR2wvcWJlQkx0a09hQVhxRXgwT3NFcXpVOWkzdkR2QTRRdkVJYzBlbU10VlpHb1RpYWhFNUhuMDBLaEs4L3BTVTBFYmIvNzJmekR3bmsrSzZJQkhtbDUzUDEySFhOU3kiLCJtYWMiOiJhMjFkMzNlZWRjMWJiMjcwOTY0YzY0NzQ0OTI2YWFiYTIwZWI2MGY4MDlkMTA2MzVlMjc2YTRhYzdiMGM5ZjJlIiwidGFnIjoiIn0%3D; __cf_bm=.U3YtFNih3m1w6FCrnkhu9tGuUHymVGomrTcpO.A40w-1758683061-1.0.1.1-HamIbNq.vNx7npxwSP0wqoYClS3Y3B42WO1UNnXOMO6bSheMocH.v_b7Q.nhvQVLVKnDsPdTSCXB4bPsND1B3RB70gSD0SuE2XX4dl_bXM0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:21 GMT\r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 23 Sep 2025 12:33:48 GMT\r\netag: W/\"68d293ac-9019\"\r\ncf-cache-status: HIT\r\nexpires: Wed, 24 Sep 2025 07:04:21 GMT\r\ncache-control: public, max-age=14400\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 983f0dce2e2d1a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36889,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (36886)","md5":"2979dd353478bd3b8e697cd225e2682d","sha1":"d4e9c0ceaf18776c7789c01e0c63709f95a8d9e1","sha256":"a53f8572d391e06b736960f425303e959cfe05ce1c804df6b3317875ebd6ac2b","sha512":"75b571ee52de56cf23eb36cdfbfe59877ae2a09d3f31a4fd0bedbed2b4379c0768e61b6fd908eff2236cab5458e4d40b3c38c190848878fa7b14a64d71688349","ssdeep":"384:CCCfLvKPH4LdKprovKSremZ4+Xmtz8kiSEZdSL2pO1y3jfiWOZ945KNtNDGj:CWPH473SEZdou","tlshash":"09f2d8259f92622cf177c16926e572dc29349411d3871abde572f92ccade2d323f230a","first_seen":"2025-09-20T03:59:22.686332Z","last_seen":"2025-09-24T03:05:07.409533Z","times_seen":2,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"snippet.maze.co/static/d9d19396e39caf5310677a0d6e45b001a7074df4/contextualScaffold.js","fqdn":"snippet.maze.co","domain":"maze.co","tld":"co"},"ip":{"addr":"3.167.2.70","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maze.co","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Thu, 06 Feb 2025 00:00:00 GMT","end":"Sun, 08 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B4:BE:FD:47:42:9C:36:0C:12:50:AC:5B:8A:9C:04:80:96:8A:1C:C7","sha256":"DF:4F:DD:32:A3:BF:F7:D1:76:97:9F:0B:DA:9A:2A:02:D7:9E:69:0F:FD:5A:30:88:B1:5B:31:3D:95:D5:F7:15"}}},"request":{"raw":"GET /static/d9d19396e39caf5310677a0d6e45b001a7074df4/contextualScaffold.js HTTP/1.1\r\nHost: snippet.maze.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 562\r\nlast-modified: Tue, 23 Sep 2025 18:04:55 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: dZM9HFoSLpLzoPrw18DaS83Gw_vbqNW5\r\nserver: AmazonS3\r\ndate: Wed, 24 Sep 2025 02:55:01 GMT\r\ncache-control: max-age=31536000, immutable\r\netag: W/\"8273cfe3fd690787bcadd65fefd2dd51\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 94fbdabfcc07b91a0e8ffbb741347df8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: n5UXgiO1EJfItNLbicNLGFQ4A7_E4KIU0pjtgzKlPkeyrxNjCK27tQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":18440,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (9185)","md5":"8273cfe3fd690787bcadd65fefd2dd51","sha1":"67e9999f31700839f9834c448b626b36e92bcb28","sha256":"60c8d29d46e44db813a472fff38278569b164856caf00f8d28a7ed6e6dc739d7","sha512":"cd19a607c9c758027d5c44ba4e902befe2b122aecca58d14fff9ce9816a97a4f67c14bc3eac6b48b21f1277b6f3a8cc569a988142565e3719c9d1e7ec6db8a77","ssdeep":"384:hROqTwTWzChfkYcJDEIS068Fo29vafeR7xKQzJC7PslzcbLccGNdGkhswL0:hROqTwTWokdZFoaYe7TzJcslzcccDkh6","tlshash":"ca821a6196eaf83347dc810ef474934152020faeee89c04cfe7d58aba5c44c5a5b6fb9","first_seen":"2025-09-23T19:07:56.315179Z","last_seen":"2025-09-24T13:09:16.71256Z","times_seen":8,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"media1.money.ca/cdn-cgi/image/fit=cover,g=center,width=32,height=32,f=auto,quality=90/avatars/james-battiston-1666296503.png","fqdn":"media1.money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:21.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"money.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:25:31 GMT","end":"Mon, 24 Nov 2025 16:25:29 GMT"},"fingerprint":{"sha1":"A5:8A:11:35:E2:18:EF:C0:E0:2A:61:E3:CE:0F:31:56:42:55:F0:FC","sha256":"C0:5A:4D:B1:BE:57:72:CF:9E:D8:17:5E:01:A3:0D:F8:4C:C1:16:16:8B:65:8B:CA:3B:CC:32:C3:E9:15:71:EF"}}},"request":{"raw":"GET /cdn-cgi/image/fit=cover,g=center,width=32,height=32,f=auto,quality=90/avatars/james-battiston-1666296503.png HTTP/1.1\r\nHost: media1.money.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nCookie: SSID_9H80=CQDn9B0AAAAAAAC0X9NohcaCGLRf02gBAAAAAAAAAAAAtF_TaADc7g; SSSC_9H80=1013.G7553486227140429445.1|0.0; SSRT_9H80=tF_TaAABAA; money_session=eyJpdiI6Inlqb015WmpKSkJhakh6SzMyN3VheFE9PSIsInZhbHVlIjoiT2pIcnNveGVobXNrS1FIUkZZZDd4ZWRNNkd0UTZPcnUveStFd09kNDY3T3ZtbEV0RXlLbXNadTFDS2Q0eC8wUGIyemFQaEdKVlVHb1MyRXNvb3NHYmN3ZkpwVy9ySHBBN1JCWEVmbkNraWhld3l1Rm5WTXd3VU53Zk52aHFEeGwiLCJtYWMiOiJmZDFlNmVjOGI0MDQxMmEzM2I4ZDAwMWNmMzY4Y2QyYjZlNzUyY2ZmODNiNjJhMDcxZjBhYzEwZTY3Yjk0ZjIwIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkVvY3h6L1FXSXBwbXVzYm1qUTlieXc9PSIsInZhbHVlIjoiSUM1b01ISkcyT0xMWFBCZVFsQUxUSitIbnNYNVhpTkRQR2wvcWJlQkx0a09hQVhxRXgwT3NFcXpVOWkzdkR2QTRRdkVJYzBlbU10VlpHb1RpYWhFNUhuMDBLaEs4L3BTVTBFYmIvNzJmekR3bmsrSzZJQkhtbDUzUDEySFhOU3kiLCJtYWMiOiJhMjFkMzNlZWRjMWJiMjcwOTY0YzY0NzQ0OTI2YWFiYTIwZWI2MGY4MDlkMTA2MzVlMjc2YTRhYzdiMGM5ZjJlIiwidGFnIjoiIn0%3D; __cf_bm=.U3YtFNih3m1w6FCrnkhu9tGuUHymVGomrTcpO.A40w-1758683061-1.0.1.1-HamIbNq.vNx7npxwSP0wqoYClS3Y3B42WO1UNnXOMO6bSheMocH.v_b7Q.nhvQVLVKnDsPdTSCXB4bPsND1B3RB70gSD0SuE2XX4dl_bXM0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:21 GMT\r\ncontent-type: image/avif\r\ncontent-length: 785\r\nserver: cloudflare\r\ncf-ray: 983f0dce5e5a1a30-OSL\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=2678400\r\netag: \"cfFJlLAKz4ngvFkP8LSfG-jmSPiLIZ8BWtr1lXIaVxDQ:17725d12ad137a790976d30414968fc1\"\r\nlast-modified: Thu, 22 Jun 2023 21:21:00 GMT\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept, Accept-Encoding\r\nvia: 1.1 bbd64aca0b829769b2db2050bd5350dc.cloudfront.net (CloudFront)\r\ncf-resized: internal=ram/- q=0 n=0+0 c=0+0 v=2025.9.1 l=785 wv=2025.8.1\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":785,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"0f5318b099018028e59663151521e009","sha1":"401cf5438b77bf427b931101ce8b8b232327cd5d","sha256":"ef9ddafc81ebf926ff63f3442e18a72c8a9ba6880962183c9d04e06d17c978b8","sha512":"cb60824d58339aa2352e37fe27aa2858c410c76f8616f44219bbf15b4b856eea511478a6b677c886ed289406df3f35504bc6210d753c5ab046c6bf69cb651e87","ssdeep":"","tlshash":"c101c029b67b1ba4c23c12f10d0c4a3621b671258b355b6379d47924de1d967cf40e2f","first_seen":"2025-09-24T03:05:07.413454Z","last_seen":"2025-09-24T03:05:07.413454Z","times_seen":1,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ex.ingage.tech/v1/openrtb","fqdn":"ex.ingage.tech","domain":"ingage.tech","tld":"tech"},"ip":{"addr":"104.18.26.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ingage.tech","organization":"Insticator, Inc"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 01 Aug 2025 00:00:00 GMT","end":"Fri, 21 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"11:CE:C7:8C:E7:D7:B4:B1:19:4D:9C:26:9C:AD:73:AC:BA:12:FA:18","sha256":"E2:A2:BE:73:E9:41:97:77:34:F4:2C:35:01:2D:7E:C4:1E:C4:12:19:9C:1B:08:D1:F8:2E:2C:40:9A:31:D3:C0"}}},"request":{"raw":"OPTIONS /v1/openrtb HTTP/1.1\r\nHost: ex.ingage.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://money.ca/\r\nOrigin: https://money.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 24 Sep 2025 03:04:23 GMT\r\ncf-ray: 983f0ddd382056ae-OSL\r\nvary: Origin, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://money.ca\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: content-type\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"track.kueezrtb.com/dye?ac=2\u0026acm=G3L\u0026uid=be5cdac8e005e820\u0026sid=34ec2ed1ee696ea0\u0026pvi=89bcafefc05ee524\u0026h=money.ca\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=81\u0026cc=NO\u0026ig=0\u0026uri=%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026furl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026sr=1280x1024\u0026type=latest:br\u0026_=1758683063864\u0026bidder=kueezrtb\u0026at=display\u0026v=1\u0026acid=64dcd6552888555c21f4eb75","fqdn":"track.kueezrtb.com","domain":"kueezrtb.com","tld":"com"},"ip":{"addr":"172.66.162.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kueezrtb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 31 Jul 2025 04:22:42 GMT","end":"Wed, 29 Oct 2025 05:22:40 GMT"},"fingerprint":{"sha1":"72:9A:34:A6:6E:6C:F2:12:4C:CD:21:43:69:9D:B4:AE:A6:E2:BD:C1","sha256":"74:FD:00:85:48:5B:6D:03:90:97:6C:48:C6:0B:F9:7E:AB:0F:30:71:82:29:09:7B:3D:3A:D7:32:40:B2:4D:4D"}}},"request":{"raw":"GET /dye?ac=2\u0026acm=G3L\u0026uid=be5cdac8e005e820\u0026sid=34ec2ed1ee696ea0\u0026pvi=89bcafefc05ee524\u0026h=money.ca\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=81\u0026cc=NO\u0026ig=0\u0026uri=%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026furl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026sr=1280x1024\u0026type=latest:br\u0026_=1758683063864\u0026bidder=kueezrtb\u0026at=display\u0026v=1\u0026acid=64dcd6552888555c21f4eb75 HTTP/1.1\r\nHost: track.kueezrtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nCookie: kuid=b4c606a6d5e7c1f9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 24 Sep 2025 03:04:24 GMT\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 983f0dddbc338be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prompts.maze.co/api/widgets","fqdn":"prompts.maze.co","domain":"maze.co","tld":"co"},"ip":{"addr":"52.20.24.97","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:24.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.maze.co","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Thu, 06 Feb 2025 00:00:00 GMT","end":"Sun, 08 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B4:BE:FD:47:42:9C:36:0C:12:50:AC:5B:8A:9C:04:80:96:8A:1C:C7","sha256":"DF:4F:DD:32:A3:BF:F7:D1:76:97:9F:0B:DA:9A:2A:02:D7:9E:69:0F:FD:5A:30:88:B1:5B:31:3D:95:D5:F7:15"}}},"request":{"raw":"POST /api/widgets HTTP/1.1\r\nHost: prompts.maze.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.ca/\r\nContent-Type: application/json\r\nx-api-key: 39c04b56-367f-42a0-b085-6d5c1e803145\r\nx-maze-snippet-src: contextual-widget\r\nx-maze-correlation-id: 1758683063411-4016.968874896156\r\nContent-Length: 2\r\nOrigin: https://money.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:24 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"2-l9Fw4VUO7kr8CvBlt4zaMCqXZ0w\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-04-03T17:32:01.246946Z","times_seen":225468,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"measureadv.com/userIframe?gdpr=0\u0026gdpr_consent=\u0026p=3\u0026redirect=https://csync.smilewanted.com/set_partner_userid_get/videoheroes/{UID}","fqdn":"measureadv.com","domain":"measureadv.com","tld":"com"},"ip":{"addr":"204.62.14.130","port":443,"asn":46636,"as":"NATCOWEB","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://csync.smilewanted.com/","date":"2025-09-24T03:04:29.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"measureadv.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 21 Jul 2025 11:25:02 GMT","end":"Sun, 19 Oct 2025 11:25:02 GMT"},"fingerprint":{"sha1":"7E:05:8D:8A:84:BD:68:38:FF:D5:7E:2C:86:E1:46:15:2A:69:97:6A","sha256":"CB:B4:A7:C0:8B:DE:85:F0:5C:B2:71:CC:15:1A:C2:D9:DB:35:2C:01:F5:88:E1:B4:3E:07:87:95:CF:84:E7:1E"}}},"request":{"raw":"GET /userIframe?gdpr=0\u0026gdpr_consent=\u0026p=3\u0026redirect=https://csync.smilewanted.com/set_partner_userid_get/videoheroes/{UID} HTTP/1.1\r\nHost: measureadv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csync.smilewanted.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nSet-Cookie: new=1; path=/; expires=Wed, 24 Sep 2025 03:34:30 GMT; samesite=none; secure; httponly\nuid=4aca0c30-6d1f-56a2-8131-a46aec2baa38; path=/; expires=Fri, 24 Oct 2025 03:04:30 GMT; samesite=none; secure; httponly\r\nAccess-Control-Allow-Origin: https://csync.smilewanted.com\r\nAccess-Control-Allow-Credentials: true\r\nDate: Wed, 24 Sep 2025 03:04:30 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1086,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1086), with no line terminators","md5":"01d2bf738469d83eee27337bb7b60f55","sha1":"82754ea229aeb9e5c2e3ffd83ca2e41c6cf3ca2e","sha256":"e67feeacbb3563701a90f8eb5b79d96df1557e11338d1031c93a71822fbdb08b","sha512":"e29b2b31c0f6209aebeebc68b896d60e3b9caccc788b0223193f7de3b4ca62d9c252683b45b6140eb6c5bfd386d4f9e6624f147f9d65714beb5369225ac73495","ssdeep":"","tlshash":"8f11ddfbd18d086fe60269f5c4c0946c589ba59b7f9000889ffe207f31184dbc8b224c","first_seen":"2025-09-22T16:09:05.415539Z","last_seen":"2025-09-24T03:23:40.908748Z","times_seen":16,"resource_available":false,"data":null}},"time_used":2606,"timings":{"blocked":1282,"dns":0,"connect":97,"send":0,"wait":98,"receive":0,"ssl":1123},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/img/financial-post.svg","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:21.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"money.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:25:31 GMT","end":"Mon, 24 Nov 2025 16:25:29 GMT"},"fingerprint":{"sha1":"A5:8A:11:35:E2:18:EF:C0:E0:2A:61:E3:CE:0F:31:56:42:55:F0:FC","sha256":"C0:5A:4D:B1:BE:57:72:CF:9E:D8:17:5E:01:A3:0D:F8:4C:C1:16:16:8B:65:8B:CA:3B:CC:32:C3:E9:15:71:EF"}}},"request":{"raw":"GET /img/financial-post.svg HTTP/1.1\r\nHost: money.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account\r\nCookie: SSID_9H80=CQDn9B0AAAAAAAC0X9NohcaCGLRf02gBAAAAAAAAAAAAtF_TaADc7g; SSSC_9H80=1013.G7553486227140429445.1|0.0; SSRT_9H80=tF_TaAABAA; money_session=eyJpdiI6Inlqb015WmpKSkJhakh6SzMyN3VheFE9PSIsInZhbHVlIjoiT2pIcnNveGVobXNrS1FIUkZZZDd4ZWRNNkd0UTZPcnUveStFd09kNDY3T3ZtbEV0RXlLbXNadTFDS2Q0eC8wUGIyemFQaEdKVlVHb1MyRXNvb3NHYmN3ZkpwVy9ySHBBN1JCWEVmbkNraWhld3l1Rm5WTXd3VU53Zk52aHFEeGwiLCJtYWMiOiJmZDFlNmVjOGI0MDQxMmEzM2I4ZDAwMWNmMzY4Y2QyYjZlNzUyY2ZmODNiNjJhMDcxZjBhYzEwZTY3Yjk0ZjIwIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkVvY3h6L1FXSXBwbXVzYm1qUTlieXc9PSIsInZhbHVlIjoiSUM1b01ISkcyT0xMWFBCZVFsQUxUSitIbnNYNVhpTkRQR2wvcWJlQkx0a09hQVhxRXgwT3NFcXpVOWkzdkR2QTRRdkVJYzBlbU10VlpHb1RpYWhFNUhuMDBLaEs4L3BTVTBFYmIvNzJmekR3bmsrSzZJQkhtbDUzUDEySFhOU3kiLCJtYWMiOiJhMjFkMzNlZWRjMWJiMjcwOTY0YzY0NzQ0OTI2YWFiYTIwZWI2MGY4MDlkMTA2MzVlMjc2YTRhYzdiMGM5ZjJlIiwidGFnIjoiIn0%3D; __cf_bm=.U3YtFNih3m1w6FCrnkhu9tGuUHymVGomrTcpO.A40w-1758683061-1.0.1.1-HamIbNq.vNx7npxwSP0wqoYClS3Y3B42WO1UNnXOMO6bSheMocH.v_b7Q.nhvQVLVKnDsPdTSCXB4bPsND1B3RB70gSD0SuE2XX4dl_bXM0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:21 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 08 Aug 2024 16:09:40 GMT\r\netag: W/\"66b4edc4-12f4\"\r\ncf-cache-status: HIT\r\nexpires: Wed, 24 Sep 2025 07:04:21 GMT\r\ncache-control: public, max-age=14400\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 983f0dce2e321a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4852,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"18912e309245fb8d62e29ab45959f1f8","sha1":"58f34fe393af240a44f639eac900ed2d87d84511","sha256":"2d3520c5d6cf044bf5d62d0976a56533d510a24056328a2a994a9ef7621ad540","sha512":"666d6229d858d50aba053b46633d648eb7babd718ff0114e91893f43500d1783f025eb2dc848031bd1872e21930f8230199e6deef87eda65e8e8b07c88e552d1","ssdeep":"96:DwBaWc8E8Aowv7LM4voev8kr7YZAMRM5ItPaW04hnQwElEgtsJ:DDWA8AowvvtvoS8krHGM5ItCWpElEDJ","tlshash":"79a165be03305baea8c39ba4c965204576f5d8c7f17ee2cc972b2c229c059fb4570d11","first_seen":"2025-09-20T03:59:22.723463Z","last_seen":"2025-09-24T03:05:07.418673Z","times_seen":2,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtrack.kueezrtb.com/dye?ac=2\u0026acm=G3L\u0026uid=be5cdac8e005e820\u0026sid=34ec2ed1ee696ea0\u0026pvi=89bcafefc05ee524\u0026h=money.ca\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=81\u0026uri=%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026furl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026sr=1280x1024\u0026type=latest:init\u0026_=1758683063362","fqdn":"gtrack.kueezrtb.com","domain":"kueezrtb.com","tld":"com"},"ip":{"addr":"172.66.162.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kueezrtb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 31 Jul 2025 04:22:42 GMT","end":"Wed, 29 Oct 2025 05:22:40 GMT"},"fingerprint":{"sha1":"72:9A:34:A6:6E:6C:F2:12:4C:CD:21:43:69:9D:B4:AE:A6:E2:BD:C1","sha256":"74:FD:00:85:48:5B:6D:03:90:97:6C:48:C6:0B:F9:7E:AB:0F:30:71:82:29:09:7B:3D:3A:D7:32:40:B2:4D:4D"}}},"request":{"raw":"GET /dye?ac=2\u0026acm=G3L\u0026uid=be5cdac8e005e820\u0026sid=34ec2ed1ee696ea0\u0026pvi=89bcafefc05ee524\u0026h=money.ca\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=81\u0026uri=%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026furl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026sr=1280x1024\u0026type=latest:init\u0026_=1758683063362 HTTP/1.1\r\nHost: gtrack.kueezrtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 24 Sep 2025 03:04:23 GMT\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 983f0dda4abb8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prebid.admatic.de/setuid?bidder=admaticde\u0026gdpr=\u0026gdpr_consent=\u0026f=b\u0026uid=7b456e6d-386c-43fd-bdb4-e6ab1c330954","fqdn":"prebid.admatic.de","domain":"admatic.de","tld":"de"},"ip":{"addr":"172.67.72.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://dsp-service.admatic.de/cookie_sync?r=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fadmatic%2F%24%7BUSER_ID%7D","date":"2025-09-24T03:04:29.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prebid.admatic.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Sep 2025 07:42:54 GMT","end":"Wed, 03 Dec 2025 07:42:53 GMT"},"fingerprint":{"sha1":"CC:9C:F8:02:B1:15:15:93:74:79:C8:B5:DE:02:6C:8B:7B:5B:4A:AC","sha256":"97:3C:A2:E3:50:C5:18:23:B7:F8:43:27:0E:AA:5B:32:53:FF:27:E2:A8:63:68:6D:13:A5:A4:64:D7:FB:3A:8C"}}},"request":{"raw":"GET /setuid?bidder=admaticde\u0026gdpr=\u0026gdpr_consent=\u0026f=b\u0026uid=7b456e6d-386c-43fd-bdb4-e6ab1c330954 HTTP/1.1\r\nHost: prebid.admatic.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dsp-service.admatic.de/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid=ec240dc9-4059-4ccd-b7f1-c00942a6ec97\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 24 Sep 2025 03:04:29 GMT\r\nlocation: https://static.cdn.admatic.de/cookie.html?bidder=admaticde\u0026gdpr=\u0026gdpr_consent=\u0026f=b\u0026uid=7b456e6d-386c-43fd-bdb4-e6ab1c330954\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oKraFydIsPr5SS%2B61NxImwGCYWeQSw90F4TuJqqDB6ng8yXOo3wstzzh0fSDauabMpe6nAngsjCeQd7%2BF8y4lqEo4zoTM4S2GCZNCrGHo6g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 983f0dfef8e349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1122,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":32,"dns":1,"connect":1,"send":0,"wait":3,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diffuser-cdn.app-us1.com/diffuser/diffuser.js","fqdn":"diffuser-cdn.app-us1.com","domain":"app-us1.com","tld":"com"},"ip":{"addr":"104.17.31.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:22.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"diffuser-cdn.app-us1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 20:01:29 GMT","end":"Fri, 21 Nov 2025 21:01:28 GMT"},"fingerprint":{"sha1":"36:D4:54:42:CF:B2:9C:F7:2D:B5:96:24:5A:A1:3D:61:3F:BC:B1:EB","sha256":"97:28:E8:93:0E:CE:D2:F5:55:FE:FA:5A:A5:71:E3:C6:B9:CC:5B:BF:35:89:DD:34:69:BB:73:3F:DB:5D:7E:13"}}},"request":{"raw":"GET /diffuser/diffuser.js HTTP/1.1\r\nHost: diffuser-cdn.app-us1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:23 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 983f0dd7bee7712b-OSL\r\nlast-modified: Mon, 30 Jun 2025 16:13:30 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=300\r\netag: W/\"274303dc8790bba62abecc91ffe4b219\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3c07e6ef6fe5c74a2c43590885d64f70.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: FRA60-P10\r\nx-amz-cf-id: lupC-pp8cSZ39ysw2oXMhf68UU6xsj7LCkBnHUJzhwHeWkeDy9Qcwg==\r\ncf-cache-status: HIT\r\nage: 155\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33374,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33373), with no line terminators","md5":"274303dc8790bba62abecc91ffe4b219","sha1":"eac79f2788461329bd2f974cdf4458f7fba7cbaf","sha256":"864bbaab9db5147e7737b81d4b5da99db6d33fb79c63250ed79fa1962c30837e","sha512":"dff2cdab291e0fbd0c45c6270173ae288fc76f98f299d8c80dfaf50fb53c63f27acf03ce2221268f82791df67607ce6e1e72d1d31adfb6adea71f494482bdf82","ssdeep":"384:+NRlCUNerPSlP9xOeHyZp0/qMF3+qeKtYY2Dee5indvfKNBxyhZ95CMGWi:6RlErCMe0OqMF3+NXsxfKpyhZnut","tlshash":"c9e264c87991f0e246d3a179003f110bb27969a6a8ecd4c0e771d4e0beba59e4353f6d","first_seen":"2025-06-30T17:37:26.892977Z","last_seen":"2026-04-03T16:38:25.625092Z","times_seen":5604,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":63,"dns":1,"connect":1,"send":0,"wait":13,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otrack.kueezrtb.com/dye?ac=2\u0026acm=G3L\u0026uid=be5cdac8e005e820\u0026sid=34ec2ed1ee696ea0\u0026pvi=89bcafefc05ee524\u0026h=money.ca\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=81\u0026uri=%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026furl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026sr=1280x1024\u0026type=latest:preinit\u0026_=1758683063358","fqdn":"otrack.kueezrtb.com","domain":"kueezrtb.com","tld":"com"},"ip":{"addr":"172.66.162.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kueezrtb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 31 Jul 2025 04:22:42 GMT","end":"Wed, 29 Oct 2025 05:22:40 GMT"},"fingerprint":{"sha1":"72:9A:34:A6:6E:6C:F2:12:4C:CD:21:43:69:9D:B4:AE:A6:E2:BD:C1","sha256":"74:FD:00:85:48:5B:6D:03:90:97:6C:48:C6:0B:F9:7E:AB:0F:30:71:82:29:09:7B:3D:3A:D7:32:40:B2:4D:4D"}}},"request":{"raw":"GET /dye?ac=2\u0026acm=G3L\u0026uid=be5cdac8e005e820\u0026sid=34ec2ed1ee696ea0\u0026pvi=89bcafefc05ee524\u0026h=money.ca\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=81\u0026uri=%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026furl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026sr=1280x1024\u0026type=latest:preinit\u0026_=1758683063358 HTTP/1.1\r\nHost: otrack.kueezrtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 24 Sep 2025 03:04:23 GMT\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 983f0dda4ab48be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/user-cookies.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:21.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"money.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:25:31 GMT","end":"Mon, 24 Nov 2025 16:25:29 GMT"},"fingerprint":{"sha1":"A5:8A:11:35:E2:18:EF:C0:E0:2A:61:E3:CE:0F:31:56:42:55:F0:FC","sha256":"C0:5A:4D:B1:BE:57:72:CF:9E:D8:17:5E:01:A3:0D:F8:4C:C1:16:16:8B:65:8B:CA:3B:CC:32:C3:E9:15:71:EF"}}},"request":{"raw":"GET /js/user-cookies.js?cb=432 HTTP/1.1\r\nHost: money.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account\r\nCookie: SSID_9H80=CQDn9B0AAAAAAAC0X9NohcaCGLRf02gBAAAAAAAAAAAAtF_TaADc7g; SSSC_9H80=1013.G7553486227140429445.1|0.0; SSRT_9H80=tF_TaAABAA; money_session=eyJpdiI6Inlqb015WmpKSkJhakh6SzMyN3VheFE9PSIsInZhbHVlIjoiT2pIcnNveGVobXNrS1FIUkZZZDd4ZWRNNkd0UTZPcnUveStFd09kNDY3T3ZtbEV0RXlLbXNadTFDS2Q0eC8wUGIyemFQaEdKVlVHb1MyRXNvb3NHYmN3ZkpwVy9ySHBBN1JCWEVmbkNraWhld3l1Rm5WTXd3VU53Zk52aHFEeGwiLCJtYWMiOiJmZDFlNmVjOGI0MDQxMmEzM2I4ZDAwMWNmMzY4Y2QyYjZlNzUyY2ZmODNiNjJhMDcxZjBhYzEwZTY3Yjk0ZjIwIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkVvY3h6L1FXSXBwbXVzYm1qUTlieXc9PSIsInZhbHVlIjoiSUM1b01ISkcyT0xMWFBCZVFsQUxUSitIbnNYNVhpTkRQR2wvcWJlQkx0a09hQVhxRXgwT3NFcXpVOWkzdkR2QTRRdkVJYzBlbU10VlpHb1RpYWhFNUhuMDBLaEs4L3BTVTBFYmIvNzJmekR3bmsrSzZJQkhtbDUzUDEySFhOU3kiLCJtYWMiOiJhMjFkMzNlZWRjMWJiMjcwOTY0YzY0NzQ0OTI2YWFiYTIwZWI2MGY4MDlkMTA2MzVlMjc2YTRhYzdiMGM5ZjJlIiwidGFnIjoiIn0%3D; __cf_bm=.U3YtFNih3m1w6FCrnkhu9tGuUHymVGomrTcpO.A40w-1758683061-1.0.1.1-HamIbNq.vNx7npxwSP0wqoYClS3Y3B42WO1UNnXOMO6bSheMocH.v_b7Q.nhvQVLVKnDsPdTSCXB4bPsND1B3RB70gSD0SuE2XX4dl_bXM0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 23 Sep 2025 13:52:06 GMT\r\netag: W/\"68d2a606-1298\"\r\ncf-cache-status: HIT\r\nexpires: Wed, 24 Sep 2025 07:04:21 GMT\r\ncache-control: public, max-age=14400\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 983f0dce0e131a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4760,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4759)","md5":"57620256b84a682e72bffb0411725d9d","sha1":"c5ba1a8a9505c157b387d10a2235b2f4feb95808","sha256":"e47c65fee501f26658d0f5ed23b4fab42a63ea9a5308d27318682c5128825c30","sha512":"57a75696a3fc1f18cbe97a09127011686c025f68f3ea060bab51b137fc79f96563fecb5225bfc22b8eeab46c6b6adb2dd8273c14deab9d525c2c977eeac46db8","ssdeep":"96:GYl4CQ49Q95GvGv6uk1HB+LKu5hzufKLbCIRZr54LV/SxhO4nw:zfQn+GvCYLKu5hzufYbCIRZro/SxhOEw","tlshash":"89a14524620478f958b720662bf6f38474e0c1207881ed14853eb169bd78ed7b8f1bfa","first_seen":"2025-07-07T15:32:00.268585Z","last_seen":"2025-09-24T03:05:07.420346Z","times_seen":4,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"media1.money.ca/creatives/459/KZT2r8nbXqpDiNN5ygC9yGPABPk1F8qDIUEFuwkN.jpg","fqdn":"media1.money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:21.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"money.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:25:31 GMT","end":"Mon, 24 Nov 2025 16:25:29 GMT"},"fingerprint":{"sha1":"A5:8A:11:35:E2:18:EF:C0:E0:2A:61:E3:CE:0F:31:56:42:55:F0:FC","sha256":"C0:5A:4D:B1:BE:57:72:CF:9E:D8:17:5E:01:A3:0D:F8:4C:C1:16:16:8B:65:8B:CA:3B:CC:32:C3:E9:15:71:EF"}}},"request":{"raw":"GET /creatives/459/KZT2r8nbXqpDiNN5ygC9yGPABPk1F8qDIUEFuwkN.jpg HTTP/1.1\r\nHost: media1.money.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nCookie: SSID_9H80=CQDn9B0AAAAAAAC0X9NohcaCGLRf02gBAAAAAAAAAAAAtF_TaADc7g; SSSC_9H80=1013.G7553486227140429445.1|0.0; SSRT_9H80=tF_TaAABAA; money_session=eyJpdiI6Inlqb015WmpKSkJhakh6SzMyN3VheFE9PSIsInZhbHVlIjoiT2pIcnNveGVobXNrS1FIUkZZZDd4ZWRNNkd0UTZPcnUveStFd09kNDY3T3ZtbEV0RXlLbXNadTFDS2Q0eC8wUGIyemFQaEdKVlVHb1MyRXNvb3NHYmN3ZkpwVy9ySHBBN1JCWEVmbkNraWhld3l1Rm5WTXd3VU53Zk52aHFEeGwiLCJtYWMiOiJmZDFlNmVjOGI0MDQxMmEzM2I4ZDAwMWNmMzY4Y2QyYjZlNzUyY2ZmODNiNjJhMDcxZjBhYzEwZTY3Yjk0ZjIwIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkVvY3h6L1FXSXBwbXVzYm1qUTlieXc9PSIsInZhbHVlIjoiSUM1b01ISkcyT0xMWFBCZVFsQUxUSitIbnNYNVhpTkRQR2wvcWJlQkx0a09hQVhxRXgwT3NFcXpVOWkzdkR2QTRRdkVJYzBlbU10VlpHb1RpYWhFNUhuMDBLaEs4L3BTVTBFYmIvNzJmekR3bmsrSzZJQkhtbDUzUDEySFhOU3kiLCJtYWMiOiJhMjFkMzNlZWRjMWJiMjcwOTY0YzY0NzQ0OTI2YWFiYTIwZWI2MGY4MDlkMTA2MzVlMjc2YTRhYzdiMGM5ZjJlIiwidGFnIjoiIn0%3D; __cf_bm=.U3YtFNih3m1w6FCrnkhu9tGuUHymVGomrTcpO.A40w-1758683061-1.0.1.1-HamIbNq.vNx7npxwSP0wqoYClS3Y3B42WO1UNnXOMO6bSheMocH.v_b7Q.nhvQVLVKnDsPdTSCXB4bPsND1B3RB70gSD0SuE2XX4dl_bXM0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:21 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 29576\r\ncf-ray: 983f0dce5e531a30-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: degrade=85, origSize=34373, status=vary_header_present\r\netag: \"900cac6ae3e5e10161505430a0a4c684\"\r\nlast-modified: Wed, 26 Mar 2025 16:35:11 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 485f9ba84065b3ff587a6c536942e6c0.cloudfront.net (CloudFront)\r\nx-amz-cf-id: nB5pGHmTgWloEEQFWnHNdj3PM5kGK_rZC5pjoNUNDNbDHe4oDoUEpQ==\r\nx-amz-cf-pop: VIE50-C2\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: SwtQ_RxH374Ye4REYAXhw9D2BMEkN2Gp\r\nx-cache: RefreshHit from cloudfront\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: HIT\r\nexpires: Sat, 25 Oct 2025 03:04:21 GMT\r\ncache-control: public, max-age=2678400\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":29576,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"b2826cc6750d7414d41ef74fc60c48c4","sha1":"1b13f60f377437f989d8ac14f0b225bf4f37bad3","sha256":"307cf0717733c97a1e86239225cc7fb44eff11c4a56f2596594ae96339fb7842","sha512":"3f664728a81e18c5e67c882053d42b657566cad92fba14239ef87cff8afae67b824897bc86a781a28c10c9527de3332cca42c934633b8945be4190e8b7786b53","ssdeep":"768:3bk/vEcAfxUu1nklIZhxiKoO4RV02/28CufEs7gnyo:751ZZhAKoO4RVneux7gyo","tlshash":"87d2f11e50a0a2b38c9dd3fdd4461d6e71d2f64f3309ee245415d6a43be9d0a0eab0ae","first_seen":"2025-09-20T03:59:22.713289Z","last_seen":"2025-09-24T03:05:07.42095Z","times_seen":2,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/favicons/moc/favicon-16x16.png","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"money.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:25:31 GMT","end":"Mon, 24 Nov 2025 16:25:29 GMT"},"fingerprint":{"sha1":"A5:8A:11:35:E2:18:EF:C0:E0:2A:61:E3:CE:0F:31:56:42:55:F0:FC","sha256":"C0:5A:4D:B1:BE:57:72:CF:9E:D8:17:5E:01:A3:0D:F8:4C:C1:16:16:8B:65:8B:CA:3B:CC:32:C3:E9:15:71:EF"}}},"request":{"raw":"GET /favicons/moc/favicon-16x16.png HTTP/1.1\r\nHost: money.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account\r\nCookie: SSID_9H80=CQDn9B0AAAAAAAC0X9NohcaCGLRf02gBAAAAAAAAAAAAtF_TaADc7g; SSSC_9H80=1013.G7553486227140429445.1|0.0; SSRT_9H80=tF_TaAABAA; money_session=eyJpdiI6ImxTWWgrS3RqYVRvUVFXWTMxSFJxeWc9PSIsInZhbHVlIjoiSTdQZkg3N1VtbUtUVHF2VUFJSWlnQ0tkN2tWUDJMSm5wVW1nWFZPL0hEbDFORGlRNXhndkc4WkFCQkpubmxhQnRTdVl0dkE0aHFDN2E1QlM0Rk1PdC9FSHVncHdqMUY4aHNiK0dSY3RiMHgyTEgrN2ZwZ1RlWnNscy8zT09KNlYiLCJtYWMiOiJmNTdlYTM2ZTQzOTRlMWYwYjg5NTBiYmJjNWM2MzZlY2E0OWIxZGM5ZTRmZGExM2Q5ZTRiODFhMTY4YWEzMjRiIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6ImNLQ0dNOHBFamlZbnI1QUV5Zzg2bUE9PSIsInZhbHVlIjoiMWtyRmhBTFkwdkduQlNwTStueldJY1ZWb0g5Ni9oaEhZSmIwWDVPS3FHKzR6T1hMUHhvUzFHNjE3WlBSTzBMYmNQQkt5N01mMkJFZjZTYXlPTjVxY3czd0prSThoNDNFYVRpNlJ5aXNBbGhEcUxWNEt4Z2UwMlpqRnVodW5UcFAiLCJtYWMiOiIyN2MxODA3Nzc5MWE3NmVhM2RlNjgwOTFjZWEyN2MzNDFjYWNlZWNlMmY2MWFhZTIzOTBjY2IyNGE0MDkzNjE2IiwidGFnIjoiIn0%3D; __cf_bm=.U3YtFNih3m1w6FCrnkhu9tGuUHymVGomrTcpO.A40w-1758683061-1.0.1.1-HamIbNq.vNx7npxwSP0wqoYClS3Y3B42WO1UNnXOMO6bSheMocH.v_b7Q.nhvQVLVKnDsPdTSCXB4bPsND1B3RB70gSD0SuE2XX4dl_bXM0; utm_source=direct; user_meta=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22null%22%2C%22utm_campaign%22%3A%22null%22%2C%22utm_content%22%3A%22null%22%2C%22utm_term%22%3A%22null%22%2C%22device_category%22%3A%22unknown%22%2C%22geo%22%3A%7B%22query%22%3A%2291.90.42.154%22%2C%22country%22%3A%22NO%22%2C%22regionName%22%3A%22Oslo%22%2C%22timezone%22%3A%22Europe%2FOslo%22%2C%22region%22%3A%2203%22%2C%22city%22%3A%22Oslo%22%2C%22zip%22%3A%220001%22%2C%22metro-code%22%3Anull%2C%22lon%22%3A%2210.74609%22%2C%22lat%22%3A%2259.91273%22%2C%22continent%22%3A%22EU%22%7D%7D; scottie_user_attributes=%7B%22nav%22%3A%7B%22uEntryPath%22%3A%22%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account%22%7D%2C%22user%22%3A%7B%22email%22%3Anull%2C%22first_name%22%3Anull%2C%22last_name%22%3Anull%7D%7D; scottie_session_attributes=%7B%22nav%22%3A%7B%22s_referrer%22%3A%22r.search.yahoo.com%22%2C%22page_count%22%3A1%2C%22sEntryPath%22%3A%22%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account%22%7D%2C%22ay_imp_s%22%3Afalse%2C%22created_at%22%3A1758683062%2C%22s_article_id%22%3A85597%2C%22nav_attrs%22%3A%7B%22siteSpectVariant%22%3Anull%2C%22siteSpectExperienceID%22%3Anull%2C%22siteSpectCampaignName%22%3Anull%7D%2C%22utm%22%3A%7B%22utm_source%22%3Anull%2C%22utm_medium%22%3Anull%2C%22utm_campaign%22%3Anull%2C%22utm_content%22%3Anull%2C%22utm_term%22%3Anull%7D%2C%22reporting_channel%22%3A%22organic_search%22%2C%22s_entry_channel%22%3A%22organic%20news%22%2C%22member_status%22%3A%22none%22%7D; suid=06864235-3ff4-4481-9403-3a43c185cfd3; scottie_session=c0fb5510-9f43-4eee-b60a-f30d4dc24e49; _v_id_l={%22_v_id%22:%2236088682079960021758683062540%22%2C%22_la%22:1758683062540}; ribn_params=%7B%7D; kndctr_9CE579FD5DCD8B590A495E09_AdobeOrg_identity=CiY2NDMwMDQ5ODEyODI2NTcxNDQ4MjkyNDMxMTYyMzE5MDQwNTQ2N1ITCLjFt82XMxABGAEqBElSTDEwAPABuMW3zZcz; kndctr_9CE579FD5DCD8B590A495E09_AdobeOrg_cluster=irl1; cw-test-20250625_prebid-v2-test_1_99=control; cw-test-00000000_stand-alone-floors-facade-hardFloor_85_15=fallo; cw-test-00000000_stand-alone-floors-facade-multiplier_90_10=multa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 274\r\ncf-ray: 983f0dd9a8f21a30-OSL\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origFmt=png, origSize=383\r\ncontent-disposition: inline; filename=\"favicon-16x16.webp\"\r\nvary: Accept\r\netag: \"66b4edc4-17f\"\r\nlast-modified: Thu, 08 Aug 2024 16:09:40 GMT\r\ncf-cache-status: HIT\r\nexpires: Wed, 24 Sep 2025 07:04:23 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":274,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8cb1914f547318145306d013bbfe56e9","sha1":"15e1ebbe33d4f6772a487ab186717cdfba608c9c","sha256":"5187ff93d920f53bd9938849ca0c7b5e028f6aa0f02eed73405b71becf5c6211","sha512":"3cf6843143ffb8e41db939776a1f73c05813d2e924de9bd334e2a6b565e15527fd18c8985d21304018f61396754234bbaafcaf419f10cd5bd8a3956227683759","ssdeep":"","tlshash":"21d09581d7fb75d47363f4061e4d024dc1a4de558155214303eb0cd4a5b746437f99db","first_seen":"2025-09-20T03:59:22.74205Z","last_seen":"2025-09-24T03:05:07.423517Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smetrics.money.ca/ee/irl1/v1/interact?configId=352cd1c4-9de7-44e8-9af1-c5b91a5dd36e\u0026requestId=591ef702-2ef2-47bb-ad46-6cd56db0bb68","fqdn":"smetrics.money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"63.140.62.139","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:32.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smetrics.money.ca","organization":"Adobe Systems Incorporated"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 08 Nov 2024 00:00:00 GMT","end":"Tue, 09 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"BD:9D:45:42:F1:51:B6:FC:C3:46:DD:91:63:F8:1C:08:DD:F8:C6:D2","sha256":"E8:E6:F4:32:80:A3:9E:EF:20:8A:23:85:E2:8F:CF:4D:57:4D:44:73:8E:38:09:E0:1F:E9:FA:DA:EF:BB:3E:95"}}},"request":{"raw":"POST /ee/irl1/v1/interact?configId=352cd1c4-9de7-44e8-9af1-c5b91a5dd36e\u0026requestId=591ef702-2ef2-47bb-ad46-6cd56db0bb68 HTTP/1.1\r\nHost: smetrics.money.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account\r\nContent-Type: text/plain; charset=UTF-8\r\nContent-Length: 2179\r\nOrigin: https://money.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SSID_9H80=CQDn9B0AAAAAAAC0X9NohcaCGLRf02gBAAAAAAAAAAAAtF_TaADc7g; SSSC_9H80=1013.G7553486227140429445.1|0.0; SSRT_9H80=t1_TaAADAA; money_session=eyJpdiI6ImxTWWgrS3RqYVRvUVFXWTMxSFJxeWc9PSIsInZhbHVlIjoiSTdQZkg3N1VtbUtUVHF2VUFJSWlnQ0tkN2tWUDJMSm5wVW1nWFZPL0hEbDFORGlRNXhndkc4WkFCQkpubmxhQnRTdVl0dkE0aHFDN2E1QlM0Rk1PdC9FSHVncHdqMUY4aHNiK0dSY3RiMHgyTEgrN2ZwZ1RlWnNscy8zT09KNlYiLCJtYWMiOiJmNTdlYTM2ZTQzOTRlMWYwYjg5NTBiYmJjNWM2MzZlY2E0OWIxZGM5ZTRmZGExM2Q5ZTRiODFhMTY4YWEzMjRiIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6ImNLQ0dNOHBFamlZbnI1QUV5Zzg2bUE9PSIsInZhbHVlIjoiMWtyRmhBTFkwdkduQlNwTStueldJY1ZWb0g5Ni9oaEhZSmIwWDVPS3FHKzR6T1hMUHhvUzFHNjE3WlBSTzBMYmNQQkt5N01mMkJFZjZTYXlPTjVxY3czd0prSThoNDNFYVRpNlJ5aXNBbGhEcUxWNEt4Z2UwMlpqRnVodW5UcFAiLCJtYWMiOiIyN2MxODA3Nzc5MWE3NmVhM2RlNjgwOTFjZWEyN2MzNDFjYWNlZWNlMmY2MWFhZTIzOTBjY2IyNGE0MDkzNjE2IiwidGFnIjoiIn0%3D; __cf_bm=.U3YtFNih3m1w6FCrnkhu9tGuUHymVGomrTcpO.A40w-1758683061-1.0.1.1-HamIbNq.vNx7npxwSP0wqoYClS3Y3B42WO1UNnXOMO6bSheMocH.v_b7Q.nhvQVLVKnDsPdTSCXB4bPsND1B3RB70gSD0SuE2XX4dl_bXM0; _v_id_l={%22_v_id%22:%2236088682079960021758683062540%22%2C%22_la%22:1758683072403}; kndctr_9CE579FD5DCD8B590A495E09_AdobeOrg_identity=CiY2NDMwMDQ5ODEyODI2NTcxNDQ4MjkyNDMxMTYyMzE5MDQwNTQ2N1ITCLjFt82XMxABGAEqBElSTDEwAPABuMW3zZcz; kndctr_9CE579FD5DCD8B590A495E09_AdobeOrg_cluster=irl1; _ga_HPYYC0GT7P=GS2.1.s1758683062$o1$g0$t1758683062$j60$l0$h0; _ga=GA1.1.1612852284.1758683063; _gcl_au=1.1.679143361.1758683063; AMCV_9CE579FD5DCD8B590A495E09%40AdobeOrg=MCMID|64300498128265714482924311623190405467\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nx-request-id: 591ef702-2ef2-47bb-ad46-6cd56db0bb68-cedd124d954f4c1d\r\nvary: Origin\r\naccess-control-allow-origin: https://money.ca\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID\r\ndate: Wed, 24 Sep 2025 03:04:32 GMT\r\nx-konductor: 25.7.27-HEAD-SNAPSHOT:da08a1db6\r\nx-adobe-edge: IRL1;6\r\nserver: jag\r\nset-cookie: kndctr_9CE579FD5DCD8B590A495E09_AdobeOrg_cluster=irl1; Max-Age=1800; Domain=money.ca; Path=/; Secure; SameSite=None; $x-enc=URI_ENCODING\r\ncontent-encoding: gzip\r\ncontent-type: application/json;charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, no-transform, private\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":388,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ace9827bd6314dcf3c7cdae5caba7d77","sha1":"d0e7fe795b56792d442a9ca71f7624ec7c4b3623","sha256":"058546723f6cdb0847b405a995d8cb24f72ce8c6250c714ce52123730cabe6bb","sha512":"12cdda4c670735097469d192c3415c14a44152bb2a678db6918d70de1aec861ccdcd99d3d0c07d2df3f154036066781f79ece2acba408e88efe43d71fe65d2c2","ssdeep":"","tlshash":"bae061cb1b456dd006e76e816587f27067193202e4c7800416e4d791c1cd5c4b54cd1f","first_seen":"2025-09-24T03:05:07.424895Z","last_seen":"2025-09-24T03:05:07.424895Z","times_seen":1,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/css/footer.css?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:21.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"money.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:25:31 GMT","end":"Mon, 24 Nov 2025 16:25:29 GMT"},"fingerprint":{"sha1":"A5:8A:11:35:E2:18:EF:C0:E0:2A:61:E3:CE:0F:31:56:42:55:F0:FC","sha256":"C0:5A:4D:B1:BE:57:72:CF:9E:D8:17:5E:01:A3:0D:F8:4C:C1:16:16:8B:65:8B:CA:3B:CC:32:C3:E9:15:71:EF"}}},"request":{"raw":"GET /css/footer.css?cb=432 HTTP/1.1\r\nHost: money.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account\r\nCookie: SSID_9H80=CQDn9B0AAAAAAAC0X9NohcaCGLRf02gBAAAAAAAAAAAAtF_TaADc7g; SSSC_9H80=1013.G7553486227140429445.1|0.0; SSRT_9H80=tF_TaAABAA; money_session=eyJpdiI6Inlqb015WmpKSkJhakh6SzMyN3VheFE9PSIsInZhbHVlIjoiT2pIcnNveGVobXNrS1FIUkZZZDd4ZWRNNkd0UTZPcnUveStFd09kNDY3T3ZtbEV0RXlLbXNadTFDS2Q0eC8wUGIyemFQaEdKVlVHb1MyRXNvb3NHYmN3ZkpwVy9ySHBBN1JCWEVmbkNraWhld3l1Rm5WTXd3VU53Zk52aHFEeGwiLCJtYWMiOiJmZDFlNmVjOGI0MDQxMmEzM2I4ZDAwMWNmMzY4Y2QyYjZlNzUyY2ZmODNiNjJhMDcxZjBhYzEwZTY3Yjk0ZjIwIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkVvY3h6L1FXSXBwbXVzYm1qUTlieXc9PSIsInZhbHVlIjoiSUM1b01ISkcyT0xMWFBCZVFsQUxUSitIbnNYNVhpTkRQR2wvcWJlQkx0a09hQVhxRXgwT3NFcXpVOWkzdkR2QTRRdkVJYzBlbU10VlpHb1RpYWhFNUhuMDBLaEs4L3BTVTBFYmIvNzJmekR3bmsrSzZJQkhtbDUzUDEySFhOU3kiLCJtYWMiOiJhMjFkMzNlZWRjMWJiMjcwOTY0YzY0NzQ0OTI2YWFiYTIwZWI2MGY4MDlkMTA2MzVlMjc2YTRhYzdiMGM5ZjJlIiwidGFnIjoiIn0%3D; __cf_bm=.U3YtFNih3m1w6FCrnkhu9tGuUHymVGomrTcpO.A40w-1758683061-1.0.1.1-HamIbNq.vNx7npxwSP0wqoYClS3Y3B42WO1UNnXOMO6bSheMocH.v_b7Q.nhvQVLVKnDsPdTSCXB4bPsND1B3RB70gSD0SuE2XX4dl_bXM0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:21 GMT\r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 23 Sep 2025 12:33:48 GMT\r\netag: W/\"68d293ac-535\"\r\ncf-cache-status: HIT\r\nexpires: Wed, 24 Sep 2025 07:04:21 GMT\r\ncache-control: public, max-age=14400\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 983f0dce2e311a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1333,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1332)","md5":"dea33445ed13729e93eb98d77a5a4af1","sha1":"f36c18e1369c7a394047b926a8aa2d17c474c42e","sha256":"82fcc076f3cd85112cfa0c419f2bd521d7fd07cae9d42358273aac374ede9c01","sha512":"a7becfe592f2b982bd527f33d71b80ba7686168a262276df7d3c807543352ced2b25c851ae21adf9d56fbba0dbcb1ca3b47ce0713473e451af1d9e53f3f41895","ssdeep":"","tlshash":"8d21917b11aaf1aed92e4426a5fd3988ad100052e60d8e37f45c5294f2ddbd74787302","first_seen":"2025-07-09T06:51:28.045301Z","last_seen":"2025-09-24T03:05:07.426553Z","times_seen":3,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs.admanmedia.com/c899400112bd5b9243b3993d9a074653.gif?puid=[UID]\u0026redir=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fillumin%2F%5BUID%5D\u0026gdpr=0\u0026gdpr_consent=","fqdn":"cs.admanmedia.com","domain":"admanmedia.com","tld":"com"},"ip":{"addr":"80.77.87.162","port":443,"asn":46636,"as":"NATCOWEB","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://csync.smilewanted.com/","date":"2025-09-24T03:04:29.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_128_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.admanmedia.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 08 May 2025 00:00:00 GMT","end":"Tue, 19 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"43:73:46:33:83:CE:91:DD:EB:7A:B6:0D:8F:F9:87:40:02:9A:56:93","sha256":"D5:EB:85:08:E1:A5:01:85:E3:82:7D:78:82:E3:E0:BE:EF:6C:3C:09:4F:2B:A2:1D:CF:94:79:C4:54:05:F0:DB"}}},"request":{"raw":"GET /c899400112bd5b9243b3993d9a074653.gif?puid=[UID]\u0026redir=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fillumin%2F%5BUID%5D\u0026gdpr=0\u0026gdpr_consent= HTTP/1.1\r\nHost: cs.admanmedia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csync.smilewanted.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Wed, 24 Sep 2025 03:04:30 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nSet-Cookie: admtr=d7262573-7e7a-4a4f-abd8-a5a178d6273e; path=/; domain=.admanmedia.com; expires=Wed, 01 Oct 2025 02:20:42 GMT;SameSite=None;Secure\nac_r=CS147:1759287870276; path=/; domain=.admanmedia.com; expires=Wed, 01 Oct 2025 02:20:42 GMT;SameSite=None;Secure\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nLocation: https://csync.smilewanted.com/set_partner_userid_get/illumin/d7262573-7e7a-4a4f-abd8-a5a178d6273e\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":713,"timings":{"blocked":307,"dns":11,"connect":94,"send":0,"wait":99,"receive":0,"ssl":199},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exchange.kueezrtb.com/prebid/multi/64dcd6552888555c21f4eb75","fqdn":"exchange.kueezrtb.com","domain":"kueezrtb.com","tld":"com"},"ip":{"addr":"159.203.149.115","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:24.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.kueezrtb.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 08 Sep 2025 00:00:00 GMT","end":"Fri, 09 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:6B:23:AC:12:9D:8F:23:91:F4:4E:D6:87:43:A7:68:FE:45:E7:33","sha256":"57:0E:D8:D7:08:6E:BA:F7:AB:45:7D:DB:A5:9C:E3:FB:BB:C5:E8:1F:D3:2F:72:7A:1B:08:D1:D5:8B:DB:EF:77"}}},"request":{"raw":"POST /prebid/multi/64dcd6552888555c21f4eb75 HTTP/1.1\r\nHost: exchange.kueezrtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.ca/\r\ncontent-type: text/plain\r\nContent-Length: 1033\r\nOrigin: https://money.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: kuid=b4c606a6d5e7c1f9\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Content-Range, Cache-Control\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-origin: https://money.ca\r\ncache-control: max-age=0, no-cache, must-revalidate, proxy-revalidate\r\ndate: Wed, 24 Sep 2025 03:04:24 GMT\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":532,"timings":{"blocked":173,"dns":0,"connect":99,"send":0,"wait":152,"receive":0,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.cootlogix.com/api/sync/iframe/?cid=\u0026gdpr=0\u0026gdpr_consent=\u0026us_privacy=","fqdn":"sync.cootlogix.com","domain":"cootlogix.com","tld":"com"},"ip":{"addr":"64.227.2.1","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:28.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cootlogix.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Sun, 13 Oct 2024 12:10:16 GMT","end":"Mon, 13 Oct 2025 12:10:16 GMT"},"fingerprint":{"sha1":"B1:96:69:A6:B9:3D:78:9F:77:E2:3E:E8:49:17:ED:C9:4A:6C:B7:B8","sha256":"93:11:14:16:F3:3F:87:FF:11:82:E4:E3:B8:49:A2:76:BD:49:9E:96:1F:59:66:94:16:85:F2:7F:04:A7:F6:B2"}}},"request":{"raw":"GET /api/sync/iframe/?cid=\u0026gdpr=0\u0026gdpr_consent=\u0026us_privacy= HTTP/1.1\r\nHost: sync.cootlogix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\np3p: CP=\"NOI DSP COR PSAo PSDo OUR IND UNI COM NAV ADMa\"\r\naccess-control-allow-methods: GET, HEAD, OPTIONS, POST\r\ncontent-type: text/html\r\ncontent-length: 109\r\ndate: Wed, 24 Sep 2025 03:04:28 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":109,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"9b7355ecddaf0c12398a48659278a7e6","sha1":"5181162df39733dda7a615293993d26df753d769","sha256":"a1aa01f31d4087317f5d4e5ef4ea70a73e38124a45f1553dbe8968ea16068b84","sha512":"4a50488beabb8bbe670d40ad513a3f549bbff88206c71395e53b9a6d0d91714113ce0b2a2a2ae339a481e49269cdc92c967876f297353e3a1b6f05dfe7d93a32","ssdeep":"","tlshash":"55b012f9a0425c0ae98137a34ce5d158840b358cf0805c64568e2773d049b326d210cd","first_seen":"2023-04-21T08:33:15Z","last_seen":"2026-04-03T17:04:17.829191Z","times_seen":4517,"resource_available":true,"data":null}},"time_used":633,"timings":{"blocked":265,"dns":52,"connect":99,"send":0,"wait":101,"receive":0,"ssl":113},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sync.a-mo.net/cchain?gdpr=0\u0026gdpr_consent=\u0026cb=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fadaptmx%2F%24UID","fqdn":"sync.a-mo.net","domain":"a-mo.net","tld":"net"},"ip":{"addr":"163.5.194.35","port":443,"asn":60558,"as":"Phoenix Nap, LLC.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://csync.smilewanted.com/","date":"2025-09-24T03:04:28.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.a-mo.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 Aug 2025 05:58:12 GMT","end":"Wed, 26 Nov 2025 05:58:11 GMT"},"fingerprint":{"sha1":"46:30:17:D2:9C:C6:D3:FC:FF:17:43:1F:C7:14:FA:E7:1C:18:49:AB","sha256":"DD:21:EC:3E:CB:38:DD:A6:86:8F:0F:23:E9:EA:CC:A2:97:CD:68:B5:9E:76:40:4B:0D:0C:2D:E4:A6:10:F8:7D"}}},"request":{"raw":"GET /cchain?gdpr=0\u0026gdpr_consent=\u0026cb=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fadaptmx%2F%24UID HTTP/1.1\r\nHost: sync.a-mo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csync.smilewanted.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 421 Misdirected Request\r\ncontent-length: 38\r\ncontent-type: text/plain\r\nvary: Accept-Encoding\r\ndate: Wed, 24 Sep 2025 03:04:28 GMT\r\nserver: envoy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"421","status_text":"Misdirected Request","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":67,"dns":0,"connect":17,"send":63,"wait":-1,"receive":63,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prebid.a-mo.net/cchain/0?gdpr=0\u0026gdpr_consent=\u0026us_privacy=\u0026cb=https%3A%2F%2Fprebid.admatic.de%2Fsetuid%3Fbidder%3Damx%26gdpr%3D0%26gdpr_consent%3D%26f%3Di%26uid%3D","fqdn":"prebid.a-mo.net","domain":"a-mo.net","tld":"net"},"ip":{"addr":"163.5.194.37","port":443,"asn":60558,"as":"Phoenix Nap, LLC.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://dsp-service.admatic.de/cookie_sync?r=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fadmatic_autres%2F%24%7BUSER_ID%7D","date":"2025-09-24T03:04:29.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.a-mo.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 Aug 2025 05:58:12 GMT","end":"Wed, 26 Nov 2025 05:58:11 GMT"},"fingerprint":{"sha1":"46:30:17:D2:9C:C6:D3:FC:FF:17:43:1F:C7:14:FA:E7:1C:18:49:AB","sha256":"DD:21:EC:3E:CB:38:DD:A6:86:8F:0F:23:E9:EA:CC:A2:97:CD:68:B5:9E:76:40:4B:0D:0C:2D:E4:A6:10:F8:7D"}}},"request":{"raw":"GET /cchain/0?gdpr=0\u0026gdpr_consent=\u0026us_privacy=\u0026cb=https%3A%2F%2Fprebid.admatic.de%2Fsetuid%3Fbidder%3Damx%26gdpr%3D0%26gdpr_consent%3D%26f%3Di%26uid%3D HTTP/1.1\r\nHost: prebid.a-mo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dsp-service.admatic.de/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 421 Misdirected Request\r\ncontent-length: 40\r\ncontent-type: text/plain\r\nvary: Accept-Encoding\r\ndate: Wed, 24 Sep 2025 03:04:28 GMT\r\nserver: envoy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"421","status_text":"Misdirected Request","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":1122,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1122), with no line terminators","md5":"21947b7c68707b18d7d77214ee229db9","sha1":"2a6ace8708e500c3e9c911ca209b2d0c2aed4917","sha256":"481c8382889f68e105a819ab253cbea9e6a52e86d611edd9fde5feae25e1d8a7","sha512":"8eedf99a0df2a0f8f7e23dc44223609d8b4ac93721ee14da60ff3e884e4ef52c0914cc9b5cd6a3082951ebd07d30ddd9d882833f3d677e1de4d6ec563f3b75d1","ssdeep":"","tlshash":"5c2163407265ac9e860202f80f750d0ea8a1e1523cf5a068b8c9e5b03212817c7fa9ef","first_seen":"2025-05-21T22:21:34.380102Z","last_seen":"2026-03-27T07:05:51.569313Z","times_seen":2353,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":6,"dns":5,"connect":16,"send":68,"wait":-1,"receive":69,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"track.kueezrtb.com/dye?ac=2\u0026acm=G3L\u0026uid=be5cdac8e005e820\u0026sid=34ec2ed1ee696ea0\u0026pvi=89bcafefc05ee524\u0026h=money.ca\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=81\u0026uri=%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026furl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026sr=1280x1024\u0026type=latest:init\u0026_=1758683063362","fqdn":"track.kueezrtb.com","domain":"kueezrtb.com","tld":"com"},"ip":{"addr":"172.66.162.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kueezrtb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 31 Jul 2025 04:22:42 GMT","end":"Wed, 29 Oct 2025 05:22:40 GMT"},"fingerprint":{"sha1":"72:9A:34:A6:6E:6C:F2:12:4C:CD:21:43:69:9D:B4:AE:A6:E2:BD:C1","sha256":"74:FD:00:85:48:5B:6D:03:90:97:6C:48:C6:0B:F9:7E:AB:0F:30:71:82:29:09:7B:3D:3A:D7:32:40:B2:4D:4D"}}},"request":{"raw":"GET /dye?ac=2\u0026acm=G3L\u0026uid=be5cdac8e005e820\u0026sid=34ec2ed1ee696ea0\u0026pvi=89bcafefc05ee524\u0026h=money.ca\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=81\u0026uri=%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026furl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026sr=1280x1024\u0026type=latest:init\u0026_=1758683063362 HTTP/1.1\r\nHost: track.kueezrtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 24 Sep 2025 03:04:23 GMT\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 983f0dda4aba8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/expand-collapse/9212.js","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:22.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"money.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:25:31 GMT","end":"Mon, 24 Nov 2025 16:25:29 GMT"},"fingerprint":{"sha1":"A5:8A:11:35:E2:18:EF:C0:E0:2A:61:E3:CE:0F:31:56:42:55:F0:FC","sha256":"C0:5A:4D:B1:BE:57:72:CF:9E:D8:17:5E:01:A3:0D:F8:4C:C1:16:16:8B:65:8B:CA:3B:CC:32:C3:E9:15:71:EF"}}},"request":{"raw":"GET /js/expand-collapse/9212.js HTTP/1.1\r\nHost: money.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account\r\nCookie: SSID_9H80=CQDn9B0AAAAAAAC0X9NohcaCGLRf02gBAAAAAAAAAAAAtF_TaADc7g; SSSC_9H80=1013.G7553486227140429445.1|0.0; SSRT_9H80=tF_TaAABAA; money_session=eyJpdiI6Inlqb015WmpKSkJhakh6SzMyN3VheFE9PSIsInZhbHVlIjoiT2pIcnNveGVobXNrS1FIUkZZZDd4ZWRNNkd0UTZPcnUveStFd09kNDY3T3ZtbEV0RXlLbXNadTFDS2Q0eC8wUGIyemFQaEdKVlVHb1MyRXNvb3NHYmN3ZkpwVy9ySHBBN1JCWEVmbkNraWhld3l1Rm5WTXd3VU53Zk52aHFEeGwiLCJtYWMiOiJmZDFlNmVjOGI0MDQxMmEzM2I4ZDAwMWNmMzY4Y2QyYjZlNzUyY2ZmODNiNjJhMDcxZjBhYzEwZTY3Yjk0ZjIwIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkVvY3h6L1FXSXBwbXVzYm1qUTlieXc9PSIsInZhbHVlIjoiSUM1b01ISkcyT0xMWFBCZVFsQUxUSitIbnNYNVhpTkRQR2wvcWJlQkx0a09hQVhxRXgwT3NFcXpVOWkzdkR2QTRRdkVJYzBlbU10VlpHb1RpYWhFNUhuMDBLaEs4L3BTVTBFYmIvNzJmekR3bmsrSzZJQkhtbDUzUDEySFhOU3kiLCJtYWMiOiJhMjFkMzNlZWRjMWJiMjcwOTY0YzY0NzQ0OTI2YWFiYTIwZWI2MGY4MDlkMTA2MzVlMjc2YTRhYzdiMGM5ZjJlIiwidGFnIjoiIn0%3D; __cf_bm=.U3YtFNih3m1w6FCrnkhu9tGuUHymVGomrTcpO.A40w-1758683061-1.0.1.1-HamIbNq.vNx7npxwSP0wqoYClS3Y3B42WO1UNnXOMO6bSheMocH.v_b7Q.nhvQVLVKnDsPdTSCXB4bPsND1B3RB70gSD0SuE2XX4dl_bXM0; utm_source=direct; user_meta=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22null%22%2C%22utm_campaign%22%3A%22null%22%2C%22utm_content%22%3A%22null%22%2C%22utm_term%22%3A%22null%22%2C%22device_category%22%3A%22unknown%22%7D; scottie_user_attributes=%7B%22nav%22%3A%7B%22uEntryPath%22%3A%22%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account%22%7D%2C%22user%22%3A%7B%22email%22%3Anull%2C%22first_name%22%3Anull%2C%22last_name%22%3Anull%7D%7D; scottie_session_attributes=%7B%22nav%22%3A%7B%22s_referrer%22%3A%22r.search.yahoo.com%22%2C%22page_count%22%3A1%2C%22sEntryPath%22%3A%22%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account%22%7D%2C%22ay_imp_s%22%3Afalse%2C%22created_at%22%3A1758683062%2C%22s_article_id%22%3A85597%2C%22nav_attrs%22%3A%7B%22siteSpectVariant%22%3Anull%2C%22siteSpectExperienceID%22%3Anull%2C%22siteSpectCampaignName%22%3Anull%7D%2C%22utm%22%3A%7B%22utm_source%22%3Anull%2C%22utm_medium%22%3Anull%2C%22utm_campaign%22%3Anull%2C%22utm_content%22%3Anull%2C%22utm_term%22%3Anull%7D%2C%22reporting_channel%22%3A%22organic_search%22%2C%22s_entry_channel%22%3A%22organic%20news%22%2C%22member_status%22%3A%22none%22%7D; suid=06864235-3ff4-4481-9403-3a43c185cfd3; scottie_session=c0fb5510-9f43-4eee-b60a-f30d4dc24e49\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 11 Aug 2025 16:41:44 GMT\r\netag: W/\"689a1d48-740\"\r\ncf-cache-status: HIT\r\nexpires: Wed, 24 Sep 2025 07:04:22 GMT\r\ncache-control: public, max-age=14400\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 983f0dd40bb71a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1856,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1856), with no line terminators","md5":"f2756a0bfee20b4c01ce3abcd52d73d7","sha1":"bc4a77ede04ce50190c4d250b2dacb8fc170180c","sha256":"fd15eb4e6c84806a89720b7d2ed3c17783bbf15539f88b3932bee0569949ffd5","sha512":"218d823c64781a278d04b15086b2de25342fcea2ea2f04dc01218a5ae1fad8e4bd8bb151f181c18b842f50a4f7c3f8d4624441c70be90a136d577ff3ab5714bf","ssdeep":"","tlshash":"3631733079c8f4b5617f1a1e323723557b36620e5c0690183c2cc4c8aa70f87a42aafa","first_seen":"2025-09-20T03:59:22.66004Z","last_seen":"2025-09-24T03:05:07.429549Z","times_seen":2,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prebid.smilewanted.com/","fqdn":"prebid.smilewanted.com","domain":"smilewanted.com","tld":"com"},"ip":{"addr":"172.66.154.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smilewanted.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 Aug 2025 21:28:27 GMT","end":"Thu, 30 Oct 2025 22:28:25 GMT"},"fingerprint":{"sha1":"FB:44:58:7C:4E:4C:D7:15:3E:2A:CA:43:D5:E5:9A:4F:FE:1A:FD:C3","sha256":"29:04:62:7B:83:D3:74:91:86:5A:D4:7C:02:6D:09:C2:80:69:F3:6F:67:47:2F:4B:4D:36:97:99:91:6A:11:D5"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: prebid.smilewanted.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.ca/\r\ncontent-type: text/plain\r\nContent-Length: 467\r\nOrigin: https://money.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 24 Sep 2025 03:04:24 GMT\r\nserver: cloudflare\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\naccess-control-allow-origin: https://money.ca\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 983f0dddb8907129-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/css/app.css?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:21.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"money.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:25:31 GMT","end":"Mon, 24 Nov 2025 16:25:29 GMT"},"fingerprint":{"sha1":"A5:8A:11:35:E2:18:EF:C0:E0:2A:61:E3:CE:0F:31:56:42:55:F0:FC","sha256":"C0:5A:4D:B1:BE:57:72:CF:9E:D8:17:5E:01:A3:0D:F8:4C:C1:16:16:8B:65:8B:CA:3B:CC:32:C3:E9:15:71:EF"}}},"request":{"raw":"GET /css/app.css?cb=432 HTTP/1.1\r\nHost: money.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account\r\nCookie: SSID_9H80=CQDn9B0AAAAAAAC0X9NohcaCGLRf02gBAAAAAAAAAAAAtF_TaADc7g; SSSC_9H80=1013.G7553486227140429445.1|0.0; SSRT_9H80=tF_TaAABAA; money_session=eyJpdiI6Inlqb015WmpKSkJhakh6SzMyN3VheFE9PSIsInZhbHVlIjoiT2pIcnNveGVobXNrS1FIUkZZZDd4ZWRNNkd0UTZPcnUveStFd09kNDY3T3ZtbEV0RXlLbXNadTFDS2Q0eC8wUGIyemFQaEdKVlVHb1MyRXNvb3NHYmN3ZkpwVy9ySHBBN1JCWEVmbkNraWhld3l1Rm5WTXd3VU53Zk52aHFEeGwiLCJtYWMiOiJmZDFlNmVjOGI0MDQxMmEzM2I4ZDAwMWNmMzY4Y2QyYjZlNzUyY2ZmODNiNjJhMDcxZjBhYzEwZTY3Yjk0ZjIwIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkVvY3h6L1FXSXBwbXVzYm1qUTlieXc9PSIsInZhbHVlIjoiSUM1b01ISkcyT0xMWFBCZVFsQUxUSitIbnNYNVhpTkRQR2wvcWJlQkx0a09hQVhxRXgwT3NFcXpVOWkzdkR2QTRRdkVJYzBlbU10VlpHb1RpYWhFNUhuMDBLaEs4L3BTVTBFYmIvNzJmekR3bmsrSzZJQkhtbDUzUDEySFhOU3kiLCJtYWMiOiJhMjFkMzNlZWRjMWJiMjcwOTY0YzY0NzQ0OTI2YWFiYTIwZWI2MGY4MDlkMTA2MzVlMjc2YTRhYzdiMGM5ZjJlIiwidGFnIjoiIn0%3D; __cf_bm=.U3YtFNih3m1w6FCrnkhu9tGuUHymVGomrTcpO.A40w-1758683061-1.0.1.1-HamIbNq.vNx7npxwSP0wqoYClS3Y3B42WO1UNnXOMO6bSheMocH.v_b7Q.nhvQVLVKnDsPdTSCXB4bPsND1B3RB70gSD0SuE2XX4dl_bXM0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:21 GMT\r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 23 Sep 2025 12:33:48 GMT\r\netag: W/\"68d293ac-3448e\"\r\ncf-cache-status: HIT\r\nexpires: Wed, 24 Sep 2025 07:04:21 GMT\r\ncache-control: public, max-age=14400\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 983f0dce1e261a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":214158,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a3178f52196efcbdc3adc85565265f3d","sha1":"f1a7701202c01c44228ed822f358204cccad09cb","sha256":"bbcab00baf694e5cbbbe16d8e8f6b0af348c7c478924f24f31bb0bf801032a60","sha512":"d49f7148fd0e2e8a185da12dc3ad6d0783f4f0ae45f53c98dc1cc1be31e359209913ecbbbe0120c98e23becb8bb357365ff39813cd52d50912451b9517d328be","ssdeep":"6144:H5wOWmMIhwM/Gdl4WPA2hg+aslOCJs2xeKM+4IR/jX0YyXkcLvFeqFdHP2hZlLNz:C","tlshash":"af24f2eaf3c190397d2a54a993987b7d9a3fa482df111ee5b215733013c2bf3469260d","first_seen":"2025-09-20T03:59:22.647219Z","last_seen":"2025-09-24T03:05:07.433355Z","times_seen":2,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raven-edge.aditude.io/raven/moneywise-main-3MaE3/library.js","fqdn":"raven-edge.aditude.io","domain":"aditude.io","tld":"io"},"ip":{"addr":"172.66.168.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:21.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aditude.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 Aug 2025 17:38:08 GMT","end":"Tue, 04 Nov 2025 18:38:05 GMT"},"fingerprint":{"sha1":"7E:39:52:3D:27:DF:CA:33:AD:56:A7:45:2D:03:C5:F8:44:A8:51:5D","sha256":"2C:86:9B:7E:3E:B2:04:3D:45:1D:F9:63:17:30:7E:6A:80:7F:2A:94:3D:88:F5:16:68:9F:1E:EA:2A:2C:FB:64"}}},"request":{"raw":"GET /raven/moneywise-main-3MaE3/library.js HTTP/1.1\r\nHost: raven-edge.aditude.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:22 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=300, stale-while-revalidate=600, stale-if-error=86400\r\ncdn-cache-control: public, max-age=86400, stale-while-revalidate=600\r\ncontent-encoding: br\r\netag: \"1294-K0ibfRK6ui+p7LOYOpd407btHd4\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, accept-encoding\r\nx-dns-prefetch-control: on\r\nx-matched-path: /raven/[propertyId]/library.js\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::jczws-1758569211611-44dde23f1aaa\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 983f0dd1990c56ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4756,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4347)","md5":"fa6fe8c514f08a2eeaa43d047671e97b","sha1":"2b489b7d12baba2fa9ecb3983a9778d3b6ed1dde","sha256":"a1a5adf4cbb57cb44574cf505cb79995f637cdfc942b694a373c45f9d42e225a","sha512":"861f649efd561eb1fde42fc659fd9229433b2376e34bff679dc97a65436226d83fc359d367f53263b17c0bc2c640b33031d84178829b29653bfde41252001803","ssdeep":"96:58HLUXGQXwsFR5h9Fav5GwJhldk2J94XfaXt5nTpExozqsgx:0LUXtXw8PChAMXjnVEtr","tlshash":"1da1e89e72d0a4f20bd944d64a3b6353f3788a217a48c4ec310cb6db2a22eb75195d37","first_seen":"2025-09-24T03:05:07.434965Z","last_seen":"2025-09-24T03:05:07.434965Z","times_seen":1,"resource_available":true,"data":null}},"time_used":556,"timings":{"blocked":197,"dns":5,"connect":1,"send":0,"wait":149,"receive":0,"ssl":201},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ex.ingage.tech/v1/openrtb","fqdn":"ex.ingage.tech","domain":"ingage.tech","tld":"tech"},"ip":{"addr":"104.18.26.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ingage.tech","organization":"Insticator, Inc"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 01 Aug 2025 00:00:00 GMT","end":"Fri, 21 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"11:CE:C7:8C:E7:D7:B4:B1:19:4D:9C:26:9C:AD:73:AC:BA:12:FA:18","sha256":"E2:A2:BE:73:E9:41:97:77:34:F4:2C:35:01:2D:7E:C4:1E:C4:12:19:9C:1B:08:D1:F8:2E:2C:40:9A:31:D3:C0"}}},"request":{"raw":"OPTIONS /v1/openrtb HTTP/1.1\r\nHost: ex.ingage.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://money.ca/\r\nOrigin: https://money.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 24 Sep 2025 03:04:23 GMT\r\ncf-ray: 983f0ddd080f56ae-OSL\r\nvary: Origin, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://money.ca\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: content-type\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":21,"dns":3,"connect":4,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"r.search.yahoo.com/_ylt=AwrO.5CWX9NoXYwCwzrrFAx.;_ylu=Y29sbwNncTEEcG9zAzMEdnRpZAMEc2VjA3Ny/RV=2/RE=1759892631/RO=10/RU=https%3a%2f%2fmoney.ca%2finvesting%2fclient-has-almost-5000-in-crypto-stolen-from-account/RK=2/RS=BJ09_1RZThlNJqqF6AFmUTgGToA-","fqdn":"r.search.yahoo.com","domain":"yahoo.com","tld":"com"},"ip":{"addr":"212.82.100.137","port":443,"asn":34010,"as":"Yahoo-UK Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-24T03:04:19.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.search.yahoo.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert SHA2 High Assurance Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 08 Sep 2025 00:00:00 GMT","end":"Wed, 25 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:75:11:59:22:7F:90:DB:09:02:79:C0:85:0E:E7:3B:29:13:38:AA","sha256":"B2:53:6C:43:1B:92:4A:7A:6A:6C:62:18:A1:69:55:80:BA:91:B8:F7:94:B1:7A:DD:48:CA:52:37:B9:98:A3:43"}}},"request":{"raw":"GET /_ylt=AwrO.5CWX9NoXYwCwzrrFAx.;_ylu=Y29sbwNncTEEcG9zAzMEdnRpZAMEc2VjA3Ny/RV=2/RE=1759892631/RO=10/RU=https%3a%2f%2fmoney.ca%2finvesting%2fclient-has-almost-5000-in-crypto-stolen-from-account/RK=2/RS=BJ09_1RZThlNJqqF6AFmUTgGToA- HTTP/1.1\r\nHost: r.search.yahoo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:19 GMT\r\np3p: policyref=\"https://policies.yahoo.com/w3c/p3p.xml\", CP=\"CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 322\r\ncontent-type: text/html; charset=\"UTF-8\"\r\nage: 0\r\nstrict-transport-security: max-age=31536000\r\nserver: ATS\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport\r\nreferrer-policy: no-referrer-when-downgrade\r\ncache-control: private\r\nset-cookie: A1=d=AQABBLNf02gCEM8Ne9ITV9pAQPggGWwHHm4FEgABAQGj1GjcaPmbzSMAAAAAgA\u0026S=AQAAAoIoa5XKIVWh9Ihi4gHt414; Expires=Thu, 24 Sep 2026 09:04:19 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly\nA3=d=AQABBLNf02gCEM8Ne9ITV9pAQPggGWwHHm4FEgABAQGj1GjcaPmbzSMAAAAAgA\u0026S=AQAAAoIoa5XKIVWh9Ihi4gHt414; Expires=Thu, 24 Sep 2026 09:04:19 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly\nA1S=d=AQABBLNf02gCEM8Ne9ITV9pAQPggGWwHHm4FEgABAQGj1GjcaPmbzSMAAAAAgA\u0026S=AQAAAoIoa5XKIVWh9Ihi4gHt414; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":479,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (358)","md5":"386681ebdda1c05dcec4fa18589d13ba","sha1":"fa38e556ee052d7ae46357d879059e2552db5fe5","sha256":"66f4458f4bbf7752d22412a22fa88794918bc79436caf1dedf998203457939d3","sha512":"5077109c75fe068ab2888efbfbdaef815541b1e1331fc14ec5b41a0ec4fb877228d509facf28e87e7ef03cddd38b9a546d5d58b17fe34cff6208aa07976b854b","ssdeep":"","tlshash":"11f027e70c91dd3653763850a573b22f907125ef8c5c9ccd72e028e85ad0feae90e109","first_seen":"2025-09-24T03:05:07.436261Z","last_seen":"2025-09-24T03:05:07.436261Z","times_seen":1,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":108,"dns":41,"connect":30,"send":0,"wait":36,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/__ssobj/ard.png?7553486227140429445_1-1013-1758683060\u0026n=1","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"money.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:25:31 GMT","end":"Mon, 24 Nov 2025 16:25:29 GMT"},"fingerprint":{"sha1":"A5:8A:11:35:E2:18:EF:C0:E0:2A:61:E3:CE:0F:31:56:42:55:F0:FC","sha256":"C0:5A:4D:B1:BE:57:72:CF:9E:D8:17:5E:01:A3:0D:F8:4C:C1:16:16:8B:65:8B:CA:3B:CC:32:C3:E9:15:71:EF"}}},"request":{"raw":"GET /__ssobj/ard.png?7553486227140429445_1-1013-1758683060\u0026n=1 HTTP/1.1\r\nHost: money.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-NewRelic-ID: VQAPVVFbABABUVdaAQIEVFMI\r\nnewrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjE2ODQ3ODgiLCJhcCI6IjE1ODkxMDU2MTUiLCJpZCI6ImQ3YzFkYzhmNDdlMjA4MmYiLCJ0ciI6IjE4MmI4NjViYTY5YTZjYjc2YjFkMGY2NjQ4MDRkM2MwIiwidGkiOjE3NTg2ODMwNjMxNDd9fQ==\r\ntraceparent: 00-182b865ba69a6cb76b1d0f664804d3c0-d7c1dc8f47e2082f-01\r\ntracestate: 1684788@nr=0-1-1684788-1589105615-d7c1dc8f47e2082f----1758683063147\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account\r\nCookie: SSID_9H80=CQDn9B0AAAAAAAC0X9NohcaCGLRf02gBAAAAAAAAAAAAtF_TaADc7g; SSSC_9H80=1013.G7553486227140429445.1|0.0; SSRT_9H80=tF_TaAABAA; money_session=eyJpdiI6ImxTWWgrS3RqYVRvUVFXWTMxSFJxeWc9PSIsInZhbHVlIjoiSTdQZkg3N1VtbUtUVHF2VUFJSWlnQ0tkN2tWUDJMSm5wVW1nWFZPL0hEbDFORGlRNXhndkc4WkFCQkpubmxhQnRTdVl0dkE0aHFDN2E1QlM0Rk1PdC9FSHVncHdqMUY4aHNiK0dSY3RiMHgyTEgrN2ZwZ1RlWnNscy8zT09KNlYiLCJtYWMiOiJmNTdlYTM2ZTQzOTRlMWYwYjg5NTBiYmJjNWM2MzZlY2E0OWIxZGM5ZTRmZGExM2Q5ZTRiODFhMTY4YWEzMjRiIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6ImNLQ0dNOHBFamlZbnI1QUV5Zzg2bUE9PSIsInZhbHVlIjoiMWtyRmhBTFkwdkduQlNwTStueldJY1ZWb0g5Ni9oaEhZSmIwWDVPS3FHKzR6T1hMUHhvUzFHNjE3WlBSTzBMYmNQQkt5N01mMkJFZjZTYXlPTjVxY3czd0prSThoNDNFYVRpNlJ5aXNBbGhEcUxWNEt4Z2UwMlpqRnVodW5UcFAiLCJtYWMiOiIyN2MxODA3Nzc5MWE3NmVhM2RlNjgwOTFjZWEyN2MzNDFjYWNlZWNlMmY2MWFhZTIzOTBjY2IyNGE0MDkzNjE2IiwidGFnIjoiIn0%3D; __cf_bm=.U3YtFNih3m1w6FCrnkhu9tGuUHymVGomrTcpO.A40w-1758683061-1.0.1.1-HamIbNq.vNx7npxwSP0wqoYClS3Y3B42WO1UNnXOMO6bSheMocH.v_b7Q.nhvQVLVKnDsPdTSCXB4bPsND1B3RB70gSD0SuE2XX4dl_bXM0; utm_source=direct; user_meta=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22null%22%2C%22utm_campaign%22%3A%22null%22%2C%22utm_content%22%3A%22null%22%2C%22utm_term%22%3A%22null%22%2C%22device_category%22%3A%22unknown%22%2C%22geo%22%3A%7B%22query%22%3A%2291.90.42.154%22%2C%22country%22%3A%22NO%22%2C%22regionName%22%3A%22Oslo%22%2C%22timezone%22%3A%22Europe%2FOslo%22%2C%22region%22%3A%2203%22%2C%22city%22%3A%22Oslo%22%2C%22zip%22%3A%220001%22%2C%22metro-code%22%3Anull%2C%22lon%22%3A%2210.74609%22%2C%22lat%22%3A%2259.91273%22%2C%22continent%22%3A%22EU%22%7D%7D; scottie_user_attributes=%7B%22nav%22%3A%7B%22uEntryPath%22%3A%22%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account%22%7D%2C%22user%22%3A%7B%22email%22%3Anull%2C%22first_name%22%3Anull%2C%22last_name%22%3Anull%7D%7D; scottie_session_attributes=%7B%22nav%22%3A%7B%22s_referrer%22%3A%22r.search.yahoo.com%22%2C%22page_count%22%3A1%2C%22sEntryPath%22%3A%22%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account%22%7D%2C%22ay_imp_s%22%3Afalse%2C%22created_at%22%3A1758683062%2C%22s_article_id%22%3A85597%2C%22nav_attrs%22%3A%7B%22siteSpectVariant%22%3Anull%2C%22siteSpectExperienceID%22%3Anull%2C%22siteSpectCampaignName%22%3Anull%7D%2C%22utm%22%3A%7B%22utm_source%22%3Anull%2C%22utm_medium%22%3Anull%2C%22utm_campaign%22%3Anull%2C%22utm_content%22%3Anull%2C%22utm_term%22%3Anull%7D%2C%22reporting_channel%22%3A%22organic_search%22%2C%22s_entry_channel%22%3A%22organic%20news%22%2C%22member_status%22%3A%22none%22%7D; suid=06864235-3ff4-4481-9403-3a43c185cfd3; scottie_session=c0fb5510-9f43-4eee-b60a-f30d4dc24e49; _v_id_l={%22_v_id%22:%2236088682079960021758683062540%22%2C%22_la%22:1758683062540}; ribn_params=%7B%7D; kndctr_9CE579FD5DCD8B590A495E09_AdobeOrg_identity=CiY2NDMwMDQ5ODEyODI2NTcxNDQ4MjkyNDMxMTYyMzE5MDQwNTQ2N1ITCLjFt82XMxABGAEqBElSTDEwAPABuMW3zZcz; kndctr_9CE579FD5DCD8B590A495E09_AdobeOrg_cluster=irl1; cw-test-20250625_prebid-v2-test_1_99=control; cw-test-00000000_stand-alone-floors-facade-hardFloor_85_15=fallo; cw-test-00000000_stand-alone-floors-facade-multiplier_90_10=multa; cw-test-20241106_report-button_10_90=control; authenticated=false\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:23 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 0\r\ncf-ray: 983f0dd8b8291a30-OSL\r\nset-cookie: SSRT_9H80=t1_TaAADAA; path=/; domain=.money.ca; expires=Thu, 24-Sep-2026 03:04:23 GMT\r\nsbss: 1\r\nrtss: 2-9-98\r\nlast-modified: Wed, 12 Feb 2025 05:09:26 GMT\r\naccept-ranges: bytes\r\nexpires: -1\r\npragma: no-cache\r\ncache-control: private, no-store, no-cache, max-age=0, must-revalidate, proxy-revalidate\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prebid.a-mo.net/isyn?gdpr_consent=\u0026gdpr=0\u0026us_privacy=\u0026gpp=\u0026gpp_sid=","fqdn":"prebid.a-mo.net","domain":"a-mo.net","tld":"net"},"ip":{"addr":"163.5.194.35","port":443,"asn":60558,"as":"Phoenix Nap, LLC.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:28.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.a-mo.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 Aug 2025 05:58:12 GMT","end":"Wed, 26 Nov 2025 05:58:11 GMT"},"fingerprint":{"sha1":"46:30:17:D2:9C:C6:D3:FC:FF:17:43:1F:C7:14:FA:E7:1C:18:49:AB","sha256":"DD:21:EC:3E:CB:38:DD:A6:86:8F:0F:23:E9:EA:CC:A2:97:CD:68:B5:9E:76:40:4B:0D:0C:2D:E4:A6:10:F8:7D"}}},"request":{"raw":"GET /isyn?gdpr_consent=\u0026gdpr=0\u0026us_privacy=\u0026gpp=\u0026gpp_sid= HTTP/1.1\r\nHost: prebid.a-mo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ncache-control: max-age=0, private, must-revalidate\r\ndate: Wed, 24 Sep 2025 03:04:28 GMT\r\nserver: envoy\r\nvary: accept-encoding, Accept-Encoding\r\nx-envoy-upstream-service-time: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtrack.kueezrtb.com/dye?_=1758683062968\u0026type=latest:boot\u0026ac=2\u0026acm=g3l\u0026h=money.ca\u0026uri=%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026furl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026beacon=1","fqdn":"gtrack.kueezrtb.com","domain":"kueezrtb.com","tld":"com"},"ip":{"addr":"172.66.162.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:22.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kueezrtb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 31 Jul 2025 04:22:42 GMT","end":"Wed, 29 Oct 2025 05:22:40 GMT"},"fingerprint":{"sha1":"72:9A:34:A6:6E:6C:F2:12:4C:CD:21:43:69:9D:B4:AE:A6:E2:BD:C1","sha256":"74:FD:00:85:48:5B:6D:03:90:97:6C:48:C6:0B:F9:7E:AB:0F:30:71:82:29:09:7B:3D:3A:D7:32:40:B2:4D:4D"}}},"request":{"raw":"POST /dye?_=1758683062968\u0026type=latest:boot\u0026ac=2\u0026acm=g3l\u0026h=money.ca\u0026uri=%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026furl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026beacon=1 HTTP/1.1\r\nHost: gtrack.kueezrtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://money.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 24 Sep 2025 03:04:23 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://money.ca\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 983f0dd7b9c38be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.kueezrtb.com/latest.js","fqdn":"static.kueezrtb.com","domain":"kueezrtb.com","tld":"com"},"ip":{"addr":"172.66.162.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:21.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kueezrtb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 31 Jul 2025 04:22:42 GMT","end":"Wed, 29 Oct 2025 05:22:40 GMT"},"fingerprint":{"sha1":"72:9A:34:A6:6E:6C:F2:12:4C:CD:21:43:69:9D:B4:AE:A6:E2:BD:C1","sha256":"74:FD:00:85:48:5B:6D:03:90:97:6C:48:C6:0B:F9:7E:AB:0F:30:71:82:29:09:7B:3D:3A:D7:32:40:B2:4D:4D"}}},"request":{"raw":"GET /latest.js HTTP/1.1\r\nHost: static.kueezrtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:21 GMT\r\ncontent-type: text/javascript\r\nx-amz-id-2: 7JhSM13fh63kiDrJTk3nxaFK5q/X8Oc9ua1oueuL8UNn1dBK5yES3xriRWb+yS4T8qi2B2H5rIFP0HUXcH71fXwwpGVgIJRQZN6p1MuJ7FI=\r\nx-amz-request-id: YK2K8584RA70WRPF\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-expose-headers: x-amz-meta-access-control-allow-origin, x-amz-meta-access-control-allow-methods\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, accept-encoding\r\nlast-modified: Tue, 10 Jun 2025 11:52:54 GMT\r\nserver: cloudflare\r\nage: 2080214\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\netag: W/\"bfed549a7a818520144d1b1e2f334d9b\"\r\ncontent-encoding: br\r\ncf-ray: 983f0dd0deb88be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1440,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (518)","md5":"bfed549a7a818520144d1b1e2f334d9b","sha1":"a07dd4834d83d381536884ffdb4a7c1b05de1993","sha256":"4eb79c43f4d736b305fdce8077dd70044483b58b779c58c9be3a4ab9ba4079d2","sha512":"5426d779711f4cf8f8caaeca40303aac3319aa379ed380a94997906b7d3705bc05e6c2133544ac8bb59037884dc021e5e5031b8aca96b082c28373e8abd6cb4b","ssdeep":"","tlshash":"50213096b6db5d6e49a421ac983abf21f1bb85143f4d5050c44789006b44e534b3ffee","first_seen":"2025-05-11T13:48:19.766573Z","last_seen":"2026-04-03T17:04:17.815926Z","times_seen":2286,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":81,"dns":9,"connect":1,"send":0,"wait":6,"receive":0,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csync.smilewanted.com/drop_cookie_sw.php","fqdn":"csync.smilewanted.com","domain":"smilewanted.com","tld":"com"},"ip":{"addr":"172.66.154.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://csync.smilewanted.com/","date":"2025-09-24T03:04:28.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smilewanted.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 Aug 2025 21:28:27 GMT","end":"Thu, 30 Oct 2025 22:28:25 GMT"},"fingerprint":{"sha1":"FB:44:58:7C:4E:4C:D7:15:3E:2A:CA:43:D5:E5:9A:4F:FE:1A:FD:C3","sha256":"29:04:62:7B:83:D3:74:91:86:5A:D4:7C:02:6D:09:C2:80:69:F3:6F:67:47:2F:4B:4D:36:97:99:91:6A:11:D5"}}},"request":{"raw":"GET /drop_cookie_sw.php HTTP/1.1\r\nHost: csync.smilewanted.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://csync.smilewanted.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:28 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: sw_user_params_infos=8sdRREvsw7LjLys0YvGw88Qvf8KI6CprYb7x6Tbn5SpVMe1oK%2FtWbXBuThY9EwOGtUU9ch7dv0NSWAgUINoXhAETzxb2ORoHNPFOLNmDEN6Mia0dNse%2BBrdIA0FOk2u6pWNLBRGCM3s0YSLWtr12PQ%3D%3D; HttpOnly; SameSite=None; Secure; Path=/; Domain=smilewanted.com; Max-Age=31556952; Expires=Thu, 24 Sep 2026 08:53:40 GMT\r\ncf-ray: 983f0dfade917129-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csync.smilewanted.com/set_partner_userid_get/adaptmx/?gdpr=0","fqdn":"csync.smilewanted.com","domain":"smilewanted.com","tld":"com"},"ip":{"addr":"172.66.154.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://csync.smilewanted.com/","date":"2025-09-24T03:04:28.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smilewanted.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 Aug 2025 21:28:27 GMT","end":"Thu, 30 Oct 2025 22:28:25 GMT"},"fingerprint":{"sha1":"FB:44:58:7C:4E:4C:D7:15:3E:2A:CA:43:D5:E5:9A:4F:FE:1A:FD:C3","sha256":"29:04:62:7B:83:D3:74:91:86:5A:D4:7C:02:6D:09:C2:80:69:F3:6F:67:47:2F:4B:4D:36:97:99:91:6A:11:D5"}}},"request":{"raw":"GET /set_partner_userid_get/adaptmx/?gdpr=0 HTTP/1.1\r\nHost: csync.smilewanted.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://csync.smilewanted.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sw_user_params_infos=8sdRREvsw7LjLys0YvGw88Qvf8KI6CprYb7x6Tbn5SpVMe1oK%2FtWbXBuThY9EwOGtUU9ch7dv0NSWAgUINoXhAETzxb2ORoHNPFOLNmDEN6Mia0dNse%2BBrdIA0FOk2u6pWNLBRGCM3s0YSLWtr12PQ%3D%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:29 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 983f0dfd3f147129-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/manifest.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:21.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"money.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:25:31 GMT","end":"Mon, 24 Nov 2025 16:25:29 GMT"},"fingerprint":{"sha1":"A5:8A:11:35:E2:18:EF:C0:E0:2A:61:E3:CE:0F:31:56:42:55:F0:FC","sha256":"C0:5A:4D:B1:BE:57:72:CF:9E:D8:17:5E:01:A3:0D:F8:4C:C1:16:16:8B:65:8B:CA:3B:CC:32:C3:E9:15:71:EF"}}},"request":{"raw":"GET /js/manifest.js?cb=432 HTTP/1.1\r\nHost: money.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account\r\nCookie: SSID_9H80=CQDn9B0AAAAAAAC0X9NohcaCGLRf02gBAAAAAAAAAAAAtF_TaADc7g; SSSC_9H80=1013.G7553486227140429445.1|0.0; SSRT_9H80=tF_TaAABAA; money_session=eyJpdiI6Inlqb015WmpKSkJhakh6SzMyN3VheFE9PSIsInZhbHVlIjoiT2pIcnNveGVobXNrS1FIUkZZZDd4ZWRNNkd0UTZPcnUveStFd09kNDY3T3ZtbEV0RXlLbXNadTFDS2Q0eC8wUGIyemFQaEdKVlVHb1MyRXNvb3NHYmN3ZkpwVy9ySHBBN1JCWEVmbkNraWhld3l1Rm5WTXd3VU53Zk52aHFEeGwiLCJtYWMiOiJmZDFlNmVjOGI0MDQxMmEzM2I4ZDAwMWNmMzY4Y2QyYjZlNzUyY2ZmODNiNjJhMDcxZjBhYzEwZTY3Yjk0ZjIwIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkVvY3h6L1FXSXBwbXVzYm1qUTlieXc9PSIsInZhbHVlIjoiSUM1b01ISkcyT0xMWFBCZVFsQUxUSitIbnNYNVhpTkRQR2wvcWJlQkx0a09hQVhxRXgwT3NFcXpVOWkzdkR2QTRRdkVJYzBlbU10VlpHb1RpYWhFNUhuMDBLaEs4L3BTVTBFYmIvNzJmekR3bmsrSzZJQkhtbDUzUDEySFhOU3kiLCJtYWMiOiJhMjFkMzNlZWRjMWJiMjcwOTY0YzY0NzQ0OTI2YWFiYTIwZWI2MGY4MDlkMTA2MzVlMjc2YTRhYzdiMGM5ZjJlIiwidGFnIjoiIn0%3D; __cf_bm=.U3YtFNih3m1w6FCrnkhu9tGuUHymVGomrTcpO.A40w-1758683061-1.0.1.1-HamIbNq.vNx7npxwSP0wqoYClS3Y3B42WO1UNnXOMO6bSheMocH.v_b7Q.nhvQVLVKnDsPdTSCXB4bPsND1B3RB70gSD0SuE2XX4dl_bXM0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 23 Sep 2025 12:33:48 GMT\r\netag: W/\"68d293ac-1429\"\r\ncf-cache-status: HIT\r\nexpires: Wed, 24 Sep 2025 07:04:21 GMT\r\ncache-control: public, max-age=14400\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 983f0dce4e4a1a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5161,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5161), with no line terminators","md5":"0fa298848d69129ca05523de8ff67640","sha1":"ce0fa8ad473a40487beba427e7ac53665f9f6412","sha256":"20762ba7530ea8111fa93b473d48862d5d09c9d08ebbd5a0ca3e4f7c66997b7a","sha512":"06d17884b790b50e25bb8eb459e63669c6d156643de37ea58a218daaec17b18f33e0cddb4d9c202eb3fcfd7c66df02e630f4bacdfb16498da7b0b19360dec46a","ssdeep":"96:nfUqmsByhVwijpaB3MzkiB4hfDL6pMyt/pyf2:dmsByhVtjpaBcBqH/yt/82","tlshash":"71b196bef5107891728e27d4506b5005d23fe363242c84b4a72bf7782f609a76355eab","first_seen":"2025-09-20T03:59:22.730982Z","last_seen":"2025-09-24T03:05:07.439809Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/js/appv2.js?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:21.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"money.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:25:31 GMT","end":"Mon, 24 Nov 2025 16:25:29 GMT"},"fingerprint":{"sha1":"A5:8A:11:35:E2:18:EF:C0:E0:2A:61:E3:CE:0F:31:56:42:55:F0:FC","sha256":"C0:5A:4D:B1:BE:57:72:CF:9E:D8:17:5E:01:A3:0D:F8:4C:C1:16:16:8B:65:8B:CA:3B:CC:32:C3:E9:15:71:EF"}}},"request":{"raw":"GET /js/appv2.js?cb=432 HTTP/1.1\r\nHost: money.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account\r\nCookie: SSID_9H80=CQDn9B0AAAAAAAC0X9NohcaCGLRf02gBAAAAAAAAAAAAtF_TaADc7g; SSSC_9H80=1013.G7553486227140429445.1|0.0; SSRT_9H80=tF_TaAABAA; money_session=eyJpdiI6Inlqb015WmpKSkJhakh6SzMyN3VheFE9PSIsInZhbHVlIjoiT2pIcnNveGVobXNrS1FIUkZZZDd4ZWRNNkd0UTZPcnUveStFd09kNDY3T3ZtbEV0RXlLbXNadTFDS2Q0eC8wUGIyemFQaEdKVlVHb1MyRXNvb3NHYmN3ZkpwVy9ySHBBN1JCWEVmbkNraWhld3l1Rm5WTXd3VU53Zk52aHFEeGwiLCJtYWMiOiJmZDFlNmVjOGI0MDQxMmEzM2I4ZDAwMWNmMzY4Y2QyYjZlNzUyY2ZmODNiNjJhMDcxZjBhYzEwZTY3Yjk0ZjIwIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkVvY3h6L1FXSXBwbXVzYm1qUTlieXc9PSIsInZhbHVlIjoiSUM1b01ISkcyT0xMWFBCZVFsQUxUSitIbnNYNVhpTkRQR2wvcWJlQkx0a09hQVhxRXgwT3NFcXpVOWkzdkR2QTRRdkVJYzBlbU10VlpHb1RpYWhFNUhuMDBLaEs4L3BTVTBFYmIvNzJmekR3bmsrSzZJQkhtbDUzUDEySFhOU3kiLCJtYWMiOiJhMjFkMzNlZWRjMWJiMjcwOTY0YzY0NzQ0OTI2YWFiYTIwZWI2MGY4MDlkMTA2MzVlMjc2YTRhYzdiMGM5ZjJlIiwidGFnIjoiIn0%3D; __cf_bm=.U3YtFNih3m1w6FCrnkhu9tGuUHymVGomrTcpO.A40w-1758683061-1.0.1.1-HamIbNq.vNx7npxwSP0wqoYClS3Y3B42WO1UNnXOMO6bSheMocH.v_b7Q.nhvQVLVKnDsPdTSCXB4bPsND1B3RB70gSD0SuE2XX4dl_bXM0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 23 Sep 2025 13:05:28 GMT\r\netag: W/\"68d29b18-3d798\"\r\ncf-cache-status: HIT\r\nexpires: Wed, 24 Sep 2025 07:04:21 GMT\r\ncache-control: public, max-age=14400\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 983f0dce8e7c1a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":251800,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65473)","md5":"9a31e7eeb21736c0acd3374b87e6b180","sha1":"a439072cb73c2e777b99e784d77166d610a6ae63","sha256":"2bbd46f56ad40fc6a3ce40ef7d1200a54b31c84bc2b0153bf6fd26dcc07a7232","sha512":"3b7549daa9d636b38300bb686a4f8cfd00b4628483164384c2da53d0c06d9631a72e74a01288468bae9154881202c1bc5f3f93226cfd5378a7ccf50a3c01dc86","ssdeep":"3072:/L8n9g0hb4AUh9VfsOztpEkNHGELDaK05ZQEO9AjUy39R2blwaFt8fXxJjxBw:/LFAUh9Vz5pEkNtj8Xt+KfXxJbw","tlshash":"8934e5cdb2d6f03243ab2075806f510bf23a6d59b40e8454e225e8d67c7898ee277f79","first_seen":"2025-09-24T03:05:07.440961Z","last_seen":"2025-09-24T03:05:07.440961Z","times_seen":1,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otrack.kueezrtb.com/dye?ac=2\u0026acm=G3L\u0026uid=be5cdac8e005e820\u0026sid=34ec2ed1ee696ea0\u0026pvi=89bcafefc05ee524\u0026h=money.ca\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=81\u0026cc=NO\u0026ig=0\u0026uri=%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026furl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026sr=1280x1024\u0026type=latest:br\u0026_=1758683063798\u0026bidder=kueezrtb\u0026at=display\u0026v=1\u0026acid=64dcd6552888555c21f4eb75","fqdn":"otrack.kueezrtb.com","domain":"kueezrtb.com","tld":"com"},"ip":{"addr":"172.66.162.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kueezrtb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 31 Jul 2025 04:22:42 GMT","end":"Wed, 29 Oct 2025 05:22:40 GMT"},"fingerprint":{"sha1":"72:9A:34:A6:6E:6C:F2:12:4C:CD:21:43:69:9D:B4:AE:A6:E2:BD:C1","sha256":"74:FD:00:85:48:5B:6D:03:90:97:6C:48:C6:0B:F9:7E:AB:0F:30:71:82:29:09:7B:3D:3A:D7:32:40:B2:4D:4D"}}},"request":{"raw":"GET /dye?ac=2\u0026acm=G3L\u0026uid=be5cdac8e005e820\u0026sid=34ec2ed1ee696ea0\u0026pvi=89bcafefc05ee524\u0026h=money.ca\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=81\u0026cc=NO\u0026ig=0\u0026uri=%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026furl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026sr=1280x1024\u0026type=latest:br\u0026_=1758683063798\u0026bidder=kueezrtb\u0026at=display\u0026v=1\u0026acid=64dcd6552888555c21f4eb75 HTTP/1.1\r\nHost: otrack.kueezrtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nCookie: kuid=b4c606a6d5e7c1f9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 24 Sep 2025 03:04:23 GMT\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 983f0ddcebe88be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csync.smilewanted.com/set_partner_userid_get/admatic_autres/ec240dc9-4059-4ccd-b7f1-c00942a6ec97","fqdn":"csync.smilewanted.com","domain":"smilewanted.com","tld":"com"},"ip":{"addr":"172.66.154.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://dsp-service.admatic.de/cookie_sync?r=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fadmatic_autres%2F%24%7BUSER_ID%7D","date":"2025-09-24T03:04:29.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smilewanted.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 Aug 2025 21:28:27 GMT","end":"Thu, 30 Oct 2025 22:28:25 GMT"},"fingerprint":{"sha1":"FB:44:58:7C:4E:4C:D7:15:3E:2A:CA:43:D5:E5:9A:4F:FE:1A:FD:C3","sha256":"29:04:62:7B:83:D3:74:91:86:5A:D4:7C:02:6D:09:C2:80:69:F3:6F:67:47:2F:4B:4D:36:97:99:91:6A:11:D5"}}},"request":{"raw":"GET /set_partner_userid_get/admatic_autres/ec240dc9-4059-4ccd-b7f1-c00942a6ec97 HTTP/1.1\r\nHost: csync.smilewanted.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dsp-service.admatic.de/\r\nCookie: sw_user_params_infos=8sdRREvsw7LjLys0YvGw88Qvf8KI6CprYb7x6Tbn5SpVMe1oK%2FtWbXBuThY9EwOGtUU9ch7dv0NSWAgUINoXhAETzxb2ORoHNPFOLNmDEN6Mia0dNse%2BBrdIA0FOk2u6pWNLBRGCM3s0YSLWtr12PQ%3D%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:29 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: sw_user_params_infos=74tWhle3MaLNbpUpVDmi5HZpNMeYBTpvBP3BYIT6S3E36%2BRVeAifIKu3mMAh%2Fw%2FD6iJyKuC3csC2lawwUICE7l3rTgJnXjChJL54RkcS0%2FtpCT6lBsMSSxM6f6Wy71fuKDSNFDm3ATx1yOTaQ5y4jsemFM8ctWr5AbATWgke21blaLwhCh8vGkvzCUL003uNK76siM15dURnyVd0RPkr%2B7Qlq%2B1S1NZgJefdJUDWazs%3D; HttpOnly; SameSite=None; Secure; Path=/; Domain=smilewanted.com; Max-Age=31556952; Expires=Thu, 24 Sep 2026 08:53:41 GMT\r\ncf-ray: 983f0dfe2f5e7129-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/fonts/KonnectSemiBold.woff","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:21.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"money.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:25:31 GMT","end":"Mon, 24 Nov 2025 16:25:29 GMT"},"fingerprint":{"sha1":"A5:8A:11:35:E2:18:EF:C0:E0:2A:61:E3:CE:0F:31:56:42:55:F0:FC","sha256":"C0:5A:4D:B1:BE:57:72:CF:9E:D8:17:5E:01:A3:0D:F8:4C:C1:16:16:8B:65:8B:CA:3B:CC:32:C3:E9:15:71:EF"}}},"request":{"raw":"GET /fonts/KonnectSemiBold.woff HTTP/1.1\r\nHost: money.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/css/moneywise_organic.css?cb=432\r\nCookie: SSID_9H80=CQDn9B0AAAAAAAC0X9NohcaCGLRf02gBAAAAAAAAAAAAtF_TaADc7g; SSSC_9H80=1013.G7553486227140429445.1|0.0; SSRT_9H80=tF_TaAABAA; money_session=eyJpdiI6Inlqb015WmpKSkJhakh6SzMyN3VheFE9PSIsInZhbHVlIjoiT2pIcnNveGVobXNrS1FIUkZZZDd4ZWRNNkd0UTZPcnUveStFd09kNDY3T3ZtbEV0RXlLbXNadTFDS2Q0eC8wUGIyemFQaEdKVlVHb1MyRXNvb3NHYmN3ZkpwVy9ySHBBN1JCWEVmbkNraWhld3l1Rm5WTXd3VU53Zk52aHFEeGwiLCJtYWMiOiJmZDFlNmVjOGI0MDQxMmEzM2I4ZDAwMWNmMzY4Y2QyYjZlNzUyY2ZmODNiNjJhMDcxZjBhYzEwZTY3Yjk0ZjIwIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkVvY3h6L1FXSXBwbXVzYm1qUTlieXc9PSIsInZhbHVlIjoiSUM1b01ISkcyT0xMWFBCZVFsQUxUSitIbnNYNVhpTkRQR2wvcWJlQkx0a09hQVhxRXgwT3NFcXpVOWkzdkR2QTRRdkVJYzBlbU10VlpHb1RpYWhFNUhuMDBLaEs4L3BTVTBFYmIvNzJmekR3bmsrSzZJQkhtbDUzUDEySFhOU3kiLCJtYWMiOiJhMjFkMzNlZWRjMWJiMjcwOTY0YzY0NzQ0OTI2YWFiYTIwZWI2MGY4MDlkMTA2MzVlMjc2YTRhYzdiMGM5ZjJlIiwidGFnIjoiIn0%3D; __cf_bm=.U3YtFNih3m1w6FCrnkhu9tGuUHymVGomrTcpO.A40w-1758683061-1.0.1.1-HamIbNq.vNx7npxwSP0wqoYClS3Y3B42WO1UNnXOMO6bSheMocH.v_b7Q.nhvQVLVKnDsPdTSCXB4bPsND1B3RB70gSD0SuE2XX4dl_bXM0; utm_source=direct; user_meta=%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22null%22%2C%22utm_campaign%22%3A%22null%22%2C%22utm_content%22%3A%22null%22%2C%22utm_term%22%3A%22null%22%2C%22device_category%22%3A%22unknown%22%7D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:22 GMT\r\ncontent-type: font/woff\r\ncontent-length: 56708\r\ncf-ray: 983f0dd098461a30-OSL\r\nlast-modified: Tue, 23 Sep 2025 10:33:18 GMT\r\netag: \"68d2776e-dd84\"\r\ncf-cache-status: REVALIDATED\r\nexpires: Wed, 24 Sep 2025 07:04:22 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56708,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 56708, version 1.0","md5":"537f18c7296e98bfe6599400dda3ea61","sha1":"5f7addd5b7b975f03a030415a94ced7836021907","sha256":"1c93ecb1beb8032cc79bc48fc4852d7dd5c7524f83167b17e2ce57e016a94f71","sha512":"ebcf4ed3074c91eb18b7c65afd13d3ddfcf581f4149a08f572d1e2e4c0d0804b913b433a1d53b31b368b944b82eced820412e7dd1918cb0f1182d8dc3cc26f53","ssdeep":"1536:MYuZtuMn6vq1VHp33c3nSUP/1grKd4GZYBtP:MVtuGHNs3SY/OrKd4GZ2tP","tlshash":"994302d4826336c9b0d1eab1c588d6f69131e2a1dc83771fade4231320c625cfbf9669","first_seen":"2025-09-20T03:59:22.79519Z","last_seen":"2025-09-24T03:05:07.444056Z","times_seen":2,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"u.kueezrtb.com/fpd?_=1758683063366\u0026yv=356f51e\u0026h=money.ca","fqdn":"u.kueezrtb.com","domain":"kueezrtb.com","tld":"com"},"ip":{"addr":"172.66.162.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kueezrtb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 31 Jul 2025 04:22:42 GMT","end":"Wed, 29 Oct 2025 05:22:40 GMT"},"fingerprint":{"sha1":"72:9A:34:A6:6E:6C:F2:12:4C:CD:21:43:69:9D:B4:AE:A6:E2:BD:C1","sha256":"74:FD:00:85:48:5B:6D:03:90:97:6C:48:C6:0B:F9:7E:AB:0F:30:71:82:29:09:7B:3D:3A:D7:32:40:B2:4D:4D"}}},"request":{"raw":"GET /fpd?_=1758683063366\u0026yv=356f51e\u0026h=money.ca HTTP/1.1\r\nHost: u.kueezrtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://money.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:23 GMT\r\ncontent-length: 307\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://money.ca\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nserver: cloudflare\r\nset-cookie: kuid=b4c606a6d5e7c1f9; HttpOnly; SameSite=None; Secure; Path=/; Domain=kueezrtb.com; Max-Age=7776000; Expires=Tue, 23 Dec 2025 03:04:23 GMT\r\ncf-ray: 983f0dda6ac58be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":388,"size_decoded":0,"mime_type":"text/xml","magic":"ASCII text, with very long lines (388), with no line terminators","md5":"49d326b00505ccb5bff6260e99cbedd0","sha1":"01110b5709439f8eeda772cb21192ca02daf6492","sha256":"9dd6901040c9e35a297878e21f420ac0a1e12ba5ae8e6fa9f879cfeff025f281","sha512":"63005d8289b1a8e147f2c964fad4e0aeb4e69e48b7c83bb72be38da9b44beca6022edb5fde92e812149cdd558185624dfc42c8e9d842f60a3b9b083b6e03469a","ssdeep":"","tlshash":"abe0f1dff82d6a599c6d93e27802b1625800e449c4c6dfff520e830077af030b8a4d48","first_seen":"2025-09-24T03:05:07.44749Z","last_seen":"2025-09-24T03:05:07.44749Z","times_seen":1,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cdn.admatic.de/cookie.html?bidder=admaticde\u0026gdpr=\u0026gdpr_consent=\u0026f=b\u0026uid=7b456e6d-386c-43fd-bdb4-e6ab1c330954","fqdn":"static.cdn.admatic.de","domain":"admatic.de","tld":"de"},"ip":{"addr":"172.67.72.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://dsp-service.admatic.de/cookie_sync?r=https%3A%2F%2Fcsync.smilewanted.com%2Fset_partner_userid_get%2Fadmatic%2F%24%7BUSER_ID%7D","date":"2025-09-24T03:04:29.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.cdn.admatic.de","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Sep 2025 16:20:33 GMT","end":"Tue, 02 Dec 2025 16:20:32 GMT"},"fingerprint":{"sha1":"51:8F:C6:BA:EF:DB:F9:A9:62:B0:A4:96:38:FE:4C:51:79:DA:71:AD","sha256":"06:05:0A:2D:B8:99:97:31:AE:FD:B9:1B:60:23:47:08:C1:EF:4D:06:84:59:5E:2B:D2:28:E7:27:53:D5:3F:D8"}}},"request":{"raw":"GET /cookie.html?bidder=admaticde\u0026gdpr=\u0026gdpr_consent=\u0026f=b\u0026uid=7b456e6d-386c-43fd-bdb4-e6ab1c330954 HTTP/1.1\r\nHost: static.cdn.admatic.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dsp-service.admatic.de/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid=ec240dc9-4059-4ccd-b7f1-c00942a6ec97\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:29 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncdn-pullzone: 2526898\r\ncdn-uid: e7d0f040-08f3-443e-a640-656beb6c8b3b\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=25600000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UTFMo6SYyAb6sNStjl%2B2uAzv10UwiYiBhflt1ErN0ipjDBEKqUSjxn1TI3axozI79x8Tew466NbHhFYA0cbS%2FRV%2Bp4l%2Bx3bCESY4E6UWZHWmYJiv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 21 May 2025 13:27:10 GMT\r\ncdn-storageserver: DE-978\r\ncdn-fileserver: 988\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/22/2025 21:16:37\r\ncdn-edgestorageid: 1333\r\ncdn-requestid: d579d075874da6e64a95cef0cbc0d7fe\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 983f0dff4be23181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1122,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1122), with no line terminators","md5":"21947b7c68707b18d7d77214ee229db9","sha1":"2a6ace8708e500c3e9c911ca209b2d0c2aed4917","sha256":"481c8382889f68e105a819ab253cbea9e6a52e86d611edd9fde5feae25e1d8a7","sha512":"8eedf99a0df2a0f8f7e23dc44223609d8b4ac93721ee14da60ff3e884e4ef52c0914cc9b5cd6a3082951ebd07d30ddd9d882833f3d677e1de4d6ec563f3b75d1","ssdeep":"","tlshash":"5c2163407265ac9e860202f80f750d0ea8a1e1523cf5a068b8c9e5b03212817c7fa9ef","first_seen":"2025-05-21T22:21:34.380102Z","last_seen":"2026-03-27T07:05:51.569313Z","times_seen":2353,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":39,"dns":4,"connect":1,"send":0,"wait":51,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"edge.aditude.io/prebid/9.19.0.js?v=634aa20e55e619677216ef102e57d363\u0026modules=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%3D%3D","fqdn":"edge.aditude.io","domain":"aditude.io","tld":"io"},"ip":{"addr":"172.66.168.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:21.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aditude.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 06 Aug 2025 17:38:08 GMT","end":"Tue, 04 Nov 2025 18:38:05 GMT"},"fingerprint":{"sha1":"7E:39:52:3D:27:DF:CA:33:AD:56:A7:45:2D:03:C5:F8:44:A8:51:5D","sha256":"2C:86:9B:7E:3E:B2:04:3D:45:1D:F9:63:17:30:7E:6A:80:7F:2A:94:3D:88:F5:16:68:9F:1E:EA:2A:2C:FB:64"}}},"request":{"raw":"GET /prebid/9.19.0.js?v=634aa20e55e619677216ef102e57d363\u0026modules=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%3D%3D HTTP/1.1\r\nHost: edge.aditude.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:21 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nage: 593172\r\ncache-control: public, max-age=2678400\r\ncontent-encoding: br\r\netag: W/\"7319f-Y2iDt/iF+5oTwu75f+zF06cBB34\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch, accept-encoding\r\nx-matched-path: /prebid/[version]\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::cle1::mtq46-1758089888742-461c2af17791\r\ncf-cache-status: HIT\r\ncf-ray: 983f0dd0e8d856ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":471455,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (58546)","md5":"8e7cdbaa3655e4f43812acb3837d9dc8","sha1":"636883b7f885fb9a13c2eef97fecc5d3a701077e","sha256":"39dbf80bffb6895fdcee54c32e0f92f5841d93d070f37de9cc98727ccf1cc13e","sha512":"30a382ec2bac99cf38ca16dc1b6553ec2baf7a20211a3a897d9eee51402d6ced572d12fa2e5b767e3abd762e13b47cbf8ece1799671942f0094fa89799c04078","ssdeep":"6144:VMQTyDHKVCxqRH2wC1aPh2Iq20hopp8JtM2ypZ:aQmDqVCxqR2woa5Jq20h48XM5Z","tlshash":"23a42b9a33c6f0bb53d704e4d57f4215f2698904740ec050f629ada62836d6fa2a3f7e","first_seen":"2025-09-20T03:59:22.793276Z","last_seen":"2025-09-24T03:05:07.448617Z","times_seen":2,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":83,"dns":14,"connect":1,"send":0,"wait":10,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"track.kueezrtb.com/dye?ac=2\u0026acm=G3L\u0026uid=be5cdac8e005e820\u0026sid=34ec2ed1ee696ea0\u0026pvi=89bcafefc05ee524\u0026h=money.ca\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=81\u0026uri=%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026furl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026sr=1280x1024\u0026type=latest:fpdrd\u0026_=1758683063567","fqdn":"track.kueezrtb.com","domain":"kueezrtb.com","tld":"com"},"ip":{"addr":"172.66.162.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kueezrtb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 31 Jul 2025 04:22:42 GMT","end":"Wed, 29 Oct 2025 05:22:40 GMT"},"fingerprint":{"sha1":"72:9A:34:A6:6E:6C:F2:12:4C:CD:21:43:69:9D:B4:AE:A6:E2:BD:C1","sha256":"74:FD:00:85:48:5B:6D:03:90:97:6C:48:C6:0B:F9:7E:AB:0F:30:71:82:29:09:7B:3D:3A:D7:32:40:B2:4D:4D"}}},"request":{"raw":"GET /dye?ac=2\u0026acm=G3L\u0026uid=be5cdac8e005e820\u0026sid=34ec2ed1ee696ea0\u0026pvi=89bcafefc05ee524\u0026h=money.ca\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=81\u0026uri=%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026furl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026sr=1280x1024\u0026type=latest:fpdrd\u0026_=1758683063567 HTTP/1.1\r\nHost: track.kueezrtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nCookie: kuid=b4c606a6d5e7c1f9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 24 Sep 2025 03:04:23 GMT\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 983f0ddb5b2f8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.ca/css/critical/moneywise-critical-organic-v2.min.css?cb=432","fqdn":"money.ca","domain":"money.ca","tld":"ca"},"ip":{"addr":"104.18.32.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:21.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"money.ca","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:25:31 GMT","end":"Mon, 24 Nov 2025 16:25:29 GMT"},"fingerprint":{"sha1":"A5:8A:11:35:E2:18:EF:C0:E0:2A:61:E3:CE:0F:31:56:42:55:F0:FC","sha256":"C0:5A:4D:B1:BE:57:72:CF:9E:D8:17:5E:01:A3:0D:F8:4C:C1:16:16:8B:65:8B:CA:3B:CC:32:C3:E9:15:71:EF"}}},"request":{"raw":"GET /css/critical/moneywise-critical-organic-v2.min.css?cb=432 HTTP/1.1\r\nHost: money.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account\r\nCookie: SSID_9H80=CQDn9B0AAAAAAAC0X9NohcaCGLRf02gBAAAAAAAAAAAAtF_TaADc7g; SSSC_9H80=1013.G7553486227140429445.1|0.0; SSRT_9H80=tF_TaAABAA; money_session=eyJpdiI6Inlqb015WmpKSkJhakh6SzMyN3VheFE9PSIsInZhbHVlIjoiT2pIcnNveGVobXNrS1FIUkZZZDd4ZWRNNkd0UTZPcnUveStFd09kNDY3T3ZtbEV0RXlLbXNadTFDS2Q0eC8wUGIyemFQaEdKVlVHb1MyRXNvb3NHYmN3ZkpwVy9ySHBBN1JCWEVmbkNraWhld3l1Rm5WTXd3VU53Zk52aHFEeGwiLCJtYWMiOiJmZDFlNmVjOGI0MDQxMmEzM2I4ZDAwMWNmMzY4Y2QyYjZlNzUyY2ZmODNiNjJhMDcxZjBhYzEwZTY3Yjk0ZjIwIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkVvY3h6L1FXSXBwbXVzYm1qUTlieXc9PSIsInZhbHVlIjoiSUM1b01ISkcyT0xMWFBCZVFsQUxUSitIbnNYNVhpTkRQR2wvcWJlQkx0a09hQVhxRXgwT3NFcXpVOWkzdkR2QTRRdkVJYzBlbU10VlpHb1RpYWhFNUhuMDBLaEs4L3BTVTBFYmIvNzJmekR3bmsrSzZJQkhtbDUzUDEySFhOU3kiLCJtYWMiOiJhMjFkMzNlZWRjMWJiMjcwOTY0YzY0NzQ0OTI2YWFiYTIwZWI2MGY4MDlkMTA2MzVlMjc2YTRhYzdiMGM5ZjJlIiwidGFnIjoiIn0%3D; __cf_bm=.U3YtFNih3m1w6FCrnkhu9tGuUHymVGomrTcpO.A40w-1758683061-1.0.1.1-HamIbNq.vNx7npxwSP0wqoYClS3Y3B42WO1UNnXOMO6bSheMocH.v_b7Q.nhvQVLVKnDsPdTSCXB4bPsND1B3RB70gSD0SuE2XX4dl_bXM0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 03:04:21 GMT\r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 23 Sep 2025 13:52:16 GMT\r\netag: W/\"68d2a610-e031\"\r\ncf-cache-status: HIT\r\nexpires: Wed, 24 Sep 2025 07:04:21 GMT\r\ncache-control: public, max-age=14400\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 983f0dce1e231a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57393,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (57393), with no line terminators","md5":"8fac233f22c3b37f2bc5599fa8c2fbff","sha1":"b5af3712fea1af11e9d0d248f2079eb8ca4855ab","sha256":"05f5fdb47037a9d6c9e9f9ec784909bc9a176739ee022d6ad500eff2113116eb","sha512":"0398232ee695d6c15f21a4fba93524f06c3476916de350743101e6a3942aea422ee3012c4aab8927d15d4e69b663f336c069572b657504c0b755ff917cbc6c64","ssdeep":"384:DfJM5MpHtEqL80lBH5rd/zg4Czi2nwpGLfQLdFWMK3Rn8nH/U/OFndRXRHYnRkDb:tM5gJN/U/gPHT","tlshash":"ff43f2f9fa82d4387e3e5466939836bc6a1ab443af121fd5f260932161c3ff2479160d","first_seen":"2025-09-24T03:05:07.449689Z","last_seen":"2025-09-24T03:05:07.449689Z","times_seen":1,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"track.kueezrtb.com/dye?ac=2\u0026acm=G3L\u0026uid=be5cdac8e005e820\u0026sid=34ec2ed1ee696ea0\u0026pvi=89bcafefc05ee524\u0026h=money.ca\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=81\u0026uri=%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026furl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026sr=1280x1024\u0026type=latest:preinit\u0026_=1758683063358","fqdn":"track.kueezrtb.com","domain":"kueezrtb.com","tld":"com"},"ip":{"addr":"172.66.162.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.ca/investing/client-has-almost-5000-in-crypto-stolen-from-account","date":"2025-09-24T03:04:23.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kueezrtb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 31 Jul 2025 04:22:42 GMT","end":"Wed, 29 Oct 2025 05:22:40 GMT"},"fingerprint":{"sha1":"72:9A:34:A6:6E:6C:F2:12:4C:CD:21:43:69:9D:B4:AE:A6:E2:BD:C1","sha256":"74:FD:00:85:48:5B:6D:03:90:97:6C:48:C6:0B:F9:7E:AB:0F:30:71:82:29:09:7B:3D:3A:D7:32:40:B2:4D:4D"}}},"request":{"raw":"GET /dye?ac=2\u0026acm=G3L\u0026uid=be5cdac8e005e820\u0026sid=34ec2ed1ee696ea0\u0026pvi=89bcafefc05ee524\u0026h=money.ca\u0026wh=1280x1024\u0026b=Firefox\u0026bv=134.0\u0026dev=\u0026os=Windows%2010\u0026p=\u0026yv=81\u0026uri=%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026furl=https%3A%2F%2Fmoney.ca%2Finvesting%2Fclient-has-almost-5000-in-crypto-stolen-from-account\u0026sr=1280x1024\u0026type=latest:preinit\u0026_=1758683063358 HTTP/1.1\r\nHost: track.kueezrtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 24 Sep 2025 03:04:23 GMT\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 983f0dda2aac8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}