{"report_id":"898a0a12-f556-45ec-abd5-b284d8435cfd","version":6,"status":"done","tags":[],"date":"2025-09-20T19:42:23Z","url":{"schema":"http","addr":"embednow.top/embed/serie-a/2025-09-20/udi-mil","fqdn":"embednow.top","domain":"embednow.top","tld":"top"},"ip":{"addr":"104.21.6.16","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"embednow.top/embed/serie-a/2025-09-20/udi-mil","fqdn":"embednow.top","domain":"embednow.top","tld":"top"},"title":"Udinese vs. Milan"},"submit":{"url":{"schema":"http","addr":"embednow.top/embed/serie-a/2025-09-20/udi-mil","fqdn":"embednow.top","domain":"embednow.top","tld":"top"},"ip":{"addr":"104.21.6.16","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-25T19:42:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":3,"urlquery":0,"analyzer":5}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-20T19:42:01Z","timestamp":1758397321,"ip_dst":{"addr":"172.18.0.2","port":56600,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"139.45.195.8","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"severity":"medium","alert":"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)","source":"{\"timestamp\":\"2025-09-20T19:42:01.107308+0000\",\"flow_id\":235306285093870,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"139.45.195.8\",\"src_port\":443,\"dest_ip\":\"172.18.0.2\",\"dest_port\":56600,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2025194,\"rev\":3,\"signature\":\"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2018_01_09\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_16\"]}},\"tls\":{\"subject\":\"CN=shauhoakoche.xyz\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R13\",\"serial\":\"06:29:28:D7:73:04:A6:AF:81:66:E2:A5:A3:FA:6F:BB:D9:23\",\"fingerprint\":\"48:67:d9:30:f1:8f:b3:1f:04:5d:85:fc:17:3e:dd:37:74:d2:b9:29\",\"sni\":\"shauhoakoche.xyz\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-09-14T05:07:34\",\"notafter\":\"2025-12-13T05:07:33\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1242,\"bytes_toclient\":3496,\"start\":\"2025-09-20T19:42:01.021486+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-20T19:42:02Z","timestamp":1758397322,"ip_dst":{"addr":"172.18.0.2","port":56604,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"139.45.195.8","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"severity":"medium","alert":"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)","source":"{\"timestamp\":\"2025-09-20T19:42:02.027141+0000\",\"flow_id\":971184506756248,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"139.45.195.8\",\"src_port\":443,\"dest_ip\":\"172.18.0.2\",\"dest_port\":56604,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2025194,\"rev\":3,\"signature\":\"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2018_01_09\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_16\"]}},\"tls\":{\"subject\":\"CN=shauhoakoche.xyz\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R13\",\"serial\":\"06:29:28:D7:73:04:A6:AF:81:66:E2:A5:A3:FA:6F:BB:D9:23\",\"fingerprint\":\"48:67:d9:30:f1:8f:b3:1f:04:5d:85:fc:17:3e:dd:37:74:d2:b9:29\",\"sni\":\"shauhoakoche.xyz\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-09-14T05:07:34\",\"notafter\":\"2025-12-13T05:07:33\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1113,\"bytes_toclient\":3496,\"start\":\"2025-09-20T19:42:01.941208+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-20T19:42:02Z","timestamp":1758397322,"ip_dst":{"addr":"172.18.0.2","port":56616,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"139.45.195.8","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"severity":"medium","alert":"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)","source":"{\"timestamp\":\"2025-09-20T19:42:02.031646+0000\",\"flow_id\":1071527827693846,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"139.45.195.8\",\"src_port\":443,\"dest_ip\":\"172.18.0.2\",\"dest_port\":56616,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2025194,\"rev\":3,\"signature\":\"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2018_01_09\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_16\"]}},\"tls\":{\"subject\":\"CN=shauhoakoche.xyz\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R13\",\"serial\":\"06:29:28:D7:73:04:A6:AF:81:66:E2:A5:A3:FA:6F:BB:D9:23\",\"fingerprint\":\"48:67:d9:30:f1:8f:b3:1f:04:5d:85:fc:17:3e:dd:37:74:d2:b9:29\",\"sni\":\"shauhoakoche.xyz\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-09-14T05:07:34\",\"notafter\":\"2025-12-13T05:07:33\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1242,\"bytes_toclient\":3496,\"start\":\"2025-09-20T19:42:01.942358+0000\"}}"}],"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"embednow.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"shauhoakoche.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"tvlhvswh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"ssl.p.jwpcdn.com","ip":{"addr":"151.101.130.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":16928,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":3,"received_data":862287,"sent_data":1305,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"my.rtmark.net","ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":43911,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":835,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"embednow.top","ip":{"addr":"104.21.6.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":4,"request_count":4,"received_data":456427,"sent_data":1898,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"adexchangeclear.com","ip":{"addr":"104.21.78.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":24943,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":1702,"sent_data":870,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"shauhoakoche.xyz","ip":{"addr":"139.45.195.8","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":3,"request_count":3,"received_data":117918,"sent_data":2251,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"p.vidembed.re","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":4962452,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":4266,"sent_data":922,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":1222,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":233863,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.bunny.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"unknown","domain_rank":56787,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":3,"received_data":49797,"sent_data":1488,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"usrpubtrk.com","ip":{"addr":"104.21.92.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":6824,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":530,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"gg.poocloud.in","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":5692,"sent_data":916,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"tvlhvswh.com","ip":{"addr":"139.45.197.163","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":2,"received_data":1237,"sent_data":949,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-20T19:42:01Z","timestamp":1758397321,"ip_dst":{"addr":"172.18.0.2","port":56600,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"139.45.195.8","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"severity":"medium","alert":"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)","source":"{\"timestamp\":\"2025-09-20T19:42:01.107308+0000\",\"flow_id\":235306285093870,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"139.45.195.8\",\"src_port\":443,\"dest_ip\":\"172.18.0.2\",\"dest_port\":56600,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2025194,\"rev\":3,\"signature\":\"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2018_01_09\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_16\"]}},\"tls\":{\"subject\":\"CN=shauhoakoche.xyz\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R13\",\"serial\":\"06:29:28:D7:73:04:A6:AF:81:66:E2:A5:A3:FA:6F:BB:D9:23\",\"fingerprint\":\"48:67:d9:30:f1:8f:b3:1f:04:5d:85:fc:17:3e:dd:37:74:d2:b9:29\",\"sni\":\"shauhoakoche.xyz\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-09-14T05:07:34\",\"notafter\":\"2025-12-13T05:07:33\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1242,\"bytes_toclient\":3496,\"start\":\"2025-09-20T19:42:01.021486+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-20T19:42:02Z","timestamp":1758397322,"ip_dst":{"addr":"172.18.0.2","port":56604,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"139.45.195.8","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"severity":"medium","alert":"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)","source":"{\"timestamp\":\"2025-09-20T19:42:02.027141+0000\",\"flow_id\":971184506756248,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"139.45.195.8\",\"src_port\":443,\"dest_ip\":\"172.18.0.2\",\"dest_port\":56604,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2025194,\"rev\":3,\"signature\":\"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2018_01_09\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_16\"]}},\"tls\":{\"subject\":\"CN=shauhoakoche.xyz\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R13\",\"serial\":\"06:29:28:D7:73:04:A6:AF:81:66:E2:A5:A3:FA:6F:BB:D9:23\",\"fingerprint\":\"48:67:d9:30:f1:8f:b3:1f:04:5d:85:fc:17:3e:dd:37:74:d2:b9:29\",\"sni\":\"shauhoakoche.xyz\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-09-14T05:07:34\",\"notafter\":\"2025-12-13T05:07:33\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1113,\"bytes_toclient\":3496,\"start\":\"2025-09-20T19:42:01.941208+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-20T19:42:02Z","timestamp":1758397322,"ip_dst":{"addr":"172.18.0.2","port":56616,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"139.45.195.8","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"severity":"medium","alert":"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)","source":"{\"timestamp\":\"2025-09-20T19:42:02.031646+0000\",\"flow_id\":1071527827693846,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"139.45.195.8\",\"src_port\":443,\"dest_ip\":\"172.18.0.2\",\"dest_port\":56616,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2025194,\"rev\":3,\"signature\":\"ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2018_01_09\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"updated_at\":[\"2020_09_16\"]}},\"tls\":{\"subject\":\"CN=shauhoakoche.xyz\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R13\",\"serial\":\"06:29:28:D7:73:04:A6:AF:81:66:E2:A5:A3:FA:6F:BB:D9:23\",\"fingerprint\":\"48:67:d9:30:f1:8f:b3:1f:04:5d:85:fc:17:3e:dd:37:74:d2:b9:29\",\"sni\":\"shauhoakoche.xyz\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-09-14T05:07:34\",\"notafter\":\"2025-12-13T05:07:33\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1242,\"bytes_toclient\":3496,\"start\":\"2025-09-20T19:42:01.942358+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"embednow.top/embed/serie-a/2025-09-20/udi-mil","fqdn":"embednow.top","domain":"embednow.top","tld":"top"},"ip":{"addr":"104.21.6.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"13f2f014daa8bebeb1b00c5e892982fe","sha1":"a3cea39be8f32404067c8204fd4c03b5f326bb71","sha256":"6364d2a0aaee7abd66696935964a89463614c3c0bff01f8069a253b68b8bc4d2","sha512":"f35f7fdc041bae61b4cfa448a7240a93565af73c5fe468278a93f3176b7444cfeb4220f46b0b09cf2720b5214d132419d3d5d60be8f09d2cb412487b1aa9604a","ssdeep":"6144:IlLRvm39CjtoYajmnmFQg/SJp15WBA/KvEOBsdrufLGRrl:IlLRe39CjmYajKmFQg/Gp2BA/KvEOBYB","tlshash":"cd4429493252b2f63bd250d55c3ba506e2365059780dc428f6ecc9d2a9afdce6232f7c","size":268478,"data":"","first_seen":"2025-09-20T02:48:31.09282Z","last_seen":"2026-05-02T16:38:17.205642Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embednow.top/embed/serie-a/2025-09-20/udi-mil","fqdn":"embednow.top","domain":"embednow.top","tld":"top"},"ip":{"addr":"104.21.6.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"67372dd61bff46642dab866caba9c535","sha1":"518ae0c2dda2d65c8d564b6aceb8cc4f46fbe65a","sha256":"87803bad3153a7cdaf1b801bdc69f7e10221c0f3f7e0501070e54791e5d89d67","sha512":"698c9ac76e42d0188dae27f4eb2e5eecd9dbb6415df7141b53c79db106ba0ae00417a12dc7158c88b4890c8228f1e6b6622f061d38fb8abb0f143fe6860e7908","ssdeep":"","tlshash":"4d80002acea0c8bb2ac0080c8a088eb088ff0002ce0a322f0e80e020c3300f00082008","size":33,"data":"","first_seen":"2025-04-19T16:51:22.024873Z","last_seen":"2026-05-02T16:38:17.216108Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embednow.top/assets/js/jwplayer.js?v=8.36.4a","fqdn":"embednow.top","domain":"embednow.top","tld":"top"},"ip":{"addr":"104.21.6.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"caaeb1074e0df9a7ec4da49e6a127d05","sha1":"bc36de218227a2565b408c289aaf1629f7996337","sha256":"29b577ed42248827a2fa01a058414f0087cfad8caa61eb9524f586ebce8c6f2e","sha512":"11952803a809105273e271384dfb5d0467e29081e577a253af3e4b7ea6fb92a6b1a0c1fe4009c00be4467052e6d4ba1c68aeda906cda2043caa01da6613751bc","ssdeep":"1536:fmLyl/BykxMqxGVaoB2lAqU6ePRtwoIWz0nG+5cVLSYn+LQUi3RrzlsqvkkRPUeF:fpKTQAUi3Rr8dhRwSy","tlshash":"7be339a631c2f4a617e264c7e47a4101f1790988744de864faacecda3916947b1b3ffc","size":148724,"data":"","first_seen":"2025-02-08T23:48:44.982712Z","last_seen":"2025-11-01T19:55:03.312615Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embednow.top/embed/serie-a/2025-09-20/udi-mil","fqdn":"embednow.top","domain":"embednow.top","tld":"top"},"ip":{"addr":"104.21.6.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e123c86383874f34f1c18cfec6548c5d","sha1":"058035a7b2cb220cc935df81b6fc05661f71bdfd","sha256":"1de614c64d85d9ef482e784651debbb65d7b9a24e7810946d244b68f3ec62570","sha512":"f049102ba62a7baf833bd63866066e58191fb1dac0674c7034540c39b4599d3bae59138de06c7faebdf4d9ed4f2c031d3c566800a9d5ebd84998ba6653423317","ssdeep":"","tlshash":"7121250848b985365133b2a94b6f49113832a40f1d49faa4ba4d12680f4c53d65bbfed","size":1165,"data":"","first_seen":"2025-09-20T19:42:50.689436Z","last_seen":"2025-09-20T19:42:50.689436Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.36.4/jwpsrv.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.130.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9449982aabf38639d014274af3ad474","sha1":"f99f5ba761f1945f19da3cf4a9ca52c1aeee47d5","sha256":"fb1c762c222ed003d9bd932a1bf94a36879b73967f3aaf2797cae7f6d5302352","sha512":"f4c80f0c7c44b72303aa3494f19d164095b24bf83e013ddf92d20b75fc618cbaa505c183557bbb14cb9a836c514b21fcb623c00059ef7e9d04ffe16ae4a12fc3","ssdeep":"768:DiDjPSAlvbtXral8WK/2R7pr1oJl92LCaA1YL9ncpgW:+nPlZral8WK/GEJl92LCcLWpV","tlshash":"fd63d78d3685b16a5a6770b8806fb546723d1dd6308dc250ea50eec93c3de5ee237b2c","size":67288,"data":"","first_seen":"2025-02-26T11:57:34.810186Z","last_seen":"2026-05-10T19:08:37.845509Z","times_seen":4014,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.36.4/provider.hlsjs.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.130.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e7ad1d2a7441a10a15cd4f734941fd9","sha1":"b7693c40e7b43d9bcce0305527f5bd1ee7f3e4d1","sha256":"91212113632d7f5d11bd3112911f35afa68e2105facd125994421d538f930ee8","sha512":"f2edad98ffdc31efe66a80bf562d2dae7c3d08a80d727d5cfd00436da9cf093208cafaaa450c83a8c370f0c7b2fd0c98646433dea09273c74e2f6594ccb56251","ssdeep":"6144:hA9gZtOST1zXBUkGHZu08Q9Eu969Q3/nqJxgEMmew9rrqIZk6:qy1VGHZu0pU9cqJxgEXZF","tlshash":"a5a43bed7795a02642c2a1a5903f4607633b7d0a740dc1acfa2be9d75db8849b03bf74","size":461426,"data":"","first_seen":"2024-12-20T05:25:52.172257Z","last_seen":"2026-05-04T08:50:36.054586Z","times_seen":176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embednow.top/embed/serie-a/2025-09-20/udi-mil","fqdn":"embednow.top","domain":"embednow.top","tld":"top"},"ip":{"addr":"104.21.6.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5586dac75014fab1f855fbc52ec2193","sha1":"073a1882f5a6baffdcdabeb7dd739e1864102de6","sha256":"30e2df8cafe2f4c777105d44c35c8d798822a4bbaa62f65a4897595024aa34e6","sha512":"22785e994d9e420b5d7e24bfd9c5faa6af95b3475116d639575985ed71dd96e768cae1c2fb0917b21e7117a4d37f20d567988683b0e9847d5bc3d983f01141e2","ssdeep":"","tlshash":"dac08089e9f41fb010fd14c16746dd13f2d61e998ea520b373590405a643687e645165","size":172,"data":"","first_seen":"2025-09-20T19:42:50.69121Z","last_seen":"2025-09-20T19:42:50.69121Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embednow.top/embed/serie-a/2025-09-20/udi-mil","fqdn":"embednow.top","domain":"embednow.top","tld":"top"},"ip":{"addr":"104.21.6.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a0fcb94db7d6f289d4a773c6eb7834a8","sha1":"2736d0de4f951686f5cf521387230edcec9872fe","sha256":"a95517f94f4a926c5d0b6ab67cb3b1a16940feeb6be273c36f6ec5ca3e760be0","sha512":"79c2f26e320906a7e17868fcdf644963c0a4cbae8f86c08be258a4fe1680d93ef4060935401c8a796709bf8c3af9457a38d56c428e56e7fb3b1b3ca237a1c32b","ssdeep":"384:+v0a/K7iYFRdYt+O0Qen9tO69aI8tAUeNDaUGRQ2t4PpBahqoo+KXnS7YhfGMOIf:+K72+BQ80GaIoQPzahq/AMOY","tlshash":"e3c2d4a7321eb91a8719626150ef2e85a2cc48c4718f1f7ce724e53634d763485ebef8","size":27962,"data":"","first_seen":"2025-09-20T02:48:31.100422Z","last_seen":"2025-12-10T19:41:54.06484Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p.vidembed.re/js/script.pageview-props.tagged-events.js","fqdn":"p.vidembed.re","domain":"vidembed.re","tld":"re"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe728dc1a89be60ec812575ef39ef07f","sha1":"4c4d6aeb9af7a40a517f3094b715c706b512dc79","sha256":"bd6cbf16d35a0b6d98f69ba97e9a60b9949b480620484b48451f1fd9ebad936c","sha512":"c2607b1ed66216367f179ca993fc5ceebb35a58d7d309559c95a36ae53b1e8c045c8b5b90a193da58edcb9cb1d82bab841c234fab3350a1ecb9a259d1e7c66ce","ssdeep":"","tlshash":"e361d9de744175b159b26175ab2f3507b13b2486781a4012b822cdc21d3cedf433aeee","size":3319,"data":"","first_seen":"2024-12-10T06:19:40.472564Z","last_seen":"2025-11-26T14:35:01.607115Z","times_seen":57,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.36.4/jwplayer.core.controls.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.130.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa76c7bf8a702f02c4ec0fc973d698d6","sha1":"cd8bd98969dd7167c8d99a5abcec4a07df4e63a2","sha256":"7220be9e6db902dabf6a18a260e3a1d14a877aa9aeb113380dd3711c908eba0f","sha512":"ea3c5274ac225b90f20a925500ec5efa6e197c4fcaff9ecd9e08d0db96a332d87443ee0ebf63d6e2a45b76b4bb20c626eec56868380945d3408f97a939f08e7d","ssdeep":"3072:fkY7nFuuslX/Ch3u6NxIe8SJht1yiSS64pOknRBb9Wsr9ObrCyYLrmYRJ:sYx5U/Ch3Jp8SJhtJOaRBRtOHkLrmYRJ","tlshash":"ca640932214252359aea82da76514604b3398085f516cfacff2ceddd4c6e9c731fabb4","size":331835,"data":"","first_seen":"2025-01-02T21:48:06.342732Z","last_seen":"2026-05-04T08:50:36.056335Z","times_seen":258,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shauhoakoche.xyz/5/9832595","fqdn":"shauhoakoche.xyz","domain":"shauhoakoche.xyz","tld":"xyz"},"ip":{"addr":"139.45.195.8","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"79b4af857609a25df74272dbefe0f9f4","sha1":"89a89cc8afc31f0615cf5e6675fca8d64a361578","sha256":"d29ed6f56b05eb3601516ad3f1b8f5ba966e352b727d40513f76fc5e83566afa","sha512":"b14a7243316daf3f77f571b5e5ac66b29830d161b96117712644e6ceb7baf163d302bfe1183bd3e27b62e8491217ec8ba0932629a1d54b05b604ea2c4e16becf","ssdeep":"1536:LO5QiEOxo8EMC9uqkoc+i1HLyR45HjQ7anWn6wTEMtwO2m+:LO5XUM/uipCTanW6GEEwO2m+","tlshash":"acb31a9c625234b11d7a9129785fc44daeeaef80148e89e4d4d9ec732653071c3bbfe8","size":115062,"data":"","first_seen":"2025-09-20T19:42:50.670583Z","last_seen":"2025-09-20T19:42:50.670583Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"embednow.top/assets/js/jwplayer.js?v=8.36.4a","fqdn":"embednow.top","domain":"embednow.top","tld":"top"},"ip":{"addr":"104.21.6.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://embednow.top/embed/serie-a/2025-09-20/udi-mil","date":"2025-09-20T19:41:59.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"embednow.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Sep 2025 20:40:18 GMT","end":"Thu, 18 Dec 2025 21:37:46 GMT"},"fingerprint":{"sha1":"2E:88:AA:D8:D1:07:A4:10:1B:D7:9E:78:53:AA:36:57:CC:9E:FD:AC","sha256":"A2:F5:61:0B:8C:8B:FC:4B:BC:9A:D1:C5:BC:D0:7C:6A:3B:36:50:80:7A:15:F7:68:D3:F4:88:F1:42:F0:27:D5"}}},"request":{"raw":"GET /assets/js/jwplayer.js?v=8.36.4a HTTP/1.1\r\nHost: embednow.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embednow.top/embed/serie-a/2025-09-20/udi-mil\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Sep 2025 19:41:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 15 Feb 2025 22:20:51 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WII7uZH%2BH9RlXU%2FarV7O81a%2Ful8I10r9u84aLxDAlVl3LV1Mv0KJvZ3%2B98ygSG%2FBEcJvISLQmaYxzy6bUtPQEbQDJviNHVaoZ75O0Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"67b11343-244f4\"\r\ncontent-encoding: gzip\r\nage: 4267\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9823cdb0dfd332fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":148724,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65144)","md5":"caaeb1074e0df9a7ec4da49e6a127d05","sha1":"bc36de218227a2565b408c289aaf1629f7996337","sha256":"29b577ed42248827a2fa01a058414f0087cfad8caa61eb9524f586ebce8c6f2e","sha512":"11952803a809105273e271384dfb5d0467e29081e577a253af3e4b7ea6fb92a6b1a0c1fe4009c00be4467052e6d4ba1c68aeda906cda2043caa01da6613751bc","ssdeep":"1536:fmLyl/BykxMqxGVaoB2lAqU6ePRtwoIWz0nG+5cVLSYn+LQUi3RrzlsqvkkRPUeF:fpKTQAUi3Rr8dhRwSy","tlshash":"7be339a631c2f4a617e264c7e47a4101f1790988744de864faacecda3916947b1b3ffc","first_seen":"2025-02-08T23:48:44.982712Z","last_seen":"2025-11-01T19:55:03.312615Z","times_seen":6,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"embednow.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.bunny.net/css?family=lexend-deca:400","fqdn":"fonts.bunny.net","domain":"bunny.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://embednow.top/embed/serie-a/2025-09-20/udi-mil","date":"2025-09-20T19:41:59.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fonts.bunny.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 23:10:51 GMT","end":"Thu, 18 Dec 2025 23:10:50 GMT"},"fingerprint":{"sha1":"DF:9D:97:88:1D:C7:EB:71:28:28:BB:4D:03:F0:DA:74:A7:1C:08:06","sha256":"35:56:C5:B2:79:26:95:BC:3B:93:D2:97:4E:81:83:6B:E4:89:64:4C:66:48:82:E7:1B:DA:77:79:CC:58:52:30"}}},"request":{"raw":"GET /css?family=lexend-deca:400 HTTP/1.1\r\nHost: fonts.bunny.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embednow.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 19:41:59 GMT\r\ncontent-type: text/css; charset=utf-8\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 781720\r\ncdn-uid: 3a60ca70-b89d-4cd5-a4b5-34a3468d7e0f\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 24 Aug 2025 15:25:30 GMT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/24/2025 15:25:30\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a40dbad748684f09023ea9a018226c07\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1532,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"cd0f198fd04421cc21cc9b6cdcbc14dd","sha1":"6ea5a5ae3a398480fe10b7b82e5a56ad2ba7d3a6","sha256":"d682317afe6eb70aed0bd858a6bd3d1d40c392f9af5782b8ecbeff30bce88774","sha512":"7fa2c1b5d6509db9a3df71aa42ef4b7f241ff21571aad5171d1c1523462c7a5468a1dd202bf12b097f8b59ed9666b6ce31dc2db5b734403d8582ff2b88dc0021","ssdeep":"","tlshash":"af3199f30427200467a61de233df6c0a4d2fa01676496015af2a8ed8cea4d3467a3b2e","first_seen":"2025-02-16T17:41:18.632095Z","last_seen":"2026-01-09T00:54:52.508784Z","times_seen":70,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":67,"dns":59,"connect":1,"send":0,"wait":6,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adexchangeclear.com/script/suurl5.php?r=9785410\u0026cbur=0.6446838011799639\u0026cbiframe=0\u0026cbWidth=1280\u0026cbHeight=1024\u0026cbtitle=Udinese%20vs.%20Milan\u0026cbpage=https%3A%2F%2Fembednow.top%2Fembed%2Fserie-a%2F2025-09-20%2Fudi-mil\u0026cbref=\u0026cbdescription=Udinese%20vs.%20Milan\u0026cbkeywords=\u0026cbcdn=vbcojhroxkoaf.online\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026ts=1758397320079\u0026srs=a7a907b48f12a34c5e7883d2c0a97805\u0026atv=68.1\u0026abtg=1\u0026adbv=3-cdn","fqdn":"adexchangeclear.com","domain":"adexchangeclear.com","tld":"com"},"ip":{"addr":"104.21.78.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://embednow.top/embed/serie-a/2025-09-20/udi-mil","date":"2025-09-20T19:42:00.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adexchangeclear.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 Aug 2025 17:58:51 GMT","end":"Sat, 08 Nov 2025 17:08:08 GMT"},"fingerprint":{"sha1":"EA:C4:03:00:5B:31:55:C6:59:67:78:25:B3:B7:46:0C:EC:DE:30:70","sha256":"D9:CD:23:32:1E:FF:B8:A4:2F:94:7E:6F:7B:49:CF:2A:8E:F8:87:04:44:A7:C7:E1:3C:53:1B:9F:D1:3A:94:D5"}}},"request":{"raw":"GET /script/suurl5.php?r=9785410\u0026cbur=0.6446838011799639\u0026cbiframe=0\u0026cbWidth=1280\u0026cbHeight=1024\u0026cbtitle=Udinese%20vs.%20Milan\u0026cbpage=https%3A%2F%2Fembednow.top%2Fembed%2Fserie-a%2F2025-09-20%2Fudi-mil\u0026cbref=\u0026cbdescription=Udinese%20vs.%20Milan\u0026cbkeywords=\u0026cbcdn=vbcojhroxkoaf.online\u0026ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026ts=1758397320079\u0026srs=a7a907b48f12a34c5e7883d2c0a97805\u0026atv=68.1\u0026abtg=1\u0026adbv=3-cdn HTTP/1.1\r\nHost: adexchangeclear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://embednow.top/\r\nOrigin: https://embednow.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 19:42:00 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3G8oUFIKQPdr4Yhirl%2BTYTZ9wGaFp1xpXoLwCg56n73V5%2FWZR8lD%2BgkwMzc0Xw0fl4uMBz3d3fa5cAH8ofkMd2yaf3BPzfYbJucAFIk43liCGUw%3D\"}]}\r\ncf-ray: 9823cdb30f17b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":982,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"83220be9a7a72191644ca72ad46f8bf5","sha1":"f3928f4171db9dd9c7a649e3e40e11cc8a990508","sha256":"ee7f9d3ae09475896af0a4cb40d527e5868971002231e161110a0b72b3015a82","sha512":"8c4f607a981d2336ca11f1b9001f0193f53ab90dc5a051c9ab970638eeb99ad530e9437b9b31816f4b7854d0db36c21a44b267be210332ab847ed91abcec95a5","ssdeep":"","tlshash":"5b11946a562c7a25383f095a94ee687c6c2570448f20e8049bded230cf0ed9cc57697f","first_seen":"2025-09-20T19:42:50.667407Z","last_seen":"2025-09-20T19:42:50.667407Z","times_seen":1,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":87,"dns":1,"connect":2,"send":0,"wait":202,"receive":0,"ssl":81},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"adexchangeclear.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.bunny.net/lexend-deca/files/lexend-deca-latin-400-normal.woff2","fqdn":"fonts.bunny.net","domain":"bunny.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://embednow.top/embed/serie-a/2025-09-20/udi-mil","date":"2025-09-20T19:42:00.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fonts.bunny.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 23:10:51 GMT","end":"Thu, 18 Dec 2025 23:10:50 GMT"},"fingerprint":{"sha1":"DF:9D:97:88:1D:C7:EB:71:28:28:BB:4D:03:F0:DA:74:A7:1C:08:06","sha256":"35:56:C5:B2:79:26:95:BC:3B:93:D2:97:4E:81:83:6B:E4:89:64:4C:66:48:82:E7:1B:DA:77:79:CC:58:52:30"}}},"request":{"raw":"GET /lexend-deca/files/lexend-deca-latin-400-normal.woff2 HTTP/1.1\r\nHost: fonts.bunny.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://embednow.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.bunny.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 19:42:00 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 14508\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 781720\r\ncdn-uid: 3a60ca70-b89d-4cd5-a4b5-34a3468d7e0f\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\netag: \"68b34d23-38ac\"\r\nlast-modified: Sat, 30 Aug 2025 19:12:35 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 344\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/08/2025 15:25:54\r\ncdn-edgestorageid: 830\r\ncdn-requestid: c8d96bdc48e4e799fabc6b675f82af12\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":14508,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14508, version 1.0","md5":"5b6074c6847ab2d69dfb43ee2eb012db","sha1":"85d22dcebc66ab87da0bf2b64834e62165542cb2","sha256":"669842b80ea17227f534c417b3e5842510221233d63cee762f9d6fd20b46a057","sha512":"5a68118191e5fa8f60e1e06c3db3d1155d26e6e3e0a03895df66011998c9077e75fdd2e39410e70c99eda763c8bd2d1c83fe27c08efd56daa9c5d52d8ef3b074","ssdeep":"384:/lWyl1MwjV0aMyoRKvcVVVYbEQtcI6wKqhDmdzbnpIM:/lj5TMREkeb6wKMavn+M","tlshash":"e352e16ba30bb065dac67411a43e38362c55905102dd0e65528ff5e010f5bfde6cb89d","first_seen":"2025-03-18T22:53:03.062102Z","last_seen":"2026-03-06T16:37:41.657911Z","times_seen":65,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usrpubtrk.com/ut/hb.php?cb=0.9260129511406396\u0026v=1","fqdn":"usrpubtrk.com","domain":"usrpubtrk.com","tld":"com"},"ip":{"addr":"104.21.92.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://embednow.top/embed/serie-a/2025-09-20/udi-mil","date":"2025-09-20T19:42:00.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usrpubtrk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 14 Aug 2025 11:57:48 GMT","end":"Wed, 12 Nov 2025 12:55:14 GMT"},"fingerprint":{"sha1":"D4:3E:2D:C6:F4:04:8A:A6:38:80:A6:3F:B8:36:DF:7A:79:B8:B0:6B","sha256":"99:E2:A7:FD:97:EE:35:E5:8B:A6:DB:25:80:B5:FA:55:8E:72:BD:17:CC:CA:CB:6A:DF:CC:70:31:68:4F:F2:57"}}},"request":{"raw":"POST /ut/hb.php?cb=0.9260129511406396\u0026v=1 HTTP/1.1\r\nHost: usrpubtrk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 866\r\nOrigin: https://embednow.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embednow.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 20 Sep 2025 19:42:00 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=adrgwPgJjifCzu4q1652edTy3wod382RBZ%2FcL%2FV6NJvEe3cBqaIrFGjJy0YKsIUUYvJF2WHApsINrWYKeGUuzcoxcjh1wPsdsolgn7Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9823cdb4eada5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-11T16:03:02.259001Z","times_seen":15014758,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":54,"dns":34,"connect":2,"send":0,"wait":149,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shauhoakoche.xyz/5/9832595","fqdn":"shauhoakoche.xyz","domain":"shauhoakoche.xyz","tld":"xyz"},"ip":{"addr":"139.45.195.8","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://embednow.top/embed/serie-a/2025-09-20/udi-mil","date":"2025-09-20T19:42:00.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"shauhoakoche.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 05:07:34 GMT","end":"Sat, 13 Dec 2025 05:07:33 GMT"},"fingerprint":{"sha1":"48:67:D9:30:F1:8F:B3:1F:04:5D:85:FC:17:3E:DD:37:74:D2:B9:29","sha256":"2B:8E:2B:00:9B:3B:01:D7:93:C8:F9:9C:D3:81:1D:5D:57:92:20:66:A2:A2:84:1F:EE:6A:EF:E7:4B:F6:0A:B7"}}},"request":{"raw":"GET /5/9832595 HTTP/1.1\r\nHost: shauhoakoche.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embednow.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 19:42:01 GMT\r\ncontent-type: application/javascript\r\nx-trace-id: 2e4bcc6b85e68df34b1ce812dec1bf68\r\nlink: \u003chttps://my.rtmark.net\u003e; rel=\"preconnect dns-prefetch\"\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\nset-cookie: OAID=00824a18b9a1482ce58c46a98981a36d; expires=Sun, 20 Sep 2026 19:42:01 GMT; path=/; secure; SameSite=None\noaidts=1758397321; expires=Sun, 20 Sep 2026 19:42:01 GMT; path=/; secure; SameSite=None\nsyncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT\r\npragma: no-cache, no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":115062,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"79b4af857609a25df74272dbefe0f9f4","sha1":"89a89cc8afc31f0615cf5e6675fca8d64a361578","sha256":"d29ed6f56b05eb3601516ad3f1b8f5ba966e352b727d40513f76fc5e83566afa","sha512":"b14a7243316daf3f77f571b5e5ac66b29830d161b96117712644e6ceb7baf163d302bfe1183bd3e27b62e8491217ec8ba0932629a1d54b05b604ea2c4e16becf","ssdeep":"1536:LO5QiEOxo8EMC9uqkoc+i1HLyR45HjQ7anWn6wTEMtwO2m+:LO5XUM/uipCTanW6GEEwO2m+","tlshash":"acb31a9c625234b11d7a9129785fc44daeeaef80148e89e4d4d9ec732653071c3bbfe8","first_seen":"2025-09-20T19:42:50.670583Z","last_seen":"2025-09-20T19:42:50.670583Z","times_seen":1,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":113,"dns":27,"connect":26,"send":0,"wait":62,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"shauhoakoche.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embednow.top/embed/serie-a/2025-09-20/udi-mil","fqdn":"embednow.top","domain":"embednow.top","tld":"top"},"ip":{"addr":"104.21.6.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-20T19:41:59.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"embednow.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Sep 2025 20:40:18 GMT","end":"Thu, 18 Dec 2025 21:37:46 GMT"},"fingerprint":{"sha1":"2E:88:AA:D8:D1:07:A4:10:1B:D7:9E:78:53:AA:36:57:CC:9E:FD:AC","sha256":"A2:F5:61:0B:8C:8B:FC:4B:BC:9A:D1:C5:BC:D0:7C:6A:3B:36:50:80:7A:15:F7:68:D3:F4:88:F1:42:F0:27:D5"}}},"request":{"raw":"GET /embed/serie-a/2025-09-20/udi-mil HTTP/1.1\r\nHost: embednow.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 19:41:59 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: Indians in a hamster wheel\r\nlink: \u003chttps://fonts.bunny.net/css?family=kanit:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i\u003e; rel=preload; as=style; nopush, \u003chttps://cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.1/css/bootstrap.min.css\u003e; rel=preload; as=style; crossorigin=anonymous; nopush\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pTTCeWDFHuTc8uzzt5W1weDACtV5T5phemzSYeXxdb%2BZ7ZifXH9KD1O9zIQCxRyDk8r1MQXuDhaT3kW93Kkyg0OWu%2BrxQVlk42w%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9823cdaf4fd756c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":304665,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48344), with CRLF, NEL line terminators","md5":"203b992107aa8a6c2da95f46906b1708","sha1":"106bdaf8f2fddd8e247027eb8cd4bbb6d77ff490","sha256":"9e73c86a8d3ccc7ff266164f414e6b5c80dd9545fb65563cfdfa087f3edc3ee2","sha512":"8c40ee391efdd8d21583be5651781d8e5ea5ee8f29c8e2418f210ee72ad170d987f4a24245a00904068ef2871a391692442d43f569ea720eb6f829f4c97f9624","ssdeep":"6144:LlLRvm39CjtoYajmnmFQg/SJp15WBA/KvEOBsdrufLGRrcoMN:LlLRe39CjmYajKmFQg/Gp2BA/KvEOBYW","tlshash":"23544b493252b2b63be150d55c3f5545e2355059780e8428f7ecc8e2aaabdce6233fbc","first_seen":"2025-09-20T19:42:50.671906Z","last_seen":"2025-09-20T19:42:50.671906Z","times_seen":1,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":32,"dns":11,"connect":1,"send":0,"wait":43,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"embednow.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p.vidembed.re/api/event","fqdn":"p.vidembed.re","domain":"vidembed.re","tld":"re"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://embednow.top/embed/serie-a/2025-09-20/udi-mil","date":"2025-09-20T19:42:00.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidembed.re","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 21:51:59 GMT","end":"Sun, 16 Nov 2025 22:50:26 GMT"},"fingerprint":{"sha1":"6A:77:52:B6:02:6E:FF:D6:B1:DD:B9:58:38:85:9F:E8:A8:82:A1:4F","sha256":"C1:98:95:14:DB:F0:9F:66:AB:0D:E9:72:83:9D:26:A4:B2:F2:0A:C6:50:96:C1:44:85:45:00:09:26:76:0B:71"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: p.vidembed.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 145\r\nOrigin: https://embednow.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embednow.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 202 Accepted\r\ndate: Sat, 20 Sep 2025 19:42:00 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nserver: cloudflare\r\nx-request-id: GGcVC-D8VT6PcHDu1AaB\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncf-ray: 9823cdb37ac9723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-05-11T16:00:07.05383Z","times_seen":409706,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":22,"dns":1,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embednow.top/favicon.ico","fqdn":"embednow.top","domain":"embednow.top","tld":"top"},"ip":{"addr":"104.21.6.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://embednow.top/embed/serie-a/2025-09-20/udi-mil","date":"2025-09-20T19:42:00.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"embednow.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Sep 2025 20:40:18 GMT","end":"Thu, 18 Dec 2025 21:37:46 GMT"},"fingerprint":{"sha1":"2E:88:AA:D8:D1:07:A4:10:1B:D7:9E:78:53:AA:36:57:CC:9E:FD:AC","sha256":"A2:F5:61:0B:8C:8B:FC:4B:BC:9A:D1:C5:BC:D0:7C:6A:3B:36:50:80:7A:15:F7:68:D3:F4:88:F1:42:F0:27:D5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: embednow.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embednow.top/embed/serie-a/2025-09-20/udi-mil\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Sep 2025 19:42:00 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nlast-modified: Sat, 20 Sep 2025 19:42:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TwFc7T7rafHhY5pe9it4%2F1qu7Jfz3CGDJ14tZRw3NG%2BJlEAr2uGLvZIZ%2FTGjoeGJi6zKAVua58%2Fr4ru5gkJQqjRmLvpk3G1jqYs7mQ%3D%3D\"}]}\r\ncf-ray: 9823cdb4982d32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9,"size_decoded":0,"mime_type":"image/x-icon","magic":"ASCII text, with no line terminators","md5":"d8f4a1993546cc4b850cde3599e27aec","sha1":"094b763b4cfcc0b05e5d040581cd513c3ca08067","sha256":"907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9","sha512":"7c696247f98aa6fe4e1df001fd6029abbbccf45b122d65dfdede8f8a400cda775387c657f96bd1e4e52da7409187892b1f0786c54d835d2e44227b2e1335eaf6","ssdeep":"","tlshash":"4a50000c0003030c0000003000c00030000c03000c0000300000c00c00000000c000cc","first_seen":"2023-03-08T07:11:06Z","last_seen":"2026-05-11T15:18:01.297732Z","times_seen":19752,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"embednow.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gg.poocloud.in/seriea_udinese/index.m3u8","fqdn":"gg.poocloud.in","domain":"poocloud.in","tld":"in"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://embednow.top/embed/serie-a/2025-09-20/udi-mil","date":"2025-09-20T19:42:00.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poocloud.in","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Sun, 24 Aug 2025 00:27:53 GMT","end":"Sat, 22 Nov 2025 00:30:23 GMT"},"fingerprint":{"sha1":"F8:64:40:F5:B4:F4:C4:CE:CE:E5:48:0A:1C:FC:95:94:C9:50:E2:BB","sha256":"AD:94:2A:AA:EC:0F:41:3C:B6:39:88:A3:1D:EE:56:87:03:6F:19:35:8D:2F:F4:67:48:BB:2B:62:EA:5E:97:77"}}},"request":{"raw":"GET /seriea_udinese/index.m3u8 HTTP/1.1\r\nHost: gg.poocloud.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://embednow.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embednow.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 19:42:00 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\ncontent-length: 1966\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-expose-headers: X-Content-Length\r\nx-powered-by: indians in a hamster wheel\r\netag: W/\"1966-3793072454\"\r\naccept-ranges: bytes\r\nx-cache-status: HIT\r\nx-cache-hits: 2\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DVLzf1xgXQABsLteLzzdEcKL5HC8F93QqjDR%2BWE7%2BA2BXmtoPof0v9S6BqQjr8QSpC5RVWYBc3bWFHeNY5D2L7skm0yf0l5WS0ulfQ%3D%3D\"}]}\r\ncf-ray: 9823cdb57aa1b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1966,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"eb25eb34a64ac9556e7e0f74ac809f35","sha1":"89fbae801b3e1016a7f58c40e647489888a19513","sha256":"97441c8524be924eaf8a1cb26de140296863b3fdcb04ffa712a6e4673d980820","sha512":"786765556225927077f826f258fcdcb63146c52eecdb31a2d38822742875d1775bc3301a406e263a99d885ab57b059debe32e50567ab2ba57f38670df004b85a","ssdeep":"","tlshash":"1541cea1bc08698046841f94d42a289523c4d3d726300a7dbabfc7fe9730bcac579a1f","first_seen":"2025-09-20T19:42:50.674948Z","last_seen":"2025-09-20T19:42:50.674948Z","times_seen":1,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":65,"dns":38,"connect":1,"send":0,"wait":44,"receive":1,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tvlhvswh.com/","fqdn":"tvlhvswh.com","domain":"tvlhvswh.com","tld":"com"},"ip":{"addr":"139.45.197.163","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://embednow.top/embed/serie-a/2025-09-20/udi-mil","date":"2025-09-20T19:42:00.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tvlhvswh.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 11:03:33 GMT","end":"Thu, 18 Dec 2025 11:03:32 GMT"},"fingerprint":{"sha1":"D4:BB:49:45:D8:C9:3E:DE:26:E6:8E:AF:F6:58:66:EA:3D:F1:24:7A","sha256":"7B:F7:C5:0C:FE:3C:02:EA:66:AF:C3:0F:4B:DA:FA:52:7A:C9:B2:A1:B6:70:76:65:35:8C:60:FC:96:20:94:CD"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: tvlhvswh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/html\r\nOrigin: https://embednow.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embednow.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 19:42:00 GMT\r\ncontent-type: text/html\r\nx-t84r78a50c63e95-47i57d92: 00000000000000000000000000000000\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: https://embednow.top\r\naccess-control-expose-headers: Link, X-Application-Token, X-Application-Key, X-Tag, X-Auth-Token, X-DirectionPartner-Id, X-ZoneType-Id, X-Hostname\r\naccess-control-allow-credentials: true\r\npragma: no-cache\r\ntiming-allow-origin: *\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\nx-application-key: zvsmf0sft3osR4chF6cfot6bnwhg\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-11T16:03:02.259001Z","times_seen":15014758,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"tvlhvswh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.bunny.net/css?family=kanit:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i","fqdn":"fonts.bunny.net","domain":"bunny.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://embednow.top/embed/serie-a/2025-09-20/udi-mil","date":"2025-09-20T19:41:59.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fonts.bunny.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 23:10:51 GMT","end":"Thu, 18 Dec 2025 23:10:50 GMT"},"fingerprint":{"sha1":"DF:9D:97:88:1D:C7:EB:71:28:28:BB:4D:03:F0:DA:74:A7:1C:08:06","sha256":"35:56:C5:B2:79:26:95:BC:3B:93:D2:97:4E:81:83:6B:E4:89:64:4C:66:48:82:E7:1B:DA:77:79:CC:58:52:30"}}},"request":{"raw":"GET /css?family=kanit:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i HTTP/1.1\r\nHost: fonts.bunny.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embednow.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 19:41:59 GMT\r\ncontent-type: text/css; charset=utf-8\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 781720\r\ncdn-uid: 3a60ca70-b89d-4cd5-a4b5-34a3468d7e0f\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\nlast-modified: Mon, 08 Sep 2025 15:06:49 GMT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/08/2025 15:06:49\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 3d1921ba101fa49fcbc1f5e13ae1226b\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":30906,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c790fdcfeec1440db337e4b78f1c285c","sha1":"f3f4668758ad4c6a3b95c82570c897503a84a215","sha256":"505b54c4442c9bf2568d2364b2c3874048be4618496ea9af422c1335d8d46fa8","sha512":"58d5f9fd04c0543562a3c48de039cb467ae151b0c8cec7edbcad7120ca5427af5c4f565d0fae97085f2adad8ba84caaeff2dec479ba51ecff6da4bffbcea8c0c","ssdeep":"384:X3P3uN3ap3/cccnNjpYdVF8Ncp1WGC1Ndp+nX7KNlVWpjgIozNPp8BxRoN4pZqiV:HfGYm2sWp363S","tlshash":"e9d2a1f6481aa00153caae9322c7bc069f0e92457045546ebfe98cc54db6d3d93a2b7f","first_seen":"2025-02-08T23:48:44.971637Z","last_seen":"2026-01-09T00:54:52.506779Z","times_seen":59,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":71,"dns":56,"connect":1,"send":0,"wait":1,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.1/css/bootstrap.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://embednow.top/embed/serie-a/2025-09-20/udi-mil","date":"2025-09-20T19:41:59.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/bootstrap/5.3.1/css/bootstrap.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://embednow.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embednow.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 19:41:59 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 22879\r\ncf-ray: 9823cdb10e9456c4-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"64c0eef2-595f\"\r\nlast-modified: Wed, 26 Jul 2023 10:01:22 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1395539\r\nexpires: Thu, 10 Sep 2026 19:41:59 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=U7w0A6Q1K9A0eK1NzPIyQDjL58sxbse%2FlMYXnERzYP21wP8YaFOrqJcqWp5YQbxCmrPKPoNEMR9FOn%2FmGSqUPK1rSO0kZTAr0kR59cWH%2BOrb4%2BENa0nFBq%2FiYx4jxKMJ8uwauqZT\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232855,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"896192cc65e20f1fcc6d792b5b9a4626","sha1":"b13ef70543d70c1ec7fdd56a5ebc9d7d64023851","sha256":"d939d21f27010c09b6c2966681d8b4cfcd64ca418f240922518f967fded16ef6","sha512":"67f75e7f9cf9bb6691f3d3aecd873198327406777957570aa8111bbcb3a250d59d83d3d079756f5cb23dd1213840e1c695f2ea5270cd540632662f14c144e659","ssdeep":"1536:EZCtjXbn98fOdRfvO5wlP7Qy9A37zV98IsY/ElV6V6pz600I41r:/tjT98fNV98mI6V6pz600I41r","tlshash":"d53481d6f590317d9ca7c1499681fefd896fa985cb1209aaf003776807cabd30962dcc","first_seen":"2023-08-02T23:07:40Z","last_seen":"2026-05-11T15:43:25.16044Z","times_seen":6036,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":19,"dns":1,"connect":1,"send":0,"wait":14,"receive":2,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.36.4/jwpsrv.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.130.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://embednow.top/embed/serie-a/2025-09-20/udi-mil","date":"2025-09-20T19:42:00.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.36.4/jwpsrv.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embednow.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=900, immutable\r\nlast-modified: Wed, 26 Feb 2025 08:28:34 GMT\r\netag: \"e9449982aabf38639d014274af3ad474\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 20 Sep 2025 19:42:00 GMT\r\nage: 848\r\nx-served-by: cache-lga21934-LGA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 82, 5\r\nx-timer: S1758397320.214276,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 19075\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":67288,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e9449982aabf38639d014274af3ad474","sha1":"f99f5ba761f1945f19da3cf4a9ca52c1aeee47d5","sha256":"fb1c762c222ed003d9bd932a1bf94a36879b73967f3aaf2797cae7f6d5302352","sha512":"f4c80f0c7c44b72303aa3494f19d164095b24bf83e013ddf92d20b75fc618cbaa505c183557bbb14cb9a836c514b21fcb623c00059ef7e9d04ffe16ae4a12fc3","ssdeep":"768:DiDjPSAlvbtXral8WK/2R7pr1oJl92LCaA1YL9ncpgW:+nPlZral8WK/GEJl92LCcLWpV","tlshash":"fd63d78d3685b16a5a6770b8806fb546723d1dd6308dc250ea50eec93c3de5ee237b2c","first_seen":"2025-02-26T11:57:34.810186Z","last_seen":"2026-05-10T19:08:37.845509Z","times_seen":4014,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":102,"dns":39,"connect":26,"send":0,"wait":36,"receive":1,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.36.4/provider.hlsjs.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.130.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://embednow.top/embed/serie-a/2025-09-20/udi-mil","date":"2025-09-20T19:42:00.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.36.4/provider.hlsjs.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embednow.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, immutable\r\nlast-modified: Tue, 17 Dec 2024 18:25:11 GMT\r\netag: \"5e7ad1d2a7441a10a15cd4f734941fd9\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 20 Sep 2025 19:42:00 GMT\r\nage: 1436818\r\nx-served-by: cache-lga21923-LGA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 14, 182\r\nx-timer: S1758397320.203749,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 128665\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":461426,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65143)","md5":"5e7ad1d2a7441a10a15cd4f734941fd9","sha1":"b7693c40e7b43d9bcce0305527f5bd1ee7f3e4d1","sha256":"91212113632d7f5d11bd3112911f35afa68e2105facd125994421d538f930ee8","sha512":"f2edad98ffdc31efe66a80bf562d2dae7c3d08a80d727d5cfd00436da9cf093208cafaaa450c83a8c370f0c7b2fd0c98646433dea09273c74e2f6594ccb56251","ssdeep":"6144:hA9gZtOST1zXBUkGHZu08Q9Eu969Q3/nqJxgEMmew9rrqIZk6:qy1VGHZu0pU9cqJxgEXZF","tlshash":"a5a43bed7795a02642c2a1a5903f4607633b7d0a740dc1acfa2be9d75db8849b03bf74","first_seen":"2024-12-20T05:25:52.172257Z","last_seen":"2026-05-04T08:50:36.054586Z","times_seen":176,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":38,"dns":1,"connect":13,"send":0,"wait":14,"receive":33,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gg.poocloud.in/seriea_udinese/tracks-v1a1/mono.ts.m3u8","fqdn":"gg.poocloud.in","domain":"poocloud.in","tld":"in"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://embednow.top/embed/serie-a/2025-09-20/udi-mil","date":"2025-09-20T19:42:00.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poocloud.in","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 1","organization":"CLOUDFLARE, INC."},"validity":{"start":"Sun, 24 Aug 2025 00:27:53 GMT","end":"Sat, 22 Nov 2025 00:30:23 GMT"},"fingerprint":{"sha1":"F8:64:40:F5:B4:F4:C4:CE:CE:E5:48:0A:1C:FC:95:94:C9:50:E2:BB","sha256":"AD:94:2A:AA:EC:0F:41:3C:B6:39:88:A3:1D:EE:56:87:03:6F:19:35:8D:2F:F4:67:48:BB:2B:62:EA:5E:97:77"}}},"request":{"raw":"GET /seriea_udinese/tracks-v1a1/mono.ts.m3u8 HTTP/1.1\r\nHost: gg.poocloud.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://embednow.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embednow.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 19:42:00 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\ncontent-length: 2179\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: indians in a hamster wheel\r\netag: W/\"2179-2676097162\"\r\naccept-ranges: bytes\r\nx-cache-status: HIT\r\nx-cache-hits: 1\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SX27HRMs8i79JWQRaBdNjvvV2BzIrvHIUUokKxnSNEpZr3b0rsSz4hVGCYNQQp%2B8QwINGMWfxeYQ3B3yzpy%2FT6VKiNHTJRiEDK7fow%3D%3D\"}]}\r\ncf-ray: 9823cdb61b43b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2179,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"0b15888b342cf6ddb47f0a0bb1d5d58e","sha1":"02f5b8e3fed9c19b638235e648a4434ad7eda6e5","sha256":"63032290e4838600cfbe8ca2b6f6cd2be71803e3350454636c4f6744fc6044a5","sha512":"783a08856cf540e2bce2a701677b8a01c157efa7c2fcdc3bdeb602921bb9f918a5bd22075c3d8016e4e4ad606ab6479181a2db1afce1d3e5ab43680bdd49b3ec","ssdeep":"","tlshash":"1b410ba2bd08288146800ed5c46f24d572d5c7d71a2049bcb6bec6fe9732bdad4b4a0f","first_seen":"2025-09-20T19:42:50.678956Z","last_seen":"2025-09-20T19:42:50.678956Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tvlhvswh.com/","fqdn":"tvlhvswh.com","domain":"tvlhvswh.com","tld":"com"},"ip":{"addr":"139.45.197.163","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://embednow.top/embed/serie-a/2025-09-20/udi-mil","date":"2025-09-20T19:42:00.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tvlhvswh.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 11:03:33 GMT","end":"Thu, 18 Dec 2025 11:03:32 GMT"},"fingerprint":{"sha1":"D4:BB:49:45:D8:C9:3E:DE:26:E6:8E:AF:F6:58:66:EA:3D:F1:24:7A","sha256":"7B:F7:C5:0C:FE:3C:02:EA:66:AF:C3:0F:4B:DA:FA:52:7A:C9:B2:A1:B6:70:76:65:35:8C:60:FC:96:20:94:CD"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: tvlhvswh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: HEAD\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://embednow.top/\r\nOrigin: https://embednow.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 19:42:00 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\naccess-control-allow-origin: https://embednow.top\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid\r\naccess-control-max-age: 86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-11T16:03:02.259001Z","times_seen":15014758,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":75,"dns":14,"connect":28,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"tvlhvswh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shauhoakoche.xyz/wrr?z=9832595\u0026p_rid=7b49432e-7a7e-4904-adaf-27bdacaf2f42\u0026rb=5MZCzfi61pNFmF0ak-an_2P0pZRx8VemhUTdY9OX0VIRzyvNNiZm6uNitf5glAS0WIygVtLUP2x6bIf34yxP8YLc-kFe0eXM-fxOB5EtqzfoRsmeK9CnJqc5kEkBzLYR49iMaOe5V72aXIdLqFoLJaQiyxUAENf46r38kvLxYFIgM8Yb76GXmK0kTnkCVYxtYlX0x9bVxz_V7jXPUHKDyVrXa4_kKockUJ15qy6_2jjEmnlxQekjZJ5ezNfrY0syS9QRxstMHHqSpdzUOtve0Bk14WsbT_P6TCdxXLZ3-_E=\u0026dmn=shauhoakoche.xyz\u0026userId=00824a18b9a1482ce58c46a98981a36d","fqdn":"shauhoakoche.xyz","domain":"shauhoakoche.xyz","tld":"xyz"},"ip":{"addr":"139.45.195.8","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://embednow.top/embed/serie-a/2025-09-20/udi-mil","date":"2025-09-20T19:42:01.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"shauhoakoche.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 05:07:34 GMT","end":"Sat, 13 Dec 2025 05:07:33 GMT"},"fingerprint":{"sha1":"48:67:D9:30:F1:8F:B3:1F:04:5D:85:FC:17:3E:DD:37:74:D2:B9:29","sha256":"2B:8E:2B:00:9B:3B:01:D7:93:C8:F9:9C:D3:81:1D:5D:57:92:20:66:A2:A2:84:1F:EE:6A:EF:E7:4B:F6:0A:B7"}}},"request":{"raw":"OPTIONS /wrr?z=9832595\u0026p_rid=7b49432e-7a7e-4904-adaf-27bdacaf2f42\u0026rb=5MZCzfi61pNFmF0ak-an_2P0pZRx8VemhUTdY9OX0VIRzyvNNiZm6uNitf5glAS0WIygVtLUP2x6bIf34yxP8YLc-kFe0eXM-fxOB5EtqzfoRsmeK9CnJqc5kEkBzLYR49iMaOe5V72aXIdLqFoLJaQiyxUAENf46r38kvLxYFIgM8Yb76GXmK0kTnkCVYxtYlX0x9bVxz_V7jXPUHKDyVrXa4_kKockUJ15qy6_2jjEmnlxQekjZJ5ezNfrY0syS9QRxstMHHqSpdzUOtve0Bk14WsbT_P6TCdxXLZ3-_E=\u0026dmn=shauhoakoche.xyz\u0026userId=00824a18b9a1482ce58c46a98981a36d HTTP/1.1\r\nHost: shauhoakoche.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://embednow.top/\r\nOrigin: https://embednow.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 19:42:02 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://embednow.top\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-11T16:03:02.259001Z","times_seen":15014758,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":85,"dns":1,"connect":26,"send":0,"wait":28,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"shauhoakoche.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shauhoakoche.xyz/wrr?z=9832595\u0026p_rid=7b49432e-7a7e-4904-adaf-27bdacaf2f42\u0026rb=5MZCzfi61pNFmF0ak-an_2P0pZRx8VemhUTdY9OX0VIRzyvNNiZm6uNitf5glAS0WIygVtLUP2x6bIf34yxP8YLc-kFe0eXM-fxOB5EtqzfoRsmeK9CnJqc5kEkBzLYR49iMaOe5V72aXIdLqFoLJaQiyxUAENf46r38kvLxYFIgM8Yb76GXmK0kTnkCVYxtYlX0x9bVxz_V7jXPUHKDyVrXa4_kKockUJ15qy6_2jjEmnlxQekjZJ5ezNfrY0syS9QRxstMHHqSpdzUOtve0Bk14WsbT_P6TCdxXLZ3-_E=\u0026dmn=shauhoakoche.xyz\u0026userId=00824a18b9a1482ce58c46a98981a36d","fqdn":"shauhoakoche.xyz","domain":"shauhoakoche.xyz","tld":"xyz"},"ip":{"addr":"139.45.195.8","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://embednow.top/embed/serie-a/2025-09-20/udi-mil","date":"2025-09-20T19:42:02.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"shauhoakoche.xyz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 05:07:34 GMT","end":"Sat, 13 Dec 2025 05:07:33 GMT"},"fingerprint":{"sha1":"48:67:D9:30:F1:8F:B3:1F:04:5D:85:FC:17:3E:DD:37:74:D2:B9:29","sha256":"2B:8E:2B:00:9B:3B:01:D7:93:C8:F9:9C:D3:81:1D:5D:57:92:20:66:A2:A2:84:1F:EE:6A:EF:E7:4B:F6:0A:B7"}}},"request":{"raw":"POST /wrr?z=9832595\u0026p_rid=7b49432e-7a7e-4904-adaf-27bdacaf2f42\u0026rb=5MZCzfi61pNFmF0ak-an_2P0pZRx8VemhUTdY9OX0VIRzyvNNiZm6uNitf5glAS0WIygVtLUP2x6bIf34yxP8YLc-kFe0eXM-fxOB5EtqzfoRsmeK9CnJqc5kEkBzLYR49iMaOe5V72aXIdLqFoLJaQiyxUAENf46r38kvLxYFIgM8Yb76GXmK0kTnkCVYxtYlX0x9bVxz_V7jXPUHKDyVrXa4_kKockUJ15qy6_2jjEmnlxQekjZJ5ezNfrY0syS9QRxstMHHqSpdzUOtve0Bk14WsbT_P6TCdxXLZ3-_E=\u0026dmn=shauhoakoche.xyz\u0026userId=00824a18b9a1482ce58c46a98981a36d HTTP/1.1\r\nHost: shauhoakoche.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://embednow.top/\r\ncontent-type: application/json\r\nContent-Length: 2637\r\nOrigin: https://embednow.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 19:42:02 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://embednow.top\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-11T16:03:02.259001Z","times_seen":15014758,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"shauhoakoche.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p.vidembed.re/js/script.pageview-props.tagged-events.js","fqdn":"p.vidembed.re","domain":"vidembed.re","tld":"re"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://embednow.top/embed/serie-a/2025-09-20/udi-mil","date":"2025-09-20T19:41:59.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidembed.re","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 21:51:59 GMT","end":"Sun, 16 Nov 2025 22:50:26 GMT"},"fingerprint":{"sha1":"6A:77:52:B6:02:6E:FF:D6:B1:DD:B9:58:38:85:9F:E8:A8:82:A1:4F","sha256":"C1:98:95:14:DB:F0:9F:66:AB:0D:E9:72:83:9D:26:A4:B2:F2:0A:C6:50:96:C1:44:85:45:00:09:26:76:0B:71"}}},"request":{"raw":"GET /js/script.pageview-props.tagged-events.js HTTP/1.1\r\nHost: p.vidembed.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embednow.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 19:41:59 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, must-revalidate\r\ncross-origin-resource-policy: cross-origin\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nlast-modified: Fri, 19 Sep 2025 08:56:57 GMT\r\nvary: accept-encoding\r\nage: 51756\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9823cdb13b1d35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3319,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3319), with no line terminators","md5":"fe728dc1a89be60ec812575ef39ef07f","sha1":"4c4d6aeb9af7a40a517f3094b715c706b512dc79","sha256":"bd6cbf16d35a0b6d98f69ba97e9a60b9949b480620484b48451f1fd9ebad936c","sha512":"c2607b1ed66216367f179ca993fc5ceebb35a58d7d309559c95a36ae53b1e8c045c8b5b90a193da58edcb9cb1d82bab841c234fab3350a1ecb9a259d1e7c66ce","ssdeep":"","tlshash":"e361d9de744175b159b26175ab2f3507b13b2486781a4012b822cdc21d3cedf433aeee","first_seen":"2024-12-10T06:19:40.472564Z","last_seen":"2025-11-26T14:35:01.607115Z","times_seen":57,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":51,"dns":35,"connect":1,"send":0,"wait":9,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.36.4/jwplayer.core.controls.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.130.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://embednow.top/embed/serie-a/2025-09-20/udi-mil","date":"2025-09-20T19:42:00.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.36.4/jwplayer.core.controls.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embednow.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, immutable\r\nlast-modified: Tue, 17 Dec 2024 18:25:09 GMT\r\netag: \"aa76c7bf8a702f02c4ec0fc973d698d6\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 20 Sep 2025 19:42:00 GMT\r\nage: 2795009\r\nx-served-by: cache-lga21934-LGA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 6, 250\r\nx-timer: S1758397320.236890,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 81358\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":331835,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65143)","md5":"aa76c7bf8a702f02c4ec0fc973d698d6","sha1":"cd8bd98969dd7167c8d99a5abcec4a07df4e63a2","sha256":"7220be9e6db902dabf6a18a260e3a1d14a877aa9aeb113380dd3711c908eba0f","sha512":"ea3c5274ac225b90f20a925500ec5efa6e197c4fcaff9ecd9e08d0db96a332d87443ee0ebf63d6e2a45b76b4bb20c626eec56868380945d3408f97a939f08e7d","ssdeep":"3072:fkY7nFuuslX/Ch3u6NxIe8SJht1yiSS64pOknRBb9Wsr9ObrCyYLrmYRJ:sYx5U/Ch3Jp8SJhtJOaRBRtOHkLrmYRJ","tlshash":"ca640932214252359aea82da76514604b3398085f516cfacff2ceddd4c6e9c731fabb4","first_seen":"2025-01-02T21:48:06.342732Z","last_seen":"2026-05-04T08:50:36.056335Z","times_seen":258,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":75,"dns":1,"connect":26,"send":0,"wait":15,"receive":6,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embednow.top/embed/serie-a/2025-09-20/udi-mil","fqdn":"embednow.top","domain":"embednow.top","tld":"top"},"ip":{"addr":"104.21.6.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://embednow.top/embed/serie-a/2025-09-20/udi-mil","date":"2025-09-20T19:42:00.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"embednow.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Sep 2025 20:40:18 GMT","end":"Thu, 18 Dec 2025 21:37:46 GMT"},"fingerprint":{"sha1":"2E:88:AA:D8:D1:07:A4:10:1B:D7:9E:78:53:AA:36:57:CC:9E:FD:AC","sha256":"A2:F5:61:0B:8C:8B:FC:4B:BC:9A:D1:C5:BC:D0:7C:6A:3B:36:50:80:7A:15:F7:68:D3:F4:88:F1:42:F0:27:D5"}}},"request":{"raw":"HEAD /embed/serie-a/2025-09-20/udi-mil HTTP/1.1\r\nHost: embednow.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embednow.top/embed/serie-a/2025-09-20/udi-mil\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Sep 2025 19:42:00 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-powered-by: Indians in a hamster wheel\r\nlink: \u003chttps://fonts.bunny.net/css?family=kanit:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i\u003e; rel=preload; as=style; nopush, \u003chttps://cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.1/css/bootstrap.min.css\u003e; rel=preload; as=style; crossorigin=anonymous; nopush\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mv6dfEdyh2E6eS7BJzQcbOguRQztEVgJ3MEjuzY5bmuLnRU9l34YLDBinkV5AE5Rf76PrEFpsj8zoGY3uF%2FjEPIsEbWk4dxz98zMWw%3D%3D\"}]}\r\ncf-ray: 9823cdb3380f32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-11T16:03:02.259001Z","times_seen":15014758,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"embednow.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js?userId=00824a18b9a1482ce58c46a98981a36d","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://embednow.top/embed/serie-a/2025-09-20/udi-mil","date":"2025-09-20T19:42:01.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 13:14:02 GMT","end":"Wed, 26 Nov 2025 14:13:48 GMT"},"fingerprint":{"sha1":"7A:B2:21:7F:72:E3:39:3E:95:5D:FB:ED:BB:1C:7E:88:C4:7A:B1:B3","sha256":"FB:1D:6D:AF:DA:57:8D:9A:8B:B2:CC:FF:A2:55:C8:F3:71:3D:49:77:06:FC:4D:6F:16:91:61:6F:89:1C:A3:CB"}}},"request":{"raw":"GET /gid.js?userId=00824a18b9a1482ce58c46a98981a36d HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://embednow.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://embednow.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 19:42:01 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://embednow.top\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=00824a18b9a1482ce58c46a98981a36d; expires=Sun, 20 Sep 2026 19:42:01 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9823cdba7fd8712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9093c90faf5dc120be66d1ab467b0dbe","sha1":"b7282a1530960e5440d349ee669dbaba60349d00","sha256":"3fcfffc9b1be6f58b53c7d11fc005668a27515334b67425fb058c369588a038b","sha512":"ee1ccd07f605b3622a2095d55a29acb7ba5af6393ad5be45f25aace4e718920be51ac5f5834b1e5703c9163e8d5c8bae4b383fe3935544a730dc04590b5e399b","ssdeep":"","tlshash":"31a02200ee320a8c220000302802e32800002000c88c23c0e0e0830020c300e28c8208","first_seen":"2025-09-20T19:42:50.683977Z","last_seen":"2025-09-20T19:42:50.683977Z","times_seen":1,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":57,"dns":34,"connect":1,"send":0,"wait":39,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}