{"report_id":"89a1b06f-2318-433f-a3cf-ed8bce57b3c6","version":6,"status":"done","tags":[],"date":"2024-03-29T00:42:54Z","url":{"schema":"https","addr":"www.y2meta.com/","fqdn":"www.y2meta.com","domain":"y2meta.com","tld":"com"},"ip":{"addr":"104.21.234.80","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.y2meta.com/en163","fqdn":"www.y2meta.com","domain":"y2meta.com","tld":"com"},"title":"Y2meta Downloader - Download youtube video, convert youtube to mp3"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-25T21:00:04Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"amunfezanttor.com","ip":{"addr":"139.45.197.250","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2023-03-31","domain_rank":0,"first_seen":"2023-03-31 14:42:42","last_seen":"2024-03-27 04:50:34","alert_count":2,"request_count":2,"received_data":1124,"sent_data":1003,"comment":"","tags":null,"fingerprints":null},{"fqdn":"jouteetu.net","ip":{"addr":"139.45.197.251","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2021-07-08","domain_rank":260109,"first_seen":"2021-07-15 09:15:22","last_seen":"2024-03-26 19:28:41","alert_count":0,"request_count":2,"received_data":1268,"sent_data":884,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":75,"first_seen":"2013-05-22 04:07:37","last_seen":"2024-03-28 03:47:36","alert_count":0,"request_count":2,"received_data":299396,"sent_data":877,"comment":"","tags":null,"fingerprints":null},{"fqdn":"propu.sh","ip":{"addr":"139.45.197.250","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2018-03-26","domain_rank":86429,"first_seen":"2018-11-01 22:03:05","last_seen":"2024-03-27 20:50:40","alert_count":0,"request_count":2,"received_data":37187,"sent_data":1046,"comment":"","tags":null,"fingerprints":null},{"fqdn":"kv.tibertannoy.com","ip":{"addr":"23.109.170.71","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-03-25","domain_rank":0,"first_seen":"2023-03-25 11:30:57","last_seen":"2024-01-26 18:38:05","alert_count":0,"request_count":1,"received_data":1476,"sent_data":414,"comment":"","tags":null,"fingerprints":null},{"fqdn":"besmeargleor.com","ip":{"addr":"139.45.197.236","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2021-08-09","domain_rank":77762,"first_seen":"2021-08-20 13:39:49","last_seen":"2024-03-15 17:36:14","alert_count":0,"request_count":2,"received_data":35234,"sent_data":942,"comment":"","tags":null,"fingerprints":null},{"fqdn":"my.rtmark.net","ip":{"addr":"139.45.195.8","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2014-10-29","domain_rank":9054,"first_seen":"2015-02-04 10:54:57","last_seen":"2024-03-28 11:04:35","alert_count":0,"request_count":1,"received_data":743,"sent_data":421,"comment":"","tags":null,"fingerprints":null},{"fqdn":"gloaphoo.net","ip":{"addr":"139.45.197.239","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2022-09-09","domain_rank":0,"first_seen":"2022-09-10 14:44:27","last_seen":"2024-03-16 11:55:11","alert_count":2,"request_count":2,"received_data":91833,"sent_data":936,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.y2meta.com","ip":{"addr":"104.21.234.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-03-23","domain_rank":205491,"first_seen":"2019-05-27 16:11:53","last_seen":"2024-02-25 22:46:47","alert_count":0,"request_count":18,"received_data":650481,"sent_data":8467,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-03-29","alert":"Sinkholed","trigger":"amunfezanttor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-03-29","alert":"Sinkholed","trigger":"amunfezanttor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-03-29","alert":"Sinkholed","trigger":"gloaphoo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-03-29","alert":"Sinkholed","trigger":"gloaphoo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"57789985be1f6ad7622a714213a7f345","sha1":"be9478056b9ddc102d40f5dc86b3c683bcc33234","sha256":"2e3e9a2a09437f48bb06545d7b518d66bf872b327581d593b9ecc63eeeeb3bce","sha512":"b599f54fb9679368179093af97fb27005f789144aad29546964decbd57ea5038d37acef321b59bcd25b3b9676964063361016dcbab2f4581e94b5696676024ea","ssdeep":"","tlshash":"64b012570004c24d03d2410e783173ddb13730fe4459e0c7400c64084804d46ca3290d","size":89,"data":"","first_seen":"2024-01-23T11:35:49Z","last_seen":"2024-08-20T11:26:45.211991Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.y2meta.com/js/app.min.js?v=49","fqdn":"www.y2meta.com","domain":"y2meta.com","tld":"com"},"ip":{"addr":"104.21.234.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c10e55a841d3c2695d8ed55edbad6493","sha1":"75877610aa8b128779b2150130431e0d3ec99ea3","sha256":"6a98f55cbe7f064ceddf0d8f0dfd0a4879e5570ae7314da5ba8b75503d1a27db","sha512":"5221a1e98449b13b552d809557d56a883e5d6f358299f9ecd26355e799e0524634a7d9804ec2cbf65bd0f8c891aac3a699c965597cca6dc334d476f93923b525","ssdeep":"1536:q7bYh2i2wzB79AZUniaohKocxwdenzwA16rDkJbNiH0X7brUTpP6q5p2Sm7owLMZ:wvy3xjQTd6qsowL6","tlshash":"17c31bc9b29270620bebb0f4406f150ab2362e6d689e9014f164e8f57db8d4d607bf7d","size":128750,"data":"","first_seen":"2023-03-07T13:18:14Z","last_seen":"2024-08-20T11:26:45.19371Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.y2meta.com/sandbox%20eval%20code","fqdn":"www.y2meta.com","domain":"y2meta.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"69c02be3f74421ae2f1156f2b810e043a2c62b015ae7c402f00e003f2440fea4eee1e8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-05-27T18:18:41.795985Z","times_seen":904352,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"propu.sh/pfe/current/micro.tag.min.js?z=3899503\u0026sw=/sw-check-permissions.js\u0026_=1711672949126","fqdn":"propu.sh","domain":"propu.sh","tld":"sh"},"ip":{"addr":"139.45.197.250","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"edd3473db2c4ca3d9e5ff3ec876fb483","sha1":"dc4ee801ac9de08445dd5c6262f5023d1515d32e","sha256":"955a7f7e7a9158b178d2ca39513763b297bbec13f6083c534c099af7876c1c8c","sha512":"f355e6c0f2d76f39458ada71f731ea817dc0f92b80f7a8dab14e16478cec7d7b498a0be2c93a2699bd011ffd83f154c032bc41790e0084927e64bdd5e27acafc","ssdeep":"768:cR5CrA2svvCsv4+34nKN+S+e98ffbhLtL8H4GxHU+MzVh1Wj3JyhYQ3jW06JgGdh:F99c+S+eGy8WgGSKNPOA","tlshash":"27f294923415e8582390799b7c7720115374e224f85fa8f1a30969be76e18cdf62ffb8","size":36335,"data":"","first_seen":"2024-03-21T03:32:40Z","last_seen":"2024-08-20T07:17:08.306275Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e01bf1a3ac9516d6dc33cc394ee0032","sha1":"6903464d2949b482c5a573fd938217b597ed4bb1","sha256":"5e2d797d56f2fa168789689cdc8afca551abaa272a10e3cf3b5365d4663364d4","sha512":"cfc3a1fbdd93126086ed78a9c915f2416bdc117baa6fa0c8121c1082e7380632d394e96cf38945c86f5e33b2cb02a094c01e8f046240f9c5689a33826c04c36a","ssdeep":"","tlshash":"5501886661005c080daa206389cdd5de1290b2c259e5d8acc7b2f1f98e79aa4c7b7a40","size":819,"data":"","first_seen":"2024-03-29T01:42:55Z","last_seen":"2024-08-20T06:43:40.667688Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"713f0fcd7e2cd2192ff32e889063f712","sha1":"f202be7f902a7f9686e723c618f36ab71be1cba4","sha256":"4cc98a982f8d2736e78de4a103db74df390d6101bd65e21146996ad96e6b0873","sha512":"b49eecc89e88ab9099a4488518551d30a3ed938d9a680b5bf11e83c645f3c7c7dc90cbc0bb4bcdd0940f9b30db453c02dd17f71849d6af45bc2895dac1727069","ssdeep":"","tlshash":"bcf0e5350bb507bd1480cf4aab3f62331aab3cc13c706a021a96fd13614ba12c692dcf","size":416,"data":"","first_seen":"2023-03-08T06:42:02Z","last_seen":"2026-04-28T08:56:55.990556Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ccbda31515e1c9642d87ca4a166dcbf3","sha1":"94f0f77b129f5784136c22a409fa797310849803","sha256":"e33806d103384621c4f7d70e83fc4a17062862c6f589eeb2d5ba3ffa478f8617","sha512":"0e7f43060cdd1c91159a92908fe20b0c05bda511d7542764de3bcc1a17f3b885fb3d918a87674efa3667d904932d11141ee7925e77f6e48b4eca957aaa37b745","ssdeep":"384:BFbKzWpwywMYw4lw6n638yOt2SnpDctz8pEC1vt8WDZ:bt/wMYw4em7rEk82","tlshash":"2472c744b681723693af70bd885b144e5ab7be167c0620507226d8d19cbcf08e2aff79","size":17089,"data":"","first_seen":"2023-03-07T13:18:14Z","last_seen":"2026-05-20T16:17:46.983441Z","times_seen":154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"febb54c4c75607b71c1bf9c69f0bf264","sha1":"e050d5e4e22ef06f4b21465e658893022e467713","sha256":"92181ab1a66f1b5dde61b19d5d8ebea315e70bb66e2b661ac2bfa72f8e934153","sha512":"f45466a6326604eeb09931168b5ba661c1c7bee551eb1f58bbdf4525d6bf43d5b169942eca62e92ca8c288909a1d010012c2dd0ca7f12d1a3caaba89e6d65fb7","ssdeep":"","tlshash":"8241527c34549035091618e9317b67aeb5b329297c629420b14ddbefb834ffd0b47ca8","size":1935,"data":"","first_seen":"2024-01-23T11:35:49Z","last_seen":"2024-08-20T11:26:45.21097Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:gr5xyIhZ6pQ/d/bTQcFeqZVxNnR36Hc9lDJlQC8dA9Sa5fLtUB5roNiEP:gr58IhZ6pg/bTXVx9t689fN8INtEONig","tlshash":"7ea1cd9b39e650310332bfe91bfaa559b22937605220c161be0c915b7399233d3e1bec","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-05-27T18:18:41.802292Z","times_seen":902694,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1956a882e8b190fd9708311c47de25f4","sha1":"daf6d7b2684c9973d77564e17b97759738b96842","sha256":"cc403b69903ea9677a79ea2a7813f72e72a325e0b5742acc9aadf77a14cdb617","sha512":"d88e63cb71763fede5b99ec9c4fa45721c0ad4c52720c86ac9a41aeaae4fabc22ee00a5e709492f3bd8a5ddbbadc08b1c575bd775c52995d4354c2e75dbd893f","ssdeep":"","tlshash":"1ec080c5669afc5d44c0552b9d9b9758f81e054445dcd5a8c23fc0c01d81e217f235c9","size":182,"data":"","first_seen":"2024-08-20T06:43:40.695592Z","last_seen":"2024-08-20T06:43:40.695592Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-122831834-3","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"74bc4770e5581ee6d8702b972d445d0c","sha1":"9c927330c7fec0f8aed18e263e8a0c1abf7b24ef","sha256":"77a197768bcf11115a50e8c82cd61753a9a8e42d82d2b6c12c8ec2ff2566a171","sha512":"f6c719f8e427d89409f3a3add24c79b10a802a5a5b6d922cbd19318ac1964abdee82fad3d7f825e3e7e7e489633403699d7371315b8884ae6db5c01f7e0c21b8","ssdeep":"3072:wgAF5QU3Zw2yAYyH8U/zPQYE68aZ6OEkXqDVhVTZ:HADw12PPavOEkXqphVF","tlshash":"2c14e6d8b3d6b06682a3b474513f010bb17b6d96b84cccd8e18ac5d42eb8699417bf7c","size":208083,"data":"","first_seen":"2024-08-20T06:43:40.61769Z","last_seen":"2024-08-20T06:43:40.61769Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"besmeargleor.com/400/3145154","fqdn":"besmeargleor.com","domain":"besmeargleor.com","tld":"com"},"ip":{"addr":"139.45.197.236","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"215e672d287c8e3a2e09f77399a9d72b","sha1":"0411635c406f26cf82d594e534c0413a450ad946","sha256":"ba473f89280fcb42a8edb4ebb2f6dd73ea52b7335674d2d5aea493a2c0ac1b74","sha512":"c8d36d36a49fc3c5147f721072ddde649a73a13105ee525f1a6765dae6b9ff0d182c78ff57f86f9586c9d4c03e723896003784795abd072be81258d592afe133","ssdeep":"1536:vnq+LoOkA37lHCoWoVwJSkssyWTDdstB3Lp9dJWHBwnEv6T70FSJJakHOPAMhmWW:vnq+LoOkA37lHCoWoVwJSkssyWTDdstH","tlshash":"b783b498b567337102122777516f1a176a659070f88bd2b0702fefac393290df6f5ba8","size":80994,"data":"","first_seen":"2024-08-20T06:43:40.696656Z","last_seen":"2024-08-20T06:43:40.696656Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kv.tibertannoy.com/tTgI3NffKSEZf5Hk/40654","fqdn":"kv.tibertannoy.com","domain":"tibertannoy.com","tld":"com"},"ip":{"addr":"23.109.170.71","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7a2939527fd9e68723da600e96d76bd","sha1":"a9e717b6364d2895ee0a716050db32ca0ef1bb42","sha256":"d810f5146f4cd1517512a6e31946e764a73c58fb01427aae88d42cc2ae28718a","sha512":"e6956ec633c76eb3ebc408528f950b81373238cd1d5b9fff5ddd97089ea14a1ff5934f23769bac5d93cc4cdb6a1fbc4ce69baebfb940a55d8a7a89caccaf92b5","ssdeep":"","tlshash":"5340000c00300000000000000000f000000c00000c000300c000000c00030c000c0000","size":5,"data":"","first_seen":"2023-03-07T01:14:39Z","last_seen":"2026-05-27T15:22:56.254094Z","times_seen":14669,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.y2meta.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"www.y2meta.com","domain":"y2meta.com","tld":"com"},"ip":{"addr":"104.21.234.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-27T18:13:26.875281Z","times_seen":109898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.y2meta.com/pwa/pwa-app.js","fqdn":"www.y2meta.com","domain":"y2meta.com","tld":"com"},"ip":{"addr":"104.21.234.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"433b01626694f6f172c7846bc1b85002","sha1":"09964488680297693c0993a02766793274507d44","sha256":"4187c19775ace18ab0752577094af6c60693b16136de2cb56f86d9fe2cea75b7","sha512":"379930a3a47ab15ebef0f53b173325a9eb1a5af6714d278255f3534b448aca17ccf9ca796f28d5d796dcfb0544e5949284fac0d7c03ecdda0612b98a03795b33","ssdeep":"","tlshash":"04d0121ad8ecd07799a120656d5a8200204b0f8a84e13075a7f2079510d7d0c9116c69","size":193,"data":"","first_seen":"2023-03-08T06:42:02Z","last_seen":"2026-05-17T22:50:33.616944Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5959f5235d7b28140b41682b3b80799","sha1":"c7b2b2d3ee22329cd78ad0a39b32e04db8461737","sha256":"e533df36b7578bcee9f3bc86fda337781c466f29716eff97db5b24c075e636f3","sha512":"a98698d463e40d0d6f569b0c618cd3c6748022935553c86d8becfa4fb7875ab1760d50385cc7c48bcdad2ea16f55dc56129a42a5ff4869cccf59f8f26305877e","ssdeep":"","tlshash":"e2c0228c32828cb08eff0b820b2fa3202800300088c00832080af2883020cabe282888","size":136,"data":"","first_seen":"2023-03-07T13:18:14Z","last_seen":"2024-08-20T11:26:45.212831Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-HP1NN6D2L1\u0026l=dataLayer\u0026cx=c","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c030ad14b05768e651ddee88beaa6fe8","sha1":"b9533adc1643863ec16427f060b028f8b254c361","sha256":"759346c0064117f40f6affdae7d9fa184953743d29d2d8820bf6247a5cb91d63","sha512":"597f3ba32308c3f8d2a1104bccf1c8ff32a8beac26429fc7fc121f48d2a71389e35ec0ac965b263d3a2f61128928d553dfbcbb4ee0e62db7e624c199140458e8","ssdeep":"6144:j4ADw1PMKYs6PmgWEkXqp/cmneNewUKGMRH:UJBMKYs6PxneNewgIH","tlshash":"834407d9b3c270668296f478403f024ba5bb6da2b85cccd8f189c9d42eb46995137f7c","size":253427,"data":"","first_seen":"2024-08-20T06:43:40.480575Z","last_seen":"2024-08-20T06:43:40.480575Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloaphoo.net/401/4861516","fqdn":"gloaphoo.net","domain":"gloaphoo.net","tld":"net"},"ip":{"addr":"139.45.197.239","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"0bc06e3bb9a6dbe56c90b580b92c89f4","sha1":"42e12f3d286f1efef8f8e1702244fce4093fe8b7","sha256":"3637fc677339e15a430b39de544ffccc5c4d7f8071a1f9fcb6f3c388de6c5c3d","sha512":"9a8bc0e00ced612d6a146a8f67650bb7ed551baf7f146497c59c926c6a482a7c893a1b96c12b8e3b558f057f77d02babf07b89b4d8a6c8ec80d84b43bc94d462","ssdeep":"1536:cnq8FEKqOl6WrYdDjoXXm/MJQ++4mQNNeI55M1YeqxIhihO78EpgtQX7IDYlWAbN:cnq8FEKbfrYdD0XXm/MJQ++4mQNNeI5y","tlshash":"0283c565b56773a113032737616f19177a65a160f48bc2b0702fab9c3a3380dfaf5ba4","size":87882,"data":"","first_seen":"2024-08-20T06:43:40.599323Z","last_seen":"2024-08-20T06:43:40.599323Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":[{"md5":"73497a37c3561adbd8ce84e4f017b368","sha1":"9193ae73cb3dd2833be8c942714d5544bfb628c9","sha256":"9312a1adbbf0a4c05fc296d158ec3bd39acfe50e9e98ff02688139aad6fc3351","sha512":"b265a65f30fa9ffac3fb7ffca07326823466dcd67a238a47091a497c7f2b2d13e09603cbb8e85dce136efeb8bbb9d246e4894d6f672dededc47c88a1a85d9a5b","ssdeep":"","tlshash":"c150000003000003030c0000c000000000000003000030c000c0000000000000000000","size":9,"data":"","first_seen":"2023-03-07T01:03:23Z","last_seen":"2026-05-27T14:23:47.901555Z","times_seen":5566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.y2meta.com/","fqdn":"www.y2meta.com","domain":"y2meta.com","tld":"com"},"ip":{"addr":"104.21.234.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-03-29T00:42:28.383Z","timestamp":1711672948383,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y2meta.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Tue, 30 Jan 2024 21:34:35 GMT","end":"Mon, 29 Apr 2024 21:34:34 GMT"},"fingerprint":{"sha1":"ED:32:F0:51:94:E2:07:0B:8C:CE:71:56:95:80:5B:90:75:4D:FF:09","sha256":"E6:B0:B7:46:8D:64:24:0A:03:7C:EA:76:9F:3D:67:4D:D1:01:40:99:A5:7F:09:18:EA:94:3E:98:A3:D0:16:8E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.y2meta.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Fri, 29 Mar 2024 00:42:28 GMT\r\ncontent-length: 0\r\nlocation: /en163\r\nx-frame-options: DENY\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=oz6ymiASVsW57UBLvgiNjB2FumJbO05X4sBo3t2tNEoM%2BST7Bf7b1Pw%2FXq3pYxJTcEYx5Poo2szo0OsdZ0SFUe7ufF4fUX83x7Fj28%2B83z%2BcoP4aYxPBHyraY0SOhh0oAA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 86bbd1f7bb3e71fa-LHR\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T18:18:45.099911Z","times_seen":15786144,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":47,"dns":0,"connect":17,"send":0,"wait":48,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.y2meta.com/Content/default/images/tip-download-youtube.jpg","fqdn":"www.y2meta.com","domain":"y2meta.com","tld":"com"},"ip":{"addr":"104.21.234.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.y2meta.com/en163","date":"2024-03-29T00:42:28.841Z","timestamp":1711672948841,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y2meta.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Tue, 30 Jan 2024 21:34:35 GMT","end":"Mon, 29 Apr 2024 21:34:34 GMT"},"fingerprint":{"sha1":"ED:32:F0:51:94:E2:07:0B:8C:CE:71:56:95:80:5B:90:75:4D:FF:09","sha256":"E6:B0:B7:46:8D:64:24:0A:03:7C:EA:76:9F:3D:67:4D:D1:01:40:99:A5:7F:09:18:EA:94:3E:98:A3:D0:16:8E"}}},"request":{"raw":"GET /Content/default/images/tip-download-youtube.jpg HTTP/1.1\r\nHost: www.y2meta.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.y2meta.com/en163\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Mar 2024 00:42:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17570\r\nlast-modified: Sat, 06 Apr 2019 18:04:26 GMT\r\netag: \"1d4eca32bd875a2\"\r\nx-frame-options: DENY\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 6417\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7rzlb1tIvKBdCREjvX%2FOOaXN4BNrt28dk5n7LGMesj22TuFGgD2NxyKDTajgGzyJSF%2B%2FQwVDbLq5yo%2Brft8MprnUo%2FWXxYbiEuhV3OGctstPcPtxppydCdzUbDkpvLrHsQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 86bbd1fa3cdc71fa-LHR\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17570,"size_decoded":17570,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=60, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=605], progressive, precision 8, 605x60, components 3","md5":"d34700edfc2f2e6efea559f09b5722dc","sha1":"00cc83fe735230cd52cc7247055a0eaab1db5e6a","sha256":"fe0d84bcb1ec8e0baf494792982e72eb4615d37b59634c88941b19a505f68441","sha512":"ab315a075d8ba43ec2f798c4499b63ed90a5654e36678312b78539247ea7d9d06ce26e81af564a4e1f133e3415b0161cad4d39a257cf8d153d72b5c920a58145","ssdeep":"384:/h7iueznti8p3LRw5000700caF+H61mCoRPoKm4I:/h7PeztzRjr8rpoKm4I","tlshash":"8282191977f8df12e9d9117a44f2c2837a19dd8866a73a06b5ccd4c63b393a18cec212","first_seen":"2024-01-26T18:38:31Z","last_seen":"2024-11-03T22:16:09.971042Z","times_seen":55,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.y2meta.com/Content/default/images/loading.gif","fqdn":"www.y2meta.com","domain":"y2meta.com","tld":"com"},"ip":{"addr":"104.21.234.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.y2meta.com/en163","date":"2024-03-29T00:42:28.839Z","timestamp":1711672948839,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y2meta.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Tue, 30 Jan 2024 21:34:35 GMT","end":"Mon, 29 Apr 2024 21:34:34 GMT"},"fingerprint":{"sha1":"ED:32:F0:51:94:E2:07:0B:8C:CE:71:56:95:80:5B:90:75:4D:FF:09","sha256":"E6:B0:B7:46:8D:64:24:0A:03:7C:EA:76:9F:3D:67:4D:D1:01:40:99:A5:7F:09:18:EA:94:3E:98:A3:D0:16:8E"}}},"request":{"raw":"GET /Content/default/images/loading.gif HTTP/1.1\r\nHost: www.y2meta.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.y2meta.com/en163\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Mar 2024 00:42:28 GMT\r\ncontent-type: image/gif\r\ncontent-length: 11689\r\nlast-modified: Tue, 26 Mar 2019 13:59:44 GMT\r\netag: \"1d4e3dc2a25a5a9\"\r\nx-frame-options: DENY\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 5250\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=nWiw%2FEBMPJNgLoJ5LXW%2BY%2BzaWTDwV5KE0UbTMg2yIrVyU4KsJw7%2BOpD3fjJMBpcjGGgUb5bwayp0%2BB%2F7rv3BQOdWwqNCtnQW8%2BGmZful08GhZpkP6VMScB5Cs3odIKNCvw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 86bbd1fa3cdb71fa-LHR\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11689,"size_decoded":11689,"mime_type":"image/gif","magic":"GIF image data, version 89a, 160 x 24","md5":"046677ff48107680705f654c9250c567","sha1":"c0cbc0b2c8b84014dcfea943e4582c7bd9e79710","sha256":"4bf7f8d97e7584aeb2932c7313bb7e6266651a22cad37fe16f4239ed7ea1784c","sha512":"7a1a34aa1be217f29313ba7c5ba78797611469514304163858013eac35f4bb608a5cb40592dc5a002bbb502135050756df0614fd88953dd9fca4a716480133c1","ssdeep":"192:nq1wjLoRf3nGNe2m8Y7+bOby8wi1fcCWV5nBBl6fkbe+pS2x4spkb8pV:f3N1mybOO8wVCWhBI8beU2IP","tlshash":"c7327cfac4d8598bdb4aceb6ae8bfd463211c69ded1e3d52036ba3165c740810c9c2e0","first_seen":"2023-05-03T16:45:21Z","last_seen":"2026-05-26T10:10:10.504602Z","times_seen":338,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.y2meta.com/data/admin/2019/3/logo.png","fqdn":"www.y2meta.com","domain":"y2meta.com","tld":"com"},"ip":{"addr":"104.21.234.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.y2meta.com/en163","date":"2024-03-29T00:42:28.837Z","timestamp":1711672948837,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y2meta.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Tue, 30 Jan 2024 21:34:35 GMT","end":"Mon, 29 Apr 2024 21:34:34 GMT"},"fingerprint":{"sha1":"ED:32:F0:51:94:E2:07:0B:8C:CE:71:56:95:80:5B:90:75:4D:FF:09","sha256":"E6:B0:B7:46:8D:64:24:0A:03:7C:EA:76:9F:3D:67:4D:D1:01:40:99:A5:7F:09:18:EA:94:3E:98:A3:D0:16:8E"}}},"request":{"raw":"GET /data/admin/2019/3/logo.png HTTP/1.1\r\nHost: www.y2meta.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.y2meta.com/en163\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Mar 2024 00:42:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 7190\r\nlast-modified: Thu, 28 Mar 2019 20:07:54 GMT\r\netag: \"1d4e5a1eda39516\"\r\nx-frame-options: DENY\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=MLPXZF4k8XE1prd1Yuo%2BXZrman9MsqxTTxNBv2L5m0esIh2SNdddMSETLFCj%2B93ZNx%2F1xG6rdSJZd80oGWmjewvCnXeSz8P24gVRJlu3A%2BLhMwkAdlWD1fUGgSN4KdqC2A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 86bbd1fa3cd871fa-LHR\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7190,"size_decoded":7190,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"0cddab075c6ff3429a9dd3509fc226cd","sha1":"0912c21e0c28453e179189c8eb98b3f10693bf8c","sha256":"b50babe7ac78cd1372303c0746b209bbaef8aa2dad09441976b7b94b4f1e733f","sha512":"e965ccdf7ea9fa70b239f69b2a2c70cbf317806545021279e183f5427b8806c8b50691edde4620632440e5a6e9365cf99270e9cda9bb6eb176c21f939c85e87d","ssdeep":"192:p5n3151KY92h7o60wg9mTcvHvE+kUjJ8QQIiNYBMrVneW:z3vj92Vf4mTUGU98pqSneW","tlshash":"d0e1ae3430a0b45d3856e1c72990792bd2eaa9d2c7d4e59a80d6cc4bbce06ff61872c6","first_seen":"2023-05-19T06:29:32Z","last_seen":"2026-05-26T10:10:10.486753Z","times_seen":151,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.y2meta.com/Content/default/fonts/glyphicons-halflings-regular.woff2","fqdn":"www.y2meta.com","domain":"y2meta.com","tld":"com"},"ip":{"addr":"104.21.234.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.y2meta.com/en163","date":"2024-03-29T00:42:28.949Z","timestamp":1711672948949,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y2meta.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Tue, 30 Jan 2024 21:34:35 GMT","end":"Mon, 29 Apr 2024 21:34:34 GMT"},"fingerprint":{"sha1":"ED:32:F0:51:94:E2:07:0B:8C:CE:71:56:95:80:5B:90:75:4D:FF:09","sha256":"E6:B0:B7:46:8D:64:24:0A:03:7C:EA:76:9F:3D:67:4D:D1:01:40:99:A5:7F:09:18:EA:94:3E:98:A3:D0:16:8E"}}},"request":{"raw":"GET /Content/default/fonts/glyphicons-halflings-regular.woff2 HTTP/1.1\r\nHost: www.y2meta.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.y2meta.com/Content/default/css/bootstrap.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Mar 2024 00:42:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 18028\r\nlast-modified: Sun, 11 Feb 2018 17:49:12 GMT\r\netag: \"1d3a3609ff9da6c\"\r\nx-frame-options: DENY\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7pFprI7yfw%2FuPO4l9zdUAOOAJ%2BZak5rcWQMoeWiHKUXzoNyHkDYEYETUAGxxo9ogOlryLngBG5ovL4vLXic0A5USLe6OFJFU1yLw59XvVbqyOquARc3edp1LCRVnhhD6iw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 86bbd1fafd9871fa-LHR\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18028,"size_decoded":18028,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18028, version 1.589","md5":"448c34a56d699c29117adc64c43affeb","sha1":"ca35b697d99cae4d1b60f2d60fcd37771987eb07","sha256":"fe185d11a49676890d47bb783312a0cda5a44c4039214094e7957b4c040ef11c","sha512":"3811804f56ec3c82f0bef35de0a9250e546a1e357fb59e2784f610d638fec355a27b480e3f796243c0e3d3743be3eadda8f9064c2b5b49577e16b7e40efcdb83","ssdeep":"384:Y22oezK7jlf4flnEPn9+1z2DIH6r3lEsNgV:Y22oeKjlCnm9+1y8gA","tlshash":"d082d0f4ea92999085b01c37d19acb48dc87b9cef5a4d01611e4e13eb5ff8ad684c6c8","first_seen":"2023-04-05T16:42:51Z","last_seen":"2026-05-27T18:07:08.323541Z","times_seen":45336,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.y2meta.com/en163","fqdn":"www.y2meta.com","domain":"y2meta.com","tld":"com"},"ip":{"addr":"104.21.234.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-03-29T00:42:28.485Z","timestamp":1711672948485,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y2meta.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Tue, 30 Jan 2024 21:34:35 GMT","end":"Mon, 29 Apr 2024 21:34:34 GMT"},"fingerprint":{"sha1":"ED:32:F0:51:94:E2:07:0B:8C:CE:71:56:95:80:5B:90:75:4D:FF:09","sha256":"E6:B0:B7:46:8D:64:24:0A:03:7C:EA:76:9F:3D:67:4D:D1:01:40:99:A5:7F:09:18:EA:94:3E:98:A3:D0:16:8E"}}},"request":{"raw":"GET /en163 HTTP/1.1\r\nHost: www.y2meta.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Mar 2024 00:42:28 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: DENY\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=H1ZCkQr65%2Fg0Pb4QD29MtJvacbOMCYAx0vBs7y6D1LPojTaciOx%2FuoS%2F7w3jqJrW44CrNLXrIpb%2FpjRNIDOnsjhnCjXXll0ShDqJ%2FV0ZELz6%2BwM7jP9kPFRqa5Wb54ZL8g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 86bbd1f81b6f71fa-LHR\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":101890,"size_decoded":19383,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14923), with CRLF, LF line terminators","md5":"2af289a423b9e233b2286d59200bb581","sha1":"1c81132f39c675c69715e284977a78635b328d69","sha256":"08b6021bfa134e4d07181c4f7ab3a01296e588a2d43b22d9484d8c95484d3bd4","sha512":"4df2513d20c4b3c88abb0458c8d75501c1ae88ecd1cfae4ce95d1e4dd27db2eabf68072c81d702d8cec409b8ea12b5bf2e8e55b9a5ae0176fa45d5f2e3b7faef","ssdeep":"384:siBbILetVL28qPojOKcJghaYPqLbtfhnV:F2gBqPojOKcahaYPAb9H","tlshash":"0392777b5010ca5e0351d3cafe29735ce247a28fc5e5c9b5a6e5832e3d91fa1c92324b","first_seen":"2024-08-20T06:43:40.450327Z","last_seen":"2024-08-20T06:43:40.450327Z","times_seen":1,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.y2meta.com/apple-touch-icon.png","fqdn":"www.y2meta.com","domain":"y2meta.com","tld":"com"},"ip":{"addr":"104.21.234.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.y2meta.com/en163","date":"2024-03-29T00:42:29.153Z","timestamp":1711672949153,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y2meta.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Tue, 30 Jan 2024 21:34:35 GMT","end":"Mon, 29 Apr 2024 21:34:34 GMT"},"fingerprint":{"sha1":"ED:32:F0:51:94:E2:07:0B:8C:CE:71:56:95:80:5B:90:75:4D:FF:09","sha256":"E6:B0:B7:46:8D:64:24:0A:03:7C:EA:76:9F:3D:67:4D:D1:01:40:99:A5:7F:09:18:EA:94:3E:98:A3:D0:16:8E"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: www.y2meta.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.y2meta.com/en163\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Mar 2024 00:42:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 9958\r\nlast-modified: Tue, 23 Mar 2021 07:23:40 GMT\r\netag: \"1d71fb5726cc0e6\"\r\nx-frame-options: DENY\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 4440\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XzPypicufvNiNR75bDrAI%2BUxnGtLO5nj9dNuvsrd6aqxOlxkiKrL1zSkGWKMNWiGRX%2FDZ57eH6UP9m7ebKQTAOlgENquAoPqcTzKJwxqIdyTQVy%2B1ITP20m%2FF29ZTqeXiA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 86bbd1fc3e6e71fa-LHR\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9958,"size_decoded":9958,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"34fbedf76ef8ff8c0da9df3a1452ad7a","sha1":"6fc410b177317924609ef049072e05fed3696ae7","sha256":"9eaa3ad172f8b1df289ad35827f4cf337840a410d1cb4cb7e61d062e7e885ade","sha512":"bed2dfcb937e3dbca5af81bdc42e52087cf7896618bb43ae031bce04b785abd950109f7ba64558d7333ca1a370c6109028eac1e00cf38c5afc93345dc5171bc4","ssdeep":"192:cXhdSwPkQd9TYtqqNGq+aYef7BIlHP6FHLtI9WQcXYPYuBwmCYX:cXhdSw8Qd9iuRv0VIxSJ23ByYX","tlshash":"2422be1dc4433807d65706c5cf782326d13afee732821ee77b23c0935d55ae5099a687","first_seen":"2023-10-15T04:39:58Z","last_seen":"2025-11-02T10:52:51.170889Z","times_seen":92,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.y2meta.com/favicon-16x16.png","fqdn":"www.y2meta.com","domain":"y2meta.com","tld":"com"},"ip":{"addr":"104.21.234.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.y2meta.com/en163","date":"2024-03-29T00:42:29.155Z","timestamp":1711672949155,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y2meta.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Tue, 30 Jan 2024 21:34:35 GMT","end":"Mon, 29 Apr 2024 21:34:34 GMT"},"fingerprint":{"sha1":"ED:32:F0:51:94:E2:07:0B:8C:CE:71:56:95:80:5B:90:75:4D:FF:09","sha256":"E6:B0:B7:46:8D:64:24:0A:03:7C:EA:76:9F:3D:67:4D:D1:01:40:99:A5:7F:09:18:EA:94:3E:98:A3:D0:16:8E"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: www.y2meta.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.y2meta.com/en163\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Mar 2024 00:42:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 1261\r\nlast-modified: Tue, 23 Mar 2021 07:23:40 GMT\r\netag: \"1d71fb5726ce2ed\"\r\nx-frame-options: DENY\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=tZVtqER7UcuhrEv7mho2mKaSVNX5GKuA0CvZm0BN7YTFsbXKtnZBm7%2BpK8xqeXCqy7F6BHS3%2FAqMQOyQ1NluM3ifCnfC1sTyNjWe19Bcoh5U3zW%2FAtLUUx5qutP4EpIFmg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 86bbd1fc3e7071fa-LHR\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1261,"size_decoded":1261,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"25e0e1f1c17b2985d455fd4c8fa2c36a","sha1":"a159ebb6a7c0c1ccb28793b48220b2bc5be5ab0e","sha256":"74921b10837e85f8738cde3240a9b77b53d9f6547cba2fee36ad4dab09a6e34c","sha512":"45f81b9ed50638192e417f32c5c429869c9cd55097da0315878cbb416b8519f9cdc0dee07eb1b96f59f6ffbcd63fafba401b85f91d24aeac374bc8e6fa9616f5","ssdeep":"","tlshash":"4b211ac07432d1a0919b1ac2934500a07738d04372a4817c92f5f92c0f78ed8430bfc2","first_seen":"2023-10-28T05:12:49Z","last_seen":"2025-11-02T10:52:51.171842Z","times_seen":84,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-HP1NN6D2L1\u0026l=dataLayer\u0026cx=c","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.y2meta.com/en163","date":"2024-03-29T00:42:29.217Z","timestamp":1711672949217,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 26 Feb 2024 08:03:40 GMT","end":"Mon, 20 May 2024 08:03:39 GMT"},"fingerprint":{"sha1":"DE:42:E4:CC:E5:66:70:09:F3:E6:6E:57:B7:5E:22:0A:A3:03:C2:7C","sha256":"E8:E6:F8:B4:EE:1D:B2:D3:E0:93:94:8E:F3:F1:15:12:50:C0:7C:57:E5:CF:63:7E:1D:85:A9:07:20:0D:AF:7F"}}},"request":{"raw":"GET /gtag/js?id=G-HP1NN6D2L1\u0026l=dataLayer\u0026cx=c HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.y2meta.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 29 Mar 2024 00:42:29 GMT\r\nexpires: Fri, 29 Mar 2024 00:42:29 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 90109\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":90109,"size_decoded":253427,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5955)","md5":"c030ad14b05768e651ddee88beaa6fe8","sha1":"b9533adc1643863ec16427f060b028f8b254c361","sha256":"759346c0064117f40f6affdae7d9fa184953743d29d2d8820bf6247a5cb91d63","sha512":"597f3ba32308c3f8d2a1104bccf1c8ff32a8beac26429fc7fc121f48d2a71389e35ec0ac965b263d3a2f61128928d553dfbcbb4ee0e62db7e624c199140458e8","ssdeep":"6144:j4ADw1PMKYs6PmgWEkXqp/cmneNewUKGMRH:UJBMKYs6PxneNewgIH","tlshash":"834407d9b3c270668296f478403f024ba5bb6da2b85cccd8f189c9d42eb46995137f7c","first_seen":"2024-08-20T06:43:40.480575Z","last_seen":"2024-08-20T06:43:40.480575Z","times_seen":1,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"propu.sh/zone?\u0026pub=0\u0026zone_id=3899503\u0026is_mobile=false\u0026domain=www.y2meta.com\u0026var=\u0026ymid=\u0026var_3=\u0026var_4=\u0026dsig=\u0026tg=1\u0026sw=3.1.497\u0026trace_id=03acc926-0e8e-4cc4-af7b-098a865330b5\u0026action=prerequest","fqdn":"propu.sh","domain":"propu.sh","tld":"sh"},"ip":{"addr":"139.45.197.250","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.y2meta.com/en163","date":"2024-03-29T00:42:44.938Z","timestamp":1711672964938,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"propu.sh","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jan 2024 21:49:21 GMT","end":"Wed, 24 Apr 2024 21:49:20 GMT"},"fingerprint":{"sha1":"67:D6:66:75:25:20:F4:C3:58:D2:DE:E8:FC:AB:7D:1A:BD:FD:18:CC","sha256":"9F:88:4C:AE:1D:67:E3:AC:DB:94:1C:88:60:A7:76:3D:66:61:A8:B2:78:7C:BB:85:66:02:C2:2D:23:D8:6D:EB"}}},"request":{"raw":"POST /zone?\u0026pub=0\u0026zone_id=3899503\u0026is_mobile=false\u0026domain=www.y2meta.com\u0026var=\u0026ymid=\u0026var_3=\u0026var_4=\u0026dsig=\u0026tg=1\u0026sw=3.1.497\u0026trace_id=03acc926-0e8e-4cc4-af7b-098a865330b5\u0026action=prerequest HTTP/1.1\r\nHost: propu.sh\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.y2meta.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.y2meta.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Mar 2024 00:42:44 GMT\r\ncontent-length: 0\r\nx-trace-id: 33f8d266344e69bba0354762d75c8f62\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: https://www.y2meta.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T18:18:45.099911Z","times_seen":15786144,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kv.tibertannoy.com/tTgI3NffKSEZf5Hk/40654","fqdn":"kv.tibertannoy.com","domain":"tibertannoy.com","tld":"com"},"ip":{"addr":"23.109.170.71","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.y2meta.com/en163","date":"2024-03-29T00:42:44.628Z","timestamp":1711672964628,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_128_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kv.tibertannoy.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 Mar 2024 23:04:36 GMT","end":"Sun, 02 Jun 2024 23:04:35 GMT"},"fingerprint":{"sha1":"14:28:6F:0B:70:86:B4:3A:B9:8E:1D:D8:0D:E1:35:57:84:4E:F8:33","sha256":"0C:F8:26:71:FC:BB:49:3B:EC:CF:14:58:43:C7:02:3D:EC:FF:0D:6F:5C:F3:9E:6B:36:80:99:59:BA:66:27:6C"}}},"request":{"raw":"GET /tTgI3NffKSEZf5Hk/40654 HTTP/1.1\r\nHost: kv.tibertannoy.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.y2meta.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 Mar 2024 00:42:44 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nKeep-Alive: timeout=20\r\nAccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://www.y2meta.com\r\nAccess-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\nAccess-Control-Max-Age: 600\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nX-Frame-Options: SAMEORIGIN\r\nSet-Cookie: GL_UI4=eJw9jUtug0AQRPljJ4akJQ7gIxgUjL3MJivfAQ0zDZ4Ypq1mjJ3bZxIp2dUrPVV5nhcUL%2BAvyRrCm6hhe1R9s5dYojyUVVW%2BHSrZ151o%2BlJVTVnvYK3n1opuRBvBap4E29YuEWwGNMhatpIUZvDqrL%2FmYuhuIog7FkZlEE%2FOGDNIO6b7jFyEEBkxIaQfmrGnhzPEJzEEx72L2rjo7yCguQjzJ4hP2twe%2BSbx8jzx4Pk6CtsTT61WDuOBhULw32ElhcWB%2BAtShfPF0hWARtX%2B%2B7%2Bf8fizBonCRUuHZM%2FI38wATrY%3D; expires=Sat, 30-Mar-2024 00:42:44 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJwViE0KgzAUBvMeJVAqhY96AE%2BQamsXbmuXRReewGopgZBIEvtz%2B%2BpiBmaEEJwmYD0hqQpV5ao8qeJSgl7gpgUPFrJx%2FtP%2FQB6cn8HeYtcG47LazTYuf8BmbZDG%2Fmr0N%2BucmaN2NoAXtnX%2FMM%2FjrbuDJkng6FaHMRWgtzz8AV7hHdE%3D; expires=Sat, 30-Mar-2024 00:42:44 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=1\r\nX-Content-Type-Options: nosniff\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25,"size_decoded":5,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"f7a2939527fd9e68723da600e96d76bd","sha1":"a9e717b6364d2895ee0a716050db32ca0ef1bb42","sha256":"d810f5146f4cd1517512a6e31946e764a73c58fb01427aae88d42cc2ae28718a","sha512":"e6956ec633c76eb3ebc408528f950b81373238cd1d5b9fff5ddd97089ea14a1ff5934f23769bac5d93cc4cdb6a1fbc4ce69baebfb940a55d8a7a89caccaf92b5","ssdeep":"","tlshash":"5340000c00300000000000000000f000000c00000c000300c000000c00030c000c0000","first_seen":"2023-03-07T01:14:39Z","last_seen":"2026-05-27T15:22:56.254094Z","times_seen":14669,"resource_available":true,"data":null}},"time_used":666,"timings":{"blocked":316,"dns":116,"connect":21,"send":0,"wait":33,"receive":0,"ssl":177},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jouteetu.net/custom","fqdn":"jouteetu.net","domain":"jouteetu.net","tld":"net"},"ip":{"addr":"139.45.197.251","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.y2meta.com/en163","date":"2024-03-29T00:42:44.940Z","timestamp":1711672964940,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"jouteetu.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Mar 2024 19:38:02 GMT","end":"Tue, 11 Jun 2024 19:38:01 GMT"},"fingerprint":{"sha1":"F5:94:3C:5E:6B:54:1A:97:82:F8:7E:1F:C2:51:04:8C:FB:F5:CF:65","sha256":"FB:67:BD:A9:CC:97:A6:D2:68:E6:77:22:81:2C:21:15:2B:F8:00:80:AF:25:4D:7B:67:7A:3D:A4:AB:E5:7E:85"}}},"request":{"raw":"POST /custom HTTP/1.1\r\nHost: jouteetu.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 250\r\nOrigin: https://www.y2meta.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.y2meta.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Mar 2024 00:42:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 39\r\nx-trace-id: f4bd19384a3bd10f35914bac560aca80\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: https://www.y2meta.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39,"size_decoded":39,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"058b158c2be925f556454ef762d93538","sha1":"cc6fc563b4b6baee880fdbc7fcfaa134978e33c9","sha256":"ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881","sha512":"bd8505393cd811f3177f89a73ebbbc900aec310894f142cda663762473ed3b4ba4c5650efdc2a80a547520218598b6e915d13e4bb58def4bd446e15b741429da","ssdeep":"","tlshash":"e090041001141c34474305013414f5501dfc45534ddd3041fc0c1d3441d14414107103","first_seen":"2023-04-05T03:13:54Z","last_seen":"2024-09-20T20:16:30.21056Z","times_seen":24889,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":105,"dns":6,"connect":31,"send":0,"wait":31,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"besmeargleor.com/400/3145154","fqdn":"besmeargleor.com","domain":"besmeargleor.com","tld":"com"},"ip":{"addr":"139.45.197.236","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.y2meta.com/en163","date":"2024-03-29T00:42:44.634Z","timestamp":1711672964634,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"besmeargleor.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Feb 2024 19:27:28 GMT","end":"Sun, 05 May 2024 19:27:27 GMT"},"fingerprint":{"sha1":"BB:44:2D:16:40:65:F5:1E:F3:BA:9B:A0:74:D8:53:69:7C:B3:4E:C0","sha256":"D7:DF:B2:DB:F0:3C:D2:C4:66:0E:A8:18:96:74:A0:67:23:0F:D2:0D:46:98:41:63:9E:57:8C:0C:78:F2:C7:33"}}},"request":{"raw":"GET /400/3145154 HTTP/1.1\r\nHost: besmeargleor.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.y2meta.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Mar 2024 00:42:44 GMT\r\ncontent-type: application/javascript\r\nx-trace-id: 47bdaa67b3d3cb96fdcc420f534e2ccc\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nvary: Origin\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\nset-cookie: OAID=03002e72e11647f4ff1185fb16d4c547; expires=Sat, 29 Mar 2025 00:42:44 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31127,"size_decoded":31127,"mime_type":"application/javascript","magic":"gzip compressed data, max speed, from Unix","md5":"832253d7684e702b8efea19f1e1c5878","sha1":"9eeae3748ce27e784dd3fd9f76758f2bfbc2d29d","sha256":"5886897f0f622c581853252ca9726a2d16a0a7d6f2994e39bf49f8583d7c2d84","sha512":"ba090b5a2e2a25f19ea5917264afbf77c3f6e80cb724245780a0418d1ea9ee68a5c99e7b90a42a914e1ecf0fae70321d353102f777d1d6464ec2ce5623d9076c","ssdeep":"768:occ/ZIg9Di++qJdaB3ZIUo/FxulkQ3uaW0hgbX2vXE7cgmZFOTLXz:olIgpi7qWBpIT/F0kouaW0hNvU4gmZFy","tlshash":"03e2e1f587a9dae8f26a5a96c37c3b98076976a6cc3d2c504835f941d8d11414fd0b38","first_seen":"2024-08-20T06:43:40.518367Z","last_seen":"2024-08-20T06:43:40.518367Z","times_seen":1,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":116,"dns":16,"connect":33,"send":0,"wait":67,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jouteetu.net/custom","fqdn":"jouteetu.net","domain":"jouteetu.net","tld":"net"},"ip":{"addr":"139.45.197.251","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.y2meta.com/en163","date":"2024-03-29T00:42:44.940Z","timestamp":1711672964940,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"jouteetu.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Mar 2024 19:38:02 GMT","end":"Tue, 11 Jun 2024 19:38:01 GMT"},"fingerprint":{"sha1":"F5:94:3C:5E:6B:54:1A:97:82:F8:7E:1F:C2:51:04:8C:FB:F5:CF:65","sha256":"FB:67:BD:A9:CC:97:A6:D2:68:E6:77:22:81:2C:21:15:2B:F8:00:80:AF:25:4D:7B:67:7A:3D:A4:AB:E5:7E:85"}}},"request":{"raw":"POST /custom HTTP/1.1\r\nHost: jouteetu.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 251\r\nOrigin: https://www.y2meta.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.y2meta.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Mar 2024 00:42:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 39\r\nx-trace-id: f9f6a8fede21782d6576045885628ceb\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: https://www.y2meta.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39,"size_decoded":39,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"058b158c2be925f556454ef762d93538","sha1":"cc6fc563b4b6baee880fdbc7fcfaa134978e33c9","sha256":"ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881","sha512":"bd8505393cd811f3177f89a73ebbbc900aec310894f142cda663762473ed3b4ba4c5650efdc2a80a547520218598b6e915d13e4bb58def4bd446e15b741429da","ssdeep":"","tlshash":"e090041001141c34474305013414f5501dfc45534ddd3041fc0c1d3441d14414107103","first_seen":"2023-04-05T03:13:54Z","last_seen":"2024-09-20T20:16:30.21056Z","times_seen":24889,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":105,"dns":6,"connect":31,"send":0,"wait":31,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"139.45.195.8","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.y2meta.com/en163","date":"2024-03-29T00:42:44.945Z","timestamp":1711672964945,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rtmark.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Mar 2024 21:53:43 GMT","end":"Fri, 31 May 2024 21:53:42 GMT"},"fingerprint":{"sha1":"DB:C0:8B:64:1C:E3:2A:9C:B9:04:0D:F3:6F:5A:E0:35:F4:C7:75:CC","sha256":"DB:9C:DD:77:89:DB:BF:04:00:C6:34:07:BE:F8:63:04:1D:02:63:60:1A:F4:E0:75:7C:A8:86:62:FA:AC:F7:A0"}}},"request":{"raw":"GET /gid.js HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.y2meta.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.y2meta.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Mar 2024 00:42:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 65\r\naccess-control-allow-origin: https://www.y2meta.com\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=45cc381f326842098a0f09085ad4ecd9; expires=Sat, 29 Mar 2025 00:42:45 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":65,"size_decoded":65,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d1cd37029b76d786579b568f2211a45c","sha1":"8bf963046416435f9dbaefeba5bc1d2d09b817f6","sha256":"bef51ba55c773342c652463f734055cd3fd8b405fbdae402bf94ae57bf815b14","sha512":"8bedc45d6cd47cad0ad716ee6752b79d0c15f36bb27b44c7bf5f6fbbcd2ef338770316dced2db4960ceb8fa781aaad863292cf8d6790a7d8f6c3cbfca5f67c76","ssdeep":"","tlshash":"e7a02280223c82c0002008203ef38300c0000802a80832a883fca00b20830ae0e82a00","first_seen":"2024-08-20T06:43:40.524641Z","last_seen":"2024-08-20T06:43:40.524641Z","times_seen":1,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":110,"dns":9,"connect":32,"send":0,"wait":32,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amunfezanttor.com/event","fqdn":"amunfezanttor.com","domain":"amunfezanttor.com","tld":"com"},"ip":{"addr":"139.45.197.250","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.y2meta.com/en163","date":"2024-03-29T00:42:45.166Z","timestamp":1711672965166,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"amunfezanttor.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Jan 2024 19:04:20 GMT","end":"Tue, 30 Apr 2024 19:04:19 GMT"},"fingerprint":{"sha1":"D4:D3:E8:AF:BA:16:67:D6:32:4A:0A:37:C6:DB:70:CD:C6:36:F4:4A","sha256":"70:60:65:CC:F1:BC:F6:A1:77:94:6A:E6:48:C7:CC:0F:92:A2:45:C0:36:9D:01:DF:A3:4D:A7:AF:92:7F:EA:80"}}},"request":{"raw":"OPTIONS /event HTTP/1.1\r\nHost: amunfezanttor.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.y2meta.com/\r\nOrigin: https://www.y2meta.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Mar 2024 00:42:45 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\naccess-control-allow-origin: https://www.y2meta.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid\r\naccess-control-max-age: 86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T18:18:45.099911Z","times_seen":15786144,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":19,"connect":31,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-03-29","alert":"Sinkholed","trigger":"amunfezanttor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amunfezanttor.com/event","fqdn":"amunfezanttor.com","domain":"amunfezanttor.com","tld":"com"},"ip":{"addr":"139.45.197.250","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.y2meta.com/en163","date":"2024-03-29T00:42:45.166Z","timestamp":1711672965166,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"amunfezanttor.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Jan 2024 19:04:20 GMT","end":"Tue, 30 Apr 2024 19:04:19 GMT"},"fingerprint":{"sha1":"D4:D3:E8:AF:BA:16:67:D6:32:4A:0A:37:C6:DB:70:CD:C6:36:F4:4A","sha256":"70:60:65:CC:F1:BC:F6:A1:77:94:6A:E6:48:C7:CC:0F:92:A2:45:C0:36:9D:01:DF:A3:4D:A7:AF:92:7F:EA:80"}}},"request":{"raw":"POST /event HTTP/1.1\r\nHost: amunfezanttor.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.y2meta.com/\r\nContent-Type: application/json\r\nContent-Length: 903\r\nOrigin: https://www.y2meta.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Mar 2024 00:42:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 94\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: https://www.y2meta.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":94,"size_decoded":94,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"af94abbec6b686db32efe9a3b289aece","sha1":"db57c7f1712b58b217c029f3a208fc7b8e12dc9a","sha256":"c81b0bf2a74132cac8ba7ba340c38c43be664689cd493734f3db4c02d6671293","sha512":"cd03f2a2196c95004b6e0ffab9abc981a4fc52b13a9405018f10ce8de8ad70760af67b632992a2133e7f87a1c148433eac7fda745e3ae8c6a4a598de1ad76fa6","ssdeep":"","tlshash":"afb012740014bcb83ec505026890a8210cfd04bb5e4a10b9891c2c184167441430a142","first_seen":"2024-08-20T06:43:40.528776Z","last_seen":"2024-08-20T06:43:40.528776Z","times_seen":1,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":19,"connect":31,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-03-29","alert":"Sinkholed","trigger":"amunfezanttor.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.y2meta.com/Content/default/css/bootstrap.min.css","fqdn":"www.y2meta.com","domain":"y2meta.com","tld":"com"},"ip":{"addr":"104.21.234.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.y2meta.com/en163","date":"2024-03-29T00:42:28.830Z","timestamp":1711672948830,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y2meta.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Tue, 30 Jan 2024 21:34:35 GMT","end":"Mon, 29 Apr 2024 21:34:34 GMT"},"fingerprint":{"sha1":"ED:32:F0:51:94:E2:07:0B:8C:CE:71:56:95:80:5B:90:75:4D:FF:09","sha256":"E6:B0:B7:46:8D:64:24:0A:03:7C:EA:76:9F:3D:67:4D:D1:01:40:99:A5:7F:09:18:EA:94:3E:98:A3:D0:16:8E"}}},"request":{"raw":"GET /Content/default/css/bootstrap.min.css HTTP/1.1\r\nHost: www.y2meta.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.y2meta.com/en163\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Mar 2024 00:42:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 26 Mar 2019 13:58:54 GMT\r\netag: W/\"1d4e3dc0c59fe82\"\r\nx-frame-options: DENY\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=PqWYvqPDhPND8Hh8NmcJmA%2FawOz2iisiLdo4GRrym0HT9AH6VWC93LO%2Fikr4zjPe6ov0usGGa8h8e1pDEhDfXYF8HaUSN0fxZQV721PwIvJjY2Dky54%2BShMwedjTAEYSSA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 86bbd1fa2cd671fa-LHR\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":122242,"size_decoded":122242,"mime_type":"text/css","magic":"ASCII text, with very long lines (64985)","md5":"7a2e03df404c212ec5c96806d9469a4b","sha1":"4234532b2555095901936872e601284b22eead6d","sha256":"7e7da99cf4a346c13d1227ecada72a3d8ff48ba5253be06acc2f4780c2733a6d","sha512":"1c0ed4f939bd2b4125ab989716fe4186a4263138aab4bf2ecb5b2047fd6a7b0ec92bbc9caba5383a8315c50002e3756185f559268a8e598d2b971b229ebd1b1f","ssdeep":"768:JkGxw/QIX9UVQVv5DNHt1tVQeIMHCtbbZbKgoN+OWm3gfrQsQWQUYQzas:nw/H/BDNHt1tV3HGMgkwTQsmUt","tlshash":"afc3c6a0f21031ea7333c65a71d0ee862259e152e5574fb7f22f25d88f846ca1673f1a","first_seen":"2024-01-23T11:35:49Z","last_seen":"2026-02-02T17:29:11.478794Z","times_seen":66,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.y2meta.com/js/common.min.js?v=25","fqdn":"www.y2meta.com","domain":"y2meta.com","tld":"com"},"ip":{"addr":"104.21.234.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.y2meta.com/en163","date":"2024-03-29T00:42:29.157Z","timestamp":1711672949157,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y2meta.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Tue, 30 Jan 2024 21:34:35 GMT","end":"Mon, 29 Apr 2024 21:34:34 GMT"},"fingerprint":{"sha1":"ED:32:F0:51:94:E2:07:0B:8C:CE:71:56:95:80:5B:90:75:4D:FF:09","sha256":"E6:B0:B7:46:8D:64:24:0A:03:7C:EA:76:9F:3D:67:4D:D1:01:40:99:A5:7F:09:18:EA:94:3E:98:A3:D0:16:8E"}}},"request":{"raw":"GET /js/common.min.js?v=25 HTTP/1.1\r\nHost: www.y2meta.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.y2meta.com/en163\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Mar 2024 00:42:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 21 Sep 2023 07:00:35 GMT\r\netag: W/\"1d9ec5951a2ac0f\"\r\nx-frame-options: DENY\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=0OedIV3VFekSZM%2FbRsY16Nlbd4Quwtqfks9%2BgSKbZka4qMj0oHaI5yTjolOzmCRE8Rq2bL%2F8M0ws81Q1QNCJJ4FQSH8CWpbIDrqTkiGsQL7IPy11T0jlRG1xv%2FkV7u9vgA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 86bbd1fc4e7671fa-LHR\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1935,"size_decoded":1935,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2012), with no line terminators","md5":"3f6f4fdb4d333b20f5ca2dac9de3eeb4","sha1":"085767e2cfedeaaba81ffedae8b39198ae31eb54","sha256":"fb749987296e35816c09857e1f415df3a6759025967391117383a203ecb666dc","sha512":"ce9db99ca226e77e7826cb760b0b877fad60df090b8a2133969c3f3a85fe006428fcb97eee5cc632db061e0974470e78d532a99e2619e38f9ad0d80ea4485640","ssdeep":"","tlshash":"d241527c34549035091618e9317b67aeb5b329297c629420b14ddbefb834ff90b47ca8","first_seen":"2024-01-23T11:35:50Z","last_seen":"2024-08-20T11:26:45.203941Z","times_seen":10,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.y2meta.com/js/suggeser.js?v=3","fqdn":"www.y2meta.com","domain":"y2meta.com","tld":"com"},"ip":{"addr":"104.21.234.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.y2meta.com/en163","date":"2024-03-29T00:42:29.159Z","timestamp":1711672949159,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y2meta.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Tue, 30 Jan 2024 21:34:35 GMT","end":"Mon, 29 Apr 2024 21:34:34 GMT"},"fingerprint":{"sha1":"ED:32:F0:51:94:E2:07:0B:8C:CE:71:56:95:80:5B:90:75:4D:FF:09","sha256":"E6:B0:B7:46:8D:64:24:0A:03:7C:EA:76:9F:3D:67:4D:D1:01:40:99:A5:7F:09:18:EA:94:3E:98:A3:D0:16:8E"}}},"request":{"raw":"GET /js/suggeser.js?v=3 HTTP/1.1\r\nHost: www.y2meta.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.y2meta.com/en163\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Mar 2024 00:42:29 GMT\r\ncontent-type: application/javascript\r\ncf-bgj: minify\r\netag: W/\"1d6fd1ea30740c1\"\r\nlast-modified: Sun, 07 Feb 2021 06:58:28 GMT\r\nx-frame-options: DENY\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=U2Wg3VZ%2BmvDSsXS%2FfBrL6nshzxC0WDomNNxJN2cTSIVILW2wtJfUQDNWfcWOBIN125GM9WYg1qrew50UthbUo7k2P6X%2BqVfJxHxBNnbWpQrkyTG01zceiAaUzbz5xSPDyg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 86bbd1fc4e7871fa-LHR\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17089,"size_decoded":17089,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17089), with no line terminators","md5":"ccbda31515e1c9642d87ca4a166dcbf3","sha1":"94f0f77b129f5784136c22a409fa797310849803","sha256":"e33806d103384621c4f7d70e83fc4a17062862c6f589eeb2d5ba3ffa478f8617","sha512":"0e7f43060cdd1c91159a92908fe20b0c05bda511d7542764de3bcc1a17f3b885fb3d918a87674efa3667d904932d11141ee7925e77f6e48b4eca957aaa37b745","ssdeep":"384:BFbKzWpwywMYw4lw6n638yOt2SnpDctz8pEC1vt8WDZ:bt/wMYw4em7rEk82","tlshash":"2472c744b681723693af70bd885b144e5ab7be167c0620507226d8d19cbcf08e2aff79","first_seen":"2023-03-07T13:18:14Z","last_seen":"2026-05-20T16:17:46.983441Z","times_seen":154,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"propu.sh/pfe/current/micro.tag.min.js?z=3899503\u0026sw=/sw-check-permissions.js\u0026_=1711672949126","fqdn":"propu.sh","domain":"propu.sh","tld":"sh"},"ip":{"addr":"139.45.197.250","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.y2meta.com/en163","date":"2024-03-29T00:42:44.640Z","timestamp":1711672964640,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"propu.sh","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jan 2024 21:49:21 GMT","end":"Wed, 24 Apr 2024 21:49:20 GMT"},"fingerprint":{"sha1":"67:D6:66:75:25:20:F4:C3:58:D2:DE:E8:FC:AB:7D:1A:BD:FD:18:CC","sha256":"9F:88:4C:AE:1D:67:E3:AC:DB:94:1C:88:60:A7:76:3D:66:61:A8:B2:78:7C:BB:85:66:02:C2:2D:23:D8:6D:EB"}}},"request":{"raw":"GET /pfe/current/micro.tag.min.js?z=3899503\u0026sw=/sw-check-permissions.js\u0026_=1711672949126 HTTP/1.1\r\nHost: propu.sh\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.y2meta.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Mar 2024 00:42:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 20 Mar 2024 09:50:24 GMT\r\netag: W/\"65fab160-8def\"\r\naccess-control-allow-credentials: true\r\ncache-control: no-cache\r\npragma: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36335,"size_decoded":36335,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (36335), with no line terminators","md5":"edd3473db2c4ca3d9e5ff3ec876fb483","sha1":"dc4ee801ac9de08445dd5c6262f5023d1515d32e","sha256":"955a7f7e7a9158b178d2ca39513763b297bbec13f6083c534c099af7876c1c8c","sha512":"f355e6c0f2d76f39458ada71f731ea817dc0f92b80f7a8dab14e16478cec7d7b498a0be2c93a2699bd011ffd83f154c032bc41790e0084927e64bdd5e27acafc","ssdeep":"768:cR5CrA2svvCsv4+34nKN+S+e98ffbhLtL8H4GxHU+MzVh1Wj3JyhYQ3jW06JgGdh:F99c+S+eGy8WgGSKNPOA","tlshash":"27f294923415e8582390799b7c7720115374e224f85fa8f1a30969be76e18cdf62ffb8","first_seen":"2024-03-21T03:32:40Z","last_seen":"2024-08-20T07:17:08.306275Z","times_seen":98,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":132,"dns":31,"connect":32,"send":0,"wait":32,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.y2meta.com/sw-check-permissions.js?zoneId=3899503","fqdn":"www.y2meta.com","domain":"y2meta.com","tld":"com"},"ip":{"addr":"104.21.234.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.y2meta.com/en163","date":"2024-03-29T00:42:44.936Z","timestamp":1711672964936,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y2meta.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Tue, 30 Jan 2024 21:34:35 GMT","end":"Mon, 29 Apr 2024 21:34:34 GMT"},"fingerprint":{"sha1":"ED:32:F0:51:94:E2:07:0B:8C:CE:71:56:95:80:5B:90:75:4D:FF:09","sha256":"E6:B0:B7:46:8D:64:24:0A:03:7C:EA:76:9F:3D:67:4D:D1:01:40:99:A5:7F:09:18:EA:94:3E:98:A3:D0:16:8E"}}},"request":{"raw":"GET /sw-check-permissions.js?zoneId=3899503 HTTP/1.1\r\nHost: www.y2meta.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.y2meta.com/en163\r\nCookie: _ga_HP1NN6D2L1=GS1.1.1711672949.1.0.1711672949.0.0.0; _ga=GA1.1.286582693.1711672949\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Mar 2024 00:42:44 GMT\r\ncontent-type: application/javascript\r\ncf-bgj: minify\r\ncf-polished: origSize=558\r\netag: W/\"1d9ebf0b5dd572e\"\r\nlast-modified: Wed, 20 Sep 2023 18:31:46 GMT\r\nx-frame-options: DENY\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 6430\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=PLKUhAf7BzLeUNzmDvMWHD%2FR8Rk33uUzV1uPlBvSzPa5sWkFSwLHEO0YPtucDvh2npoQg9J%2F5UZEXQEHFcLIbwGdtmm%2BF4zvc2TXN%2B1zg9BLcnelhvxD%2FPIdXoU3OvObJQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 86bbd25edbd071fa-LHR\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":435,"size_decoded":435,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (454), with no line terminators","md5":"70cf0baf3a480bb32a5a90c633258f9c","sha1":"e1223356661cf8d2c5eabea6764da1564fe998a2","sha256":"a5d96a07eb326613d22e4f90e0850c9b8557b775e45861b21e736135a54c2486","sha512":"ef1cbf5aa56d0bb2d2ecf312d47c43bb4387a2952ff27568440a4a470121734e0057531a8d67ecacc1ead0c927a400118ba20b642c48d359135e0ad0318d39ae","ssdeep":"","tlshash":"a9f0dccbbd80c20c07e10b829c073e59a47b5b091a1d701094a85952b94ce2ecb274d8","first_seen":"2024-08-20T06:43:40.557956Z","last_seen":"2024-08-20T06:43:40.557956Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloaphoo.net/401/4861516?oo=1\u0026oaid=45cc381f326842098a0f09085ad4ecd9\u0026sw_version=v1.332.0","fqdn":"gloaphoo.net","domain":"gloaphoo.net","tld":"net"},"ip":{"addr":"139.45.197.239","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.y2meta.com/en163","date":"2024-03-29T00:42:45.175Z","timestamp":1711672965175,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gloaphoo.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Mar 2024 05:09:06 GMT","end":"Thu, 20 Jun 2024 05:09:05 GMT"},"fingerprint":{"sha1":"23:70:B4:EB:0C:B5:F9:2D:E5:91:C3:50:F3:84:88:F2:E5:80:4D:F7","sha256":"96:D0:1D:BB:60:F7:42:6F:C4:E3:57:FF:CA:30:02:29:4B:E8:EE:02:5B:20:3F:B6:DC:09:68:FA:6D:A6:11:27"}}},"request":{"raw":"GET /401/4861516?oo=1\u0026oaid=45cc381f326842098a0f09085ad4ecd9\u0026sw_version=v1.332.0 HTTP/1.1\r\nHost: gloaphoo.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.y2meta.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.y2meta.com/\r\nCookie: OAID=03002e45ccde4289ef58ba4db1a03814\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Mar 2024 00:42:45 GMT\r\ncontent-type: application/json\r\nx-trace-id: 39c2257880b036be65499261285de457\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-origin: https://www.y2meta.com\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\nset-cookie: OAID=45cc381f326842098a0f09085ad4ecd9; expires=Sat, 29 Mar 2025 00:42:45 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2280,"size_decoded":2280,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with very long lines (2468), with no line terminators","md5":"e0a365847ab8bf9ddc39acdd6a166ae1","sha1":"1f043a43d69982aa750eb5803b8c37bab3e86ff3","sha256":"8d553c34243422afd90e52f8e9c2a3a473da5ae4ac95ccd9c100b42d94246c91","sha512":"232f8731a1c0e4af4f6a48f7f27661a7b4da6e924fa2e56a1a402d125c40a24ccb8002b6b206dc2f559de70d415ac18cd27cca60894eec635231b6933a0ee02e","ssdeep":"","tlshash":"a451e051f604c47f81d2893eeead1d3b5abd04567a9f7c2dab848a4b20ef0b023c7149","first_seen":"2024-08-20T06:43:40.565106Z","last_seen":"2024-08-20T06:43:40.565106Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-03-29","alert":"Sinkholed","trigger":"gloaphoo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"besmeargleor.com/400/3145154?oo=1\u0026oaid=45cc381f326842098a0f09085ad4ecd9\u0026sw_version=v1.332.0","fqdn":"besmeargleor.com","domain":"besmeargleor.com","tld":"com"},"ip":{"addr":"139.45.197.236","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.y2meta.com/en163","date":"2024-03-29T00:42:45.173Z","timestamp":1711672965173,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"besmeargleor.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Feb 2024 19:27:28 GMT","end":"Sun, 05 May 2024 19:27:27 GMT"},"fingerprint":{"sha1":"BB:44:2D:16:40:65:F5:1E:F3:BA:9B:A0:74:D8:53:69:7C:B3:4E:C0","sha256":"D7:DF:B2:DB:F0:3C:D2:C4:66:0E:A8:18:96:74:A0:67:23:0F:D2:0D:46:98:41:63:9E:57:8C:0C:78:F2:C7:33"}}},"request":{"raw":"GET /400/3145154?oo=1\u0026oaid=45cc381f326842098a0f09085ad4ecd9\u0026sw_version=v1.332.0 HTTP/1.1\r\nHost: besmeargleor.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.y2meta.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.y2meta.com/\r\nCookie: OAID=03002e72e11647f4ff1185fb16d4c547\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Mar 2024 00:42:45 GMT\r\ncontent-type: application/json\r\nx-trace-id: 301850b1ec49c5bd4d20383ce58aca92\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nvary: Origin\r\naccess-control-allow-origin: https://www.y2meta.com\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\nset-cookie: OAID=45cc381f326842098a0f09085ad4ecd9; expires=Sat, 29 Mar 2025 00:42:45 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2438,"size_decoded":2438,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with very long lines (2634), with no line terminators","md5":"637b8d65f5190f4ae91de1724d02d009","sha1":"3587078aa03e12a3735480916ca20ae5273eab47","sha256":"ecc47a3143fc17003dc935c3f5d7edb6ce8ea9ce4af3ea20dcc424fb38386165","sha512":"c8348815cb5304fb9ca99c74b9134a6089b4ed16c66355cc9f58fca60983b7173f3b11a120ff3e511b434969002c6cabaf0bb94abd76314f40c3e0fb43d2dd39","ssdeep":"","tlshash":"6d512451b614c47b81d2893eee6d5d376abd04567a9f3c2da7844a0b20ff1b123cb249","first_seen":"2024-08-20T06:43:40.575597Z","last_seen":"2024-08-20T06:43:40.575597Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.y2meta.com/js/app.min.js?v=49","fqdn":"www.y2meta.com","domain":"y2meta.com","tld":"com"},"ip":{"addr":"104.21.234.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.y2meta.com/en163","date":"2024-03-29T00:42:29.051Z","timestamp":1711672949051,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y2meta.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Tue, 30 Jan 2024 21:34:35 GMT","end":"Mon, 29 Apr 2024 21:34:34 GMT"},"fingerprint":{"sha1":"ED:32:F0:51:94:E2:07:0B:8C:CE:71:56:95:80:5B:90:75:4D:FF:09","sha256":"E6:B0:B7:46:8D:64:24:0A:03:7C:EA:76:9F:3D:67:4D:D1:01:40:99:A5:7F:09:18:EA:94:3E:98:A3:D0:16:8E"}}},"request":{"raw":"GET /js/app.min.js?v=49 HTTP/1.1\r\nHost: www.y2meta.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.y2meta.com/en163\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Mar 2024 00:42:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 31 Jul 2022 02:05:27 GMT\r\netag: W/\"1d8a48200977b6e\"\r\nx-frame-options: DENY\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 1\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=TaNdbvtxg2mr2t5AIZKxPbPUvwYw%2B4qT3nO8z3lsy95noAcNQOZ6hPuufSCVFMaQkEAxBI90dFFztsWKC%2BamNHGT5%2BYTooqFSylXuShipGAJbgi%2FV0s%2BREhX4sGYbgnRJg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 86bbd1fb9de471fa-LHR\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":128750,"size_decoded":128750,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T18:18:45.099911Z","times_seen":15786144,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.y2meta.com/Content/default/css/style.min.css?v=20","fqdn":"www.y2meta.com","domain":"y2meta.com","tld":"com"},"ip":{"addr":"104.21.234.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.y2meta.com/en163","date":"2024-03-29T00:42:28.834Z","timestamp":1711672948834,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y2meta.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Tue, 30 Jan 2024 21:34:35 GMT","end":"Mon, 29 Apr 2024 21:34:34 GMT"},"fingerprint":{"sha1":"ED:32:F0:51:94:E2:07:0B:8C:CE:71:56:95:80:5B:90:75:4D:FF:09","sha256":"E6:B0:B7:46:8D:64:24:0A:03:7C:EA:76:9F:3D:67:4D:D1:01:40:99:A5:7F:09:18:EA:94:3E:98:A3:D0:16:8E"}}},"request":{"raw":"GET /Content/default/css/style.min.css?v=20 HTTP/1.1\r\nHost: www.y2meta.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.y2meta.com/en163\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Mar 2024 00:42:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 13 Aug 2022 07:36:39 GMT\r\netag: W/\"1d8aee76c97bd95\"\r\nx-frame-options: DENY\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 6417\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Horbf4%2FcS9hdUCMxM3xceHWNafAHSE4T3s7y7gPcGSFt%2B5146mbzFu%2BWIoDBZWQHAfkpKUw8GeoN1umKPKx6NbtxT9RtDZF9A6N%2FCNOT%2BwwEbsAOtuZOYC6Y3bm8stqJnw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 86bbd1fa3cd771fa-LHR\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24597,"size_decoded":24597,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T18:18:45.099911Z","times_seen":15786144,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.y2meta.com/js/app.min.js?v=49","fqdn":"www.y2meta.com","domain":"y2meta.com","tld":"com"},"ip":{"addr":"104.21.234.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.y2meta.com/en163","date":"2024-03-29T00:42:28.942Z","timestamp":1711672948942,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y2meta.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Tue, 30 Jan 2024 21:34:35 GMT","end":"Mon, 29 Apr 2024 21:34:34 GMT"},"fingerprint":{"sha1":"ED:32:F0:51:94:E2:07:0B:8C:CE:71:56:95:80:5B:90:75:4D:FF:09","sha256":"E6:B0:B7:46:8D:64:24:0A:03:7C:EA:76:9F:3D:67:4D:D1:01:40:99:A5:7F:09:18:EA:94:3E:98:A3:D0:16:8E"}}},"request":{"raw":"GET /js/app.min.js?v=49 HTTP/1.1\r\nHost: www.y2meta.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.y2meta.com/en163\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Mar 2024 00:42:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 31 Jul 2022 02:05:27 GMT\r\netag: W/\"1d8a48200977b6e\"\r\nx-frame-options: DENY\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vNvTTIE5aNPuRYR7hW97BfWDxk7Fe5OPCRcNXd5Q4EASaYNnePZUfMWWkXJm%2FcoXUlf%2FGCGfGlMfRy1TxvZF4W4XyKKYlJ%2B0RcKd2ekTUlw1TXRr1GRsbWEhCBQDpZJV4A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 86bbd1faed8b71fa-LHR\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":128750,"size_decoded":128750,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T18:18:45.099911Z","times_seen":15786144,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.y2meta.com/Content/default/images/firefox.svg","fqdn":"www.y2meta.com","domain":"y2meta.com","tld":"com"},"ip":{"addr":"104.21.234.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.y2meta.com/en163","date":"2024-03-29T00:42:28.843Z","timestamp":1711672948843,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y2meta.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Tue, 30 Jan 2024 21:34:35 GMT","end":"Mon, 29 Apr 2024 21:34:34 GMT"},"fingerprint":{"sha1":"ED:32:F0:51:94:E2:07:0B:8C:CE:71:56:95:80:5B:90:75:4D:FF:09","sha256":"E6:B0:B7:46:8D:64:24:0A:03:7C:EA:76:9F:3D:67:4D:D1:01:40:99:A5:7F:09:18:EA:94:3E:98:A3:D0:16:8E"}}},"request":{"raw":"GET /Content/default/images/firefox.svg HTTP/1.1\r\nHost: www.y2meta.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.y2meta.com/en163\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Mar 2024 00:42:28 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 21 Nov 2019 15:43:34 GMT\r\netag: W/\"1d5a0826ea894f9\"\r\nx-frame-options: DENY\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=VKcKK%2BmNM5DbvZhRFnYsEFhGmX3ebeD7VxyjhUY5cZrqr302gWC5OZL9eRmi7Uw1qq%2BGwleVbPWT8G8pM5lnWdXzbMhPm%2FFVlNoOCumN4a3iUATMKlrXY9clH1ngcRp2Kg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 86bbd1fa3ce071fa-LHR\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33785,"size_decoded":33785,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c214d7548e9dfe83e9093eb04407262e","sha1":"7078117a4bf243ba663ae44e576032cc79826b4e","sha256":"10d54aa020a7363073ef8c137808861137dc6e6fffd3d0f8c95f0a6d15e716e2","sha512":"53fd88d6f1d55528cb93ddb44bb805f53face26df805ca0ff17638dd813409828cb6d63d1d55846dd88aa106a5e8dab986597836b0ef43920b20fed30fc7f9cc","ssdeep":"384:paQDkjJVRcHW1WGIRvvlCEYTtYMaEMDmvTHei1B0zAKYS+6w+j:0QA9QBFATtDr10zAKYS+Lw","tlshash":"c6e263aac73c6973e1dfc2bced5184a5321e51ab99c0c39996b9df1f18285c35d0cba0","first_seen":"2023-07-31T16:54:37Z","last_seen":"2026-05-23T11:57:16.553416Z","times_seen":198,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.y2meta.com/pwa/pwa-app.js","fqdn":"www.y2meta.com","domain":"y2meta.com","tld":"com"},"ip":{"addr":"104.21.234.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.y2meta.com/en163","date":"2024-03-29T00:42:28.941Z","timestamp":1711672948941,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y2meta.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Tue, 30 Jan 2024 21:34:35 GMT","end":"Mon, 29 Apr 2024 21:34:34 GMT"},"fingerprint":{"sha1":"ED:32:F0:51:94:E2:07:0B:8C:CE:71:56:95:80:5B:90:75:4D:FF:09","sha256":"E6:B0:B7:46:8D:64:24:0A:03:7C:EA:76:9F:3D:67:4D:D1:01:40:99:A5:7F:09:18:EA:94:3E:98:A3:D0:16:8E"}}},"request":{"raw":"GET /pwa/pwa-app.js HTTP/1.1\r\nHost: www.y2meta.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.y2meta.com/en163\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Mar 2024 00:42:28 GMT\r\ncontent-type: application/javascript\r\ncf-bgj: minify\r\netag: W/\"1d8cbd2a9d049c1\"\r\nlast-modified: Mon, 19 Sep 2022 02:51:06 GMT\r\nx-frame-options: DENY\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=55HxJeAAVcWWJ7CR2Inu%2FZHkGtSlkbV7JVhj0j06qHOBpIECiqQKE%2FKp8BnRrpoqkk61iKfI7dbmKplQqseDk6hcbvnVfr1aK86SxbX60%2BULRKeOeD95BSPhZrI3vMygcg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 86bbd1faed8871fa-LHR\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":193,"size_decoded":193,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"433b01626694f6f172c7846bc1b85002","sha1":"09964488680297693c0993a02766793274507d44","sha256":"4187c19775ace18ab0752577094af6c60693b16136de2cb56f86d9fe2cea75b7","sha512":"379930a3a47ab15ebef0f53b173325a9eb1a5af6714d278255f3534b448aca17ccf9ca796f28d5d796dcfb0544e5949284fac0d7c03ecdda0612b98a03795b33","ssdeep":"","tlshash":"04d0121ad8ecd07799a120656d5a8200204b0f8a84e13075a7f2079510d7d0c9116c69","first_seen":"2023-03-08T06:42:02Z","last_seen":"2026-05-17T22:50:33.616944Z","times_seen":92,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloaphoo.net/401/4861516","fqdn":"gloaphoo.net","domain":"gloaphoo.net","tld":"net"},"ip":{"addr":"139.45.197.239","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.y2meta.com/en163","date":"2024-03-29T00:42:44.637Z","timestamp":1711672964637,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"gloaphoo.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Mar 2024 05:09:06 GMT","end":"Thu, 20 Jun 2024 05:09:05 GMT"},"fingerprint":{"sha1":"23:70:B4:EB:0C:B5:F9:2D:E5:91:C3:50:F3:84:88:F2:E5:80:4D:F7","sha256":"96:D0:1D:BB:60:F7:42:6F:C4:E3:57:FF:CA:30:02:29:4B:E8:EE:02:5B:20:3F:B6:DC:09:68:FA:6D:A6:11:27"}}},"request":{"raw":"GET /401/4861516 HTTP/1.1\r\nHost: gloaphoo.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.y2meta.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 29 Mar 2024 00:42:44 GMT\r\ncontent-type: application/javascript\r\nx-trace-id: 080edd90b60e8e5f0b9a6bef5cd069dd\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\nset-cookie: OAID=03002e45ccde4289ef58ba4db1a03814; expires=Sat, 29 Mar 2025 00:42:44 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":87882,"size_decoded":87882,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0bc06e3bb9a6dbe56c90b580b92c89f4","sha1":"42e12f3d286f1efef8f8e1702244fce4093fe8b7","sha256":"3637fc677339e15a430b39de544ffccc5c4d7f8071a1f9fcb6f3c388de6c5c3d","sha512":"9a8bc0e00ced612d6a146a8f67650bb7ed551baf7f146497c59c926c6a482a7c893a1b96c12b8e3b558f057f77d02babf07b89b4d8a6c8ec80d84b43bc94d462","ssdeep":"1536:cnq8FEKqOl6WrYdDjoXXm/MJQ++4mQNNeI55M1YeqxIhihO78EpgtQX7IDYlWAbN:cnq8FEKbfrYdD0XXm/MJQ++4mQNNeI5y","tlshash":"0283c565b56773a113032737616f19177a65a160f48bc2b0702fab9c3a3380dfaf5ba4","first_seen":"2024-08-20T06:43:40.599323Z","last_seen":"2024-08-20T06:43:40.599323Z","times_seen":1,"resource_available":true,"data":null}},"time_used":292,"timings":{"blocked":107,"dns":9,"connect":31,"send":0,"wait":74,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-03-29","alert":"Sinkholed","trigger":"gloaphoo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-122831834-3","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.y2meta.com/en163","date":"2024-03-29T00:42:28.939Z","timestamp":1711672948939,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 26 Feb 2024 08:03:40 GMT","end":"Mon, 20 May 2024 08:03:39 GMT"},"fingerprint":{"sha1":"DE:42:E4:CC:E5:66:70:09:F3:E6:6E:57:B7:5E:22:0A:A3:03:C2:7C","sha256":"E8:E6:F8:B4:EE:1D:B2:D3:E0:93:94:8E:F3:F1:15:12:50:C0:7C:57:E5:CF:63:7E:1D:85:A9:07:20:0D:AF:7F"}}},"request":{"raw":"GET /gtag/js?id=UA-122831834-3 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.y2meta.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 29 Mar 2024 00:42:29 GMT\r\nexpires: Fri, 29 Mar 2024 00:42:29 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 75517\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":208083,"size_decoded":208083,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4179)","md5":"74bc4770e5581ee6d8702b972d445d0c","sha1":"9c927330c7fec0f8aed18e263e8a0c1abf7b24ef","sha256":"77a197768bcf11115a50e8c82cd61753a9a8e42d82d2b6c12c8ec2ff2566a171","sha512":"f6c719f8e427d89409f3a3add24c79b10a802a5a5b6d922cbd19318ac1964abdee82fad3d7f825e3e7e7e489633403699d7371315b8884ae6db5c01f7e0c21b8","ssdeep":"3072:wgAF5QU3Zw2yAYyH8U/zPQYE68aZ6OEkXqDVhVTZ:HADw12PPavOEkXqphVF","tlshash":"2c14e6d8b3d6b06682a3b474513f010bb17b6d96b84cccd8e18ac5d42eb8699417bf7c","first_seen":"2024-08-20T06:43:40.61769Z","last_seen":"2024-08-20T06:43:40.61769Z","times_seen":1,"resource_available":true,"data":null}},"time_used":329,"timings":{"blocked":142,"dns":49,"connect":7,"send":0,"wait":25,"receive":17,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.y2meta.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"www.y2meta.com","domain":"y2meta.com","tld":"com"},"ip":{"addr":"104.21.234.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.y2meta.com/en163","date":"2024-03-29T00:42:28.845Z","timestamp":1711672948845,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y2meta.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Tue, 30 Jan 2024 21:34:35 GMT","end":"Mon, 29 Apr 2024 21:34:34 GMT"},"fingerprint":{"sha1":"ED:32:F0:51:94:E2:07:0B:8C:CE:71:56:95:80:5B:90:75:4D:FF:09","sha256":"E6:B0:B7:46:8D:64:24:0A:03:7C:EA:76:9F:3D:67:4D:D1:01:40:99:A5:7F:09:18:EA:94:3E:98:A3:D0:16:8E"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: www.y2meta.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.y2meta.com/en163\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 Mar 2024 00:42:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 22 Mar 2024 11:37:58 GMT\r\netag: W/\"65fd6d96-302c\"\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vilYb68xfbvitTgv6lWw2vXAsn8KvOWX9Ar6TkCceEbQXGN17OneTvIbXVydJ1l274KgyKoBqiAex7Vd%2BUW16WM9gWoZ3dzaqu0%2B%2FO4mwuGj9cKzGzVSzdhsA86l1ca0Zg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 86bbd1fa3ce471fa-LHR\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nexpires: Sun, 31 Mar 2024 00:42:28 GMT\r\ncache-control: max-age=172800, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12332,"size_decoded":12332,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-27T18:13:26.875281Z","times_seen":109898,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}