{"report_id":"9104b74d-34db-4e88-a5d0-d55b232598e3","version":6,"status":"done","tags":[],"date":"2026-03-28T20:12:54Z","url":{"schema":"http","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"title":"1080","dom":{"size":5515,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4416)","md5":"290c31ffce49f14a27c701e46e7f6554","sha1":"19ea9a2a7a16dd1d067d86074186b9f0aee65d73","sha256":"0aaa17f7a4f0d07a39ad6ad879fc53c3a487e841e90b829d3a628babf5b3a404","sha512":"038d2b991cbb313ed953d6f5a741af490200dde9165c4dd42ee2dab3cce8e61a15174ad23e5478cd4d6aab8031472ebfeefd6ef3b020670a1de4c4f2fc7719f6","ssdeep":"96:zkelRFm+bN3kXJo1gk8s6G84ISTP9J1e+GRJe:zkelbCo1FC679J8+wJe","tlshash":"f7b1ea6bf9d120400117819c66a7b7bdbfbe911187054d7a75ad37bcaf8edf308a1288","dom_hash":"domhash5128625ecf67ad91d375a42e49456f5b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-02T20:12:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":4}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-28T20:12:30Z","timestamp":1774728750,"ip_dst":{"addr":"162.159.207.0","port":3478,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":57648,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2026-03-28T20:12:30.785726+0000\",\"flow_id\":770492272147774,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":57648,\"dest_ip\":\"162.159.207.0\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2026-03-28T20:12:30.785726+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-28T20:12:30Z","timestamp":1774728750,"ip_dst":{"addr":"Client IP","port":57648,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"162.159.207.0","port":3478,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)","source":"{\"timestamp\":\"2026-03-28T20:12:30.786347+0000\",\"flow_id\":770492272147774,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"162.159.207.0\",\"src_port\":3478,\"dest_ip\":\"172.18.0.25\",\"dest_port\":57648,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016150,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":62,\"bytes_toclient\":74,\"start\":\"2026-03-28T20:12:30.785726+0000\"}}"}],"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"www.displayvertising.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"displayvertising.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"b7510.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"xk.grayedmellit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.tsyndicate.com","ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2017-03-08","domain_rank":40822,"first_seen":"2017-07-04T06:00:09Z","last_seen":"2026-03-27T14:25:00.958969Z","alert_count":0,"request_count":3,"received_data":119861,"sent_data":1265,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"imasdk.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3922,"first_seen":"2014-02-25T09:02:53Z","last_seen":"2026-03-25T23:36:33.475903Z","alert_count":0,"request_count":2,"received_data":1405028,"sent_data":977,"comment":"","tags":null,"fingerprints":null},{"fqdn":"displayvertising.com","ip":{"addr":"216.59.56.9","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2020-04-18","domain_rank":40391,"first_seen":"2020-04-29T21:21:45Z","last_seen":"2026-03-25T10:26:29.374162Z","alert_count":1,"request_count":1,"received_data":239,"sent_data":1700,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xk.grayedmellit.com","ip":{"addr":"188.42.138.213","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2026-03-15","domain_rank":0,"first_seen":"2026-03-17T15:57:56.227241Z","last_seen":"2026-03-25T10:26:28.537024Z","alert_count":1,"request_count":1,"received_data":1409,"sent_data":420,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ssl.p.jwpcdn.com","ip":{"addr":"151.101.2.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-08-07","domain_rank":16928,"first_seen":"2017-01-30T05:00:14Z","last_seen":"2026-03-26T22:37:33.925629Z","alert_count":0,"request_count":5,"received_data":1091696,"sent_data":2147,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"s9vfh962nhn5.l4.adsco.re","ip":{"addr":"185.200.118.62","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"domain_registered":"2017-02-14","domain_rank":0,"first_seen":"2026-03-28T20:12:58.954154Z","last_seen":"2026-03-28T20:12:58.954154Z","alert_count":0,"request_count":1,"received_data":166,"sent_data":410,"comment":"","tags":null,"fingerprints":null},{"fqdn":"renamereptiliantrance.com","ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-03-12","domain_rank":60260,"first_seen":"2025-04-21T07:59:25.487224Z","last_seen":"2026-03-25T10:26:28.31494Z","alert_count":0,"request_count":5,"received_data":82646,"sent_data":5451,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"adsco.re","ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":3069,"first_seen":"2017-04-03T03:11:30Z","last_seen":"2026-03-26T22:29:38.779467Z","alert_count":0,"request_count":2,"received_data":2478,"sent_data":909,"comment":"","tags":null,"fingerprints":null},{"fqdn":"s.uuidksinc.net","ip":{"addr":"31.220.27.155","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2015-05-05","domain_rank":47808,"first_seen":"2015-07-20T12:00:35Z","last_seen":"2026-03-28T03:34:01.689507Z","alert_count":0,"request_count":1,"received_data":564,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.23.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"s9vfh962nhn5.n4.adsco.re","ip":{"addr":"38.132.109.126","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":0,"first_seen":"2026-03-28T20:12:58.962232Z","last_seen":"2026-03-28T20:12:58.962232Z","alert_count":0,"request_count":1,"received_data":166,"sent_data":410,"comment":"","tags":null,"fingerprints":null},{"fqdn":"jnbhi.com","ip":{"addr":"139.45.197.235","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2022-08-31","domain_rank":0,"first_seen":"2025-11-13T12:34:48.915898Z","last_seen":"2026-03-24T04:07:17.138902Z","alert_count":0,"request_count":1,"received_data":103728,"sent_data":402,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-22T22:16:16.728956Z","alert_count":0,"request_count":3,"received_data":109333,"sent_data":1634,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fedoq.com","ip":{"addr":"139.45.197.116","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2022-07-06","domain_rank":0,"first_seen":"2025-10-14T06:17:47.619418Z","last_seen":"2026-03-25T21:25:54.38121Z","alert_count":0,"request_count":4,"received_data":7834,"sent_data":3818,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"tzegilo.com","ip":{"addr":"172.67.193.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-01-14","domain_rank":18163,"first_seen":"2022-01-14T15:27:15Z","last_seen":"2026-03-27T23:31:39.501526Z","alert_count":0,"request_count":1,"received_data":18654,"sent_data":404,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"entitlements.jwplayer.com","ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2007-09-17","domain_rank":18344,"first_seen":"2016-06-21T17:08:11Z","last_seen":"2026-03-27T12:10:55.003172Z","alert_count":0,"request_count":1,"received_data":508,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"4.adsco.re","ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":95532,"first_seen":"2021-01-04T16:47:52Z","last_seen":"2026-03-28T01:14:29.553123Z","alert_count":0,"request_count":2,"received_data":1424,"sent_data":837,"comment":"","tags":null,"fingerprints":null},{"fqdn":"m696yefd.s1q2105.com","ip":{"addr":"50.7.24.26","port":443,"asn":174,"as":"COGENT-174","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-01-13","domain_rank":0,"first_seen":"2026-02-01T20:26:29.438842Z","last_seen":"2026-03-25T10:26:29.564355Z","alert_count":0,"request_count":2,"received_data":389636,"sent_data":920,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"b7510.com","ip":{"addr":"139.45.197.115","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2021-03-21","domain_rank":0,"first_seen":"2025-06-19T09:08:24.947983Z","last_seen":"2026-03-27T13:01:34.822212Z","alert_count":1,"request_count":1,"received_data":824,"sent_data":602,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"oyo4d.com","ip":{"addr":"139.45.197.118","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2019-03-26","domain_rank":201644,"first_seen":"2025-06-02T17:08:26.404235Z","last_seen":"2026-03-28T09:01:27.394479Z","alert_count":0,"request_count":1,"received_data":824,"sent_data":602,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"9181rtfg1.s1q2105.com","ip":{"addr":"203.17.244.73","port":443,"asn":137409,"as":"GSL Networks Pty LTD","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-01-13","domain_rank":0,"first_seen":"2026-03-28T20:12:58.960634Z","last_seen":"2026-03-28T20:12:58.960634Z","alert_count":0,"request_count":3,"received_data":1576227,"sent_data":1699,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"c.adsco.re","ip":{"addr":"104.16.84.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":100769,"first_seen":"2017-11-29T18:42:15Z","last_seen":"2026-03-27T00:38:18.139807Z","alert_count":0,"request_count":2,"received_data":184995,"sent_data":802,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-22T22:20:05.651051Z","alert_count":0,"request_count":1,"received_data":27621,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"vidara.so","ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-04","domain_rank":0,"first_seen":"2026-02-06T12:29:16.405718Z","last_seen":"2026-03-28T17:38:32.360833Z","alert_count":0,"request_count":6,"received_data":185681,"sent_data":2844,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"crypto-js:4.2.0","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]},{"name":"JW Player","description":"JW Player is a online video player with video engagement analytics, custom video player skins, and live video streaming capability.","website":"https://www.jwplayer.com","common_platform_enumeration":"","icon":"JW Player.svg","categories":["Video players"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"TrafficStars","description":"TrafficStars is a self-served ad network and ad exchange that operates mainly in adult-related verticals.","website":"https://trafficstars.com","common_platform_enumeration":"","icon":"TrafficStars.png","categories":["Advertising"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"llvpn.com","ip":{"addr":"172.67.154.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-03-24","domain_rank":0,"first_seen":"2025-07-24T23:05:45.337747Z","last_seen":"2026-03-24T04:00:40.167202Z","alert_count":0,"request_count":1,"received_data":104062,"sent_data":402,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bobapsoabauns.com","ip":{"addr":"172.67.166.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-01-23","domain_rank":16239,"first_seen":"2025-03-26T18:52:40.148632Z","last_seen":"2026-03-28T03:22:57.984294Z","alert_count":0,"request_count":2,"received_data":134143,"sent_data":907,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"6.adsco.re","ip":{"addr":"104.16.84.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":91627,"first_seen":"2018-01-15T04:15:29Z","last_seen":"2026-03-28T08:59:36.615563Z","alert_count":0,"request_count":2,"received_data":1145,"sent_data":837,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"my.rtmark.net","ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-29","domain_rank":43911,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2026-03-25T16:51:12.192335Z","alert_count":0,"request_count":1,"received_data":832,"sent_data":425,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.displayvertising.com","ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2020-04-18","domain_rank":639069,"first_seen":"2020-04-29T17:59:02Z","last_seen":"2026-03-22T17:02:06.808117Z","alert_count":1,"request_count":1,"received_data":42944,"sent_data":444,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"s9vfh962nhn5.s4.adsco.re","ip":{"addr":"185.200.116.60","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"domain_registered":"2017-02-14","domain_rank":0,"first_seen":"2026-03-28T20:12:58.98623Z","last_seen":"2026-03-28T20:12:58.98623Z","alert_count":0,"request_count":1,"received_data":166,"sent_data":410,"comment":"","tags":null,"fingerprints":null},{"fqdn":"jcdn.tsyndicate.com","ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2017-03-08","domain_rank":65259,"first_seen":"2024-09-05T14:47:10Z","last_seen":"2026-03-28T10:31:45.848112Z","alert_count":0,"request_count":1,"received_data":389,"sent_data":437,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fleraprt.com","ip":{"addr":"139.45.195.252","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2022-01-14","domain_rank":17838,"first_seen":"2022-01-14T22:55:14Z","last_seen":"2026-03-27T23:31:39.484738Z","alert_count":0,"request_count":2,"received_data":896,"sent_data":1147,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-22T22:31:48.48691Z","alert_count":0,"request_count":3,"received_data":197646,"sent_data":1319,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"dd133.com","ip":{"addr":"172.67.170.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-06-30","domain_rank":0,"first_seen":"2025-09-25T23:17:10.545176Z","last_seen":"2026-03-24T09:51:09.353371Z","alert_count":0,"request_count":1,"received_data":172670,"sent_data":407,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"bf3cdfbdb08145365ecf6f468acc6a11","sha1":"1678608d03de0a1644e7a51454684d4ffd02368d","sha256":"50645c8fb524dc0f1cda2d94f209e3e406a5c77433550f5ead9f3a80af4e93d0","sha512":"71d758c4cdeb8cea6f0741aab83f590e5a1b633a84a22f69ec4f06e495436b789e242002f08ff722dafe137d9e5dda33ffe7f6bad46869762a4cc1a6cfd42668","ssdeep":"","tlshash":"8ea012fe3053604202102b02012f1301f07b04441a8c30a3b02040203814113d7950a4","size":84,"data":"","first_seen":"2026-03-06T13:22:23.885827Z","last_seen":"2026-04-01T18:43:21.98888Z","times_seen":878,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xk.grayedmellit.com/rw5Dx69wrk3/134585","fqdn":"xk.grayedmellit.com","domain":"grayedmellit.com","tld":"com"},"ip":{"addr":"188.42.138.213","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"848667c49f5d3aef59cd65ed276cd7ae","sha1":"bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763","sha256":"cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8","sha512":"4248ad0e684224ba8503b1e73517aae6ffe4431cd16b7633d2ccbf4b96f845e318dbee175d19cd4676ca37353f53add2231ed167ad6c4aa0d9fe185f7359238c","ssdeep":"","tlshash":"f23000000000000000cc00000000000000000000c000000000000000000000003c0000","size":5,"data":"","first_seen":"2025-04-24T10:17:49.831301Z","last_seen":"2026-04-05T12:07:16.230405Z","times_seen":14854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"7eed16bfbeeaca1b398682e4af799c76","sha1":"1ca48b5510c7e009b65cd7ee438afaa92c4e0fcf","sha256":"3b60fda551bafdbf7b58ef114eedabafa07b5f0bba5e062d994dc0bfd32fe12c","sha512":"9d692c94eec25762c18c2d399ad6757c01ba8aa9cfbf7dfcc91ed3b259ba290373c8ab30d1a9581644ebe77b79666b1093ad13e376de624d52d1a1ecc0b50479","ssdeep":"","tlshash":"4d5000000003333030000000030c00c0c0000000000cc00000000030000c3c00000030","size":10,"data":"","first_seen":"2026-02-28T10:26:40.617135Z","last_seen":"2026-04-05T11:28:19.246387Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"59aae9aeded53c3dfc36e099008845c4","sha1":"fa9fbb893a3a87a63215199bd43029f97bb3c394","sha256":"086712e2ec7496a2a360bb40991836324da71c4015a037965e4a5af9fcf8106f","sha512":"c43c6d2d8714cc2ab252a04981faadca827f611f6698cc8bf303d67a1ed6aa7fdf5d59889aa00f18206a264760c0a4d8d180a08b47dda479b10d66c3424dfe8e","ssdeep":"","tlshash":"e6a024df7051700cc3131017403d5514f07f0740150c1030c0004714300c410f35743c","size":78,"data":"","first_seen":"2026-03-06T13:22:23.880679Z","last_seen":"2026-04-01T18:43:21.986866Z","times_seen":880,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f6145eac891ce3c0331693a13d5ae7f0","sha1":"4cbc65e52a1334e82b8df31f7b6e891bd2d5a248","sha256":"909ff2b17c912a9b85fdaae1bc995c470f921969f35a57f5984fae7e63d25c93","sha512":"b0d232e3c4528dbe90e983308f527f94f1c441f980205cceb8341b9c1207be275d43554c8e6734296c0ef412debe2657c1483619111b36704d6c708d582a530d","ssdeep":"","tlshash":"f7a012f93283600205142b03112f1300f0790444158c3087702401283058153daa60a4","size":83,"data":"","first_seen":"2026-03-06T13:22:23.899141Z","last_seen":"2026-04-01T18:43:21.987877Z","times_seen":875,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"aa28ddfa143f8598c45aa25e2e9c2381","sha1":"e55f9f92eb81c846722f384ef4b36fa5534ff123","sha256":"fbd219de6e6c2e5c0097955704ba51d2345cb06629d636128a40249c7be3ecd1","sha512":"cbaf4045e05ff630a9c42c2b40a811ef7a2d75b6b39c7cad0e2205ae85c304ffdd312498c8d5981c0ba7e0f6662344503a47d5c6d04aaa60369b52a93c788b7a","ssdeep":"","tlshash":"51a024df3153730401013131007d4507f07f4550454c04c0f14141143004030c77743c","size":77,"data":"","first_seen":"2026-03-06T13:22:23.905648Z","last_seen":"2026-04-01T18:43:21.981047Z","times_seen":822,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"73497a37c3561adbd8ce84e4f017b368","sha1":"9193ae73cb3dd2833be8c942714d5544bfb628c9","sha256":"9312a1adbbf0a4c05fc296d158ec3bd39acfe50e9e98ff02688139aad6fc3351","sha512":"b265a65f30fa9ffac3fb7ffca07326823466dcd67a238a47091a497c7f2b2d13e09603cbb8e85dce136efeb8bbb9d246e4894d6f672dededc47c88a1a85d9a5b","ssdeep":"","tlshash":"c150000003000003030c0000c000000000000003000030c000c0000000000000000000","size":9,"data":"","first_seen":"2023-03-07T01:03:23Z","last_seen":"2026-04-05T11:28:19.239612Z","times_seen":5317,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.36.2/jwplayer.core.controls.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.2.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"96388c8374190b02b1c684940b0c267c","sha1":"c49462b6c0755a6be517da89213c6815a72658cb","sha256":"efd4bdf5c117754802f889555f4396867101f917ce259303d8171371e2903589","sha512":"6ab3adef3c69468d2645c352d6a902d9e6e409b1e88fa5c126b7928a546acd7f3f8ef29cf04ff017db5f1e24ad70a442484d7c5bfceb9b789a34bd0daae65c20","ssdeep":"3072:V+Y7nFuhslX/173uYqqIeGSJhoFjBkW64pOknUGp9W11Uy86C4YfrmYRJ:sYxAU/1732yGSJho9OaUG3xyl+frmYRJ","tlshash":"ee641932214252359aea82da66514604b3398085f516cfacff3ceddd4c6e9c731fabb4","size":329500,"data":"","first_seen":"2024-09-18T21:59:43Z","last_seen":"2026-04-05T11:28:19.146041Z","times_seen":594,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d8c81442e74e2aee0929479d20170ae0","sha1":"9de4f4b80c02779e4ae982e0638d2075b48db354","sha256":"a5a0d9be349f2f79e82bb0780285442f54e42939e5e4783db7843956e2ced445","sha512":"9b29a0f8504c6d1add7120c2278afbc4f13f7505f666a23669378c6834aaeeb07c9ec1012c247a8b694caebdffa0f0f5ff2d3f135434924682de4ea6eefda8e3","ssdeep":"","tlshash":"678000080ab880b830032a00ac00002222088f80a8a03ac0380e03bb0ca2c000802a2c","size":31,"data":"","first_seen":"2024-12-27T13:53:56.215783Z","last_seen":"2026-04-05T11:28:19.208893Z","times_seen":1094,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cd5fd831675a29d5656aac282be0195a","sha1":"a50ed3ac5daaa3009ba143df6eca985040b9874d","sha256":"db40b9318b31e20bd7e86321cf968e207aca05781563dd5563ce04a8afc3b58d","sha512":"50cd881ad7f421d5c87bf57b81454fb12e5ea0e22a0ad5c4c39042fe2ffdae8c17b3049e350afe8b26918383a0d3f6ef8d1eb49c805b7da76b8f13c0689c7610","ssdeep":"","tlshash":"f9a002ff71e3b0504a072525603f8789f5bd09a05a7d1451901879797458e24cbaa9fc","size":68,"data":"","first_seen":"2026-03-06T13:22:23.895345Z","last_seen":"2026-04-01T17:21:21.130038Z","times_seen":729,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2ed5949fd739bad4007228a9265ebc9f","sha1":"eb0e8d142f167bb7658c128d4a5f4365c4d6f8a5","sha256":"f5640fa9c530960168d78af67a6789e205bfba2324e09f067afca05216c8928b","sha512":"e44f14664aa967ca26ba2734b5fdf42fa4335809a44331b43eb4c68fb91fee52db07301064cd47a2d6804f6fd26b530c6225d5ac1b54b1bbd40c9b983c443fc6","ssdeep":"","tlshash":"f1a002ef75a2b08846573537503ada46f2bf4a80cb5e089190a1aa543558534c7ff87c","size":69,"data":"","first_seen":"2026-03-06T13:22:23.907967Z","last_seen":"2026-04-01T18:43:21.9748Z","times_seen":828,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"953549f4dff87a072b677b4a79dc06d0","sha1":"aeea4db8a8254e4243cdb007426f7e6a6ea9d029","sha256":"07c2dbcfd887309bc9fba82b7bc1f7edfe40fc5eef256aea59fb8d706a412c55","sha512":"bf602a714ea3244fe7952fbf7664f97ececfaa1ef8d90bca97d0af681b54d22d0e62a1214e96a3d378aaef126f539d9c7cebbf42ad4f63f070530e55e6a732a9","ssdeep":"","tlshash":"83a012da7052b000c221101640355918a07f0640051c2010800042043188410e35e478","size":80,"data":"","first_seen":"2026-03-06T13:22:23.914604Z","last_seen":"2026-04-01T18:43:21.970582Z","times_seen":880,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/puengine.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0439ff85060c466d4a8bddb14e25179a","sha1":"a069c9d7cc3b9c74f602c9a98e7f6db0418bfc69","sha256":"be3b75bde5d3da61537387482c899e9ac0855bff153b24adb7439a38c7dabb8d","sha512":"7d41caa0eaac5766f77707edfb243d4a94f1967cebe80a30e822e5d7373f3785c4e35b106e7a85a1b6309740a3b6967a6335cde2062d6c0e3010b26325fbe195","ssdeep":"1536:p39zsfUK2AHAuaEGDo7hLAknqLULh9/S1dHWyRj:l9zsfU5mGc5A2qLULh9/SHHWyl","tlshash":"7d93d65d7093604961d2f6fc007f368a686ac850f45e8caa6674d3c2ec7c4ad84e79fb","size":89589,"data":"","first_seen":"2025-12-16T18:52:32.108111Z","last_seen":"2026-04-05T11:36:00.688761Z","times_seen":326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/assets/js/new100.js?v=max","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d417c5dbae8a3d933a478e1a0d886a5","sha1":"e3fc7ca463c6e4a759866790911ee6aa23a4b842","sha256":"3718b865d7162567322249682a0c6113ad4ddc91bb48c33285cdc5d491dde1bc","sha512":"dbb728632688f60dbbcc3a8bf2e5ba00d53cc9b1ab3552d605ba500e19c1b944413e4dc0e44f3b9c651ffdb3d62f67a1470727127fb0666f5b0268569e0c85a6","ssdeep":"","tlshash":"b7115c767ce4763031ea094a3427a185f0f20b642d19e574519c0b6a38a8e4d9d37afd","size":928,"data":"","first_seen":"2025-04-02T00:26:38.94272Z","last_seen":"2026-04-05T11:28:19.143986Z","times_seen":529,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"88449f2df6709222d1ebe867f5a09583","sha1":"d7a90f325c2d0a097b91d166046d03e687542143","sha256":"eed65ecfaebb2cb74a8abc69ed5741dfbef7ecd8c31d89ef8f8ab811f94d81a3","sha512":"ed551b29daf944149ed876d79e0a09181d00ff0efe6a02fdc5d0246dd82d6b05a649c3706434e44bf4d890c500e1acd976f09ce915b3437331ef58a837cfcdc0","ssdeep":"384:WHjftPFvkZwzrzoyuyKhCIQ16lxyC7sIkDneieDRV7wBOX:WHjf554oKhCIw6qCwXeieDRVEBG","tlshash":"19420aab5b40203801be425934abd21c773d5c9b6982551ce15f2d8127eee7772e3fb8","size":12929,"data":"","first_seen":"2026-03-28T20:13:04.997073Z","last_seen":"2026-03-28T20:13:04.997073Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e27f31ff23f7a83e273aa1238b641c13","sha1":"20bbd48ca5f98473697717bbb286f96dfc1351d5","sha256":"0845a8d79944bfca0d8e7b31c97436ec9ee936a05476dfcadeb8809f6e0b1d99","sha512":"3c189058ee55d6ad6a921f1557f7f4c5214faeb9ba5030eb47355c866c615b8194f7fd11d3be97a330685a0fa47b6fc6201ad9d25bbb943026fdaf07d02494e4","ssdeep":"","tlshash":"1da022af3083b000320bfb28a23f0300f0be08c00e8c2000c00080003028033cbec0bc","size":71,"data":"","first_seen":"2026-03-06T13:22:23.902455Z","last_seen":"2026-04-01T18:43:21.98838Z","times_seen":877,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a722e51de1e95f3ef41b3ecb2b2e5c9b","sha1":"921a3f61a39b9726af51cdcb9814b28221cf13ac","sha256":"fc834b4ee3ded12f87fccac45c0504efc7adca76abfd5635b5897a16b8574a29","sha512":"4a1e93728b6d1c4669789e991b80153b05452b0d538b044c0b1bfff3fd6c836145ec37707e46b516622961681a021c75f6f5e5ef9cbc07ceb1daa79db233a866","ssdeep":"","tlshash":"50a011aa3a82a00002003a8a00ab0baab2ba08808b2c2800a0a0002038280a2c3e80a8","size":76,"data":"","first_seen":"2026-03-06T13:22:23.889745Z","last_seen":"2026-04-01T18:43:21.984932Z","times_seen":865,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"renamereptiliantrance.com/adx/get/?id=2098228\u0026pb=8ec8233c05e61161e2e0aa98e62f45d31774735950\u0026pbc=Jql7TPMxTd9OUshp\u0026pbi=E_qVqmdU0q9OUshp\u0026pbu=uvUUuDWSEPZOUshp\u0026psp=GOTYOetogoIsDetoA9yvhbM3vqb0dQge2OmIxhmiDDvfD48hebvpEE4D7Rm4G7uf2dpdX8456T4DRemBGzsnFUckXC3xeGbppFWPyLOfBkJLSkk83j-HiXOUPkKSGw0O5wM9CKW4ofhyuWpqR0D2cPwM0Q1B4TT05gY1t0J6q56siaBVEb3GJwoY5Y7nC5YH47qLvi1P79Ufj4V7SIvNERv_PQfER-qy_dHU9jCQytqK8f8pvjDJmoO_ujpYk20a1FTHvi9Hb9e1DEyzjbKaBLYbN8QIXpGmVfO63xu-YUawUx2fj0lMUI9nIdPU84RiG0VbVAlAKFxCk3OyxYo8RSXtc95bVf2GM--xS2mzRvelTEmHssK67S9FupNrhAqQoxIl3qIiBgWAFc8wptBuR-4q343QkRi15Ex5V2znhRW5vbjYO-dPGg42CMgVyLQ3UbLugLw2oLrfdSfXNRJwKQ803WV_O6IaR8reCRQkEr9IlSiQHrWX1bdjKKjPXU1fwhC1Jv_bBK86l0AwlxQQYx8AoCH2fyrA3CxbFNPeGJ1Qvvv2jHRPD_Y5gbUQD_7yugYbVnBrmG_q_F4tx10NO8HBc3c6OOdxiQxiuHvVbHpjDN7GgT5mcQee6z_-2OAimv40FmD3HOPJ51LDKeLjeiVmxEesD0v5bSzcqhxN7Y9OwmVgvu--N0KlAnY_lfrzXlG8IWo2AUyqOUlhJJLnEqKioIlZXAg5qY9J1Kdqkc2G_BbZoYet4ATbEZOQahQVFVGBJPGMw0hdQtlNLHnKRVWwP3nEf9Mif_CowyjTwbTXRAm91W1TLIokVfK8m1DQl_Uo1ZOo67UQ5HGwmJSoY08YBg2-ZCbjVXR5h2BP_YuESB_RqpR1dPgNw3yFej1kSEs6lHJJwmXmwS54zxQUSlwWv7cooi2e9v6oYDCADmbO_yURVGw727g49LVN5FWrbOn9Fa-3rms2qlccb_P3inRwfW65CKdP7SnxEfld8jE19ymcpWIWJKeOoEXbhlmQwSKzn5rI-7g8TAb-5xnoC3xBhNq3lAW29YUbjpHhIRfhsOkDg_Wm0GJgKCg_S99vI8liuQc=\u0026jp=_clwapshhminxdtboqsbjpn\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.32-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=2\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=5UlWrtBaHR0cHM6Ly92aWRhcmEuc28vZS9OMlQ2UnN0RUxhTHA\u0026afid=7434658017858560\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tp=0\u0026vp=8\u0026pkw=0\u0026pload=2092\u0026rlp=%5B0%2C43%2C449%2C322%2C13140%2C4802%2C1045%2C4492%2C1%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5","fqdn":"renamereptiliantrance.com","domain":"renamereptiliantrance.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fd2997eefc2cd9d7e3c9487fa04abee","sha1":"88ba7f3f42ce49a0f4d1c611e3d6cfdc3e032093","sha256":"db1efcedbc6356bcaddcb0921804c6cd5d775f9ac023b9831cfa8b7c6d932eea","sha512":"d7cd7eee7df1f1db7df3a8e72beb812f7fbee36dcc736d1027bc1aa382ade5d28152eb7f1cfff9bc2e8c0290d7811bfe589b2ccf1dc6da8c37d010d694fe0856","ssdeep":"","tlshash":"28e07d0be54f1363d5497b2300c0f8de449a9d7e52ce48785d958a06da15f015dd2458","size":298,"data":"","first_seen":"2026-03-28T20:13:04.987944Z","last_seen":"2026-03-28T20:13:04.987944Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9c70f1ff07f62d0387c94bb6d72c96c4","sha1":"3426fb173f775440b91eb8307f0c337a978951fc","sha256":"a515b5056947bdf748452e6414fb2277f347ee75cc72123196ee5372c21250ea","sha512":"792165bc7fbeb3fdca3d167eec9cce82f0d0ce05e96c6d0e4f1c3a1e7ba86e4d7e04d8b866263273c3a0bca1f31597b623ddc564f77f1fd7e5fa5369ad50b706","ssdeep":"","tlshash":"3aa022ae30c2b00002003200003f0300f2be08808a8c2000e0000a2038a8023c3ec0b8","size":64,"data":"","first_seen":"2026-03-06T13:22:23.911033Z","last_seen":"2026-04-01T18:43:21.984445Z","times_seen":880,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"llvpn.com/tag.min.js","fqdn":"llvpn.com","domain":"llvpn.com","tld":"com"},"ip":{"addr":"172.67.154.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"54eae8d2ca2bbe2c5b3f7bbaf553a526","sha1":"dd3004bc6ee39980b25f5fc39e092e5654008c65","sha256":"1ec5adbfd36aec7f06fcc300002f385fa1d2ce8a9cce7e4933a7ecd5bb08479d","sha512":"1453b747d9cb2de06ea16d610852e04d426b8ae1cc69b2e0d0fcf39612f198381b11f1441a700a458185c39d4bf7a65402af8bc9dd4f00adb0a0fd1fc82efcdb","ssdeep":"3072:k7tzzM3tU9+mI/SnWeFQ6uriu19pAvqdNoWdabBcjCcbXl:279+1/7eFInjCcbl","tlshash":"f0a32ada37a1746a42de0270815b5c1fa6da8c90584ec978e0327db53938a54d3fbfdc","size":102838,"data":"","first_seen":"2026-03-27T13:01:41.137563Z","last_seen":"2026-03-30T07:53:02.289849Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"displayvertising.com/bpwkenkzgvesq?pcIevjLd=BQNiAAAAAAAACZUAArP29F5zNb93Gw6hoYXWBIBI0bimxU1hISwxFrGmk5vkoBKub13KZca3-I3X8QWYru40afxQpFdy9OphoyMRgZ0SA44LZkN-_RPrMPGNFnaSIPL3pDJaIi25sLd9pyvXSo6bVXNDzK41FOHdw9ZxWyGkQmU3w74rKfHCAvzMZ9voYPEYYpZvk6MxmR6mOyEO61gFq5JEtWSJo3cajoOzIGuBg6FEXOwv9433Ht3mAaHkwUmU-VQKFqUCa0Jp5wWyGiQ2CighgMXcjSXu9J4Wf3jHe2LdyLKoo-m7Vj39D8kfd-cP-8hFSp2abDLvxzUmyH2UWlC9YDk-ZB0wujewmY87U6nuipSP3lKxbBSTvJ9WUIgP1QzMcVHjy9p01_Q2TBNZSbz2YI6KTSG0saehKC10N0Nq9IuD1YuojvfrrCdHQ3-yJ6CXUq4mixKdM_4yuJCttN-MSkOBYJduxoVZjYvvkjynCAqofT5V1ltkbxoK9iCQcarKQA0Dn9fEkGo1vN1Lw3SCJqEgAEleA7_NtLRKkXO81NNwLvv_ZCtxTRbBgmy-1SpF7aUXLRY8O6kFUAhoSZxUOHRDirybyiVaiuMM5X1yS2JpHpyJsCZdR0fiYp2DfJHgZlmFj9b9NijFDP3eEu-UifgPW3zfu8IgTtVdpGGfcmWU37eWX0195schy0YTEnJF1-Zw47FGueKyAdWOQJ31C3nm3jc_3BNMjyzl-mH6po9Hovi_liUSCau_mQB2sGoeIOx9VJ0KloMo319p_IKmPOem6IM8w4uUBNRCCpYnKr4gsWkVbL3is9yzW2qyAyAqa2QHTD_RxOz2mJ23KJa_hX9mEqdzbfajRpltPkblOnMfVXgEdJz0I1PA-Z9xjKl8MQfNC6klm3mkcRj60zoMx7hD8gL_cXrzdqsRURaMUzfLSysOn-cUFj85yKAat-mUBKBZEpMQsqq2O5xR7_DTJU58Pi6AWo20sUOHmhL0z6a9dIRpHbghOwF25QaSzvSkUBqZ_FKn-GLWq5z4uSQjF7SPrx3JeU8BtREL6gknN3Y6nTJyH1v-f2vs4T01lGOgpBt2lbOQ6D5yvAk09UEjrqS0nqnBbbzx5yDUB5nspobdzMBWuyAQ0GcOCQa2AilXuqIFhAOHO8XLgQ\u0026mEYMyTFx=4\u0026dJYPQaKr=5270867\u0026mjRGNSha=\u0026vsYTeKgI=0,0\u0026xFJEznRs=\u0026OXRLwosz=\u0026tCDHZLYT=1280,1024,1,1280,1024,0","fqdn":"displayvertising.com","domain":"displayvertising.com","tld":"com"},"ip":{"addr":"216.59.56.9","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5f0a25e4d3522d56d48ce7bc3e518fb","sha1":"86794caff58f7fee6e684c2ba7195f970a8d6f4c","sha256":"9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5","sha512":"a3a81801f516a4eb11f00d6f56dab0ed4b8a79219e6b4f5436993479f09dae08f14cffbab3327ff66fb39201d8eba1153ae7114f7705a01cc6f0edf840ef1616","ssdeep":"","tlshash":"789002801814116115d1500b8d5159d01259b1a4540801324446ca502dc7883a415774","size":44,"data":"","first_seen":"2023-03-07T01:17:45Z","last_seen":"2026-04-05T11:28:19.182793Z","times_seen":22838,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jnbhi.com/tag.min.js","fqdn":"jnbhi.com","domain":"jnbhi.com","tld":"com"},"ip":{"addr":"139.45.197.235","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"d39d79eb25787f110d772e62b3d5529b","sha1":"180ee3f77596df959f43342b52a1a1128cbdd29a","sha256":"eb7ae6493245059210f6eea7ed19ba655208c7bf7d500908f2c1ea3b96c75ee7","sha512":"aadc7f7d71d39b4bbba1909604c2fd67fef4f754613f70e0827d26a887b7f5c40b3e7c0569d9383556da92a1638e2f0b6308317b158553aee417a9d6a6289ccd","ssdeep":"3072:k7tzzM3tU9+mIKSnWeFQ6uriu19pAvqdNoWdabBcjCcbXl:279+1K7eFInjCcbl","tlshash":"5ea32ada37a2746a42de0270815b5c1fa6da8c90584ec978e0327db53938a54d3fbfdc","size":102835,"data":"","first_seen":"2026-03-27T15:52:26.478815Z","last_seen":"2026-03-30T05:59:42.016161Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3ad5ea750f793ed44bdc73e7d5ff91fc","sha1":"949fbd0af1016c02a313199351bd51b143fcc369","sha256":"a4e4438627b319780bb3fe86652fa44605cbcdc73bade1e7b7c97522b7e68cc2","sha512":"2f93daf28da7fb3af50c05f43572a279ca0bc27dbbfcc28b1165734decb1c82a8dc20f78e638da47f752a64099c08556f7b007767fc923d10fed98fd7e18066e","ssdeep":"768:Ns28jHwqspfgS9J7yr5PbfmDJEX6shV4o:K2lgcGrlbfmSXDhKo","tlshash":"04c207ab326e79494329953110ff2d91b2dd49d0318f5678ea14f12639e393182fbef8","size":27845,"data":"","first_seen":"2026-02-28T10:26:40.615994Z","last_seen":"2026-04-05T03:34:29.721314Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.36.2/jwplayer.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.2.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5454f51ab2c9ba10955938c3458ef45d","sha1":"207795d527b8205d07fecb668a2d3a150db56f9f","sha256":"ee28fb495ac5b28ae38033e36a640d41dfeb2528c5124ff0203b09b06c05a36d","sha512":"4b4e4358522d6cec1e32343e5c219658535fdf01ab5805d6d9f7a0d98e94eaba4a69c0c5862ca7bf0985367b48287e071617b81f62c43c35b97f4a3ee1cb4124","ssdeep":"1536:VCLyl/ByE1iqx9JaGB2lAqU6ePRtwoIWz0Bk+5VH3wen+LhUi3LhflsqKkcRPUeV:VVbpk+Ui3LhddhHwSy","tlshash":"a3e33aa631c2f4a617e264c7e47a4101f1790988744de864faacecda3916947b1b3ffc","size":148627,"data":"","first_seen":"2024-09-28T01:51:51Z","last_seen":"2026-04-05T11:28:19.187067Z","times_seen":556,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d2d2df549786ddf836ab06d3fbd5195b","sha1":"ef565f37f1e5317a9a93549d30a698b80b02b437","sha256":"3349e4173367aa79e96d2216bed36d9bbbdfad0707a093272ae648363d903995","sha512":"631478276ebd5edaa246eac6cc15e155f2d88c381a1e0a472418e3cff14d815f6475b57b957cdbc30db0a8f5ca8383d6e6b8216299789178883ecfaf4f8d2f7b","ssdeep":"","tlshash":"e650000c00303c0303030300300003300c003000c3000000f3c0000003300000000003","size":11,"data":"","first_seen":"2026-02-28T10:26:40.609005Z","last_seen":"2026-04-05T11:28:19.24033Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"dc42e33565b66b769ddce1483c6f53c5","sha1":"7e055cd8fe38e7bd5424bef854ecf7aa3fb77af5","sha256":"f4c1a7e13b7a7be2069759c6b58f7c84ca2323dc7bb6d84aec4ed0c6e250104b","sha512":"4864e64434b651591c8c17cbafad9a8a5361748fbf9c4f12bd036e8ae2bc8145bd7ba153fae9ae35b4f289ac0a12e4cc9a7a8c94bf5f728c799bf06d4a3532f7","ssdeep":"","tlshash":"1ca011be32a2b00002202022002a8202a0ba8a808aac08e0a0208200328802083aa828","size":72,"data":"","first_seen":"2026-03-06T13:22:23.896284Z","last_seen":"2026-04-01T18:43:21.9716Z","times_seen":884,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7defc234323f8d5cc5a2c72f53d23162","sha1":"325ba1555e29c5285668b6371531adbc3c7bdbcc","sha256":"ac17f8c4ab1ceeee0f215ab06f226ccf7299172c30f655ac48b6600700117d59","sha512":"c6c6bbeebd885643edae1b989f9dc19a70553b09d7655358744cf6ca2fb40bd5ff083e015de1277a06d06a7379c78bdb9f528d8021f115975df209caea45e98a","ssdeep":"","tlshash":"e5c0c0b460e8d130005900c8707bc37c7c3030547692b080c49e784cee34fc30462cb0","size":188,"data":"","first_seen":"2026-02-27T09:02:15.845915Z","last_seen":"2026-04-05T03:34:29.722773Z","times_seen":104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f22c2a64fe45f72808713deb56617348","sha1":"b14b4fe58e37dac48335d4752d16b3e97be419ab","sha256":"eab910c420c5d27b870bc73f85f88dba105e504a7803273cacb50411a3d48a16","sha512":"25c71ca68bc8eeebb9328a56cc0b82a478ff30d3a290506de5c99c5998ffd57358c90ebe02c1bf2e48c83b011d59d70b146daf24f1f23f59f7910355f6554b21","ssdeep":"","tlshash":"bca022ef30f2b00002222033003a8202f0bf0a820a8c20808022ca20320c020e3ab8b8","size":74,"data":"","first_seen":"2026-03-06T13:22:23.891602Z","last_seen":"2026-04-01T18:43:21.991201Z","times_seen":880,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.36.2/provider.hlsjs.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.2.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"283d59c375ad57728e89bd2fd1b6af1d","sha1":"1ae8e4b8bf7141cecc15442f9d83dc10a066fcdb","sha256":"423fb0c266f4a755fb3e2d9093f92b92a7e9bfe4c0c4a900b4342c5b9f6ea0cb","sha512":"fe8272ea849648c625e7810dd76a9ffec8d9877cf63f0c9a2bb18ba7feec6c97f559bbbfe51324a68039ca3b1bd06802124af02e833ced161128555d17434486","ssdeep":"6144:h49gZtOST1zXBUkGHZu08Q9Eu969j3/nqJxgEMmew9rrqIZk6:Gy1VGHZu0pU9TqJxgEXZF","tlshash":"2ea43bdd77a5a02642c2a1a5903f4607633b7d0a740dc1acfa2be9d75db8849b03bf74","size":461432,"data":"","first_seen":"2024-09-18T21:59:43Z","last_seen":"2026-04-05T11:28:19.140867Z","times_seen":592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/core/bridge3.753.1_en.html?gdpr=1#deid=%22%22\u0026eventfe_experiment_ids=%5B%5D\u0026fid=%22goog_2080251504%22\u0026genotype_experiment_data=%7B%22experimentStateProto%22%3A%22%5B%5B%5B45713128%2Cnull%2Cnull%2C%5B%5D%5D%2C%5Bnull%2C745150931%2Cnull%2C%5Bnull%2C1%5D%5D%2C%5Bnull%2C749060184%2Cnull%2C%5Bnull%2C128%5D%5D%2C%5B841585769%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45761044%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45722344%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45706017%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45668885%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45685340%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45765927%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45734716%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45735891%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45663239%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45715032%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45661356%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B839547366%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45676441%2Cnull%2Cnull%2C%5B%5D%5D%2C%5Bnull%2C45645574%2Cnull%2C%5B%5D%5D%2C%5B45688859%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45656766%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45710689%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45710688%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45685601%2Cnull%2Cnull%2C%5B%5D%5D%2C%5Bnull%2C45685602%2Cnull%2C%5Bnull%2C500%5D%5D%2C%5Bnull%2C45767902%2Cnull%2C%5Bnull%2C500%5D%5D%2C%5B45756824%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45747172%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B775241416%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B781107959%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B781107958%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B792614055%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B781107957%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45729602%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45753603%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45753604%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45658982%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45725657%2Cnull%2Cnull%2C%5B%5D%5D%5D%2C%5B%5B16%2C%5B%5B1%2C%5B%5B31089630%5D%2C%5B31089631%2C%5B%5B45668885%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B1000%2C%5B%5B95332046%5D%5D%5D%2C%5Bnull%2C%5B%5B95332047%5D%5D%5D%2C%5B10%2C%5B%5B95338769%2C%5B%5Bnull%2C45645574%2Cnull%2C%5Bnull%2C1%5D%5D%5D%5D%2C%5B95338770%2C%5B%5Bnull%2C45645574%2Cnull%2C%5Bnull%2C2%5D%5D%5D%5D%5D%5D%2C%5B50%2C%5B%5B95345206%5D%2C%5B95345207%2C%5B%5B45661356%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B1%2C%5B%5B95351425%5D%2C%5B95351426%2C%5B%5B45676441%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B20%2C%5B%5B95356068%5D%2C%5B95356069%2C%5B%5B45685601%2Cnull%2Cnull%2C%5B%5D%5D%2C%5Bnull%2C45685602%2Cnull%2C%5B%5D%5D%5D%5D%2C%5B95356070%2C%5B%5B45685601%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5Bnull%2C45685602%2Cnull%2C%5B%5D%5D%5D%5D%2C%5B95356071%2C%5B%5B45685601%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5Bnull%2C45685602%2Cnull%2C%5Bnull%2C100%5D%5D%5D%5D%5D%5D%2C%5B1%2C%5B%5B95373378%2C%5B%5B792614055%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%2C%5B95373379%2C%5B%5B45747172%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B781107959%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B792614055%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B781107957%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B10%2C%5B%5B95378629%5D%2C%5B95378630%2C%5B%5B45729602%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%2C%5B95381582%2C%5B%5B45729602%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45753603%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%2C%5B95381583%2C%5B%5B45729602%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45753604%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B10%2C%5B%5B95382403%5D%2C%5B95386528%2C%5B%5Bnull%2C45767902%2Cnull%2C%5B%5D%5D%2C%5B45756824%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%2C%5B95386532%2C%5B%5Bnull%2C45767902%2Cnull%2C%5Bnull%2C100%5D%5D%2C%5B45756824%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%2C%5B95386533%2C%5B%5Bnull%2C45767902%2Cnull%2C%5Bnull%2C300%5D%5D%2C%5B45756824%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%2C%5B95386534%2C%5B%5Bnull%2C45767902%2Cnull%2C%5Bnull%2C500%5D%5D%2C%5B45756824%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5Bnull%2C%5B%5B95384561%5D%2C%5B95384562%2C%5B%5B846355750%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B10%2C%5B%5B95385117%5D%2C%5B95385118%2C%5B%5B45761044%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5Bnull%2C%5B%5B95385193%5D%2C%5B95385194%2C%5B%5B45765927%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%5D%5D%5D%2Cnull%2Cnull%2C%5Bnull%2C1000%2C1%2C1000%5D%5D%22%7D\u0026imalib_experiments=%5B95322027%2C95331589%2C95332046%2C95345207%2C95386528%5D\u0026is_eap_loader=false\u0026managed_js_experiment_id=0\u0026page_correlator=1950850960351001\u0026pvsid=8384074893717828\u0026top_accessible_page_url=%22https%3A%2F%2Fvidara.so%2Fe%2FN2T6RstELaLp%22","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9a77f179f6d96a11e7814e9376013bf0","sha1":"5212d0d9c40f6c311650771458c5fa653a32240d","sha256":"05dd7825e84d1965bd5d1249dd025bf45d6096a075738884a9f0f161d5396f5d","sha512":"9ffc89004f1b6177128031157c40694008e302b33105ffb8985ac0b3b4a260ffeeafdf275ca8c30f741144a176124ced411b78562033bfa149db398faef1d9c5","ssdeep":"6144:5F7pBOsMMNqMW3pGblU/chO3PB579khx7MXxDWjIZmj1AN6TNyAty777XsEBO6tz:5ZNW7cUB579khx7MhwpFreL9NP","tlshash":"91152bdcb76274168263f4f5503f014b723ba86ae40889bcf689d9d17e7884a4277f78","size":884081,"data":"","first_seen":"2026-03-25T20:26:13.763734Z","last_seen":"2026-03-30T13:11:03.54915Z","times_seen":289,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-05T11:53:39.102463Z","times_seen":118363,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.adsco.re/","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.84.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6c606469d9cd6be605c4d11bee14fc7","sha1":"8c8005141dc89dc54628c0cbb1ce31b1e17239e4","sha256":"e24a58ef8dd88e84e42f5ea4b85bdb6a9e1224d2a6e012f513c83f7030ca979c","sha512":"84f60b461d989b8e235e2fea9afd1011e87fc436f964d44aa2df15767a83e9b2ae87447e62a5b932ae9937deceb933a9b5d486b3177fffa1f3c32251ab53a0c8","ssdeep":"1536:+/DxMw9nXW3pnrMu5pX94hK2ATKEenhw8voUHmsPTOa39Ch:+/KwnG3Fnpt4hK2ATnenhw8vGO9u","tlshash":"2e936cb57271b03d01b220f9517f220ab1b94f611c8584929676e9e43cb2edbc37bf99","size":91496,"data":"","first_seen":"2026-03-21T16:35:02.351496Z","last_seen":"2026-03-30T19:07:46.982892Z","times_seen":348,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"06ecf446dd61d6c9bab244eee545fd42","sha1":"f57cc579b3546e73783bdf856ddef779c7bb82d5","sha256":"6a38f6de97648e618fc380c3014e5669d5326b01d19868b02bfebe25401cfe04","sha512":"b593350ca2d089ec5456e3aa4c5b8355e639371b939a5b310f1336e5a01515009a7de2df22d7090a32b14b9d3f0bf7d0a5a11c1ed7148b9a2eec502c0934f210","ssdeep":"","tlshash":"6ea002af72b2b0044e553536913bc647f1be4aa08a5d0490a2929654349c534cbae878","size":67,"data":"","first_seen":"2026-03-06T13:22:23.883304Z","last_seen":"2026-04-01T18:43:21.974225Z","times_seen":841,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dd133.com/vignette.min.js","fqdn":"dd133.com","domain":"dd133.com","tld":"com"},"ip":{"addr":"172.67.170.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2033935f2db4663aebf65bb34aaf1c4e","sha1":"6931c61e546d60ef03537181b32b03686728fdab","sha256":"b1878fb7c6963edd9951b6ff2798ba93c2d86a3befc33f3cdc179adfc684a93c","sha512":"12c49debb8311ee1be4030ddedc19ff264cf740cad9bcef4e155b131767d9d86046315657b1e81570481f335c75fe08d3e095e72de6aa19202163f0a6dfc3c97","ssdeep":"3072:ZhAFvOAWOmoNpPCCcVTcuTiGjK3jss6wnO90iQy2NfKBbRDoKzB+gSaPRgn97zdu:/AmoNpPCCcVTcuTiGjK3jssJnO90iQyX","tlshash":"52f3d984b1d2b1a02d725134352fd64ea5ab7a70685ec980c1dae1f27f3706ac3b7dd8","size":171792,"data":"","first_seen":"2026-03-26T12:04:02.1334Z","last_seen":"2026-03-30T07:53:02.281029Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8279bd102cdf4bc1403722db32798ed7","sha1":"253bc05cdf60261014a923b92f991c4d97f033a9","sha256":"a02800c355cfa2671fa8e7214c058b18cf5035fd1f2d63fd768eae85832b2959","sha512":"c551213b07904ebee80b7347c13c78762e035bb79386566d0ceda66641dd6f0e56e59ffbd2a22bcced665aa7adafc6e583cc3dfa9162ddf06fbc5d04400c15ea","ssdeep":"","tlshash":"6da022ae3082b00002003a00003f0308f8bf0a800b8c0080a000000830e8023c3ec8b8","size":64,"data":"","first_seen":"2026-03-06T13:22:23.931917Z","last_seen":"2026-04-01T18:43:21.98935Z","times_seen":878,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"005b9bde4054e5a15048ee4d2652ebeb","sha1":"d35d299ef026cab6fd1fcca1586c5a57ad29d436","sha256":"ef8a0c7d4994e7222dc64e0821fcf479ad22111250197caf202aa260f5ab0dcb","sha512":"67bcf3d0083cdd045cdeefc2fc7981b304893a25fa290cd3b4b794d8630c30d08073c8890d08ab24d89a54e2b3f91430cb6799c2fa96c7e07f616b494c238766","ssdeep":"","tlshash":"7aa022ff30a2b0000222282b003e8208f0bf0a800e8c2800a020ea00300c020e3eb83c","size":71,"data":"","first_seen":"2026-03-06T13:22:23.91547Z","last_seen":"2026-04-01T18:43:21.973718Z","times_seen":874,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"83a9eccb21883fd2581f48991a991e30","sha1":"ce4673f4ecdc71d4bb63a920eb16ec77d5aa865a","sha256":"d23d7368f4bdeddb0c46f7d5e052aa260337fa78c44972ecdb655e60d16dd687","sha512":"066f7a21e5d293760d3294c30ff539231893880d87eb14576b8175ed8b6bbc5d59468e1b6016954054d740947b53426b55039acef3737cdd45aa900436be69fe","ssdeep":"","tlshash":"67c022a4e06185340025009a307bc3987a31610569d26080848e740d8820fc31523cb5","size":193,"data":"","first_seen":"2026-02-06T12:29:22.624808Z","last_seen":"2026-04-05T03:34:29.727472Z","times_seen":160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jcdn.tsyndicate.com/21654f8fe4ac4ddf985fadb9bb990bcd.js","fqdn":"jcdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-05T11:47:22.494618Z","times_seen":555946,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"64e28cfae2dc21213adb8084a9688488","sha1":"7fb50b89b006147744714955fec0814e3011616f","sha256":"b9e5e563222aa54ac54a92b3c704d3ca63b57623ea890740906ad2e79337897c","sha512":"762b5617c21e38e710cdc463636507d41ac3f25e218b6678b6649b25ab7f2d62c554384632724edb47fe37460bd9ceba8aa874029f0c6a590eb7c8f03faf7210","ssdeep":"","tlshash":"f8a011aa3883b0000a022b0282aa0200b0be0a800aac2080a020882830a882ae2a80a8","size":75,"data":"","first_seen":"2026-03-06T13:22:23.892642Z","last_seen":"2026-04-01T18:43:21.96687Z","times_seen":877,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0e3e20d09d2161b305ff5410b7645064","sha1":"172a248011597b84c4517da9226c6dc72efb384a","sha256":"3a3d966fa3321464bfb7320b5428a092d444dda7764ef463960354039c72a521","sha512":"1e030cca4d46a493ef32e1d4bd5f1b6fc82ca69e9a008a7b59e0246ffb1c841c3a8e1afe876fd78fe660e5b759c5e006f55e135716cf8e405f0ffb8330393718","ssdeep":"","tlshash":"8ba022bf30e3b0200f8a2002203e8380f8bc0c802a0c0022800c02883008c30c3ec838","size":70,"data":"","first_seen":"2026-03-06T13:22:23.886646Z","last_seen":"2026-04-01T18:43:21.975816Z","times_seen":871,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"784391bdf30e10c8745c020c94da9fd7","sha1":"4c31cfe298c84a0ffd8b6cf8c6b258630759c867","sha256":"7cd9c7e1e865ee939bb32f9f54fc0c886bdd37619cfd2982c3c49419d48c277a","sha512":"ec8465d03924f7538a28c94535965dc4c5b28ef3f2590cfdab342269486954b3e8953ee128cac72a0d6f7e65bc5b9e0be54f4a9f160b61519d379f8e898611f5","ssdeep":"","tlshash":"e1a002bf71b2b0484e553927853bc646f1fe4a958a5d4490929296543458438cfee878","size":70,"data":"","first_seen":"2026-03-06T13:22:23.900045Z","last_seen":"2026-04-01T18:43:21.968487Z","times_seen":842,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8bf7b38523024c85ba7d58adce06782d","sha1":"e59fece7ba043dc5e369cd5e109eb848c43b7bc6","sha256":"ead6750342664e83f06fb64f826a27a5a7e896aceda7c7f419e170222d837508","sha512":"15d97206fca24c9c6d29519d389f1b5457b337688c8c5f26096e964d352357d92b1ab34c9a9ecc1f1d486f5f3324ff965609fab204be4b54271b2e53b024c8c1","ssdeep":"","tlshash":"368004041cd4dd7430054c41341070d311134f11c0007400f54c471704c054d5c1075c","size":38,"data":"","first_seen":"2024-12-27T13:53:56.12858Z","last_seen":"2026-04-05T11:28:19.221042Z","times_seen":1103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"203bab03997cbc0e5bbd2eca1d7fe6bd","sha1":"533a208a5e1d3b9d3eb8cefd7376270698f3b14c","sha256":"6c450c8776039dda11c8ef700be7b447de22203c4bda7d133c179de26c40d1cf","sha512":"c8feac557d08e031d98407786cddd1d51c832bcfc83ba4d4df75e0788bc7680e920dc0a439128f8ba365f50c0990acb3d8a51d040615d3726986cdaa0b3fd407","ssdeep":"","tlshash":"ea018a2c1a05d52731d12679413bf81ab45513fc4b84f6d5e8ef9ca02731cc72d5769d","size":847,"data":"","first_seen":"2026-03-05T06:22:55.108611Z","last_seen":"2026-04-05T03:34:29.7353Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"renamereptiliantrance.com/on.js","fqdn":"renamereptiliantrance.com","domain":"renamereptiliantrance.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c015941ec2f63c8ce7b415ee56fc14f7","sha1":"d3b69488e885528fd5f4d8d7a10f3488621fc52a","sha256":"9a8ec97ac03d048cac7c63941a8cb56cc28c9d8cc3a63f2579d47322ff47b991","sha512":"3fca5be139654e98a97b4cefb685c75f353e12ad82e1e75a1cddc60e50e5fa2a49099414ed39c87d377eb7ecdec6f47e184a8a36212ae1e02656c624ce5c76bb","ssdeep":"1536:dQG9Sfayap1r5EU9QONNwC9Zrm136jvHoW:bF+sN7iQjPJ","tlshash":"6c63a699f695b851035390f852bf001da33a7d6ce4fc5128b182e8d92cbcd8d9623f7a","size":72199,"data":"","first_seen":"2026-03-24T10:48:37.564276Z","last_seen":"2026-04-05T11:28:19.143363Z","times_seen":196,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/core/bridge3.753.1_en.html?gdpr=1#deid=%22%22\u0026eventfe_experiment_ids=%5B%5D\u0026fid=%22goog_2080251504%22\u0026genotype_experiment_data=%7B%22experimentStateProto%22%3A%22%5B%5B%5B45713128%2Cnull%2Cnull%2C%5B%5D%5D%2C%5Bnull%2C745150931%2Cnull%2C%5Bnull%2C1%5D%5D%2C%5Bnull%2C749060184%2Cnull%2C%5Bnull%2C128%5D%5D%2C%5B841585769%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45761044%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45722344%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45706017%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45668885%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45685340%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45765927%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45734716%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45735891%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45663239%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45715032%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45661356%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B839547366%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45676441%2Cnull%2Cnull%2C%5B%5D%5D%2C%5Bnull%2C45645574%2Cnull%2C%5B%5D%5D%2C%5B45688859%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45656766%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45710689%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45710688%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45685601%2Cnull%2Cnull%2C%5B%5D%5D%2C%5Bnull%2C45685602%2Cnull%2C%5Bnull%2C500%5D%5D%2C%5Bnull%2C45767902%2Cnull%2C%5Bnull%2C500%5D%5D%2C%5B45756824%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45747172%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B775241416%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B781107959%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B781107958%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B792614055%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B781107957%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45729602%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45753603%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45753604%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45658982%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45725657%2Cnull%2Cnull%2C%5B%5D%5D%5D%2C%5B%5B16%2C%5B%5B1%2C%5B%5B31089630%5D%2C%5B31089631%2C%5B%5B45668885%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B1000%2C%5B%5B95332046%5D%5D%5D%2C%5Bnull%2C%5B%5B95332047%5D%5D%5D%2C%5B10%2C%5B%5B95338769%2C%5B%5Bnull%2C45645574%2Cnull%2C%5Bnull%2C1%5D%5D%5D%5D%2C%5B95338770%2C%5B%5Bnull%2C45645574%2Cnull%2C%5Bnull%2C2%5D%5D%5D%5D%5D%5D%2C%5B50%2C%5B%5B95345206%5D%2C%5B95345207%2C%5B%5B45661356%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B1%2C%5B%5B95351425%5D%2C%5B95351426%2C%5B%5B45676441%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B20%2C%5B%5B95356068%5D%2C%5B95356069%2C%5B%5B45685601%2Cnull%2Cnull%2C%5B%5D%5D%2C%5Bnull%2C45685602%2Cnull%2C%5B%5D%5D%5D%5D%2C%5B95356070%2C%5B%5B45685601%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5Bnull%2C45685602%2Cnull%2C%5B%5D%5D%5D%5D%2C%5B95356071%2C%5B%5B45685601%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5Bnull%2C45685602%2Cnull%2C%5Bnull%2C100%5D%5D%5D%5D%5D%5D%2C%5B1%2C%5B%5B95373378%2C%5B%5B792614055%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%2C%5B95373379%2C%5B%5B45747172%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B781107959%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B792614055%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B781107957%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B10%2C%5B%5B95378629%5D%2C%5B95378630%2C%5B%5B45729602%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%2C%5B95381582%2C%5B%5B45729602%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45753603%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%2C%5B95381583%2C%5B%5B45729602%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45753604%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B10%2C%5B%5B95382403%5D%2C%5B95386528%2C%5B%5Bnull%2C45767902%2Cnull%2C%5B%5D%5D%2C%5B45756824%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%2C%5B95386532%2C%5B%5Bnull%2C45767902%2Cnull%2C%5Bnull%2C100%5D%5D%2C%5B45756824%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%2C%5B95386533%2C%5B%5Bnull%2C45767902%2Cnull%2C%5Bnull%2C300%5D%5D%2C%5B45756824%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%2C%5B95386534%2C%5B%5Bnull%2C45767902%2Cnull%2C%5Bnull%2C500%5D%5D%2C%5B45756824%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5Bnull%2C%5B%5B95384561%5D%2C%5B95384562%2C%5B%5B846355750%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B10%2C%5B%5B95385117%5D%2C%5B95385118%2C%5B%5B45761044%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5Bnull%2C%5B%5B95385193%5D%2C%5B95385194%2C%5B%5B45765927%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%5D%5D%5D%2Cnull%2Cnull%2C%5Bnull%2C1000%2C1%2C1000%5D%5D%22%7D\u0026imalib_experiments=%5B95322027%2C95331589%2C95332046%2C95345207%2C95386528%5D\u0026is_eap_loader=false\u0026managed_js_experiment_id=0\u0026page_correlator=1950850960351001\u0026pvsid=8384074893717828\u0026top_accessible_page_url=%22https%3A%2F%2Fvidara.so%2Fe%2FN2T6RstELaLp%22","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"56b0d0e8272fed6b9a44d08c14e5b1be","sha1":"0b2e66a7ca8c0319310adca7ba8d02b643526f9e","sha256":"b045c748093c314660ce2985a8dd0d6c3feb6af1026dc2b02229b2538c0da6ff","sha512":"a35fc7c77ba761303aff78d51b8fe387bbf1c8892861ad6655984ea7f43598e5d9b769c2607013d9ebdc08417e578e1a7e81043f346083de7accb7a90425f259","ssdeep":"","tlshash":"0ee0269dfa8a09384c1238a16f6f329483aa916fe228e264f81de7445f1044dd06b3e6","size":358,"data":"","first_seen":"2025-02-20T21:14:35.914719Z","last_seen":"2026-04-05T11:28:19.244697Z","times_seen":10178,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.displayvertising.com/fsass.min.css","fqdn":"www.displayvertising.com","domain":"displayvertising.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"f38b67ea9f6aa06cbd561602d9f74a79","sha1":"078c14e3cdccaa26495924a8b1ee9a7cc257f0c9","sha256":"af53acdd556a3a3a68751cc46e787f31e2c26f49bcbaa4b2a006a661119765ff","sha512":"68135e56bfcba924d6358fc10062870e70fbba74a6be8ea15080a63f732541b1da1d0392eb42c4b31522d34031f41e6b3def65c2fd9be853de90ab314b2408cb","ssdeep":"768:bt9rqAYKKKZzFQ9JsQU+YDngZGihfzmMzhYrTsAysncCWcf5k5sigCrJGCntlqoD:bb5ZzFQ9JsTgZvfzmMzhYrTscpSKZ+","tlshash":"08132aaab286282601e742b9513eb316b23305167812d458fcb9cdf96e3dd86117b7fc","size":41949,"data":"","first_seen":"2026-03-14T05:38:07.669877Z","last_seen":"2026-04-05T11:28:19.179201Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"javascriptURL","is_inline":false,"md5":"68934a3e9455fa72420237eb05902327","sha1":"7cb6efb98ba5972a9b5090dc2e517fe14d12cb04","sha256":"fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa","sha512":"719fa67eef49c4b2a2b83f0c62bddd88c106aaadb7e21ae057c8802b700e36f81fe3f144812d8b05d66dc663d908b25645e153262cf6d457aa34e684af9e328d","ssdeep":"","tlshash":"aa3000000000000c000000000000000000000000000000000000000030000000000000","size":5,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-05T11:44:04.575511Z","times_seen":66365,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8ebf5362b8c92e5d5129f780a112d96f","sha1":"ee52a6631fe676da2e0e303da9aaeb357cf492f7","sha256":"980db35f7ae0a0e4bc5f749f27854f6851f0d5104e2234eab8e4e90259ce93ca","sha512":"b181a816b08fcd0b514d963c281603a043435d8b1cd131dfafaf527fbc94b5300576429b2d7202a28b30f5f8dd5f758ecffd6790c45e7bf0ccd4866eee61abac","ssdeep":"","tlshash":"01c04cbaa362d0a4c5065d5eb03ec7d7797b05402d1f7323d06c45203415e1e5b548a4","size":159,"data":"","first_seen":"2026-03-06T13:22:23.881536Z","last_seen":"2026-04-01T18:43:21.973227Z","times_seen":878,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.36.2/jwpsrv.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.2.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6186b45e8b06884b97470784d3c97e7b","sha1":"ac24f754bdf2ca6bcb8c9deb9332678e51151b85","sha256":"b6b92105a57ac9f193e3ad2cc0672f9b4f1b7a4143fc9532af6817ffb8baf93b","sha512":"3b2e1079917aff3758aa6636dbf76331225cbf99549954818eaa5f3bca17c7663f8558cdf999e417dfd50d350b36906117fe69bb2e6e58d8488fdfef7360a1bf","ssdeep":"768:HCSERdv/7m12h8yK8A2qp99s73ZaLGRvlTk17OIp84:HvEb/7m12h8yKb2qXEZaLGRvI7/pj","tlshash":"ba63c88d3785716a5a6774b8807fb546723d2ea7308dc210d941eec93c2da5eb233b2c","size":70911,"data":"","first_seen":"2026-03-27T20:18:09.682254Z","last_seen":"2026-04-05T11:28:19.200507Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"677460c625ed76584d26498c9727065b","sha1":"e8a4652301d5a7cb323ab02e18132b8b9f631f47","sha256":"c75f41e6916a47a62f23dde92bbdaf94c5d3fdd7dc7636c01c95ad565c95a542","sha512":"df908cde4d124d10b5707b6fdfe0999e5eaaf6f49c5f2b845316874ab8cd4a8886e4a5a7d99e338f37f507da359c3ffa6bba6eb914e951f8fe2397b80ee03732","ssdeep":"","tlshash":"afa022be3082f00802003a02023f0bc0f2be08808aac20008000280a3828023cfe80fc","size":66,"data":"","first_seen":"2026-03-06T13:22:23.90938Z","last_seen":"2026-04-01T18:43:21.967941Z","times_seen":879,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"911688fd7d23364fe4440e64e02eda97","sha1":"d1a0354677fcaa2e0ae02e9d11daf949f3daccc5","sha256":"178d692763aec699db3e5cc12714e3b56cd08c2af6b430f7e5f6313294dc859a","sha512":"b443701df7c70308f6bd997579b3fac34a64d962b64ffde972aa356ecf7569b9bacec2bdfa630a6378403c0205780c584f9f0a46b6223016054f0e08b1a0702f","ssdeep":"","tlshash":"65a022be30e2b0308a032800203ecb8ef2be08c00b0e2800c008000030e8820c3eca3c","size":70,"data":"","first_seen":"2026-03-06T13:22:23.920922Z","last_seen":"2026-04-01T18:43:21.990726Z","times_seen":874,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"599df6231f61cf33ed2dc257e9c80a8a","sha1":"6c5bccefd21b0c8fb5dadaf4bc202e7750230976","sha256":"dff86c8a31627a391cb8cdd0247c4dce902d34149cb7867e93557651a21a8097","sha512":"03693b913aa81ac296ff93bcb53be30483d8397d29f91809915a03d306f15e6236a84b5c3234eb8fc79f770153363b4a834f13b91454a2fcce34e519fb61da61","ssdeep":"","tlshash":"8aa011ae32a3b0008208322f002a8202a2ba8a808a0c08888000a200380c82883aa8b8","size":76,"data":"","first_seen":"2026-03-06T13:22:23.911886Z","last_seen":"2026-04-01T18:43:21.983405Z","times_seen":857,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tzegilo.com/stattag.js","fqdn":"tzegilo.com","domain":"tzegilo.com","tld":"com"},"ip":{"addr":"172.67.193.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"01227f5edc20e0ff4ed643b27cb8bb68","sha1":"d71a88f7341f2b1bdaa7deb9a66888607bd52598","sha256":"75c91d86601e23ab56d872b31b42660f893fc6d6b0785e085c06c2c038e98fb2","sha512":"88046b07c07ff6de47ef7d1e0d7ca281fc48e91fc6a292cdf611457b96ac92bb0068971cfd55c0cc3e6179d7335e77a6a14b15fa502bbae7b2233546da6c0f98","ssdeep":"384:WDWdyJ+TJTwWV+6RUL2qq8L6jW4+QL1zWAWvVRIDiei:7so1V+g+d+j4pJ5","tlshash":"8d82094a72d525ee82a3a1d10cef612ffb664e86a97e1785e381b49c187404ec3d7f90","size":17879,"data":"","first_seen":"2024-07-11T16:28:55Z","last_seen":"2026-04-05T11:37:19.756326Z","times_seen":6366,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/pako/2.1.0/pako.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e647868246b70926c4d716f7640bd51a","sha1":"c64471d33f9a3d20b5d9219159fe102d8763adcb","sha256":"ede2693a4a6a5126b9d35669062b358ecab6ae7b9b86a1cf302feb45a8514907","sha512":"8364de016c3918f9d7ef3d0a9fc9c56d87de1dcbc0bbfb71e9dea6acb7bff749a40b13be45ca6dc98a64b14cf7e443b7dfb17cddb6707265321e21da9aca647e","ssdeep":"768:fXHw8wA4ZIlEf4WLNiAAAAAA84YrI9OVsLMeu/pJCU5ejR9PNB57szzsE1s1A1m9:yeBomKTCsJ6b3","tlshash":"3423f8b221f754691bd01cd880970ba162b091722c4655f8e77c9ce538b0adbf0bfabd","size":46859,"data":"","first_seen":"2023-09-10T07:22:30Z","last_seen":"2026-04-05T11:28:19.20108Z","times_seen":1486,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ac62b02c726a10843decd676b58e6f72","sha1":"02218ebbc46bebaa71526055e5b4c65158c28ad0","sha256":"636804111a0b629e867a98fc08456eeb9a90b53633a39f8f17436a76f0366c2b","sha512":"95c611794ef9d551f6a263537a9c3940637c4f5854593dff4f6e9a5724cd1a86fbe1d667e0a21f4122704e6527a075b9c8d1490b59c0db1cb1e484673e2f136d","ssdeep":"","tlshash":"b7b0129e36e2640446291d0852298384f0fdb885051c084090242a15306c030c399069","size":88,"data":"","first_seen":"2026-03-06T13:22:23.882374Z","last_seen":"2026-04-01T18:43:21.994986Z","times_seen":867,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7f06acbee50edfe4f0224174782dbb2d","sha1":"229001b703b264dce783db5b89adc04f5177caed","sha256":"15a37eee8ddd61861fca478f53bf95f3ff23b156adad406623e5669cc1f89d2a","sha512":"e5c025e243609f1c6b2f66e1aa2d40c149e4fc931fcf4413cdeea4c924e4be115bf5d6113a7010e297d17a5c110ec836fa61d1013d294f7ea9585f4b8c364fc3","ssdeep":"","tlshash":"64b0125e7262a20406242304527e4a02b4790640451c0810701810103458853c3d557d","size":92,"data":"","first_seen":"2026-03-06T13:22:23.904753Z","last_seen":"2026-04-01T18:43:21.991695Z","times_seen":861,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"36f619162b9d92fab1bcdfeb63b3a00a","sha1":"500cd25793f5fedc7b4a924f263694cb58e68d68","sha256":"2b7f3877d8f52ec42786ce9f80382c56c65faa1df804f5aed4f2215dfea3e5bd","sha512":"025b640d7e36a4de563b10ae85cfc55978ab1c91f4387a56c63fc5e6678a01b725becbcf9d0b3b74a096455127bd606447f7a342499e60261a386c7c6a6feca3","ssdeep":"","tlshash":"0650003f0030000000000c00000c00000003000000f0000300000000c00000300000cf","size":10,"data":"","first_seen":"2026-02-02T19:30:14.747385Z","last_seen":"2026-04-05T11:28:19.221633Z","times_seen":189,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/p.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bfbe0dbef1901a080afedf7d16cc7cf7","sha1":"d47e54f2039636d10e440e824a62b200a63d2af8","sha256":"df983c7d9fe4f6dfd46cbfbd01af785dc32d819b5aef7ad42e44a8bf5642253c","sha512":"3a3769322d08aae7534da977b34b60c6604240e6cc52cb92cbe8408285965111b318ccb784a2e25d44fbcb922fda0719dcba4e6c70d70bc583b90771fe86e4cb","ssdeep":"768:pBNL4zX6IALtpCOGPFIK2mn+Am0GlrToR+fpnQiqI7:pHL4e/LsI4PGlrToR6pngI7","tlshash":"49d24bf8b1a3f0a0931ba86a819f8006bb3d6f55194c4d60e0479c427939eebd177fb4","size":28862,"data":"","first_seen":"2026-02-26T17:47:28.565918Z","last_seen":"2026-04-05T11:36:00.707449Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"renamereptiliantrance.com/check.html","fqdn":"renamereptiliantrance.com","domain":"renamereptiliantrance.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bb5909608b8f34c5a1230455c44160c3","sha1":"31f84c1a46d83e344c97a8a62bcde987e1960c27","sha256":"46031a60039a5d4861c1971d070623fbefa0669f7c93588e9698aed4931099ef","sha512":"f4138fd8e40a2765f25e399eea82c956213e2b8126d7a2fe3c168f1798787fc60146bf452ed6c7a47cc58d40442c234bb8c491be1db8220d2b50a6251ffb28f3","ssdeep":"","tlshash":"6a01b81930f8284c1117b630265b23182c32a40325cbd94efb2cdb301f425a7eca8aef","size":779,"data":"","first_seen":"2026-03-04T14:32:10.343547Z","last_seen":"2026-04-05T11:28:19.205877Z","times_seen":428,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"bfa36ebc446d7bd4852e5a4d4799175b","sha1":"f2e6ddd19392da0ebd1ffbf8f7aef15c9e1bc73d","sha256":"0ab7f333256694855894a88e10a6e77879b27a9feedc4d4c1ee4b031af657fbb","sha512":"9091249f76b8f1a8616a757c0b16aaaeb65645ecc1875d76b8b973cf63d3e6f5c4f71a7e23ab68db87f1c1425eaf55129940d86806bd814e2cce58976b8a8d1c","ssdeep":"","tlshash":"63a022af32f2b0008a0a3220803f0300f8fe08e08e8c0030a0008b003c2c823cbfa2b8","size":73,"data":"","first_seen":"2026-03-06T13:22:23.87569Z","last_seen":"2026-04-01T18:43:21.980298Z","times_seen":876,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8b318b5e70211d9fac2d7eaa41ff9022","sha1":"f2d95ab822a53760839b2a5650a10fd3576df68b","sha256":"3d68d9ef0e24d6b71ee5e2b64fcfd9d542a8627848fc03eb4235a4e2b42de358","sha512":"77133c57503fa16df9a6811019ae2d7bfa56f652d9625b551c708c6866523bbb044548c1e0f35267386057293feb519dff92aeaeeacc97c016e8135d80562216","ssdeep":"","tlshash":"24a022ff30e2b00023203a2a003f03a0f2bf8880ce8c00808023030030a803bc3e8cf8","size":78,"data":"","first_seen":"2026-03-06T13:22:23.903334Z","last_seen":"2026-04-01T18:43:21.987377Z","times_seen":874,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9f25ed5dfa5a9afc56599f04674adc36","sha1":"0b20c6365315755931e3cc7b1a9e0dcb10b1f833","sha256":"a3373e58770fec3faa5ad77d68938c2b1b9567ea57137333308808550139d256","sha512":"7918b770165aeaccc65c9045ed348a976a31bfa5103202c94023413ea0ed4f0f19a79705c41fb8ef167518657ed898f35a98abbf919f4e154156cffc14451f1c","ssdeep":"192:Aa8Jk4prVtQxLbnipV793bozocCsvJWiW7j5leTDb4xzryZj9oKDtHoqtJfPOk:/uprVMgVZrozlKiWv5l4b4x6V9oKy2fl","tlshash":"b1222ab522957d570b744ccda07e2458f5ac2a01388d8d88f4adec8b3c53d858ab7e7d","size":10021,"data":"","first_seen":"2026-02-02T19:30:14.741646Z","last_seen":"2026-04-05T03:34:29.738189Z","times_seen":147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"efd5030f34d1d7c447abc0a6feefd84d","sha1":"a974b1d7608ddad321db29b4135f4598c2906db6","sha256":"d839e545d08a922ad15d5bac6b29226071b8a19134f6fbbab584c93a39bbb48f","sha512":"aa7d41678b4fa867d1fb85f9ece383ef72f72bc42af2cadc070e1ba4d2f740bf8f4e5fe0476f5b43ee31978019ba58c335998823ffa82ab9c4318db6dc023d23","ssdeep":"","tlshash":"e4a0125e309271000610201140268d01e07a0ac089bc14d18241c54030440218396424","size":81,"data":"","first_seen":"2026-03-06T13:22:23.912794Z","last_seen":"2026-04-01T18:43:21.971111Z","times_seen":808,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"renamereptiliantrance.com/get/2098228?id=2098228\u0026jp=_clspdfzayvmuguwhvecser\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.32-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=2\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=q9X88NFaHR0cHM6Ly92aWRhcmEuc28vZS9OMlQ2UnN0RUxhTHA\u0026afid=7716132994533888\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=8\u0026pkw=0\u0026pload=1070\u0026rlp=%5B0%2C21%2C224%2C152%2C1947%2C1536%2C519%2C1226%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"renamereptiliantrance.com","domain":"renamereptiliantrance.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e18084fb7e56ad1a7491bfc746bb1aed","sha1":"e1c1e61227e9f92ce75839c6a0d7d68e2e6b30c6","sha256":"439989e41e75ac7b6517d644b745310cf3fa69dcb9b885bed3e4e3aa84d0aecb","sha512":"2a51b49f8f4aec4c049141aa7953e197f38ec9cab1be2c8bd0568648e4359566fcb613cca9dc3b044f5a9fd4a19404c9ddaa613dd9c607950efd497c72cb783c","ssdeep":"96:dxPPq6lZ4l9YonPq6lZ4l9YoxBEErzTjF93Z3Cc:/PPqsZK9YuPqsZK9YzQcc","tlshash":"66a1f8e1d93bfb00649fad9a08fd9d6e61c0b84d13bb8055b899d78c57d8cb0c76248e","size":4810,"data":"","first_seen":"2026-03-28T20:13:04.966884Z","last_seen":"2026-03-28T20:13:04.966884Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/sdkloader/ima3.js","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3b9e457af7a1acddea574e8050d7743","sha1":"1125d2ebed73235b1f2d083b9fa98eb75a7024db","sha256":"fddb05b5901a7d91d7acf838270dcf9d0382ec08924c793a680f3d1e123e962d","sha512":"765b7ba98012a7d16f92f03f2d7f9ebc74d70c4d93d4e25ce446949a0f5018290e4f0482fc264cac2f6a9327c23c7ea7f77aa0d4f09ef8062f7e5311231c9510","ssdeep":"6144:SbEUmxlExtCtBhZ3ePLiO9xxPzFBLw8lswlPqD:pBzeziO3LHLwulPqD","tlshash":"1fa40bcdb6a674629363f4f5403f010fb23ba866f40888acb249d9e16e749495277f7c","size":472738,"data":"","first_seen":"2026-03-27T20:18:09.65547Z","last_seen":"2026-03-30T05:59:42.006895Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","size":60819,"data":"","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-04-05T11:28:19.13941Z","times_seen":29369,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a87145114e958663cb80858aabf11d12","sha1":"3a70bb4de4bc378a451931f33a82cad017566450","sha256":"a4682fe010ce6bdafb39a7a630923c126bc0cb6111f5745c934dd439474f48ce","sha512":"b5b739cdfdc985afed0a5f6a1c476e2987059128224a564d2f571e23715b97b46486cdf10a3d47fe90023387db30078079c666901454811a63a886cb8bbbe31d","ssdeep":"","tlshash":"eca022ae30a2b00022003a00003f0328f8be2ba08b8c0000a000000038aa023c3ec0f8","size":68,"data":"","first_seen":"2026-03-06T13:22:23.907099Z","last_seen":"2026-04-01T18:43:21.970044Z","times_seen":883,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e84920575919fee3a9d32e60f84aab44","sha1":"1a1c242066a018d8d6c2d6b70d991583d40deda9","sha256":"4673c7b8519fc373430ffa97f9425b228ef6a235a1491012f068f1ffbe91465c","sha512":"e47f81c65a83e0f41ee3234b34c42a3e1c7675d4d3d62df4f5d454a9c1e500b5d2ff74c2fc7e5ad436ada638e1db2e0b50e2b17c1919ac7c30b3abde96c1e495","ssdeep":"","tlshash":"daa002be72e2b4608a072616603ecb8df6bd0ac05e5d2451d11995583468c24dbadd7d","size":71,"data":"","first_seen":"2026-03-06T13:22:23.87644Z","last_seen":"2026-04-01T18:43:21.977821Z","times_seen":878,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.36.2/googima.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.2.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e326dffdd285561fe42061b115c81d05","sha1":"7b5be6ed0aa57ca398fe44b5e343d23edf21b477","sha256":"fc91de238eebbd70ed2e63cf28a4f267ace01d38eb77cb04719de197ce8a6bd3","sha512":"08fbf336980ce3cb63a6a153648e646ee80dd646ba0829400abf832fbd79a1f47066dfe0773439c87861a8bf282e00a58626755bd366afd7c92d737cbf8498f4","ssdeep":"1536:j8shgCMQoN1vkzhFaJ/nyXqw86G+RnwNbpPWr7aEEI7wfTifTwRiwP0NZxY:IlkaJ/y6F6G+RnMbpU7aEEI7mTi0p","tlshash":"3e73d65732a8a43257d498eeb12442027339850f784bc76cf96cedef1d4e98772b6a70","size":78354,"data":"","first_seen":"2024-10-04T10:49:20.825367Z","last_seen":"2026-04-05T11:28:19.202323Z","times_seen":560,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8aa76926470fe48bfe16061aae3c3270","sha1":"394334d81e17289ba02192082fdfa7829bfb84ab","sha256":"13c074cb0158057699ca3394e62139f2d78991149dee2e966e8c898747e2a131","sha512":"221aa9db5cc9072dd0118ee0dd24b208307a544d447b2275f205b062e6d70867f08c43c43e0e06ed47aeb6e2b6b340f9c8c6815c3a9313c26702308334123e25","ssdeep":"","tlshash":"66a022fe3083b00002833c02003f0300f0be08c00e0c0880a30008383c88e2afbec038","size":68,"data":"","first_seen":"2026-03-06T13:22:23.92178Z","last_seen":"2026-04-01T18:43:21.976834Z","times_seen":860,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fe684251c64f27df9a72ad657584e44e","sha1":"233b4073c81fab979519694e1b7789b92f985265","sha256":"052361351b8f197a7dbc66c720f2903d97d31aac6de3933aaa5618081157bec9","sha512":"f55b604db7908efdf64ab55f3033d2c20e514d3eadd7ed172a79e0bf0445ed4d9ec7fc1eb276f608ed6d026f754bfb94d5594161fa97eade06a49e5e27df8f7d","ssdeep":"","tlshash":"1aa002ae31d3f01147156755413f9747f2bf19904a5d0450d1245764349d826c7aa4f9","size":65,"data":"","first_seen":"2026-03-06T13:22:23.874811Z","last_seen":"2026-04-01T18:43:21.985392Z","times_seen":876,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ff979a8477d3016b530c934392900a3a","sha1":"e9ec792e8cd9d9556e24d103b098d306fa9714fa","sha256":"766d4f9aab5e53f2857de9e335e039e7bcf0a7f2fdbce99185349af44a3b0609","sha512":"0a3459aab9e5c5c4d666b0a822bcc903892c1802ed32438c6992a3d338d1157d930b98333f9f22159ddba979ea3155ea06c6af8896b181f15b2d9f968ac0a1e8","ssdeep":"","tlshash":"55a0245f70d1f0000710301144374300f07d074045fc0040417043503044c34c75f474","size":74,"data":"","first_seen":"2026-03-06T13:22:23.91019Z","last_seen":"2026-04-01T18:43:21.972673Z","times_seen":882,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"982c3306e9b10daca9f44183cf9e5312","sha1":"862719de88d713221613afa6ba94b1297f281982","sha256":"baa41cd6666b510543528f4cf72f314bca8d1dd5443344cf6169e9a294ccb6c3","sha512":"a82d7924adfc6aff9a0a4d426f7305d82997c1adcf5c4f286da026fcfb1fe0725c7e4318fd660e87bbdf4fd82c4f9291a4bdb30d697f062aa53dffdb264fd6fa","ssdeep":"","tlshash":"5ba022fe3083b000028b3c02003f8300f0be08c00e0c0080a30008383c08e2aefec038","size":68,"data":"","first_seen":"2026-03-06T13:22:23.893588Z","last_seen":"2026-04-01T18:43:21.995513Z","times_seen":857,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/p.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:29.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 04:32:19 GMT","end":"Wed, 29 Apr 2026 04:32:18 GMT"},"fingerprint":{"sha1":"82:62:34:52:A9:E7:DA:4D:26:88:80:06:2F:BC:5C:DA:1D:69:85:1C","sha256":"76:DF:7A:DD:FF:3D:83:17:E5:A1:5C:BA:E1:49:7D:28:B5:3C:6B:57:BE:C0:89:9E:73:BB:66:B2:4D:70:D3:FD"}}},"request":{"raw":"GET /sdk/v1/p.js HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 20:12:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Thu, 26 Feb 2026 14:42:46 GMT\r\netag: W/\"69a05be6-70be\"\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\ncache-control: max-age=172800\r\nexpires: Mon, 30 Mar 2026 20:12:29 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: DS9225,DS5058\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28862,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (28813)","md5":"bfbe0dbef1901a080afedf7d16cc7cf7","sha1":"d47e54f2039636d10e440e824a62b200a63d2af8","sha256":"df983c7d9fe4f6dfd46cbfbd01af785dc32d819b5aef7ad42e44a8bf5642253c","sha512":"3a3769322d08aae7534da977b34b60c6604240e6cc52cb92cbe8408285965111b318ccb784a2e25d44fbcb922fda0719dcba4e6c70d70bc583b90771fe86e4cb","ssdeep":"768:pBNL4zX6IALtpCOGPFIK2mn+Am0GlrToR+fpnQiqI7:pHL4e/LsI4PGlrToR6pngI7","tlshash":"49d24bf8b1a3f0a0931ba86a819f8006bb3d6f55194c4d60e0479c427939eebd177fb4","first_seen":"2026-02-26T17:47:28.565918Z","last_seen":"2026-04-05T11:36:00.707449Z","times_seen":92,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":78,"dns":39,"connect":19,"send":0,"wait":19,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:29.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidara.so","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 11:08:37 GMT","end":"Tue, 05 May 2026 12:07:22 GMT"},"fingerprint":{"sha1":"A6:7B:1F:15:8E:93:40:C2:D5:ED:5D:0E:F1:41:D9:F4:BC:D1:C7:F0","sha256":"0F:4A:DE:A1:CD:61:73:8E:21:8A:AD:69:22:87:25:83:3A:5C:44:F1:33:DB:B1:48:E3:94:87:BA:16:59:80:31"}}},"request":{"raw":"HEAD /e/N2T6RstELaLp HTTP/1.1\r\nHost: vidara.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/e/N2T6RstELaLp\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Mar 2026 20:12:29 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LGBynpIUA6viEmwhuNVrwfXYnvqbe408FcMDOTq8KLaQCzLjwAFkrcSGj2TkA%2FnutNQDHPV7db5Yx8Yn1u8EX3tdMw7h5WwXsE1KqGrZrparK7xaCpHZdV%2FFGkM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e394a3d4a5356c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"llvpn.com/tag.min.js","fqdn":"llvpn.com","domain":"llvpn.com","tld":"com"},"ip":{"addr":"172.67.154.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:29.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"llvpn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 11:40:55 GMT","end":"Wed, 03 Jun 2026 12:39:38 GMT"},"fingerprint":{"sha1":"A5:46:52:67:CD:2F:07:2D:F5:82:5F:F5:08:59:32:86:C6:1F:F6:94","sha256":"BE:A3:9E:CD:42:36:B8:DC:D1:C7:99:4B:0A:7E:66:06:4F:82:04:DC:2E:FF:36:1B:BD:0D:34:58:F0:21:A0:0D"}}},"request":{"raw":"GET /tag.min.js HTTP/1.1\r\nHost: llvpn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 20:12:29 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-trace-id: 4a8d4806c7a73cf33fcd06095e1b057f\r\ncache-control: public, max-age=600, s-maxage=1800\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 214\r\nlast-modified: Sat, 28 Mar 2026 20:08:55 GMT\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dUXtAYdhDdx9o7AhIbiW7%2BD2L%2BxnUvnfbEh6WZMmfB1IOrZrctmAqTNJ3W%2B83J10Hhz%2FF%2BrkRSDPj4usHbxt95Q%2FM%2F1tZrUzoslrFQXPqrZodvjpYNsvRlDjbi0%3D\"}]}\r\ncf-ray: 9e394a3d8a6256c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102838,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"54eae8d2ca2bbe2c5b3f7bbaf553a526","sha1":"dd3004bc6ee39980b25f5fc39e092e5654008c65","sha256":"1ec5adbfd36aec7f06fcc300002f385fa1d2ce8a9cce7e4933a7ecd5bb08479d","sha512":"1453b747d9cb2de06ea16d610852e04d426b8ae1cc69b2e0d0fcf39612f198381b11f1441a700a458185c39d4bf7a65402af8bc9dd4f00adb0a0fd1fc82efcdb","ssdeep":"3072:k7tzzM3tU9+mI/SnWeFQ6uriu19pAvqdNoWdabBcjCcbXl:279+1/7eFInjCcbl","tlshash":"f0a32ada37a1746a42de0270815b5c1fa6da8c90584ec978e0327db53938a54d3fbfdc","first_seen":"2026-03-27T13:01:41.137563Z","last_seen":"2026-03-30T07:53:02.289849Z","times_seen":54,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":28,"dns":3,"connect":1,"send":0,"wait":9,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jcdn.tsyndicate.com/21654f8fe4ac4ddf985fadb9bb990bcd.js","fqdn":"jcdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:29.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jcdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 05:32:29 GMT","end":"Thu, 28 May 2026 05:32:28 GMT"},"fingerprint":{"sha1":"3C:5C:C5:F5:F8:C2:40:02:51:B5:58:4E:E9:9C:01:C6:A6:EF:9A:00","sha256":"D7:97:0F:E1:D3:E4:7A:31:87:21:82:89:D8:BF:B7:53:CC:DF:3B:DA:21:85:04:6D:0F:0F:8C:FD:EC:1C:DA:7A"}}},"request":{"raw":"GET /21654f8fe4ac4ddf985fadb9bb990bcd.js HTTP/1.1\r\nHost: jcdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 20:12:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 2\r\nserver: nginx\r\nx-request-id: 55fc138f-1169-48c7-b998-7744e85a2068\r\nx-robots-tag: noindex, nofollow\r\ncache-control: max-age=300\r\nexpires: Sat, 28 Mar 2026 20:17:29 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: DS9225,DS5058\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-05T11:47:22.494618Z","times_seen":555946,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":104,"dns":53,"connect":19,"send":0,"wait":19,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oyo4d.com/5/10652172/?oo=1\u0026js_build=iclick-v1.1746.0\u0026userId=080307daa8c24bcbfa3bd260f8f04ef4\u0026dmn=jnbhi.com\u0026tt=2\u0026ix=0\u0026tspl=1095\u0026cslt=64","fqdn":"oyo4d.com","domain":"oyo4d.com","tld":"com"},"ip":{"addr":"139.45.197.118","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:32.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oyo4d.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 05:06:11 GMT","end":"Wed, 08 Apr 2026 05:06:10 GMT"},"fingerprint":{"sha1":"4E:6C:C5:80:71:FC:84:37:EB:DF:22:98:08:56:16:B7:4D:CA:6E:2C","sha256":"1D:EB:9C:AC:8B:48:04:32:58:78:6E:9D:1B:F7:78:8A:EC:DB:1C:1C:48:99:9C:6C:75:23:A2:C8:4E:23:A4:B9"}}},"request":{"raw":"POST /5/10652172/?oo=1\u0026js_build=iclick-v1.1746.0\u0026userId=080307daa8c24bcbfa3bd260f8f04ef4\u0026dmn=jnbhi.com\u0026tt=2\u0026ix=0\u0026tspl=1095\u0026cslt=64 HTTP/1.1\r\nHost: oyo4d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 3366\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3366,"data":"{\"sync\":\"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\",\"async\":\"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\",\"quality_options\":{\"hil\":1,\"jsp\":1,\"ng\":false,\"ix\":false,\"pt\":false,\"np\":true,\"nw\":true,\"nb\":true,\"sw\":1280,\"sh\":1024,\"pl\":\"https://vidara.so/e/N2T6RstELaLp\",\"wy\":0,\"wx\":0,\"ww\":1280,\"wh\":1024,\"cw\":1280,\"wiw\":1280,\"wih\":981,\"wfc\":4,\"sah\":1024,\"navlng\":\"en-US\",\"drf\":\"\",\"wgl\":\"llvmpipe\",\"tb\":false,\"btz\":\"UTC\",\"bto\":0,\"pnt\":0,\"pnrc\":0,\"bml\":0,\"bmi\":false,\"vsbl\":true},\"client_hints\":{}}"}},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 20:12:32 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://vidara.so\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\npragma: no-cache, no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":93,"dns":31,"connect":26,"send":0,"wait":30,"receive":3,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.36.2/googima.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.2.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:31.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q1","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 10 Mar 2026 00:27:00 GMT","end":"Thu, 24 Sep 2026 23:27:00 GMT"},"fingerprint":{"sha1":"C2:A7:F2:8B:AB:12:E7:4F:11:6B:22:94:9B:93:61:5B:D8:81:CA:24","sha256":"90:DB:10:04:22:C5:07:DE:3B:E8:30:8A:FA:27:ED:16:6B:02:8F:9C:A7:28:87:F5:F7:DE:50:63:75:2A:A1:8D"}}},"request":{"raw":"GET /player/v/8.36.2/googima.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=86400, immutable\r\nlast-modified: Thu, 12 Sep 2024 17:52:03 GMT\r\netag: \"e326dffdd285561fe42061b115c81d05\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 28 Mar 2026 20:12:31 GMT\r\nage: 50708\r\nx-served-by: cache-lga21958-LGA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 6, 45\r\nx-timer: S1774728751.046919,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 22142\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":78354,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e326dffdd285561fe42061b115c81d05","sha1":"7b5be6ed0aa57ca398fe44b5e343d23edf21b477","sha256":"fc91de238eebbd70ed2e63cf28a4f267ace01d38eb77cb04719de197ce8a6bd3","sha512":"08fbf336980ce3cb63a6a153648e646ee80dd646ba0829400abf832fbd79a1f47066dfe0773439c87861a8bf282e00a58626755bd366afd7c92d737cbf8498f4","ssdeep":"1536:j8shgCMQoN1vkzhFaJ/nyXqw86G+RnwNbpPWr7aEEI7wfTifTwRiwP0NZxY:IlkaJ/y6F6G+RnMbpU7aEEI7mTi0p","tlshash":"3e73d65732a8a43257d498eeb12442027339850f784bc76cf96cedef1d4e98772b6a70","first_seen":"2024-10-04T10:49:20.825367Z","last_seen":"2026-04-05T11:28:19.202323Z","times_seen":560,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9181rtfg1.s1q2105.com/hls/yfnpJ5T5KgLveajGoiYqP4ikTORMxKo5/seg_1920x1080_000.ts","fqdn":"9181rtfg1.s1q2105.com","domain":"s1q2105.com","tld":"com"},"ip":{"addr":"203.17.244.73","port":443,"asn":137409,"as":"GSL Networks Pty LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:32.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9181rtfg1.s1q2105.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 06:07:26 GMT","end":"Fri, 26 Jun 2026 06:07:25 GMT"},"fingerprint":{"sha1":"7C:A2:7B:80:34:2D:12:AC:BF:B9:7C:91:02:F5:A1:A3:4F:68:CD:ED","sha256":"0B:7C:D7:69:1D:A6:E2:FB:EA:47:7D:80:05:90:F9:75:A8:B4:BF:A5:01:56:CD:DE:6F:C1:68:EC:05:07:C2:0E"}}},"request":{"raw":"GET /hls/yfnpJ5T5KgLveajGoiYqP4ikTORMxKo5/seg_1920x1080_000.ts HTTP/1.1\r\nHost: 9181rtfg1.s1q2105.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 20:12:32 GMT\r\ncontent-type: video/MP2T\r\ncontent-length: 1565288\r\naccess-control-allow-headers: Content-Type, Range\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Content-Range\r\nlast-modified: Thu, 26 Feb 2026 18:02:14 GMT\r\nx-cache: MISS\r\ncache-control: public, max-age=259200, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1565288,"size_decoded":0,"mime_type":"video/mp2t","magic":"data","md5":"645d3d12ebc0c893a509b2d89492930a","sha1":"f36e78680db1487210f68462fb4cb68594dc78c2","sha256":"34f1e3878010685edc36c7422c3b9e51ce03662e9c772992517a70aa1f7dcdd0","sha512":"0cd1e4ec538e83b369f5de2b2efd591f4c7d4b45f56678045c42a15aa4f3e0f4d5d8fb2ce27b5e429f9f11692ef031eeb244517ac5435efb2eba754eb187ccce","ssdeep":"24576:UUy7+xrDrfv+XDG61t5QrbTNIp/R1DUJKx2HE1FEf5jWkYAd0wf:UUy7Ijv+S6L5ETNIp/RCJXHCiVTeU","tlshash":"822512487bd488aaef32897e8a0992f6e3c09e10cd04dfdf34a4355da5bdec9d017166","first_seen":"2026-03-28T20:13:04.963624Z","last_seen":"2026-03-28T20:13:04.963624Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1840,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":491,"receive":1349,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bobapsoabauns.com/www/images/4fbabbc641908409792e3ea2cd0f6479.png","fqdn":"bobapsoabauns.com","domain":"bobapsoabauns.com","tld":"com"},"ip":{"addr":"172.67.166.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:32.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bobapsoabauns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Mar 2026 17:27:36 GMT","end":"Thu, 11 Jun 2026 18:26:20 GMT"},"fingerprint":{"sha1":"D4:5B:7E:3A:04:7E:B2:18:16:12:D5:8A:2B:EC:8D:E3:7F:C7:E1:8A","sha256":"47:9C:C7:9E:08:57:D9:D4:AC:41:C1:A3:48:7A:31:34:81:6C:9A:B5:7A:35:09:26:1C:67:C7:35:BC:B1:1F:32"}}},"request":{"raw":"GET /www/images/4fbabbc641908409792e3ea2cd0f6479.png HTTP/1.1\r\nHost: bobapsoabauns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 20:12:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 66301\r\nserver: cloudflare\r\nlast-modified: Wed, 05 Mar 2025 23:12:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67c8da4c-102fd\"\r\nexpires: Sun, 29 Mar 2026 07:12:44 GMT\r\ncache-control: max-age=86400\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 46787\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ed4h2FNzohP18TkZLkOxAMdM93Ls35%2BwKdNpRvFrOL7aF7Tg1uWCnO%2Fe1NM%2FKs%2Fxg07IX2w%2BZ8P%2BnFvrItYs1ZI79E7v8gzskwCGkEa5t1VzkY5ymgeQ0%2FBnPR2W%2FbIf4Bqm6g%3D%3D\"}]}\r\ncf-ray: 9e394a4dfd450883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66301,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"4fbabbc641908409792e3ea2cd0f6479","sha1":"a393f21e82692e79e914d725593492be3553d66d","sha256":"04a7cf45e1b400e04f1fafaf3ecd7e679572905e60dc7b99fedcca9dbe53fc0e","sha512":"3af675948d6929434d3b91389d113f60d45b810edf2697b012b7a76807265ad77d8a17c9b5acdceca0f88205561cf32b9b9dca843bc5588933911cb85ae6c732","ssdeep":"1536:Y/bIRYrNJhlMCl3epopSxwJKM8+B+a0gZ:YDlJwo376wkR+N0g","tlshash":"055312528f50bc2649547040972cfe9f16f4ba6971e5625ccf4cb5a71aa00bbe82c3df","first_seen":"2025-03-07T05:14:49.76701Z","last_seen":"2026-04-05T11:28:20.95764Z","times_seen":283,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":18,"dns":5,"connect":1,"send":0,"wait":8,"receive":4,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fedoq.com/impression/JQw0CjSPqp7GSIT93zfKZk8cO2jpJOGmnn1Is1TB9C3Ms5m-eLuK-0vHTIR6CeDTDaKoDVUMkD5sIqXheHwp9ee4ZoV3tMHNPCHjJCJkczT5RabnKPh4JwUWYM0tGsjaR_TuhTiDLOEDpmazYwemprdGtuuCzUo5tenD3dGFCP7FVQeUFAOQZ3RJZG4gtVgISFbadczRtDuBwR_qoo-rcYTrjGHCB5wx73da5rtC2iYksZXbbPl9R0pVONLdO-qhrdfLBqFrC8RHiWnzEDTMA0Hr9Xz36CRvQmP39EirCZie7jhjZ5Zq5KKbrBUFsezftVWN-R9-KKFb6yGytXf4Fl5PK1ocMDooHfpVOpilmhabFkQWkxmR25xNsf4C7EiFEk4_eWLEFtOFJW3dVmxFQTQW9Jn_HhxHl-4wVs6G_6gj6uhd17tyhz-0C5KXtDCT4vT16uh1t9Gqk0pvkKr5VbvmLw130Rp1ORWbsYPESmh2kH3WBpM_ybEa7Pcdlclfde1rw5fZqTLfCwAxEPEwm4NOca1DI-oSLqo2ebqZJQPRoIW0ca3fyLrCJ0sqJATv7HdMLL5JY7QtAuL-DZps1uIGVpNo2K8rg_l29HJr19U7FaG2Fa6NGvvkvwYDJ9IGRjoJIHa3Ek6cPAqSlMWmvHrjivwzOaDTNZ8-f_dIKAdT-Vjf0tzpfQkB-igBBkTD9hTn3Iy249tbPquFTEci03rowxqr3dtzOV_g2CSAN2hDOXjhnZBUMqi3GnYgTzODJzbrMK0EHp_-SCpXGO0ox1CnuE9Du7LGgR1xSeTsJgrfPFNiNfkETBby-Nj_5OjcpEQhbJImmhEld48Wo4H6S8hhlt87sClgfnWSDSRG92LLcREm?_z=10572062\u0026sw_version=v1.802.0-s\u0026dmn=dd133.com\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=981\u0026wfc=4\u0026pl=https%3A%2F%2Fvidara.so%2Fe%2FN2T6RstELaLp\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1","fqdn":"fedoq.com","domain":"fedoq.com","tld":"com"},"ip":{"addr":"139.45.197.116","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:35.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fedoq.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 05:12:13 GMT","end":"Mon, 15 Jun 2026 05:12:12 GMT"},"fingerprint":{"sha1":"34:34:EB:E0:C2:BE:04:35:EF:2E:23:56:BF:E4:88:64:91:F8:FC:BA","sha256":"18:12:B0:A9:07:D7:82:F7:43:06:05:38:B3:3F:15:89:7E:39:6B:81:0B:8E:91:61:FC:DA:14:6D:C8:EB:38:73"}}},"request":{"raw":"GET /impression/JQw0CjSPqp7GSIT93zfKZk8cO2jpJOGmnn1Is1TB9C3Ms5m-eLuK-0vHTIR6CeDTDaKoDVUMkD5sIqXheHwp9ee4ZoV3tMHNPCHjJCJkczT5RabnKPh4JwUWYM0tGsjaR_TuhTiDLOEDpmazYwemprdGtuuCzUo5tenD3dGFCP7FVQeUFAOQZ3RJZG4gtVgISFbadczRtDuBwR_qoo-rcYTrjGHCB5wx73da5rtC2iYksZXbbPl9R0pVONLdO-qhrdfLBqFrC8RHiWnzEDTMA0Hr9Xz36CRvQmP39EirCZie7jhjZ5Zq5KKbrBUFsezftVWN-R9-KKFb6yGytXf4Fl5PK1ocMDooHfpVOpilmhabFkQWkxmR25xNsf4C7EiFEk4_eWLEFtOFJW3dVmxFQTQW9Jn_HhxHl-4wVs6G_6gj6uhd17tyhz-0C5KXtDCT4vT16uh1t9Gqk0pvkKr5VbvmLw130Rp1ORWbsYPESmh2kH3WBpM_ybEa7Pcdlclfde1rw5fZqTLfCwAxEPEwm4NOca1DI-oSLqo2ebqZJQPRoIW0ca3fyLrCJ0sqJATv7HdMLL5JY7QtAuL-DZps1uIGVpNo2K8rg_l29HJr19U7FaG2Fa6NGvvkvwYDJ9IGRjoJIHa3Ek6cPAqSlMWmvHrjivwzOaDTNZ8-f_dIKAdT-Vjf0tzpfQkB-igBBkTD9hTn3Iy249tbPquFTEci03rowxqr3dtzOV_g2CSAN2hDOXjhnZBUMqi3GnYgTzODJzbrMK0EHp_-SCpXGO0ox1CnuE9Du7LGgR1xSeTsJgrfPFNiNfkETBby-Nj_5OjcpEQhbJImmhEld48Wo4H6S8hhlt87sClgfnWSDSRG92LLcREm?_z=10572062\u0026sw_version=v1.802.0-s\u0026dmn=dd133.com\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=981\u0026wfc=4\u0026pl=https%3A%2F%2Fvidara.so%2Fe%2FN2T6RstELaLp\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1 HTTP/1.1\r\nHost: fedoq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nCookie: OAID=080307daa8c24bcbfa3bd260f8f04ef4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 20:12:35 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-trace-id: 16b95f7310a0e9037a20dbee0bf1c434\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4491705564909da7f9eaf749dbbfbb1","sha1":"279315d507855c6a4351e1e2c2f39dd9cd2fccd8","sha256":"4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49","sha512":"b8d82d64ec656c63570b82215564929adad167e61643fd72283b94f3e448ef8ab0ad42202f3537a0da89960bbdc69498608fc6ec89502c6c338b6226c8bf5e14","ssdeep":"","tlshash":"c5900403d140d041c351c0300d0cc740174471304514030f70fc175dfc353510c13000","first_seen":"2023-04-05T09:54:56Z","last_seen":"2026-04-05T11:51:31.810394Z","times_seen":96483,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6.adsco.re/","fqdn":"6.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.84.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:30.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vidara.so/\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 20:12:30 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 45\r\naccess-control-allow-origin: https://vidara.so\r\ncache-control: private, max-age=300, immutable, stale-if-error=300, stale-while-revalidate=300\r\netag: 5b41cb22f84f645a103acc7bfbf084ff\r\nexpires: Sat, 28 Mar 2026 20:12:30 GMT\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 9e394a406c5cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":7,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fleraprt.com/async_log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=66958a01-5932-4bb7-8627-01e29702f4f3","fqdn":"fleraprt.com","domain":"fleraprt.com","tld":"com"},"ip":{"addr":"139.45.195.252","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:32.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fleraprt.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 11 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EB:E7:45:0B:C5:08:D8:7F:87:47:B3:6F:7B:0C:95:B3:ED:B5:92:AC","sha256":"37:B2:1A:19:FC:C4:69:69:2F:A0:6E:DA:D4:97:23:4A:C3:A5:FC:C4:C2:EE:FE:8C:AA:FD:3A:C0:4B:AD:40:B2"}}},"request":{"raw":"POST /async_log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=66958a01-5932-4bb7-8627-01e29702f4f3 HTTP/1.1\r\nHost: fleraprt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 452\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":452,"data":"L\u001b[_\u001e\u0000\u001c\u0006*\u000b^\u001b\u0018T\u0004HT[^\u0016\f\fC\u001b\tMX\r\n7\u0017\u0003LKC\tMH\r\u0003\u0013F\t\u0004Y^\u0011\fJH[\u000b\u001d\u0003J\u000e\u0010W\u00065\u001a\u0002\u001fQLW\u0007\u0015\u0011R\u0013\u0017\u001a\u0000\u0014\u0010_\u0000\u0017^\u003e\u001e\u0007\u0006\u0017\u0016T]\u001b\u001b_S\f\u0001\u0015JOREE[Z\r\u0003\u000b\u0005\u0006k\u0007\t\u0015\u0003\u0011\u0007\u001e\u0006@YC[^D@\t\u0007^C_\u0010\u0006\n@U\f\u0002\u0001W\u0006\u001a\\B\u0003Y\u000bH\u0000\u0002[\bI^\u0016\u000f\u000bQP__\u001b\u0010\u001c7\u001c\u0006\u001aS[\u001bMH\u001a\u0019\u0013R\b\u0004Tf@Y\u000f\u0016\u001a\r*\u000b\\KC\u001bPZ[\\@\u0004X_\u0015\u0015\u0011W\u001e\u0012\u001c\u001a\u0001\u000bK\f\u000bf\b\u000eLQP\u0016BOTX^F\u001b\r\u001e\u0006*\u000b\\KC\u001bCFL\b\u0007G\u001a\u0002ZfZR%U[RW\u0012M\u001a\u0011R\b\u0004LGPW\u001b\u001eCV^i\u0013\u0000\u0026ZWX\u001aKU\u001b\u0002\u0006\u0007\b\u0019k\u0007\t\u0015\u0003\u0011L\u0011\t\u000f\u001eX\u0013V[\u0010\fT\u0006\r\u001cG\rLA\u0015Z\\E\u000eFCJWN\u001a\u0004\u001cM\t\u0005\nIH\u0016\r\fTQV\u001b\u0010\u0017T\u001c\u0014\u0005\u001aE[K\u003e\u001f\u0007\u000fP\u000eL[\u0001\u0000\u0006\u000e\u001bTHE@[\u000b[T\r\u0003\bYFJ\u0002\\Z\u001a\t\u0002SH]NXG\u0004\f\u000fJ\u001bMH\u0001\n-]\nO\r\u001b\u0003\u000eJWI_\u0011\u0003YQ\u001a\u000bU\b\r\t\u0014U]\u000fS\u000b\u0005\u0006\u001c\\\u001fXA\u0007^][\u0015C\u000b\n\u000f\u001b@\u0007\u0002YX_i\u0013\u0000\nJO9e\u0014"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.25.5\r\nDate: Sat, 28 Mar 2026 20:12:32 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://vidara.so\r\nAccess-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE\r\nAccess-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":81,"dns":4,"connect":28,"send":0,"wait":26,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.36.2/jwplayer.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.2.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:29.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q1","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 10 Mar 2026 00:27:00 GMT","end":"Thu, 24 Sep 2026 23:27:00 GMT"},"fingerprint":{"sha1":"C2:A7:F2:8B:AB:12:E7:4F:11:6B:22:94:9B:93:61:5B:D8:81:CA:24","sha256":"90:DB:10:04:22:C5:07:DE:3B:E8:30:8A:FA:27:ED:16:6B:02:8F:9C:A7:28:87:F5:F7:DE:50:63:75:2A:A1:8D"}}},"request":{"raw":"GET /player/v/8.36.2/jwplayer.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, immutable\r\nlast-modified: Thu, 12 Sep 2024 17:51:59 GMT\r\netag: \"5454f51ab2c9ba10955938c3458ef45d\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 28 Mar 2026 20:12:29 GMT\r\nage: 2497817\r\nx-served-by: cache-lga21958-LGA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 3, 421\r\nx-timer: S1774728749.318948,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 50436\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":148627,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65144)","md5":"5454f51ab2c9ba10955938c3458ef45d","sha1":"207795d527b8205d07fecb668a2d3a150db56f9f","sha256":"ee28fb495ac5b28ae38033e36a640d41dfeb2528c5124ff0203b09b06c05a36d","sha512":"4b4e4358522d6cec1e32343e5c219658535fdf01ab5805d6d9f7a0d98e94eaba4a69c0c5862ca7bf0985367b48287e071617b81f62c43c35b97f4a3ee1cb4124","ssdeep":"1536:VCLyl/ByE1iqx9JaGB2lAqU6ePRtwoIWz0Bk+5VH3wen+LhUi3LhflsqKkcRPUeV:VVbpk+Ui3LhddhHwSy","tlshash":"a3e33aa631c2f4a617e264c7e47a4101f1790988744de864faacecda3916947b1b3ffc","first_seen":"2024-09-28T01:51:51Z","last_seen":"2026-04-05T11:28:19.187067Z","times_seen":556,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":71,"dns":9,"connect":29,"send":0,"wait":27,"receive":30,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s9vfh962nhn5.n4.adsco.re/","fqdn":"s9vfh962nhn5.n4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"38.132.109.126","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:30.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.n4.adsco.re","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 09:14:10 GMT","end":"Tue, 09 Jun 2026 09:14:09 GMT"},"fingerprint":{"sha1":"01:42:4C:CF:C2:72:11:47:31:B9:EE:9E:A4:22:15:77:2C:41:7B:7F","sha256":"10:58:20:DB:97:61:AB:11:FE:85:26:9E:FC:2C:16:69:E2:A7:F0:3B:43:1D:BD:0A:C8:4D:37:69:B5:BC:60:32"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: s9vfh962nhn5.n4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 28 Mar 2026 20:12:30 GMT\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":845,"timings":{"blocked":372,"dns":120,"connect":86,"send":0,"wait":87,"receive":0,"ssl":177},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"renamereptiliantrance.com/get/2098228?id=2098228\u0026jp=_clspdfzayvmuguwhvecser\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.32-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=2\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=q9X88NFaHR0cHM6Ly92aWRhcmEuc28vZS9OMlQ2UnN0RUxhTHA\u0026afid=7716132994533888\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=8\u0026pkw=0\u0026pload=1070\u0026rlp=%5B0%2C21%2C224%2C152%2C1947%2C1536%2C519%2C1226%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"renamereptiliantrance.com","domain":"renamereptiliantrance.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:30.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"renamereptiliantrance.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Mar 2026 13:26:18 GMT","end":"Sat, 20 Jun 2026 13:26:17 GMT"},"fingerprint":{"sha1":"04:8F:71:66:4C:F7:AD:07:89:E5:9E:A4:46:08:CB:4E:FF:1B:8E:FF","sha256":"CC:26:08:E9:15:CA:94:CA:81:90:87:58:5A:50:AA:68:A6:16:3B:4B:30:9E:7A:B3:00:D8:63:6F:48:97:67:01"}}},"request":{"raw":"GET /get/2098228?id=2098228\u0026jp=_clspdfzayvmuguwhvecser\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.32-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=2\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=q9X88NFaHR0cHM6Ly92aWRhcmEuc28vZS9OMlQ2UnN0RUxhTHA\u0026afid=7716132994533888\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=8\u0026pkw=0\u0026pload=1070\u0026rlp=%5B0%2C21%2C224%2C152%2C1947%2C1536%2C519%2C1226%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0 HTTP/1.1\r\nHost: renamereptiliantrance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nCookie: auth=v=current\u0026id=240a3d5896e1dcc2859240ed7c148d51; cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 20:12:30 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Sat, 01 May 2027 20:12:30 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Sat, 01 May 2027 20:12:30 GMT; Secure; SameSite=None\nUID=26032815127dafa7ca4cfd4cf1b31cccbc39; Path=/; Expires=Sat, 01 May 2027 20:12:30 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4810,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (4810), with no line terminators","md5":"e18084fb7e56ad1a7491bfc746bb1aed","sha1":"e1c1e61227e9f92ce75839c6a0d7d68e2e6b30c6","sha256":"439989e41e75ac7b6517d644b745310cf3fa69dcb9b885bed3e4e3aa84d0aecb","sha512":"2a51b49f8f4aec4c049141aa7953e197f38ec9cab1be2c8bd0568648e4359566fcb613cca9dc3b044f5a9fd4a19404c9ddaa613dd9c607950efd497c72cb783c","ssdeep":"96:dxPPq6lZ4l9YonPq6lZ4l9YoxBEErzTjF93Z3Cc:/PPqsZK9YuPqsZK9YzQcc","tlshash":"66a1f8e1d93bfb00649fad9a08fd9d6e61c0b84d13bb8055b899d78c57d8cb0c76248e","first_seen":"2026-03-28T20:13:04.966884Z","last_seen":"2026-03-28T20:13:04.966884Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adsco.re/p","fqdn":"adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:31.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"POST /p HTTP/1.1\r\nHost: adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vidara.so/\r\nContent-Type: text/plain;charset=x-user-defined\r\nContent-Length: 2815\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 28 Mar 2026 20:12:31 GMT\r\nContent-Type: text/plain\r\nContent-Length: 926\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://vidara.so\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET, HEAD, OPTIONS, POST\r\nAccess-Control-Max-Age: 10\r\nAccess-Control-Allow-Headers: Host, User-Agent, Accept, Accept-Language, Accept-Encoding, Referer, Content-Type, Content-Length, Origin, DNT, Connection, Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site, Pragma, Cache-Control\r\nTiming-Allow-Origin: *\r\nCross-Origin-Resource-Policy: cross-origin\r\nCache-Control: no-cache, no-store, no-transform, max-age=0\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1170,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with very long lines (1170), with no line terminators","md5":"84f90f44db804eb8fab085ef59b3f1f1","sha1":"0ec06a9b2d62f75f76fd34a35cc2716986948a0e","sha256":"7658ab5e77d259c275175bc3b08e5d11d3475bfdf8431e788265e6114bb15c8c","sha512":"4b501c9cb6dec2cb07b930c5be5af9b866c1c3a378f5edfd33c55fd204e6d636c6aada2f44abacebc80fca64b89039b36dc26a400af8e450557c0de6deef247f","ssdeep":"","tlshash":"c52106f9b4a0624defafba80bc9724208641d543c32797928d81db9f71dc0d03426c0e","first_seen":"2026-03-28T20:13:04.967872Z","last_seen":"2026-03-28T20:13:04.967872Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tzegilo.com/stattag.js","fqdn":"tzegilo.com","domain":"tzegilo.com","tld":"com"},"ip":{"addr":"172.67.193.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:31.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tzegilo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 07:10:45 GMT","end":"Sun, 07 Jun 2026 08:08:22 GMT"},"fingerprint":{"sha1":"C0:16:E2:E8:48:7D:FC:16:F7:4D:93:EF:AA:2A:9E:72:69:BB:9B:34","sha256":"59:F4:F7:A9:A0:14:B8:97:DA:6D:27:25:A1:52:E2:19:0D:36:7B:D2:85:DA:D5:5C:5F:DE:58:24:7F:52:46:DE"}}},"request":{"raw":"GET /stattag.js HTTP/1.1\r\nHost: tzegilo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 20:12:31 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Jul 2024 10:23:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlink: \u003chttps://flerap.com/\u003e; rel=preconnect; crossorigin, \u003chttps://fleraprt.com/\u003e; rel=preconnect; crossorigin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=utEdl62XIkJ4tjPspS29Ob8Y5JxkGlkzCUXTuQYdkqDqC0sSXYgGjOuMz4VYDoWhgnDr87WlcJl7y31dTlyK2dozVyKASFvWgK0m7gwKIPAhccM6nYUwxm3Ml45vmw%3D%3D\"}]}\r\nage: 4155\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"668fb2be-45d7\"\r\ncontent-encoding: br\r\ncf-ray: 9e394a4a8d9a8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17879,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17229)","md5":"01227f5edc20e0ff4ed643b27cb8bb68","sha1":"d71a88f7341f2b1bdaa7deb9a66888607bd52598","sha256":"75c91d86601e23ab56d872b31b42660f893fc6d6b0785e085c06c2c038e98fb2","sha512":"88046b07c07ff6de47ef7d1e0d7ca281fc48e91fc6a292cdf611457b96ac92bb0068971cfd55c0cc3e6179d7335e77a6a14b15fa502bbae7b2233546da6c0f98","ssdeep":"384:WDWdyJ+TJTwWV+6RUL2qq8L6jW4+QL1zWAWvVRIDiei:7so1V+g+d+j4pJ5","tlshash":"8d82094a72d525ee82a3a1d10cef612ffb664e86a97e1785e381b49c187404ec3d7f90","first_seen":"2024-07-11T16:28:55Z","last_seen":"2026-04-05T11:37:19.756326Z","times_seen":6366,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":24,"dns":4,"connect":1,"send":0,"wait":7,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fedoq.com/401/10572062?oo=1\u0026sw_version=v1.802.0-s\u0026oaid=080307daa8c24bcbfa3bd260f8f04ef4\u0026st=true","fqdn":"fedoq.com","domain":"fedoq.com","tld":"com"},"ip":{"addr":"139.45.197.116","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:31.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fedoq.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 05:12:13 GMT","end":"Mon, 15 Jun 2026 05:12:12 GMT"},"fingerprint":{"sha1":"34:34:EB:E0:C2:BE:04:35:EF:2E:23:56:BF:E4:88:64:91:F8:FC:BA","sha256":"18:12:B0:A9:07:D7:82:F7:43:06:05:38:B3:3F:15:89:7E:39:6B:81:0B:8E:91:61:FC:DA:14:6D:C8:EB:38:73"}}},"request":{"raw":"POST /401/10572062?oo=1\u0026sw_version=v1.802.0-s\u0026oaid=080307daa8c24bcbfa3bd260f8f04ef4\u0026st=true HTTP/1.1\r\nHost: fedoq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 24\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":24,"data":"{\"error\":\"adex timeout\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 20:12:31 GMT\r\ncontent-type: application/json\r\nx-trace-id: 1c5db8440f12d6b1b6cd204efe109ba9\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-origin: https://vidara.so\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nset-cookie: OAID=080307daa8c24bcbfa3bd260f8f04ef4; expires=Sun, 28 Mar 2027 20:12:31 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2589,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with very long lines (2589), with no line terminators","md5":"606ccda911079b220ca4e086b2263cca","sha1":"185a091731f4a29f710a2fcdd6c94bb807bde979","sha256":"bcbc877a6d91bb21a5d443df20ef6aae76d932f46ad427c39934068e8366c7a4","sha512":"bf67d81e2959242930ca8ac538cf1e99e36afb776f9326d460184df63673c7b240f940ecfd3a66501bceb55c06f2115ab4f0cbf701d899a205c3e873a7c05b7f","ssdeep":"","tlshash":"94511413aee07d7ff59e9240cf68b74ad37ed484b2f95689ce259b2d7bd42422067000","first_seen":"2026-03-28T20:13:04.969304Z","last_seen":"2026-03-28T20:13:04.969304Z","times_seen":1,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":76,"dns":10,"connect":26,"send":0,"wait":31,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"entitlements.jwplayer.com/GCCG.json","fqdn":"entitlements.jwplayer.com","domain":"jwplayer.com","tld":"com"},"ip":{"addr":"52.84.50.105","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:31.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwplayer.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Fri, 19 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2F:FF:B9:03:44:93:31:3C:BF:52:A9:11:31:A1:70:35:48:94:BE:70","sha256":"CA:81:AC:A9:1D:64:33:27:CA:C6:60:1F:4D:67:17:E5:1E:D1:A2:16:8B:32:F1:E5:01:83:5F:8C:7E:54:4F:67"}}},"request":{"raw":"GET /GCCG.json HTTP/1.1\r\nHost: entitlements.jwplayer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\ncontent-type: application/json\r\ncontent-length: 71\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 16:41:58 GMT\r\ncache-control: max-age=1800, s-maxage=20400\r\naccess-control-allow-origin: *\r\nx-cache: Error from cloudfront\r\nvia: 1.1 b5699d1b7e44f0e87927693889ab2666.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: orS6Rb3Nxlg_jyYdOFSP-cKOPlyGOhhlxXJTozSXPWTkViYvi2q30A==\r\nage: 12633\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":71,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5534f424f1d6586164a58758f3e2c51a","sha1":"ef37ca3d8831aaad699430dcaa9967469542d602","sha256":"f28df38bea81995fd78f9077bff2dfc9d60ee13b8c414bc426c61c0e1b0bee86","sha512":"de8d4f36c7f0f85b1fb1a52e22e511fd2e52e7ba6010b39947d72eceb752a60b7578be34dc4c44be6add327cef42a82442099d803bcc3251d84ec05d26fe4d15","ssdeep":"","tlshash":"0da0023eec5654030de616dc3cdae44612f4135c1754544c8e8915ac1adfef24f13311","first_seen":"2023-05-03T00:46:19Z","last_seen":"2026-04-05T11:28:19.179835Z","times_seen":995,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":45,"dns":25,"connect":1,"send":0,"wait":2,"receive":1,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/assets/css/jwplayer.css","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:29.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidara.so","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 11:08:37 GMT","end":"Tue, 05 May 2026 12:07:22 GMT"},"fingerprint":{"sha1":"A6:7B:1F:15:8E:93:40:C2:D5:ED:5D:0E:F1:41:D9:F4:BC:D1:C7:F0","sha256":"0F:4A:DE:A1:CD:61:73:8E:21:8A:AD:69:22:87:25:83:3A:5C:44:F1:33:DB:B1:48:E3:94:87:BA:16:59:80:31"}}},"request":{"raw":"GET /assets/css/jwplayer.css HTTP/1.1\r\nHost: vidara.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/e/N2T6RstELaLp\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 20:12:29 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 16 May 2025 03:51:01 GMT\r\nexpires: Sun, 29 Mar 2026 04:39:49 GMT\r\ncache-control: max-age=43200\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\netag: \"6826b625-c0f9\"\r\nage: 12759\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YmMuXyLHGzGizM51g1iG%2BPZ0BElE%2FsaEUayOKDARhnpMEi%2BnEtiUy%2FS%2F9Uo8FTfm42p60GH2HOD8aQVoVz9ZBti0rKEYk3fp%2FGKCTw9W1Bg43wVBxtKV%2Bsn78VQ%3D\"}]}\r\ncf-ray: 9e394a3a9f3556c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49401,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"assembler source, Unicode text, UTF-8 text","md5":"aee1cc505893eae9bac231f379bcbe05","sha1":"f8699e76b0bda33e724e6bb71382c5b2e08f7d14","sha256":"f0e29054154a4b18f0ceb547f8ecda934e5fd172f50089d07695c76232db26a2","sha512":"0531311755b2b9cafb4ef2aac45b6250777637929b029d348845c640882639687ec726735a212873836156c4074e49470af071b9b77fd3a470feb29dad44553b","ssdeep":"1536:AQV8FxnYgpery2vYsRwq9AOOGvC4DfNaYj3RD:AQVMxnYTy2v/AOOkJRD","tlshash":"0c239522a7812c0cf06bd1b67d6197d6233e4053d92b1f7c7ab93578c28e4e85173b9a","first_seen":"2025-06-22T15:21:23.733231Z","last_seen":"2026-04-05T11:28:19.181069Z","times_seen":541,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:29.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/crypto-js/4.2.0/crypto-js.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 20:12:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 19621\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65384d58-4ca5\"\r\nlast-modified: Tue, 24 Oct 2023 23:03:52 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 301733\r\nexpires: Thu, 18 Mar 2027 20:12:29 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4qg%2Bf8UTMcFFwnPyXWwY1YBcN4mVGN5JEqtsvY4KyUuUccIiQc7jlHACXGMZFGwNEgrBPil9k5WTkNPlVHi1x8SIuA2nxhBGbM3RmtuxrVfNG8WMIwL6%2Blkf%2FHNbmfYpXBNmiM8d\"}]}\r\ncf-ray: 9e394a3adfae8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60819,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (60819), with no line terminators","md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-04-05T11:28:19.13941Z","times_seen":29369,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":18,"dns":3,"connect":1,"send":0,"wait":8,"receive":1,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jnbhi.com/tag.min.js","fqdn":"jnbhi.com","domain":"jnbhi.com","tld":"com"},"ip":{"addr":"139.45.197.235","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:29.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jnbhi.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 10:36:12 GMT","end":"Sun, 21 Jun 2026 10:36:11 GMT"},"fingerprint":{"sha1":"AE:21:BA:A1:71:27:FE:2A:17:5C:F9:6E:CA:A6:1D:6E:C2:16:B2:CF","sha256":"D3:AB:C3:CD:0D:FD:D8:63:C4:F6:A0:A5:5B:B5:6E:13:13:49:F0:A5:C0:9B:02:BB:E5:6F:E0:A1:F4:40:87:1F"}}},"request":{"raw":"GET /tag.min.js HTTP/1.1\r\nHost: jnbhi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 20:12:29 GMT\r\ncontent-type: application/javascript\r\nx-trace-id: bcb995f8ec8c5e437ae40120a5a04db2\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102835,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d39d79eb25787f110d772e62b3d5529b","sha1":"180ee3f77596df959f43342b52a1a1128cbdd29a","sha256":"eb7ae6493245059210f6eea7ed19ba655208c7bf7d500908f2c1ea3b96c75ee7","sha512":"aadc7f7d71d39b4bbba1909604c2fd67fef4f754613f70e0827d26a887b7f5c40b3e7c0569d9383556da92a1638e2f0b6308317b158553aee417a9d6a6289ccd","ssdeep":"3072:k7tzzM3tU9+mIKSnWeFQ6uriu19pAvqdNoWdabBcjCcbXl:279+1K7eFInjCcbl","tlshash":"5ea32ada37a2746a42de0270815b5c1fa6da8c90584ec978e0327db53938a54d3fbfdc","first_seen":"2026-03-27T15:52:26.478815Z","last_seen":"2026-03-30T05:59:42.016161Z","times_seen":33,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":68,"dns":12,"connect":27,"send":0,"wait":51,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:29.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Feb 2026 19:28:29 GMT","end":"Fri, 22 May 2026 20:28:25 GMT"},"fingerprint":{"sha1":"36:C6:D1:CA:01:47:A4:1B:73:8E:62:DB:CB:24:79:4D:06:01:3B:B5","sha256":"11:41:34:A5:A1:10:2F:10:C6:7F:8A:F2:77:75:66:AA:39:99:F9:E7:00:8D:1E:EE:4E:30:42:B7:A3:82:28:31"}}},"request":{"raw":"GET /gid.js HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 20:12:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: https://vidara.so\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=080307daa8c24bcbfa3bd260f8f04ef4; expires=Sun, 28 Mar 2027 20:12:29 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: gzip\r\ncf-ray: 9e394a3ed849b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"cff48c64ddc5d3c1dbf488c7bdbaf444","sha1":"3b01e19ec7c4f7618ef99a85e7a1d883f0edaa54","sha256":"2f48e3df74f7dc15f9a891b919cb3227882a4d5094a4530afa26f68d04087b7e","sha512":"d5b64cea3bf91acc6e0c3007279685abb48eaa7961fb0c79786b305651e395373d7cff5088fe2d3ba4a3e91e4b5ed234f54998c0300086c31978e07eae4552a5","ssdeep":"","tlshash":"f7a00258e82c1996628055959ecba64185910663a80a769952f88106119734d8b4b244","first_seen":"2026-03-28T20:13:04.972292Z","last_seen":"2026-03-28T20:13:04.972292Z","times_seen":1,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":34,"dns":6,"connect":1,"send":0,"wait":41,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4.adsco.re/","fqdn":"4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:30.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vidara.so/\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 28 Mar 2026 20:12:30 GMT\r\nContent-Type: text/plain\r\nContent-Length: 62\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://vidara.so\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET, HEAD, OPTIONS, POST\r\nAccess-Control-Allow-Headers: Host, User-Agent, Accept, Accept-Language, Accept-Encoding, Referer, Origin, DNT, Connection, Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site, Pragma, Cache-Control\r\nCache-Control: private, max-age=300, immutable, stale-if-error=300, stale-while-revalidate=300\r\nExpires: Sat, 28 Mar 2026 20:17:30 GMT\r\nETag: \"5b41cb22f84f645a103acc7bfbf084ff\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":79,"dns":1,"connect":25,"send":0,"wait":30,"receive":1,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.36.2/jwpsrv.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.2.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:31.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q1","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 10 Mar 2026 00:27:00 GMT","end":"Thu, 24 Sep 2026 23:27:00 GMT"},"fingerprint":{"sha1":"C2:A7:F2:8B:AB:12:E7:4F:11:6B:22:94:9B:93:61:5B:D8:81:CA:24","sha256":"90:DB:10:04:22:C5:07:DE:3B:E8:30:8A:FA:27:ED:16:6B:02:8F:9C:A7:28:87:F5:F7:DE:50:63:75:2A:A1:8D"}}},"request":{"raw":"GET /player/v/8.36.2/jwpsrv.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=900, immutable\r\ncontent-encoding: br\r\nlast-modified: Fri, 27 Mar 2026 18:46:39 GMT\r\netag: \"66a95065e9ba51449414344fca0af3fd\"\r\ncontent-type: text/javascript\r\nserver: AmazonS3\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 28 Mar 2026 20:12:31 GMT\r\nage: 639\r\nx-served-by: cache-lga21962-LGA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 14804, 5\r\nx-timer: S1774728751.048862,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 18200\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":70911,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"6186b45e8b06884b97470784d3c97e7b","sha1":"ac24f754bdf2ca6bcb8c9deb9332678e51151b85","sha256":"b6b92105a57ac9f193e3ad2cc0672f9b4f1b7a4143fc9532af6817ffb8baf93b","sha512":"3b2e1079917aff3758aa6636dbf76331225cbf99549954818eaa5f3bca17c7663f8558cdf999e417dfd50d350b36906117fe69bb2e6e58d8488fdfef7360a1bf","ssdeep":"768:HCSERdv/7m12h8yK8A2qp99s73ZaLGRvlTk17OIp84:HvEb/7m12h8yKb2qXEZaLGRvI7/pj","tlshash":"ba63c88d3785716a5a6774b8807fb546723d2ea7308dc210d941eec93c2da5eb233b2c","first_seen":"2026-03-27T20:18:09.682254Z","last_seen":"2026-04-05T11:28:19.200507Z","times_seen":32,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.36.2/provider.hlsjs.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.2.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:31.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q1","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 10 Mar 2026 00:27:00 GMT","end":"Thu, 24 Sep 2026 23:27:00 GMT"},"fingerprint":{"sha1":"C2:A7:F2:8B:AB:12:E7:4F:11:6B:22:94:9B:93:61:5B:D8:81:CA:24","sha256":"90:DB:10:04:22:C5:07:DE:3B:E8:30:8A:FA:27:ED:16:6B:02:8F:9C:A7:28:87:F5:F7:DE:50:63:75:2A:A1:8D"}}},"request":{"raw":"GET /player/v/8.36.2/provider.hlsjs.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, immutable\r\nlast-modified: Thu, 12 Sep 2024 17:52:00 GMT\r\netag: \"283d59c375ad57728e89bd2fd1b6af1d\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 28 Mar 2026 20:12:31 GMT\r\nage: 2426011\r\nx-served-by: cache-lga21989-LGA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 22, 265\r\nx-timer: S1774728751.051315,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 128674\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":461432,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65143)","md5":"283d59c375ad57728e89bd2fd1b6af1d","sha1":"1ae8e4b8bf7141cecc15442f9d83dc10a066fcdb","sha256":"423fb0c266f4a755fb3e2d9093f92b92a7e9bfe4c0c4a900b4342c5b9f6ea0cb","sha512":"fe8272ea849648c625e7810dd76a9ffec8d9877cf63f0c9a2bb18ba7feec6c97f559bbbfe51324a68039ca3b1bd06802124af02e833ced161128555d17434486","ssdeep":"6144:h49gZtOST1zXBUkGHZu08Q9Eu969j3/nqJxgEMmew9rrqIZk6:Gy1VGHZu0pU9TqJxgEXZF","tlshash":"2ea43bdd77a5a02642c2a1a5903f4607633b7d0a740dc1acfa2be9d75db8849b03bf74","first_seen":"2024-09-18T21:59:43Z","last_seen":"2026-04-05T11:28:19.140867Z","times_seen":592,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.uuidksinc.net/match/1924/?remote_uid=b8723b91-abd2-5ebc-887c-d6452b7e9c80","fqdn":"s.uuidksinc.net","domain":"uuidksinc.net","tld":"net"},"ip":{"addr":"31.220.27.155","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:30.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uuidksinc.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 23:22:16 GMT","end":"Wed, 27 May 2026 23:22:15 GMT"},"fingerprint":{"sha1":"83:FF:82:95:BA:A9:B2:DF:1E:2B:5D:04:6C:75:92:A8:7F:4B:68:94","sha256":"8F:40:2B:B3:B0:26:55:F4:6C:8F:5F:38:9E:B6:39:B6:B5:C5:A2:E2:3A:14:C5:2A:E3:87:37:5A:34:40:76:0F"}}},"request":{"raw":"GET /match/1924/?remote_uid=b8723b91-abd2-5ebc-887c-d6452b7e9c80 HTTP/1.1\r\nHost: s.uuidksinc.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.23.2\r\ndate: Sat, 28 Mar 2026 20:12:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 74\r\naccess-control-allow-headers: X-Requested-With, Cache-Control, Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://vidara.so\r\nset-cookie: jcsuuid=vKhlkWGTXeg77eAUT5Pu; expires=Sun, 28 Mar 2027 20:12:30 GMT; domain=uuidksinc.net; path=/; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.23.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":74,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced","md5":"9e24e19b024c44b778301d880bd8e6f4","sha1":"d2b1b39cb4434d34c22c2cf52cbbe9967b1b688e","sha256":"01b58ddb2f86a768f91751b62f25395417f6cf526191a4aefc1ebe4f8beacdcb","sha512":"4957e24a00b7ff54b350c33392560937e69ee5accf2e439781e27b4ac506eeeddef3bebd5d911185add175d648f4636dc5116e311b9c6c6ed34b842153e0b124","ssdeep":"","tlshash":"1ba022e22380fcbccc220033002003b0ceb0802808208e0f0c2c8c3a0800a0880cc383","first_seen":"2023-04-06T20:02:01Z","last_seen":"2026-04-05T11:36:00.711302Z","times_seen":6228,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":44,"dns":3,"connect":18,"send":0,"wait":17,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/sdkloader/ima3.js","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:31.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:47 GMT","end":"Mon, 01 Jun 2026 08:37:46 GMT"},"fingerprint":{"sha1":"84:E2:03:36:CA:39:FF:65:64:D9:12:E7:E2:28:88:8C:3C:A0:CA:BA","sha256":"45:AF:9C:39:77:2B:D1:D7:B8:04:BB:2C:0E:98:C5:BB:8A:E8:99:A6:C3:AF:7F:90:AA:23:EA:F2:8F:AD:8F:B1"}}},"request":{"raw":"GET /js/sdkloader/ima3.js HTTP/1.1\r\nHost: imasdk.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ndate: Sat, 28 Mar 2026 20:12:31 GMT\r\nexpires: Sat, 28 Mar 2026 20:12:31 GMT\r\ncache-control: private, max-age=900, stale-while-revalidate=3600\r\ncontent-type: text/javascript; charset=UTF-8\r\netag: 11144325066176035180\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: br\r\nserver: cafe\r\ncontent-length: 148242\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":472738,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2969)","md5":"d3b9e457af7a1acddea574e8050d7743","sha1":"1125d2ebed73235b1f2d083b9fa98eb75a7024db","sha256":"fddb05b5901a7d91d7acf838270dcf9d0382ec08924c793a680f3d1e123e962d","sha512":"765b7ba98012a7d16f92f03f2d7f9ebc74d70c4d93d4e25ce446949a0f5018290e4f0482fc264cac2f6a9327c23c7ea7f77aa0d4f09ef8062f7e5311231c9510","ssdeep":"6144:SbEUmxlExtCtBhZ3ePLiO9xxPzFBLw8lswlPqD:pBzeziO3LHLwulPqD","tlshash":"1fa40bcdb6a674629363f4f5403f010fb23ba866f40888acb249d9e16e749495277f7c","first_seen":"2026-03-27T20:18:09.65547Z","last_seen":"2026-03-30T05:59:42.006895Z","times_seen":13,"resource_available":true,"data":null}},"time_used":405,"timings":{"blocked":103,"dns":7,"connect":27,"send":0,"wait":70,"receive":121,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m696yefd.s1q2105.com/thumbnails/logo_1953_1774189266.jpg","fqdn":"m696yefd.s1q2105.com","domain":"s1q2105.com","tld":"com"},"ip":{"addr":"50.7.24.26","port":443,"asn":174,"as":"COGENT-174","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:31.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m696yefd.s1q2105.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 04:11:57 GMT","end":"Thu, 18 Jun 2026 04:11:56 GMT"},"fingerprint":{"sha1":"FC:8F:D4:BD:2A:DA:1E:35:47:E5:8C:8B:C9:01:75:19:18:D1:B4:4A","sha256":"FB:C1:4E:0F:CD:2F:4A:1F:AD:DC:83:74:08:FA:3A:81:CB:EE:21:36:3D:33:2F:E0:CA:59:B3:D0:99:27:B0:7F"}}},"request":{"raw":"GET /thumbnails/logo_1953_1774189266.jpg HTTP/1.1\r\nHost: m696yefd.s1q2105.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 20:12:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 122569\r\naccess-control-allow-headers: Content-Type, Range\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Content-Range\r\nlast-modified: Sun, 22 Mar 2026 14:21:06 GMT\r\nx-cache: HIT\r\ncache-control: public, max-age=259200, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":122569,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, height=699, software=Android BP2A.250605.031.A3, orientation=upper-left, datetime=2026:03:22 19:50:25, width=712], baseline, precision 8, 712x699, components 3","md5":"0a52ab72f3c97124713bf8b60f931b89","sha1":"9744b215aa7c493c8d2e04256a1ded66e4c79828","sha256":"81248d4da50ddabecba0d8e0588b5b3abdbfdae964247e6860422478399a9881","sha512":"26e38291bcd6523e13df34870f3099323562e74fd0532316be7de3281b8efd7f7a792cf55b9a654ff15c8303766c0cbf4bff3bd3ef6d3ab4290ee33cc600d28a","ssdeep":"3072:bLaQ1g+V2gTxsZZsKwKQKJwOzLAJubz1X3dCGhvea:9L2gTxsqAJwOgJwzTC1a","tlshash":"f1c30173c2896e02f89b70b885776536e3d5792a57705a6f798bbcb8cc22818612d03d","first_seen":"2026-03-27T07:35:35.694799Z","last_seen":"2026-04-02T09:41:08.002425Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1660,"timings":{"blocked":103,"dns":4,"connect":41,"send":0,"wait":68,"receive":1385,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"renamereptiliantrance.com/on.js","fqdn":"renamereptiliantrance.com","domain":"renamereptiliantrance.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:29.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"renamereptiliantrance.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Mar 2026 13:26:18 GMT","end":"Sat, 20 Jun 2026 13:26:17 GMT"},"fingerprint":{"sha1":"04:8F:71:66:4C:F7:AD:07:89:E5:9E:A4:46:08:CB:4E:FF:1B:8E:FF","sha256":"CC:26:08:E9:15:CA:94:CA:81:90:87:58:5A:50:AA:68:A6:16:3B:4B:30:9E:7A:B3:00:D8:63:6F:48:97:67:01"}}},"request":{"raw":"GET /on.js HTTP/1.1\r\nHost: renamereptiliantrance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 20:12:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 24 Mar 2026 09:27:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69c258e9-11a07\"\r\nexpires: Sat, 04 Apr 2026 20:12:29 GMT\r\ncache-control: max-age=604800\r\nset-cookie: auth=v=current\u0026id=240a3d5896e1dcc2859240ed7c148d51; Max-Age=604800; Path=/; Secure; SameSite=None; Domain=.renamereptiliantrance.com\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":72199,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"c015941ec2f63c8ce7b415ee56fc14f7","sha1":"d3b69488e885528fd5f4d8d7a10f3488621fc52a","sha256":"9a8ec97ac03d048cac7c63941a8cb56cc28c9d8cc3a63f2579d47322ff47b991","sha512":"3fca5be139654e98a97b4cefb685c75f353e12ad82e1e75a1cddc60e50e5fa2a49099414ed39c87d377eb7ecdec6f47e184a8a36212ae1e02656c624ce5c76bb","ssdeep":"1536:dQG9Sfayap1r5EU9QONNwC9Zrm136jvHoW:bF+sN7iQjPJ","tlshash":"6c63a699f695b851035390f852bf001da33a7d6ce4fc5128b182e8d92cbcd8d9623f7a","first_seen":"2026-03-24T10:48:37.564276Z","last_seen":"2026-04-05T11:28:19.143363Z","times_seen":196,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":51,"dns":3,"connect":18,"send":0,"wait":18,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dd133.com/vignette.min.js","fqdn":"dd133.com","domain":"dd133.com","tld":"com"},"ip":{"addr":"172.67.170.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:29.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dd133.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 22:36:29 GMT","end":"Wed, 10 Jun 2026 23:34:55 GMT"},"fingerprint":{"sha1":"3E:12:42:4D:31:46:D5:08:46:E5:B0:BD:56:D3:EC:6B:24:69:32:E6","sha256":"BA:F1:8A:B2:0A:83:9C:C6:4F:1C:C8:BB:C9:56:1D:76:60:DB:04:1C:91:91:0A:1D:47:AE:D0:B0:E1:61:8A:6F"}}},"request":{"raw":"GET /vignette.min.js HTTP/1.1\r\nHost: dd133.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 20:12:29 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=600, s-maxage=1800\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 441\r\nlast-modified: Sat, 28 Mar 2026 20:05:08 GMT\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=evX5SmUjLd9JukRcEUWuJbBL%2FxpfLjOZm3WtCKaYkyPeQusv4X55BamHwftPcKyqYyE%2Fpij6voijw8AL3Lnwf6iXTAFFwavzYqvroEhJk2V5OBpyJZhc8TzexwI%3D\"}]}\r\ncf-ray: 9e394a3d8ad4a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":171792,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2033935f2db4663aebf65bb34aaf1c4e","sha1":"6931c61e546d60ef03537181b32b03686728fdab","sha256":"b1878fb7c6963edd9951b6ff2798ba93c2d86a3befc33f3cdc179adfc684a93c","sha512":"12c49debb8311ee1be4030ddedc19ff264cf740cad9bcef4e155b131767d9d86046315657b1e81570481f335c75fe08d3e095e72de6aa19202163f0a6dfc3c97","ssdeep":"3072:ZhAFvOAWOmoNpPCCcVTcuTiGjK3jss6wnO90iQy2NfKBbRDoKzB+gSaPRgn97zdu:/AmoNpPCCcVTcuTiGjK3jssJnO90iQyX","tlshash":"52f3d984b1d2b1a02d725134352fd64ea5ab7a70685ec980c1dae1f27f3706ac3b7dd8","first_seen":"2026-03-26T12:04:02.1334Z","last_seen":"2026-03-30T07:53:02.281029Z","times_seen":29,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":27,"dns":6,"connect":1,"send":0,"wait":10,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.displayvertising.com/fsass.min.css","fqdn":"www.displayvertising.com","domain":"displayvertising.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:29.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1503693843.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 21 Jan 2026 18:36:08 GMT","end":"Tue, 21 Apr 2026 18:36:07 GMT"},"fingerprint":{"sha1":"C2:3B:E4:D9:A6:AA:57:59:68:54:01:C3:E7:BE:F9:FD:8C:55:FF:A4","sha256":"7D:44:01:89:FF:19:DC:DD:17:61:DC:65:25:43:91:F4:11:69:30:8A:AC:E3:DE:A1:D5:5A:69:9C:FB:88:09:27"}}},"request":{"raw":"GET /fsass.min.css HTTP/1.1\r\nHost: www.displayvertising.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 20:12:29 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=259200, immutable, stale-if-error=259200, stale-while-revalidate=259200, must-revalidate\r\nexpires: Mon, 16 Mar 2026 19:34:31 GMT\r\nlink: \u003chttps://displayvertising.com/\u003e;rel=preconnect,\u003chttps://c.adsco.re/\u003e;rel=preload;as=script,\u003chttps://adsco.re/\u003e;rel=preconnect;as=1;crossorigin,\u003chttps://4.adsco.re/\u003e;rel=preload;as=fetch;crossorigin,\u003chttps://6.adsco.re/\u003e;rel=preload;as=fetch;crossorigin,\u003chttps://4.adsco.re:2087/\u003e;rel=preload;as=fetch;crossorigin,\u003chttps://6.adsco.re:2087/\u003e;rel=preload;as=fetch;crossorigin\r\netag: W/\"9d3a9e0067740dd23bcfc0ec08526cd6\"\r\nx-77-nzt: k6tsSPMJVmPT76YEv+7nrWeI+XyAMYJiFbQHSnG9EOb6y63kQtLt+OcJocFx+JOQwwkOeQ8\r\nx-77-nzt-ray: 2a494a15d7b3a3e35236c8698811332a\r\nx-77-cache: HIT\r\nx-77-age: 2256\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\naccess-control-allow-origin: https://vidara.so\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":41949,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1568)","md5":"f38b67ea9f6aa06cbd561602d9f74a79","sha1":"078c14e3cdccaa26495924a8b1ee9a7cc257f0c9","sha256":"af53acdd556a3a3a68751cc46e787f31e2c26f49bcbaa4b2a006a661119765ff","sha512":"68135e56bfcba924d6358fc10062870e70fbba74a6be8ea15080a63f732541b1da1d0392eb42c4b31522d34031f41e6b3def65c2fd9be853de90ab314b2408cb","ssdeep":"768:bt9rqAYKKKZzFQ9JsQU+YDngZGihfzmMzhYrTsAysncCWcf5k5sigCrJGCntlqoD:bb5ZzFQ9JsTgZvfzmMzhYrTscpSKZ+","tlshash":"08132aaab286282601e742b9513eb316b23305167812d458fcb9cdf96e3dd86117b7fc","first_seen":"2026-03-14T05:38:07.669877Z","last_seen":"2026-04-05T11:28:19.179201Z","times_seen":79,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":51,"dns":32,"connect":1,"send":0,"wait":1,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"www.displayvertising.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.adsco.re/","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.84.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:29.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: c.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 20:12:29 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 10\r\ncache-control: public, max-age=172800, immutable, stale-if-error=172800, stale-while-revalidate=172800, must-revalidate\r\nexpires: Sat, 28 Mar 2026 00:34:15 GMT\r\nlink: \u003chttps://adsco.re/p\u003e;rel=preload;as=fetch;crossorigin;fetchpriority=high,\u003chttps://4.adsco.re/\u003e;rel=preload;as=fetch;crossorigin,\u003chttps://6.adsco.re/\u003e;rel=preload;as=fetch;crossorigin,\u003chttps://4.adsco.re:2087/\u003e;rel=preload;as=fetch;crossorigin,\u003chttps://6.adsco.re:2087/\u003e;rel=preload;as=fetch;crossorigin\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\netag: W/\"c6c606469d9cd6be605c4d11bee14fc7\"\r\nlast-modified: Sat, 21 Mar 2026 16:28:28 GMT\r\nvary: accept-encoding\r\nage: 0\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e394a3ec8a956c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91496,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (770)","md5":"c6c606469d9cd6be605c4d11bee14fc7","sha1":"8c8005141dc89dc54628c0cbb1ce31b1e17239e4","sha256":"e24a58ef8dd88e84e42f5ea4b85bdb6a9e1224d2a6e012f513c83f7030ca979c","sha512":"84f60b461d989b8e235e2fea9afd1011e87fc436f964d44aa2df15767a83e9b2ae87447e62a5b932ae9937deceb933a9b5d486b3177fffa1f3c32251ab53a0c8","ssdeep":"1536:+/DxMw9nXW3pnrMu5pX94hK2ATKEenhw8voUHmsPTOa39Ch:+/KwnG3Fnpt4hK2ATnenhw8vGO9u","tlshash":"2e936cb57271b03d01b220f9517f220ab1b94f611c8584929676e9e43cb2edbc37bf99","first_seen":"2026-03-21T16:35:02.351496Z","last_seen":"2026-03-30T19:07:46.982892Z","times_seen":348,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":29,"dns":4,"connect":1,"send":0,"wait":5,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/favicon.ico","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:30.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidara.so","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 11:08:37 GMT","end":"Tue, 05 May 2026 12:07:22 GMT"},"fingerprint":{"sha1":"A6:7B:1F:15:8E:93:40:C2:D5:ED:5D:0E:F1:41:D9:F4:BC:D1:C7:F0","sha256":"0F:4A:DE:A1:CD:61:73:8E:21:8A:AD:69:22:87:25:83:3A:5C:44:F1:33:DB:B1:48:E3:94:87:BA:16:59:80:31"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: vidara.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/e/N2T6RstELaLp\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D; ts_popunder-cnt=0; ts_popunder=Sat%20Mar%2028%202026%2020%3A22%3A30%20GMT%2B0000%20(GMT)\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Mar 2026 20:12:30 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\npriority: u=6,i=?0\r\nlast-modified: Tue, 20 Jan 2026 22:47:59 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IHb8Vl3ix35FNabIz3qzS%2FudE%2BnKzU97sGEr5FxlVKmA3SpiCeCEIoKp5F5puAop9ZjLET9VPC3igUrpTNFqIlTvAHsTTR6OLpW21glH4aRYgosQAVuMZOqLB4E%3D\"}]}\r\ncf-ray: 9e394a3f9a6a56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76449,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"9d24cd689232aeef3ad242a04720bd2f","sha1":"554dd518f972fa46e632090f0ac20667dd57cbc2","sha256":"b14b217c6189f5f6018da8b4e2e7a3ad678d25350034838ea1fbdaab6311959a","sha512":"e012c58660c4263d3afbbd3022fe37d4835893f0fb09103b3847a9ca3f7126b74046e28171268e30907eb5a81a776e363f8cde8fc0e3602575197c0c4ad3dbbc","ssdeep":"1536:5d6ChX3M7YEVh4PL7X4ihDhChWvhHmrz1jDb5foG5O:vhhX3M756nthDhChXpj5wp","tlshash":"7b7302615d06a1dbb5e128d82ea5873003b721ad6de64b60471f7e23fb9e9b0d308707","first_seen":"2026-01-23T12:16:01.298349Z","last_seen":"2026-04-04T23:17:43.229869Z","times_seen":238,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9181rtfg1.s1q2105.com/hls/yfnpJ5T5KgLveajGoiYqP4ikTORMxKo5/master.m3u8?token=6a8bfc4933bbfe2e71ccce12e7e532be-1774757549-91.90.42.154-f3cf4c9cb2ebe362b8d0457d76c6f11e6b892f14db6756a47815feffa4c42719","fqdn":"9181rtfg1.s1q2105.com","domain":"s1q2105.com","tld":"com"},"ip":{"addr":"203.17.244.73","port":443,"asn":137409,"as":"GSL Networks Pty LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:31.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9181rtfg1.s1q2105.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 06:07:26 GMT","end":"Fri, 26 Jun 2026 06:07:25 GMT"},"fingerprint":{"sha1":"7C:A2:7B:80:34:2D:12:AC:BF:B9:7C:91:02:F5:A1:A3:4F:68:CD:ED","sha256":"0B:7C:D7:69:1D:A6:E2:FB:EA:47:7D:80:05:90:F9:75:A8:B4:BF:A5:01:56:CD:DE:6F:C1:68:EC:05:07:C2:0E"}}},"request":{"raw":"GET /hls/yfnpJ5T5KgLveajGoiYqP4ikTORMxKo5/master.m3u8?token=6a8bfc4933bbfe2e71ccce12e7e532be-1774757549-91.90.42.154-f3cf4c9cb2ebe362b8d0457d76c6f11e6b892f14db6756a47815feffa4c42719 HTTP/1.1\r\nHost: 9181rtfg1.s1q2105.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 20:12:31 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\ncontent-length: 306\r\naccess-control-allow-headers: Content-Type, Range\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Content-Range\r\nx-cache: MISS\r\ncache-control: no-cache, no-store\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":306,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"5356269f3597e40821f285f708ff3e0f","sha1":"5471076f435c4996fe250f78d250797c3e25cf0e","sha256":"17659ffbd8201a2bf8b0b65c8a0d0734feef339c64f95c2c6b179e2e282f38b1","sha512":"426048ecdeaeeeb6bdfff7626699cd4f2ceb564d9c36f0bafe83885486f13dfb8ba78f7b31c33110e8f211e92d2cbdba2d71b7ff160d83c266da637096cb1d76","ssdeep":"","tlshash":"bfe07d98622dd5191c2045de020a214175f975bc8b90118978fdc7855d91cc0675e194","first_seen":"2026-03-28T20:13:04.978581Z","last_seen":"2026-03-28T20:13:04.978581Z","times_seen":1,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":111,"dns":3,"connect":46,"send":0,"wait":79,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fedoq.com/500/10572062?excludes=\u0026oaid=080307daa8c24bcbfa3bd260f8f04ef4\u0026tgp=\u0026of=true\u0026sw_version=v1.802.0-s\u0026dmn=dd133.com\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=981\u0026wfc=4\u0026pl=https%3A%2F%2Fvidara.so%2Fe%2FN2T6RstELaLp\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1","fqdn":"fedoq.com","domain":"fedoq.com","tld":"com"},"ip":{"addr":"139.45.197.116","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:32.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fedoq.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 05:12:13 GMT","end":"Mon, 15 Jun 2026 05:12:12 GMT"},"fingerprint":{"sha1":"34:34:EB:E0:C2:BE:04:35:EF:2E:23:56:BF:E4:88:64:91:F8:FC:BA","sha256":"18:12:B0:A9:07:D7:82:F7:43:06:05:38:B3:3F:15:89:7E:39:6B:81:0B:8E:91:61:FC:DA:14:6D:C8:EB:38:73"}}},"request":{"raw":"GET /500/10572062?excludes=\u0026oaid=080307daa8c24bcbfa3bd260f8f04ef4\u0026tgp=\u0026of=true\u0026sw_version=v1.802.0-s\u0026dmn=dd133.com\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=981\u0026wfc=4\u0026pl=https%3A%2F%2Fvidara.so%2Fe%2FN2T6RstELaLp\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1 HTTP/1.1\r\nHost: fedoq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nCookie: OAID=080307daa8c24bcbfa3bd260f8f04ef4\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 20:12:32 GMT\r\ncontent-type: application/javascript\r\nx-trace-id: c9187fa0ac008e4c896ec873aa390828\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-origin: https://vidara.so\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nset-cookie: OAID=080307daa8c24bcbfa3bd260f8f04ef4; expires=Sun, 28 Mar 2027 20:12:32 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1997,"size_decoded":0,"mime_type":"application/javascript","magic":"JSON text data","md5":"e4236cb1dcaa1d27fb4b7dd1bbd6483e","sha1":"3b5b0bc6cd3f05c55e3991e843e36eed876b4010","sha256":"de0f8ae47853dc9a35382df22e5c1d318fc9a8198d78c7de962ad6728865aa0c","sha512":"48b3ad78c18bf48feaa6b7404e0ea8f7ea6d073fe2b4d52fe2900afa21a766c76c5f800476cdc98cf6187b85cdd792ce1c494bfbf54b0ebc2ad974c4d5864180","ssdeep":"","tlshash":"c041082a5448d9f188ab5f70f01ab49cd5bda5c39c7cb3809a2d8b6001647b0bed943c","first_seen":"2026-03-28T20:13:04.979591Z","last_seen":"2026-03-28T20:13:04.979591Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/assets/js/new100.js?v=max","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:29.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidara.so","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 11:08:37 GMT","end":"Tue, 05 May 2026 12:07:22 GMT"},"fingerprint":{"sha1":"A6:7B:1F:15:8E:93:40:C2:D5:ED:5D:0E:F1:41:D9:F4:BC:D1:C7:F0","sha256":"0F:4A:DE:A1:CD:61:73:8E:21:8A:AD:69:22:87:25:83:3A:5C:44:F1:33:DB:B1:48:E3:94:87:BA:16:59:80:31"}}},"request":{"raw":"GET /assets/js/new100.js?v=max HTTP/1.1\r\nHost: vidara.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/e/N2T6RstELaLp\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 20:12:29 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Wed, 21 Jan 2026 01:32:09 GMT\r\nexpires: Sun, 29 Mar 2026 04:39:49 GMT\r\ncache-control: max-age=43200\r\nx-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rUL4U62PGW6fNWcF%2Bdfm2AX22raOiRYY1ApSB%2BEoijMe3ef9uK%2Bi%2BYPtVrP5dZAi1NXyUcBZAdRXFJ635wgrkX5d2tael3goyehlTNqftunRbniMa9hW%2BJ5gGlI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 12759\r\ncf-cache-status: HIT\r\netag: W/\"69702c99-3a0\"\r\ncontent-encoding: br\r\ncf-ray: 9e394a3aaf5d56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":928,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (928), with no line terminators","md5":"9d417c5dbae8a3d933a478e1a0d886a5","sha1":"e3fc7ca463c6e4a759866790911ee6aa23a4b842","sha256":"3718b865d7162567322249682a0c6113ad4ddc91bb48c33285cdc5d491dde1bc","sha512":"dbb728632688f60dbbcc3a8bf2e5ba00d53cc9b1ab3552d605ba500e19c1b944413e4dc0e44f3b9c651ffdb3d62f67a1470727127fb0666f5b0268569e0c85a6","ssdeep":"","tlshash":"b7115c767ce4763031ea094a3427a185f0f20b642d19e574519c0b6a38a8e4d9d37afd","first_seen":"2025-04-02T00:26:38.94272Z","last_seen":"2026-04-05T11:28:19.143986Z","times_seen":529,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/api/stream","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:29.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidara.so","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 11:08:37 GMT","end":"Tue, 05 May 2026 12:07:22 GMT"},"fingerprint":{"sha1":"A6:7B:1F:15:8E:93:40:C2:D5:ED:5D:0E:F1:41:D9:F4:BC:D1:C7:F0","sha256":"0F:4A:DE:A1:CD:61:73:8E:21:8A:AD:69:22:87:25:83:3A:5C:44:F1:33:DB:B1:48:E3:94:87:BA:16:59:80:31"}}},"request":{"raw":"POST /api/stream HTTP/1.1\r\nHost: vidara.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vidara.so/e/N2T6RstELaLp\r\nContent-Type: application/json\r\nContent-Length: 42\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":42,"data":"{\"filecode\":\"N2T6RstELaLp\",\"device\":\"web\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Mar 2026 20:12:29 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=foZ9rQYu%2B%2BPIj%2FqCifk9aWPf9dX0GdTnOCPv19Dd8iYsuiWCCsHOVsH6pLJPWS4pSajmkqBGXmbGsLnAd9QRGxVTYDcj0dLkCKtcqcCfNwRw07bZMLNRxoM0l1A%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e394a3c4a3256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":409,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"45ee7cc277263e3edc853ca2e895c7ab","sha1":"4f51ffc94eefdcd5b2b2ccc30fc36660fb57ce71","sha256":"bf74625b106f71488f7545f7a152424c737adfc528b8c2da6171c3350874108e","sha512":"d0196d0bed964be7a60bd438a538b0cff50e4362d22a943c26211e99c76a738ee3608ddffd3532f1762db980cbd0654ad4efe851fd7bdbe3a9757d3b0f68f1c0","ssdeep":"","tlshash":"cfe0f1f6ab1c19623b005add528a604c4ffe831b5cd1248e08d4ef8598269f9e68b090","first_seen":"2026-03-28T20:13:04.980873Z","last_seen":"2026-03-28T20:13:04.980873Z","times_seen":1,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/sdk/v1/puengine.js","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:29.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 04:32:19 GMT","end":"Wed, 29 Apr 2026 04:32:18 GMT"},"fingerprint":{"sha1":"82:62:34:52:A9:E7:DA:4D:26:88:80:06:2F:BC:5C:DA:1D:69:85:1C","sha256":"76:DF:7A:DD:FF:3D:83:17:E5:A1:5C:BA:E1:49:7D:28:B5:3C:6B:57:BE:C0:89:9E:73:BB:66:B2:4D:70:D3:FD"}}},"request":{"raw":"GET /sdk/v1/puengine.js HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 20:12:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Sun, 14 Dec 2025 19:31:28 GMT\r\netag: W/\"693f1090-15df5\"\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\ncache-control: max-age=172800\r\nexpires: Mon, 30 Mar 2026 20:12:29 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: DS9225,DS5058\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89589,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65496)","md5":"0439ff85060c466d4a8bddb14e25179a","sha1":"a069c9d7cc3b9c74f602c9a98e7f6db0418bfc69","sha256":"be3b75bde5d3da61537387482c899e9ac0855bff153b24adb7439a38c7dabb8d","sha512":"7d41caa0eaac5766f77707edfb243d4a94f1967cebe80a30e822e5d7373f3785c4e35b106e7a85a1b6309740a3b6967a6335cde2062d6c0e3010b26325fbe195","ssdeep":"1536:p39zsfUK2AHAuaEGDo7hLAknqLULh9/S1dHWyRj:l9zsfU5mGc5A2qLULh9/SHHWyl","tlshash":"7d93d65d7093604961d2f6fc007f368a686ac850f45e8caa6674d3c2ec7c4ad84e79fb","first_seen":"2025-12-16T18:52:32.108111Z","last_seen":"2026-04-05T11:36:00.688761Z","times_seen":326,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s9vfh962nhn5.s4.adsco.re/","fqdn":"s9vfh962nhn5.s4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"185.200.116.60","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:30.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.s4.adsco.re","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 09:14:12 GMT","end":"Tue, 09 Jun 2026 09:14:11 GMT"},"fingerprint":{"sha1":"7A:26:B3:78:75:38:C7:A1:20:B3:1B:AB:73:65:80:E3:1E:C3:15:0B","sha256":"F8:C5:CB:97:C1:2E:8C:45:61:E6:FC:53:61:E9:2C:27:48:8B:D2:26:E0:66:16:D3:D1:65:F0:AA:95:1E:F9:6C"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: s9vfh962nhn5.s4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 28 Mar 2026 20:12:30 GMT\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":1697,"timings":{"blocked":743,"dns":192,"connect":189,"send":0,"wait":189,"receive":0,"ssl":381},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9181rtfg1.s1q2105.com/hls/yfnpJ5T5KgLveajGoiYqP4ikTORMxKo5/index_1920x1080.m3u8?token=6a8bfc4933bbfe2e71ccce12e7e532be-1774757549-91.90.42.154-f3cf4c9cb2ebe362b8d0457d76c6f11e6b892f14db6756a47815feffa4c42719","fqdn":"9181rtfg1.s1q2105.com","domain":"s1q2105.com","tld":"com"},"ip":{"addr":"203.17.244.73","port":443,"asn":137409,"as":"GSL Networks Pty LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:31.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9181rtfg1.s1q2105.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 06:07:26 GMT","end":"Fri, 26 Jun 2026 06:07:25 GMT"},"fingerprint":{"sha1":"7C:A2:7B:80:34:2D:12:AC:BF:B9:7C:91:02:F5:A1:A3:4F:68:CD:ED","sha256":"0B:7C:D7:69:1D:A6:E2:FB:EA:47:7D:80:05:90:F9:75:A8:B4:BF:A5:01:56:CD:DE:6F:C1:68:EC:05:07:C2:0E"}}},"request":{"raw":"GET /hls/yfnpJ5T5KgLveajGoiYqP4ikTORMxKo5/index_1920x1080.m3u8?token=6a8bfc4933bbfe2e71ccce12e7e532be-1774757549-91.90.42.154-f3cf4c9cb2ebe362b8d0457d76c6f11e6b892f14db6756a47815feffa4c42719 HTTP/1.1\r\nHost: 9181rtfg1.s1q2105.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 20:12:32 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\naccess-control-allow-headers: Content-Type, Range\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Content-Range\r\nx-cache: MISS\r\ncache-control: no-cache, no-store\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9368,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"fe88eb5d66e6b355b82ad52a1fb64966","sha1":"34c7abfa550111290346b85e32136c575fdc8d0e","sha256":"2221a4b82b5ddabdf1517246d1fe4dcd833934ba5f56fc44035512bab1001fec","sha512":"15a807bac0f72661cfbbe343b0c86991d8de098a6d494ab08fe5882e9308061f21d1ba24c58b6ea01e3ecfaffc7bf7b2ceb85dc64c0406abfb4f276e11376f2b","ssdeep":"24:OflPyy8wgk/zaoYryocxWO8t26sJ1lFu5Z8CiuUCfl3fIxnpOa1VsQkg7ZOdxC3R:OfVyUT1KZgUfl2p1swZsSzDwNbMkDa","tlshash":"7912c499f0d4a1c0c71bde75e643b09b9819fc6eebc1e88010d01ff1ddf9ba625a1629","first_seen":"2026-03-28T20:13:04.982232Z","last_seen":"2026-03-28T20:13:04.982232Z","times_seen":1,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:29.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 20:12:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27433\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec4-1538f\"\r\nlast-modified: Mon, 04 May 2020 16:11:48 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 327197\r\nexpires: Thu, 18 Mar 2027 20:12:29 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tQvLGHOTj36loupyT6KswRcpah2SZfPH0ezsMViRnEKPUJvQZqVI%2FsmYBu%2FhL7NaKX8dLWf2oh3FVoQyc6s57Ul47eWGzsu35ReKHZYqrSaqK83BLmMc5BDzMIVhhWW1pV7hlZFT\"}]}\r\ncf-ray: 9e394a3acfa68deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86927,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-05T11:53:39.102463Z","times_seen":118363,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":18,"dns":0,"connect":1,"send":0,"wait":6,"receive":2,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"renamereptiliantrance.com/solid.gif?z=2098228\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.32-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=2\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=q9X88NFaHR0cHM6Ly92aWRhcmEuc28vZS9OMlQ2UnN0RUxhTHA\u0026afid=7716132994533888\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=8\u0026pkw=0\u0026pload=1070\u0026rlp=%5B0%2C21%2C224%2C152%2C1947%2C1536%2C519%2C1226%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5","fqdn":"renamereptiliantrance.com","domain":"renamereptiliantrance.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:30.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"renamereptiliantrance.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Mar 2026 13:26:18 GMT","end":"Sat, 20 Jun 2026 13:26:17 GMT"},"fingerprint":{"sha1":"04:8F:71:66:4C:F7:AD:07:89:E5:9E:A4:46:08:CB:4E:FF:1B:8E:FF","sha256":"CC:26:08:E9:15:CA:94:CA:81:90:87:58:5A:50:AA:68:A6:16:3B:4B:30:9E:7A:B3:00:D8:63:6F:48:97:67:01"}}},"request":{"raw":"POST /solid.gif?z=2098228\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.32-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=2\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=q9X88NFaHR0cHM6Ly92aWRhcmEuc28vZS9OMlQ2UnN0RUxhTHA\u0026afid=7716132994533888\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=8\u0026pkw=0\u0026pload=1070\u0026rlp=%5B0%2C21%2C224%2C152%2C1947%2C1536%2C519%2C1226%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5 HTTP/1.1\r\nHost: renamereptiliantrance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nCookie: auth=v=current\u0026id=240a3d5896e1dcc2859240ed7c148d51; cart=1; cart_p=2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 20:12:30 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-route-id: stats.tag.loaded\r\nset-cookie: CHCK=1; Path=/; Expires=Sat, 01 May 2027 20:12:30 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Sat, 01 May 2027 20:12:30 GMT; Secure; SameSite=None\nUID=2603281512f6a04eac537145c78268240a89; Path=/; Expires=Sat, 01 May 2027 20:12:30 GMT; Secure; SameSite=None\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28e463819a210071de3b45ebe7633613","sha1":"6dccd571828ec0912629119cf7eabfea9f33ddbc","sha256":"44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84","sha512":"8a82ac5a7883cd9b74bdb561cf825ce86474e259ad8c445e538d697b0003e3f2b1d6edcd3dc6512f4ad16e9074da204a79938257c457ecf68f4329eac0182e67","ssdeep":"","tlshash":"04900003e280e082c3a0c0300e0ccb802b88a2308a28030fb0fc2baefc3a3a20c23000","first_seen":"2023-04-05T09:26:54Z","last_seen":"2026-04-05T11:28:19.18957Z","times_seen":20482,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/core/bridge3.753.1_en.html?gdpr=1#deid=%22%22\u0026eventfe_experiment_ids=%5B%5D\u0026fid=%22goog_2080251504%22\u0026genotype_experiment_data=%7B%22experimentStateProto%22%3A%22%5B%5B%5B45713128%2Cnull%2Cnull%2C%5B%5D%5D%2C%5Bnull%2C745150931%2Cnull%2C%5Bnull%2C1%5D%5D%2C%5Bnull%2C749060184%2Cnull%2C%5Bnull%2C128%5D%5D%2C%5B841585769%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45761044%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45722344%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45706017%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45668885%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45685340%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45765927%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45734716%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45735891%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45663239%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45715032%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45661356%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B839547366%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45676441%2Cnull%2Cnull%2C%5B%5D%5D%2C%5Bnull%2C45645574%2Cnull%2C%5B%5D%5D%2C%5B45688859%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45656766%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45710689%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45710688%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45685601%2Cnull%2Cnull%2C%5B%5D%5D%2C%5Bnull%2C45685602%2Cnull%2C%5Bnull%2C500%5D%5D%2C%5Bnull%2C45767902%2Cnull%2C%5Bnull%2C500%5D%5D%2C%5B45756824%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45747172%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B775241416%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B781107959%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B781107958%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B792614055%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B781107957%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45729602%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45753603%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45753604%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45658982%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45725657%2Cnull%2Cnull%2C%5B%5D%5D%5D%2C%5B%5B16%2C%5B%5B1%2C%5B%5B31089630%5D%2C%5B31089631%2C%5B%5B45668885%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B1000%2C%5B%5B95332046%5D%5D%5D%2C%5Bnull%2C%5B%5B95332047%5D%5D%5D%2C%5B10%2C%5B%5B95338769%2C%5B%5Bnull%2C45645574%2Cnull%2C%5Bnull%2C1%5D%5D%5D%5D%2C%5B95338770%2C%5B%5Bnull%2C45645574%2Cnull%2C%5Bnull%2C2%5D%5D%5D%5D%5D%5D%2C%5B50%2C%5B%5B95345206%5D%2C%5B95345207%2C%5B%5B45661356%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B1%2C%5B%5B95351425%5D%2C%5B95351426%2C%5B%5B45676441%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B20%2C%5B%5B95356068%5D%2C%5B95356069%2C%5B%5B45685601%2Cnull%2Cnull%2C%5B%5D%5D%2C%5Bnull%2C45685602%2Cnull%2C%5B%5D%5D%5D%5D%2C%5B95356070%2C%5B%5B45685601%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5Bnull%2C45685602%2Cnull%2C%5B%5D%5D%5D%5D%2C%5B95356071%2C%5B%5B45685601%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5Bnull%2C45685602%2Cnull%2C%5Bnull%2C100%5D%5D%5D%5D%5D%5D%2C%5B1%2C%5B%5B95373378%2C%5B%5B792614055%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%2C%5B95373379%2C%5B%5B45747172%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B781107959%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B792614055%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B781107957%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B10%2C%5B%5B95378629%5D%2C%5B95378630%2C%5B%5B45729602%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%2C%5B95381582%2C%5B%5B45729602%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45753603%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%2C%5B95381583%2C%5B%5B45729602%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45753604%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B10%2C%5B%5B95382403%5D%2C%5B95386528%2C%5B%5Bnull%2C45767902%2Cnull%2C%5B%5D%5D%2C%5B45756824%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%2C%5B95386532%2C%5B%5Bnull%2C45767902%2Cnull%2C%5Bnull%2C100%5D%5D%2C%5B45756824%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%2C%5B95386533%2C%5B%5Bnull%2C45767902%2Cnull%2C%5Bnull%2C300%5D%5D%2C%5B45756824%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%2C%5B95386534%2C%5B%5Bnull%2C45767902%2Cnull%2C%5Bnull%2C500%5D%5D%2C%5B45756824%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5Bnull%2C%5B%5B95384561%5D%2C%5B95384562%2C%5B%5B846355750%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B10%2C%5B%5B95385117%5D%2C%5B95385118%2C%5B%5B45761044%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5Bnull%2C%5B%5B95385193%5D%2C%5B95385194%2C%5B%5B45765927%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%5D%5D%5D%2Cnull%2Cnull%2C%5Bnull%2C1000%2C1%2C1000%5D%5D%22%7D\u0026imalib_experiments=%5B95322027%2C95331589%2C95332046%2C95345207%2C95386528%5D\u0026is_eap_loader=false\u0026managed_js_experiment_id=0\u0026page_correlator=1950850960351001\u0026pvsid=8384074893717828\u0026top_accessible_page_url=%22https%3A%2F%2Fvidara.so%2Fe%2FN2T6RstELaLp%22","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:31.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:47 GMT","end":"Mon, 01 Jun 2026 08:37:46 GMT"},"fingerprint":{"sha1":"84:E2:03:36:CA:39:FF:65:64:D9:12:E7:E2:28:88:8C:3C:A0:CA:BA","sha256":"45:AF:9C:39:77:2B:D1:D7:B8:04:BB:2C:0E:98:C5:BB:8A:E8:99:A6:C3:AF:7F:90:AA:23:EA:F2:8F:AD:8F:B1"}}},"request":{"raw":"GET /js/core/bridge3.753.1_en.html?gdpr=1 HTTP/1.1\r\nHost: imasdk.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-doubleclick-instream-static\"\r\nreport-to: {\"group\":\"ads-doubleclick-instream-static\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-instream-static\"}]}\r\ncontent-length: 276134\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Mar 2026 07:29:10 GMT\r\nexpires: Sat, 27 Mar 2027 07:29:10 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 25 Mar 2026 18:57:08 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nage: 132201\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":930837,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (46305)","md5":"fdb86f5bb5bd249dbe78b9c6903b142a","sha1":"d573359a35ec9aab25247308011219301f080985","sha256":"07c2f4061a5dd315ea4dbd6fc3bf8c85a23b0752c5c75308df3132316db96a4b","sha512":"b9a77befd467b8faf7a4cb23695ef9080662467b76d681511fa7d3a494a070bc03ce8e67b640b519cff513e3e2457d91b58d114092dc040c39eb80cc11223649","ssdeep":"6144:VjHF7pBOsMMNqMW3pGblU/chO3PB579khx7MXxDWjIZmj1AN6TNyAty777XsEBO+:xHZNW7cUB579khx7MhwpFreL9NT","tlshash":"c0152bd8b76174168263f4f5503f014f723ba86ae40889bcf689d9e16e7884a4277f7c","first_seen":"2026-03-25T20:26:13.719349Z","last_seen":"2026-03-30T13:11:03.500682Z","times_seen":287,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.adsco.re/","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.84.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:29.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: c.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 20:12:30 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 10\r\ncache-control: public, max-age=172800, immutable, stale-if-error=172800, stale-while-revalidate=172800, must-revalidate\r\nexpires: Sat, 28 Mar 2026 00:34:15 GMT\r\nlink: \u003chttps://adsco.re/p\u003e;rel=preload;as=fetch;crossorigin;fetchpriority=high,\u003chttps://4.adsco.re/\u003e;rel=preload;as=fetch;crossorigin,\u003chttps://6.adsco.re/\u003e;rel=preload;as=fetch;crossorigin,\u003chttps://4.adsco.re:2087/\u003e;rel=preload;as=fetch;crossorigin,\u003chttps://6.adsco.re:2087/\u003e;rel=preload;as=fetch;crossorigin\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\netag: W/\"c6c606469d9cd6be605c4d11bee14fc7\"\r\nlast-modified: Sat, 21 Mar 2026 16:28:28 GMT\r\nage: 0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e394a3f789b23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91496,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (770)","md5":"c6c606469d9cd6be605c4d11bee14fc7","sha1":"8c8005141dc89dc54628c0cbb1ce31b1e17239e4","sha256":"e24a58ef8dd88e84e42f5ea4b85bdb6a9e1224d2a6e012f513c83f7030ca979c","sha512":"84f60b461d989b8e235e2fea9afd1011e87fc436f964d44aa2df15767a83e9b2ae87447e62a5b932ae9937deceb933a9b5d486b3177fffa1f3c32251ab53a0c8","ssdeep":"1536:+/DxMw9nXW3pnrMu5pX94hK2ATKEenhw8voUHmsPTOa39Ch:+/KwnG3Fnpt4hK2ATnenhw8vGO9u","tlshash":"2e936cb57271b03d01b220f9517f220ab1b94f611c8584929676e9e43cb2edbc37bf99","first_seen":"2026-03-21T16:35:02.351496Z","last_seen":"2026-03-30T19:07:46.982892Z","times_seen":348,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adsco.re/p","fqdn":"adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:30.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET /p HTTP/1.1\r\nHost: adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vidara.so/\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 28 Mar 2026 20:12:30 GMT\r\nContent-Type: text/plain\r\nContent-Length: 20\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://vidara.so\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET, HEAD, OPTIONS, POST\r\nAccess-Control-Max-Age: 10\r\nAccess-Control-Allow-Headers: Host, User-Agent, Accept, Accept-Language, Accept-Encoding, Referer, Origin, DNT, Connection, Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site, Pragma, Cache-Control\r\nTiming-Allow-Origin: *\r\nCross-Origin-Resource-Policy: cross-origin\r\nContent-Encoding: gzip\r\nCache-Control: private, immutable, max-age=10\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":83,"dns":1,"connect":26,"send":0,"wait":28,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s9vfh962nhn5.l4.adsco.re/","fqdn":"s9vfh962nhn5.l4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"185.200.118.62","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:30.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.l4.adsco.re","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 09:14:20 GMT","end":"Tue, 09 Jun 2026 09:14:19 GMT"},"fingerprint":{"sha1":"B9:75:5C:6F:B1:0F:1F:D6:C7:79:30:F1:63:68:06:D2:FE:F8:FD:18","sha256":"42:0F:3E:E0:AB:63:02:16:CF:D3:A0:7D:13:FF:A3:1E:55:63:3F:D3:6C:5D:1C:9C:7E:95:99:C6:16:D8:5D:CC"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: s9vfh962nhn5.l4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 28 Mar 2026 20:12:30 GMT\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":127,"dns":31,"connect":53,"send":0,"wait":23,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fedoq.com/500/10572062?excludes=\u0026oaid=080307daa8c24bcbfa3bd260f8f04ef4\u0026tgp=\u0026of=true\u0026sw_version=v1.802.0-s\u0026dmn=dd133.com\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=981\u0026wfc=4\u0026pl=https%3A%2F%2Fvidara.so%2Fe%2FN2T6RstELaLp\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1","fqdn":"fedoq.com","domain":"fedoq.com","tld":"com"},"ip":{"addr":"139.45.197.116","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:32.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fedoq.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 05:12:13 GMT","end":"Mon, 15 Jun 2026 05:12:12 GMT"},"fingerprint":{"sha1":"34:34:EB:E0:C2:BE:04:35:EF:2E:23:56:BF:E4:88:64:91:F8:FC:BA","sha256":"18:12:B0:A9:07:D7:82:F7:43:06:05:38:B3:3F:15:89:7E:39:6B:81:0B:8E:91:61:FC:DA:14:6D:C8:EB:38:73"}}},"request":{"raw":"OPTIONS /500/10572062?excludes=\u0026oaid=080307daa8c24bcbfa3bd260f8f04ef4\u0026tgp=\u0026of=true\u0026sw_version=v1.802.0-s\u0026dmn=dd133.com\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=981\u0026wfc=4\u0026pl=https%3A%2F%2Fvidara.so%2Fe%2FN2T6RstELaLp\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1 HTTP/1.1\r\nHost: fedoq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://vidara.so/\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 20:12:32 GMT\r\ncontent-length: 0\r\nallow: GET, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://vidara.so\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 600\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":100,"dns":1,"connect":27,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=66958a01-5932-4bb7-8627-01e29702f4f3","fqdn":"fleraprt.com","domain":"fleraprt.com","tld":"com"},"ip":{"addr":"139.45.195.252","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:32.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fleraprt.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 11 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EB:E7:45:0B:C5:08:D8:7F:87:47:B3:6F:7B:0C:95:B3:ED:B5:92:AC","sha256":"37:B2:1A:19:FC:C4:69:69:2F:A0:6E:DA:D4:97:23:4A:C3:A5:FC:C4:C2:EE:FE:8C:AA:FD:3A:C0:4B:AD:40:B2"}}},"request":{"raw":"POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=66958a01-5932-4bb7-8627-01e29702f4f3 HTTP/1.1\r\nHost: fleraprt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1405\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1405,"data":"L\u001bRR\u001f\u001c\u0026\u001c\u0014\u0005g\u001f\u001cK\u0012\u0003\u0001\u0005P\u000eL_\u0003\u000e\u0011\u001aX\u0016\u0010JO@T\u0005\u000fT\u0011\u0003\u001e\u000eP\u0018L\u001fA\u001b\t\u00147\u0001\n\tWN\u001a\u001b\tICPXGP@\u0014\u0002\u0015\u0003\u0003\u001aX\u0013\u000eJOS\nQI\u0015C\u001d\u0006IH\u0005^_\u0003\u0015\u0011A\u0013\u0013[RDP\u0000YU\u001b\u0016\u0003\u0006IH\rV\\\u001b\u001bDNX^IDW\u0015AKC\tMH\u0007\u0013P\u000e^A\u0015NUUX^MDW\u0011Y\u0001[\u0003PZ\\_^\u0016\u001d\u0005\u0015\u0003\u0002\u0006HPUJ\u0006\u0015\u001aSH\u000bYZBI\u0001U\u0019O\r\b\u0001\u000eJH[\u001c\u0006=\\\f\r\\\u0002\u001e\u000b\u000fP\u000e^A\u0015S@C\u001bFCJ8\rB\u0000\u0015U\u0000E[EB\u0014F:^WWY\r\u0017Y\u0026!B\tYW\tZJ9\u0002\u001c\u0002ZV\u0017A\u0005\u0002AD\u000b\u001eOS\u000b]W\tHJ)\u000e\u0011_\u0001B\u0005\t\u0002\u0006JUIYU$Q\u001b\u001c_\u000e\u0012AZA\u0000@]\u0015\u0015\u0011X\nFCYY@H\r[\u0003C\u0003\u0000\u001f\u0017F\u0000\f[\u0014CR\u001cI\u000f\u0001\u0010\u0015]\u001bCP\u0012:'P\u001bZ\u001a\bEWRZW\u0014\u001d\u000eX\u0014Q\f\u000e\\\u0013P\u0007\u0018\"}U\u0004YMVD\u0014\u0005\u0015E\u0005\u0006^D\u000fP\u0004\u001d\u000b\u0019H]\u001d=~\u0002ZX\u000e\u0001\u000b\u0006\u0014\u000e\u0015\u0019\u001d_L\u001c\u0007\u000e\u0005Q\u001cW^JcA\r\u0017\u001c\u0010\u0010V\b\u0015\u0014\u0011\u000e\bF\u0004]\u000b\u001aRK\t_\t40SWN\u001a\u001c\u0010]CP\u0000\u001e\u001eXBOSKU\u0014@F[DW\u0012TKC\u001b\t\u001e\u001a\u001b\u0001\u000eABAPWW\b\u0005W\u001b\u001aM]F7\u000b5\\\u003c\u0018\u0006q\"\f{I\u0011\u001aX\n\u001eJOR\u0014K\rCCPL\u003e\u0026wLA\u0015WQ\u0014@UUJ\u001b\u0003HKC\u001b6\u0003\u0000X@\u0016BOGM\u0011\fJH[\r\u0003\u0003TKC\nVFL\u0003\u0011\u0016TY\u000f\u0015\u0011R\u0017FCEDN\u001a\u001b\rMCPCZ^\u0016\r\u0005hVQ\\X^IDW\fOKC\bMH\u0019\u000fP\u000e\b\f[JV\u001aX\u000b\n\u000b\u0005\u0017\u001aS[u\b\u0004\u001b\u0013RLV[h\u000f\u0007\u0014VF\u0011\u0001\u0011\u0006]\u0007[\u0003\u0007\u000b\u0002\u0018\u0017\u0018L\u000e_f\\T\u0010;\u0010\u0006\u0011\u0007@KC\u0014PFL\u001c\u001bZ1\u0006R@@i\u0016\u0001\u0017\u000f\u0001\n\u001aSJ\bXFL\b\u001dX\u0001\u001fh]VF\u000e\f[RGV\u0014K\u000f\\\u000f\u000e\u0001\u0019P\u000eLO\u001b\u001bTW\u0017\u0001\t\t\u0011\u0011\u001aSI\u0015C\u0004\u0002IH\u0016\u000b\u0003\u001al`\u0014VF\u0017\u0004\u0006@\u0002K\u001cWL?=G\u0017ZLA\u0015Z\\Z\u0015\u0016\u0026\u000f\u0014\u000fM\u001d[\u0003C\u0019\u001c\f\u0010\u0016BOG__\u0014@F[DW\u0001T\u001d[\u0003\u001a\u0017BI\u0002X\u000f\u0019QVA[%\u0000\u001c\u001c\u0010\u0001L\u0006\u000b\u001b[\u0011L\u0002\u0001k\u000f\u0003SK\\_\u001eFC\u000e\u0014\u000eK\fU\u001b\b\u00191\u001f\u0000]\n\bYM\u0011\f\u001c\u0005\u0015\u001b\u0010N\u001a\u0000\nf\u0002\u0002\u001c\u0004\u001f]\u001b\u0000h\u0001\u0005i\u0015\u0016\u0026\u0006\u0010\u0015]\u001b[\u0003\u0007\u000b\u0002\u0018\u0017\u0018L\u0004DfP^\b\u000b\u0014\u0001\u0000\u000f\u001aS\u001fX\r\u0019\u000bGP]\u001d2R]TSX^\u001f\t\u0019\u0011]E[P\u00125\t\u000e\u0011_\u0001O\rMAC\u001fH[\u0001\u0006=O\f\u001bf\n\u0003\u001aIHR\u000f\u0001D\\\u001f\u0014\u0013\u0017\u0026\u001f\u0010\u0000g\u0002\u0010M\u003e\\^]-[\u001c2Y\\DS\bFC\u000e\u0014\u000eK\fU\u001b\b\u00191\u000f\u0017G\u0005\u0019XIlE\u001b\u0002\u0018\u001a\u001c@\u0002\u000f\u0018U\u0012\u000fBI\u001bG1\u000e_K\\[\u0013\u0011\u00147\u001a\u0012]\u001b\u0018\u001b[\f\u000f\u0007\u0001Q\u0013A\u0015WVEX^[ZA[\f[O\rRY_I^\u0016\r\u0001^\\]B%\r\u001dJO@\t\r\u001b\u0000P\\W\r_\r^\u000b\u0003\u0014\u0007TH\u0000T\n@S\u000fD\u001bZU]\u000f\n\u0010\u0005W\u000e\u0006_\u0011\u001aX\u0005\u001f\u000e\u001c\u000eQ\b\r\\\u003e\u0003\nIH\u0016LA\u0015MAW\u001c\u0002\u0010\u000b*\u0011W\u001c\u000bZ\u00045\u0007\u000fP\u000eL\\\u0007\f\u0004\u0004JRKJY@Y\r\u000f\\\u0013\u001e\u0007\u0018\u0017F1\u0004S\u001b\t\u0014XH[\u000b\u0014\u000fH\b\u0010^\u000f5\u0007\u000fP\u000eLO\u001b\u001bPC\t\u0010\u0016\u0005*\u000b\\6H\u001b[H\u001e\u001e\u0001\\\u0005\u0004Y\u001b\u001f\u0014\u0019\u0011\n\u001c\u001a\u000fg\u0000\u001dfSHTIP\u0018L\u000e[PP]%\r\u001dJO@B\u0002\u0014O\u0017G\u001f\u0005@][X[ZD\u0003CFUJ\u0016\rK\u001d[\u0003CHBI\u001fQ\u001a\u0005X]\u0011\fX\u0007\u0018\u000b\u001d\u0007\u0015\u0003\n\u0014\u0015\u000b\tI^\u0016\u001c2BPW\u0014@FO^LW\u0000\bI\bL_WX@\u0019Z\u000fU\u000e\u001e\u000eLVNEES][@\u000eQX\b_\u0014\u0007LA\u0015VRi\u0013\u0000[RWR\u0000YJ\tV\u000e\u000f\nJW\\YUZQP\u001bW\u001b\fGT\b\u000fA_Q^\u000b\rF\u0016BOV]W_\u000e\r\u0016\u0006\u0014\u000eg\u0000\u001dJCP56\u000f"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.25.5\r\nDate: Sat, 28 Mar 2026 20:12:32 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 12\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://vidara.so\r\nAccess-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE\r\nAccess-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"adb4650bfc9d2a73d4dd69583b0ceb14","sha1":"1ce399d6e936232aaf2192cd7903a279c5015f22","sha256":"21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed","sha512":"3fbce22572bbed1aada0f7c6706f16a97e7c0ea132dfee1a7eb80f5e68da1cc63c891a5bc3ea8e87f0c97be3002212a0efbb2af9553acb45e0d447a685cd805b","ssdeep":"","tlshash":"436000000c3000000cc00c0000c00030ff300f00000f00c0000c00f003030c0c00c000","first_seen":"2023-04-05T07:30:31Z","last_seen":"2026-04-05T11:37:19.74613Z","times_seen":56019,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":122,"dns":16,"connect":46,"send":0,"wait":27,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"renamereptiliantrance.com/check.html","fqdn":"renamereptiliantrance.com","domain":"renamereptiliantrance.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:29.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"renamereptiliantrance.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Mar 2026 13:26:18 GMT","end":"Sat, 20 Jun 2026 13:26:17 GMT"},"fingerprint":{"sha1":"04:8F:71:66:4C:F7:AD:07:89:E5:9E:A4:46:08:CB:4E:FF:1B:8E:FF","sha256":"CC:26:08:E9:15:CA:94:CA:81:90:87:58:5A:50:AA:68:A6:16:3B:4B:30:9E:7A:B3:00:D8:63:6F:48:97:67:01"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: renamereptiliantrance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nCookie: auth=v=current\u0026id=240a3d5896e1dcc2859240ed7c148d51\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 20:12:29 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Wed, 04 Mar 2026 09:48:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a7fff7-3bd\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":957,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"2e07a1f3cc040234bf835cb1fa43835f","sha1":"12cff839e3512a4dfcb5a00c135ce46881dbb331","sha256":"e3382cf06dd0d2a466d8a8bfecf242e128111d4bd11c32b0a23774b561404ef5","sha512":"75947e0c5f91a1cfa3b96e13105b103df6766d95442ae63d4c85c2720f2de4223caa299ebf75244dacbf3f8ddb327784b13709ad9c7fa715674850e4a7915437","ssdeep":"","tlshash":"7911974534e5684c5117a6301697a7187c22a40326cbdc4ebb9cd7305f826a3ec9aaef","first_seen":"2026-03-04T10:41:02.792715Z","last_seen":"2026-04-05T11:28:19.149413Z","times_seen":884,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4.adsco.re:2087/","fqdn":"4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":2087,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:30.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 4.adsco.re:2087\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vidara.so/\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 28 Mar 2026 20:12:30 GMT\r\nContent-Type: text/plain\r\nContent-Length: 62\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://vidara.so\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET, HEAD, OPTIONS, POST\r\nAccess-Control-Allow-Headers: Host, User-Agent, Accept, Accept-Language, Accept-Encoding, Referer, Origin, DNT, Connection, Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site, Pragma, Cache-Control\r\nCache-Control: private, max-age=300, immutable, stale-if-error=300, stale-while-revalidate=300\r\nExpires: Sat, 28 Mar 2026 20:17:30 GMT\r\nETag: \"5b41cb22f84f645a103acc7bfbf084ff\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":80,"dns":1,"connect":27,"send":0,"wait":29,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6.adsco.re:2087/","fqdn":"6.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.84.77","port":2087,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:30.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6.adsco.re:2087\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vidara.so/\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 20:12:30 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 45\r\naccess-control-allow-origin: https://vidara.so\r\ncache-control: private, max-age=300, immutable, stale-if-error=300, stale-while-revalidate=300\r\netag: 5b41cb22f84f645a103acc7bfbf084ff\r\nexpires: Sat, 28 Mar 2026 20:12:30 GMT\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 9e394a406eb556b1-OSL\r\nalt-svc: h3=\":2087\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":3,"connect":3,"send":0,"wait":7,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bobapsoabauns.com/www/images/4fbabbc641908409792e3ea2cd0f6479.png","fqdn":"bobapsoabauns.com","domain":"bobapsoabauns.com","tld":"com"},"ip":{"addr":"172.67.166.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:35.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bobapsoabauns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Mar 2026 17:27:36 GMT","end":"Thu, 11 Jun 2026 18:26:20 GMT"},"fingerprint":{"sha1":"D4:5B:7E:3A:04:7E:B2:18:16:12:D5:8A:2B:EC:8D:E3:7F:C7:E1:8A","sha256":"47:9C:C7:9E:08:57:D9:D4:AC:41:C1:A3:48:7A:31:34:81:6C:9A:B5:7A:35:09:26:1C:67:C7:35:BC:B1:1F:32"}}},"request":{"raw":"GET /www/images/4fbabbc641908409792e3ea2cd0f6479.png HTTP/1.1\r\nHost: bobapsoabauns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Mar 2026 20:12:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 66301\r\nlast-modified: Wed, 05 Mar 2025 23:12:12 GMT\r\npriority: u=4,i=?0\r\netag: \"67c8da4c-102fd\"\r\nexpires: Sun, 29 Mar 2026 07:12:44 GMT\r\ncache-control: max-age=86400\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 46790\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R435HdKPLiCcV3Q694h10D%2FQ%2F38j1lJc1Pz%2Fy10ajadyImBKN7%2F3XlcJcWIZfeVgeaEP8r9GBjKqIX93YFEZ6jSQs4Lu2MCQpkDkQ78qELHsr7tiKVR41t0UFIobrdJb6AG%2FwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e394a606c1a56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66301,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"4fbabbc641908409792e3ea2cd0f6479","sha1":"a393f21e82692e79e914d725593492be3553d66d","sha256":"04a7cf45e1b400e04f1fafaf3ecd7e679572905e60dc7b99fedcca9dbe53fc0e","sha512":"3af675948d6929434d3b91389d113f60d45b810edf2697b012b7a76807265ad77d8a17c9b5acdceca0f88205561cf32b9b9dca843bc5588933911cb85ae6c732","ssdeep":"1536:Y/bIRYrNJhlMCl3epopSxwJKM8+B+a0gZ:YDlJwo376wkR+N0g","tlshash":"055312528f50bc2649547040972cfe9f16f4ba6971e5625ccf4cb5a71aa00bbe82c3df","first_seen":"2025-03-07T05:14:49.76701Z","last_seen":"2026-04-05T11:28:20.95764Z","times_seen":283,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.36.2/jwplayer.core.controls.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.2.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:31.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q1","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 10 Mar 2026 00:27:00 GMT","end":"Thu, 24 Sep 2026 23:27:00 GMT"},"fingerprint":{"sha1":"C2:A7:F2:8B:AB:12:E7:4F:11:6B:22:94:9B:93:61:5B:D8:81:CA:24","sha256":"90:DB:10:04:22:C5:07:DE:3B:E8:30:8A:FA:27:ED:16:6B:02:8F:9C:A7:28:87:F5:F7:DE:50:63:75:2A:A1:8D"}}},"request":{"raw":"GET /player/v/8.36.2/jwplayer.core.controls.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, immutable\r\nlast-modified: Thu, 12 Sep 2024 17:51:58 GMT\r\netag: \"96388c8374190b02b1c684940b0c267c\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 28 Mar 2026 20:12:31 GMT\r\nage: 792780\r\nx-served-by: cache-lga21985-LGA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 22, 504\r\nx-timer: S1774728751.049863,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 80695\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":329500,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65143)","md5":"96388c8374190b02b1c684940b0c267c","sha1":"c49462b6c0755a6be517da89213c6815a72658cb","sha256":"efd4bdf5c117754802f889555f4396867101f917ce259303d8171371e2903589","sha512":"6ab3adef3c69468d2645c352d6a902d9e6e409b1e88fa5c126b7928a546acd7f3f8ef29cf04ff017db5f1e24ad70a442484d7c5bfceb9b789a34bd0daae65c20","ssdeep":"3072:V+Y7nFuhslX/173uYqqIeGSJhoFjBkW64pOknUGp9W11Uy86C4YfrmYRJ:sYxAU/1732yGSJho9OaUG3xyl+frmYRJ","tlshash":"ee641932214252359aea82da66514604b3398085f516cfacff3ceddd4c6e9c731fabb4","first_seen":"2024-09-18T21:59:43Z","last_seen":"2026-04-05T11:28:19.146041Z","times_seen":594,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m696yefd.s1q2105.com/thumbnail/jN3BZZvH5l/N2T6RstELaLp.jpg","fqdn":"m696yefd.s1q2105.com","domain":"s1q2105.com","tld":"com"},"ip":{"addr":"50.7.24.26","port":443,"asn":174,"as":"COGENT-174","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:31.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m696yefd.s1q2105.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 04:11:57 GMT","end":"Thu, 18 Jun 2026 04:11:56 GMT"},"fingerprint":{"sha1":"FC:8F:D4:BD:2A:DA:1E:35:47:E5:8C:8B:C9:01:75:19:18:D1:B4:4A","sha256":"FB:C1:4E:0F:CD:2F:4A:1F:AD:DC:83:74:08:FA:3A:81:CB:EE:21:36:3D:33:2F:E0:CA:59:B3:D0:99:27:B0:7F"}}},"request":{"raw":"GET /thumbnail/jN3BZZvH5l/N2T6RstELaLp.jpg HTTP/1.1\r\nHost: m696yefd.s1q2105.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 20:12:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 266123\r\naccess-control-allow-headers: Content-Type, Range\r\naccess-control-allow-methods: GET, POST, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Content-Range\r\nlast-modified: Thu, 26 Feb 2026 18:02:19 GMT\r\nx-cache: HIT\r\ncache-control: public, max-age=259200, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":266123,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc58.134.100\", baseline, precision 8, 1280x720, components 3","md5":"ff8f615ddaf524ece4b13a5cc8c65a90","sha1":"7acaa994782e69e2888cca1b6c3bb05977602f70","sha256":"8a4b9b13adb74252d8b24c4bf559cec29db7a4d27976627c26967f319a5d54e0","sha512":"39ed09e9bab0be938a5ae7db44f280c25ac381e144dfd89bd6d560ea6a4687847a7a0b73c5c68d9f0b9faa0788b1b41fce4fa65eaf73193699bd6210dd95a981","ssdeep":"6144:SNlbp0m6Knyg+0lx0zjARlDc+8c2CohS5P9XoWj24yEcaX9icPfNss:Sjd0m6cygzUzMQ+8CohS51XoWj0Ea2f7","tlshash":"56442341b547f034ee7b4343be86eaad2460dce52094c3197fa13dedd664a60abd32d1","first_seen":"2026-03-28T20:13:04.986209Z","last_seen":"2026-03-28T20:13:04.986209Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1426,"timings":{"blocked":49,"dns":1,"connect":15,"send":0,"wait":255,"receive":1073,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"displayvertising.com/bpwkenkzgvesq?pcIevjLd=BQNiAAAAAAAACZUAArP29F5zNb93Gw6hoYXWBIBI0bimxU1hISwxFrGmk5vkoBKub13KZca3-I3X8QWYru40afxQpFdy9OphoyMRgZ0SA44LZkN-_RPrMPGNFnaSIPL3pDJaIi25sLd9pyvXSo6bVXNDzK41FOHdw9ZxWyGkQmU3w74rKfHCAvzMZ9voYPEYYpZvk6MxmR6mOyEO61gFq5JEtWSJo3cajoOzIGuBg6FEXOwv9433Ht3mAaHkwUmU-VQKFqUCa0Jp5wWyGiQ2CighgMXcjSXu9J4Wf3jHe2LdyLKoo-m7Vj39D8kfd-cP-8hFSp2abDLvxzUmyH2UWlC9YDk-ZB0wujewmY87U6nuipSP3lKxbBSTvJ9WUIgP1QzMcVHjy9p01_Q2TBNZSbz2YI6KTSG0saehKC10N0Nq9IuD1YuojvfrrCdHQ3-yJ6CXUq4mixKdM_4yuJCttN-MSkOBYJduxoVZjYvvkjynCAqofT5V1ltkbxoK9iCQcarKQA0Dn9fEkGo1vN1Lw3SCJqEgAEleA7_NtLRKkXO81NNwLvv_ZCtxTRbBgmy-1SpF7aUXLRY8O6kFUAhoSZxUOHRDirybyiVaiuMM5X1yS2JpHpyJsCZdR0fiYp2DfJHgZlmFj9b9NijFDP3eEu-UifgPW3zfu8IgTtVdpGGfcmWU37eWX0195schy0YTEnJF1-Zw47FGueKyAdWOQJ31C3nm3jc_3BNMjyzl-mH6po9Hovi_liUSCau_mQB2sGoeIOx9VJ0KloMo319p_IKmPOem6IM8w4uUBNRCCpYnKr4gsWkVbL3is9yzW2qyAyAqa2QHTD_RxOz2mJ23KJa_hX9mEqdzbfajRpltPkblOnMfVXgEdJz0I1PA-Z9xjKl8MQfNC6klm3mkcRj60zoMx7hD8gL_cXrzdqsRURaMUzfLSysOn-cUFj85yKAat-mUBKBZEpMQsqq2O5xR7_DTJU58Pi6AWo20sUOHmhL0z6a9dIRpHbghOwF25QaSzvSkUBqZ_FKn-GLWq5z4uSQjF7SPrx3JeU8BtREL6gknN3Y6nTJyH1v-f2vs4T01lGOgpBt2lbOQ6D5yvAk09UEjrqS0nqnBbbzx5yDUB5nspobdzMBWuyAQ0GcOCQa2AilXuqIFhAOHO8XLgQ\u0026mEYMyTFx=4\u0026dJYPQaKr=5270867\u0026mjRGNSha=\u0026vsYTeKgI=0,0\u0026xFJEznRs=\u0026OXRLwosz=\u0026tCDHZLYT=1280,1024,1,1280,1024,0","fqdn":"displayvertising.com","domain":"displayvertising.com","tld":"com"},"ip":{"addr":"216.59.56.9","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:31.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"displayvertising.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 04 Apr 2025 00:00:00 GMT","end":"Tue, 05 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BB:A7:E2:24:FF:EC:EC:B7:A1:F9:77:02:9A:AB:B1:8A:AD:9C:95:5F","sha256":"D1:55:30:57:68:7E:A4:DC:AD:2D:9F:A1:1B:7C:6C:B8:5C:58:E6:3B:4D:43:6F:96:32:54:96:A6:27:2D:D5:0A"}}},"request":{"raw":"GET /bpwkenkzgvesq?pcIevjLd=BQNiAAAAAAAACZUAArP29F5zNb93Gw6hoYXWBIBI0bimxU1hISwxFrGmk5vkoBKub13KZca3-I3X8QWYru40afxQpFdy9OphoyMRgZ0SA44LZkN-_RPrMPGNFnaSIPL3pDJaIi25sLd9pyvXSo6bVXNDzK41FOHdw9ZxWyGkQmU3w74rKfHCAvzMZ9voYPEYYpZvk6MxmR6mOyEO61gFq5JEtWSJo3cajoOzIGuBg6FEXOwv9433Ht3mAaHkwUmU-VQKFqUCa0Jp5wWyGiQ2CighgMXcjSXu9J4Wf3jHe2LdyLKoo-m7Vj39D8kfd-cP-8hFSp2abDLvxzUmyH2UWlC9YDk-ZB0wujewmY87U6nuipSP3lKxbBSTvJ9WUIgP1QzMcVHjy9p01_Q2TBNZSbz2YI6KTSG0saehKC10N0Nq9IuD1YuojvfrrCdHQ3-yJ6CXUq4mixKdM_4yuJCttN-MSkOBYJduxoVZjYvvkjynCAqofT5V1ltkbxoK9iCQcarKQA0Dn9fEkGo1vN1Lw3SCJqEgAEleA7_NtLRKkXO81NNwLvv_ZCtxTRbBgmy-1SpF7aUXLRY8O6kFUAhoSZxUOHRDirybyiVaiuMM5X1yS2JpHpyJsCZdR0fiYp2DfJHgZlmFj9b9NijFDP3eEu-UifgPW3zfu8IgTtVdpGGfcmWU37eWX0195schy0YTEnJF1-Zw47FGueKyAdWOQJ31C3nm3jc_3BNMjyzl-mH6po9Hovi_liUSCau_mQB2sGoeIOx9VJ0KloMo319p_IKmPOem6IM8w4uUBNRCCpYnKr4gsWkVbL3is9yzW2qyAyAqa2QHTD_RxOz2mJ23KJa_hX9mEqdzbfajRpltPkblOnMfVXgEdJz0I1PA-Z9xjKl8MQfNC6klm3mkcRj60zoMx7hD8gL_cXrzdqsRURaMUzfLSysOn-cUFj85yKAat-mUBKBZEpMQsqq2O5xR7_DTJU58Pi6AWo20sUOHmhL0z6a9dIRpHbghOwF25QaSzvSkUBqZ_FKn-GLWq5z4uSQjF7SPrx3JeU8BtREL6gknN3Y6nTJyH1v-f2vs4T01lGOgpBt2lbOQ6D5yvAk09UEjrqS0nqnBbbzx5yDUB5nspobdzMBWuyAQ0GcOCQa2AilXuqIFhAOHO8XLgQ\u0026mEYMyTFx=4\u0026dJYPQaKr=5270867\u0026mjRGNSha=\u0026vsYTeKgI=0,0\u0026xFJEznRs=\u0026OXRLwosz=\u0026tCDHZLYT=1280,1024,1,1280,1024,0 HTTP/1.1\r\nHost: displayvertising.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nasf: 9\r\npopads-ec: ASB\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 44\r\ndate: Sat, 28 Mar 2026 20:12:32 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"d5f0a25e4d3522d56d48ce7bc3e518fb","sha1":"86794caff58f7fee6e684c2ba7195f970a8d6f4c","sha256":"9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5","sha512":"a3a81801f516a4eb11f00d6f56dab0ed4b8a79219e6b4f5436993479f09dae08f14cffbab3327ff66fb39201d8eba1153ae7114f7705a01cc6f0edf840ef1616","ssdeep":"","tlshash":"789002801814116115d1500b8d5159d01259b1a4540801324446ca502dc7883a415774","first_seen":"2023-03-07T01:17:45Z","last_seen":"2026-04-05T11:28:19.182793Z","times_seen":22838,"resource_available":true,"data":null}},"time_used":764,"timings":{"blocked":327,"dns":2,"connect":93,"send":0,"wait":111,"receive":0,"ssl":228},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"displayvertising.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:35.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Mar 2026 10:17:38 GMT\r\nexpires: Fri, 26 Mar 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 208497\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-05T11:49:31.572986Z","times_seen":64002,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":99,"dns":1,"connect":17,"send":0,"wait":16,"receive":20,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"renamereptiliantrance.com/adx/get/?id=2098228\u0026pb=8ec8233c05e61161e2e0aa98e62f45d31774735950\u0026pbc=Jql7TPMxTd9OUshp\u0026pbi=E_qVqmdU0q9OUshp\u0026pbu=uvUUuDWSEPZOUshp\u0026psp=GOTYOetogoIsDetoA9yvhbM3vqb0dQge2OmIxhmiDDvfD48hebvpEE4D7Rm4G7uf2dpdX8456T4DRemBGzsnFUckXC3xeGbppFWPyLOfBkJLSkk83j-HiXOUPkKSGw0O5wM9CKW4ofhyuWpqR0D2cPwM0Q1B4TT05gY1t0J6q56siaBVEb3GJwoY5Y7nC5YH47qLvi1P79Ufj4V7SIvNERv_PQfER-qy_dHU9jCQytqK8f8pvjDJmoO_ujpYk20a1FTHvi9Hb9e1DEyzjbKaBLYbN8QIXpGmVfO63xu-YUawUx2fj0lMUI9nIdPU84RiG0VbVAlAKFxCk3OyxYo8RSXtc95bVf2GM--xS2mzRvelTEmHssK67S9FupNrhAqQoxIl3qIiBgWAFc8wptBuR-4q343QkRi15Ex5V2znhRW5vbjYO-dPGg42CMgVyLQ3UbLugLw2oLrfdSfXNRJwKQ803WV_O6IaR8reCRQkEr9IlSiQHrWX1bdjKKjPXU1fwhC1Jv_bBK86l0AwlxQQYx8AoCH2fyrA3CxbFNPeGJ1Qvvv2jHRPD_Y5gbUQD_7yugYbVnBrmG_q_F4tx10NO8HBc3c6OOdxiQxiuHvVbHpjDN7GgT5mcQee6z_-2OAimv40FmD3HOPJ51LDKeLjeiVmxEesD0v5bSzcqhxN7Y9OwmVgvu--N0KlAnY_lfrzXlG8IWo2AUyqOUlhJJLnEqKioIlZXAg5qY9J1Kdqkc2G_BbZoYet4ATbEZOQahQVFVGBJPGMw0hdQtlNLHnKRVWwP3nEf9Mif_CowyjTwbTXRAm91W1TLIokVfK8m1DQl_Uo1ZOo67UQ5HGwmJSoY08YBg2-ZCbjVXR5h2BP_YuESB_RqpR1dPgNw3yFej1kSEs6lHJJwmXmwS54zxQUSlwWv7cooi2e9v6oYDCADmbO_yURVGw727g49LVN5FWrbOn9Fa-3rms2qlccb_P3inRwfW65CKdP7SnxEfld8jE19ymcpWIWJKeOoEXbhlmQwSKzn5rI-7g8TAb-5xnoC3xBhNq3lAW29YUbjpHhIRfhsOkDg_Wm0GJgKCg_S99vI8liuQc=\u0026jp=_clwapshhminxdtboqsbjpn\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.32-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=2\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=5UlWrtBaHR0cHM6Ly92aWRhcmEuc28vZS9OMlQ2UnN0RUxhTHA\u0026afid=7434658017858560\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tp=0\u0026vp=8\u0026pkw=0\u0026pload=2092\u0026rlp=%5B0%2C43%2C449%2C322%2C13140%2C4802%2C1045%2C4492%2C1%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5","fqdn":"renamereptiliantrance.com","domain":"renamereptiliantrance.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:30.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"renamereptiliantrance.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Mar 2026 13:26:18 GMT","end":"Sat, 20 Jun 2026 13:26:17 GMT"},"fingerprint":{"sha1":"04:8F:71:66:4C:F7:AD:07:89:E5:9E:A4:46:08:CB:4E:FF:1B:8E:FF","sha256":"CC:26:08:E9:15:CA:94:CA:81:90:87:58:5A:50:AA:68:A6:16:3B:4B:30:9E:7A:B3:00:D8:63:6F:48:97:67:01"}}},"request":{"raw":"GET /adx/get/?id=2098228\u0026pb=8ec8233c05e61161e2e0aa98e62f45d31774735950\u0026pbc=Jql7TPMxTd9OUshp\u0026pbi=E_qVqmdU0q9OUshp\u0026pbu=uvUUuDWSEPZOUshp\u0026psp=GOTYOetogoIsDetoA9yvhbM3vqb0dQge2OmIxhmiDDvfD48hebvpEE4D7Rm4G7uf2dpdX8456T4DRemBGzsnFUckXC3xeGbppFWPyLOfBkJLSkk83j-HiXOUPkKSGw0O5wM9CKW4ofhyuWpqR0D2cPwM0Q1B4TT05gY1t0J6q56siaBVEb3GJwoY5Y7nC5YH47qLvi1P79Ufj4V7SIvNERv_PQfER-qy_dHU9jCQytqK8f8pvjDJmoO_ujpYk20a1FTHvi9Hb9e1DEyzjbKaBLYbN8QIXpGmVfO63xu-YUawUx2fj0lMUI9nIdPU84RiG0VbVAlAKFxCk3OyxYo8RSXtc95bVf2GM--xS2mzRvelTEmHssK67S9FupNrhAqQoxIl3qIiBgWAFc8wptBuR-4q343QkRi15Ex5V2znhRW5vbjYO-dPGg42CMgVyLQ3UbLugLw2oLrfdSfXNRJwKQ803WV_O6IaR8reCRQkEr9IlSiQHrWX1bdjKKjPXU1fwhC1Jv_bBK86l0AwlxQQYx8AoCH2fyrA3CxbFNPeGJ1Qvvv2jHRPD_Y5gbUQD_7yugYbVnBrmG_q_F4tx10NO8HBc3c6OOdxiQxiuHvVbHpjDN7GgT5mcQee6z_-2OAimv40FmD3HOPJ51LDKeLjeiVmxEesD0v5bSzcqhxN7Y9OwmVgvu--N0KlAnY_lfrzXlG8IWo2AUyqOUlhJJLnEqKioIlZXAg5qY9J1Kdqkc2G_BbZoYet4ATbEZOQahQVFVGBJPGMw0hdQtlNLHnKRVWwP3nEf9Mif_CowyjTwbTXRAm91W1TLIokVfK8m1DQl_Uo1ZOo67UQ5HGwmJSoY08YBg2-ZCbjVXR5h2BP_YuESB_RqpR1dPgNw3yFej1kSEs6lHJJwmXmwS54zxQUSlwWv7cooi2e9v6oYDCADmbO_yURVGw727g49LVN5FWrbOn9Fa-3rms2qlccb_P3inRwfW65CKdP7SnxEfld8jE19ymcpWIWJKeOoEXbhlmQwSKzn5rI-7g8TAb-5xnoC3xBhNq3lAW29YUbjpHhIRfhsOkDg_Wm0GJgKCg_S99vI8liuQc=\u0026jp=_clwapshhminxdtboqsbjpn\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.32-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=2\u0026fn=3\u0026es=13\u0026ge=2\u0026th=\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=5UlWrtBaHR0cHM6Ly92aWRhcmEuc28vZS9OMlQ2UnN0RUxhTHA\u0026afid=7434658017858560\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tp=0\u0026vp=8\u0026pkw=0\u0026pload=2092\u0026rlp=%5B0%2C43%2C449%2C322%2C13140%2C4802%2C1045%2C4492%2C1%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5 HTTP/1.1\r\nHost: renamereptiliantrance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nCookie: auth=v=current\u0026id=240a3d5896e1dcc2859240ed7c148d51; cart=1; cart_p=2; CHCK=1; PTS=; UID=26032815127dafa7ca4cfd4cf1b31cccbc39\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 20:12:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: adx.request\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":298,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"1fd2997eefc2cd9d7e3c9487fa04abee","sha1":"88ba7f3f42ce49a0f4d1c611e3d6cfdc3e032093","sha256":"db1efcedbc6356bcaddcb0921804c6cd5d775f9ac023b9831cfa8b7c6d932eea","sha512":"d7cd7eee7df1f1db7df3a8e72beb812f7fbee36dcc736d1027bc1aa382ade5d28152eb7f1cfff9bc2e8c0290d7811bfe589b2ccf1dc6da8c37d010d694fe0856","ssdeep":"","tlshash":"28e07d0be54f1363d5497b2300c0f8de449a9d7e52ce48785d958a06da15f015dd2458","first_seen":"2026-03-28T20:13:04.987944Z","last_seen":"2026-03-28T20:13:04.987944Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b7510.com/5/10652172/?oo=1\u0026js_build=iclick-v1.1746.0\u0026userId=080307daa8c24bcbfa3bd260f8f04ef4\u0026dmn=llvpn.com\u0026tt=2\u0026ix=0\u0026tspl=1142\u0026cslt=27","fqdn":"b7510.com","domain":"b7510.com","tld":"com"},"ip":{"addr":"139.45.197.115","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:31.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b7510.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 05:10:51 GMT","end":"Thu, 09 Apr 2026 05:10:50 GMT"},"fingerprint":{"sha1":"22:4B:79:DA:A0:F6:FE:96:5F:8D:30:A3:1F:16:FF:F1:F0:3B:A3:4C","sha256":"E9:06:72:FC:F6:56:73:C5:90:3B:BE:C2:54:28:25:29:3E:35:63:7C:8B:6E:99:B2:9C:E4:61:37:52:FD:FA:93"}}},"request":{"raw":"POST /5/10652172/?oo=1\u0026js_build=iclick-v1.1746.0\u0026userId=080307daa8c24bcbfa3bd260f8f04ef4\u0026dmn=llvpn.com\u0026tt=2\u0026ix=0\u0026tspl=1142\u0026cslt=27 HTTP/1.1\r\nHost: b7510.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 3390\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3390,"data":"{\"sync\":\"TBtSUh8cJhwUBWcfHEsSAwEFUA5MXwMBbAIlKz9KWUBcHAtKQ1AVSQZbGgxbGwkHVkYLASoQTktDClRGTBkCRExXAg8fFA4eFkpPUhRLDk4+HQY0BV0ZMkBQW2kNHCYfDD1RESZOBwkxGBNcMR5fZkBBJRcYHyoBTzYaUUNQXkdQQB0yU1xHUxkQHAxXWAhFW1MSHw9JSARCT1lJbEYeRkNYWUBQABUbW1pCSQddCk8NCR8UHhYfSk9SFEsJVUNQXkdQWglPDQkfFA4eW1JEThoHGxtbWkJJHFUeTw0JHxQKEFtSRU4aDA9YDUhUW14WBg4VAwMaWAAUSk9SFEsLTRVIVFteFg0FaFZRXFheSURXDE82Dl1DUF5HUFsdDkdMEQxKSFsAHAZcDBcbW1pCSRFcMQJVU2xfFAAcEFdYCEVbTggEMQAXTR0yW1xdUQ4MW1JFThoKFlUOGDEPF0QaBRUDAxpYEhwGEQ1KS0MJTUgJCh9RHgxTShEMSkhbBhk9VgUKG1taQkkRWwICRWZUVxcRDUpPUhRLCV8NSFRbXhYNHl4bCQZWRhoEAUACWVUbCxkeSUgEQk9HV0cUQFRVSgUMSgpbA1FGTBseVRoLWEteaR4BDQ0WFlcbWwNRRkwFF0dMVwFEHxQIDVtSVw5UHxRJCBoLSV4WHBsVAxF7HxcYSllAShkJG1tbXkdQQBQCFQMDGlgTDkpPUwpRSRVDHQZJSAVeXwMVEUETE1tSRFAAWVUbFgMGSUgNVlwbG0ROWF5JRFcVQUtDCU1IBxNQDl5BFU5VVVheS0RXEVkBWwNQWlxfXhYdBRUDAgZIUFVKBhUaU0gLWVpCSQFVGU8NCAEOSkhbHAY9XAwNXAIeCw9QDl5BFVNAQxtGQ0o4DUIAFVUARVtFQhRGOl5XV1kNF1kmIUIJWVcJWko5AhwCWlYXQQUCQUQLHk9TC11XCUhKKQ4RXwFCBQkCBkpVSVlVJFEbHF8OEkFaQQBAXRUVEVgKRkNZWUBIDVsDQwMAHxdGAAxbFENSHEkPARAVXRtDUBI6J1AbWhoIRVdSWlcUHQ5YFFEMDlwTUAcYIn1VBFlNVkQUBRVFBQZeRA9QBB0LGUhdHT1+AlpYDgELBhQOFRkdX0wcBw4FURxXXkpjf0ENFxwQEFYIFRQRDghGBF0LGlJLCV8JNDBTV04aARBVQ1BfR1BBBwkVA11DFghVShEQXktDG0NGTBseFlRPX01HRgleVkcDC1wIC1hPGQFEFxsgX2MPYUUOITUJORIaRVtXBkhUW14WGhcVAxFjLidbRFcMWktDCE1IAAoCFlRPYFBdBUhGVUoFFhpTSRVDDxgKHhZUXgAVEV4ZRkNcTU4aDRQbW0dfR1BGGhkVAx4HVkYaACoNWgNbA1FGTAUFFlRcGxtEUlheHwkZEV1FW1YSCR4eUA5MIV5XRk5aHEFeKlQMS1UbCQMKDxdaTFdRWF9FH0hbCx09VwsTZggECg4KFlRABhURQRMKJgMQG0s2FVwPDRoDUA5cVAIVEVUVCBYaKgZdGQ1RQ1BcX14WGAhZXVxEWF5bSllAXwgUXBELChhQDl5BFVdfFEBGHAZYN2tLVRsPBh1JSBYLAxpsYBofCltEVwFXBRZLPg0PBgdATFcVSkFRGEZVSgUEVEtDG0NGTAgeQExXTEQfFBAXCUpPUxRLCVcVSFRbXhYeA0VaEQxKSFsYGQNMDxZLDDUKDgZRDRlYSxEMAUYQGyoDVg0LVggOTFEUVQIeUhURXwk7DRocBl0HDRtbDA8HAVFCT15KbFUSFhYFHBdVNkEPPgUcNBxRGQhFGwlQGwgKDVlAURomWgkYAQYbQQNPDV9SWgkBVUocEWcMHV4ESFQNE1gdCBsbWkUlAxwLHg0aUw1LFA9CSRtHMRpSW2xdExBbUhMDVBocFUMDHTQFUQwyXFBHaUxUTzcaEGcHHE4EGExRFFUCHlIVEV8JOx0NBglMBglmEgsICgBdTFdRWF9FH0hbAQY9WwELVgwDGwYtWx4IRVgRDBwFFRsQHxRLF1wSSFRJQABXWQUPBwVJVVtEVwFUABxXFTUHD1AOTBhZUl1ZDQpbRFcDXg8QVQgLGg4tXQpPDRsRGlgQCwkTBFEKJkoOHxwIF2sHCRUDERRWRhgMAwdKHRBKBBgxAhYWVE8VFRFVGwkJCRwFVjYQXUNQTEleFg0YRE1cWyUNHTdEQAJLWxVDCRsYBlsDMl5dbARYXltKWUBbBRBaCjUHD1AOTE8bG1BZCRBbUldAFEsUXBUCAQ9QDkwHRE1SUVhIWxoqF1ENWwNDSEJJHVUxBFMbCRRYSFsJEQZRHRBWDwsCNBtQHU8NYm5L\",\"async\":\"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\",\"quality_options\":{\"hil\":1,\"jsp\":1,\"ng\":false,\"ix\":false,\"pt\":false,\"np\":true,\"nw\":true,\"nb\":true,\"sw\":1280,\"sh\":1024,\"pl\":\"https://vidara.so/e/N2T6RstELaLp\",\"wy\":0,\"wx\":0,\"ww\":1280,\"wh\":1024,\"cw\":1280,\"wiw\":1280,\"wih\":981,\"wfc\":2,\"sah\":1024,\"navlng\":\"en-US\",\"drf\":\"\",\"wgl\":\"llvmpipe\",\"tb\":false,\"btz\":\"UTC\",\"bto\":0,\"pnt\":0,\"pnrc\":0,\"bml\":0,\"bmi\":false,\"vsbl\":true},\"client_hints\":{}}"}},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 20:12:32 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://vidara.so\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\npragma: no-cache, no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":91,"dns":26,"connect":26,"send":0,"wait":29,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"b7510.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:35.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20556\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Mar 2026 02:36:27 GMT\r\nexpires: Fri, 26 Mar 2027 02:36:27 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:43 GMT\r\ncontent-type: font/woff2\r\nage: 236168\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20556,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20556, version 1.0","md5":"8feefe1e602c4b14ff414a77c3af2c2c","sha1":"e57daae78e76c8944e97edecfa656f8608e09db5","sha256":"2addf2d86d7a5778653b36d551e97a39da52855f82fac7461cfc1bd86d460aed","sha512":"893f9695ee887eed00246f24d4ec3e17ed64e2af4fab055f951795f50d34f3685aafcfbda943060a132c42169d2ef5c99d3db4fb901d57a09e712b4ff02afd92","ssdeep":"384:tpv6fcCujSd2+uNZ0omwRnNPqfWvx/CldKV8D2w9lQXL79Ci5q8S/USM2BHRpWp6:fxC0So4wRhx90K6ywQLIWS8S5By5AR","tlshash":"8792e056b288746a77e4e3ecc859ae6c65ed9b0f0c1b15b909322122f196c4734930f9","first_seen":"2026-02-19T22:35:21.90447Z","last_seen":"2026-04-05T11:59:06.628574Z","times_seen":6747,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":112,"dns":1,"connect":16,"send":0,"wait":17,"receive":5,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/N2T6RstELaLp","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"172.67.220.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-28T20:12:28.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidara.so","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 11:08:37 GMT","end":"Tue, 05 May 2026 12:07:22 GMT"},"fingerprint":{"sha1":"A6:7B:1F:15:8E:93:40:C2:D5:ED:5D:0E:F1:41:D9:F4:BC:D1:C7:F0","sha256":"0F:4A:DE:A1:CD:61:73:8E:21:8A:AD:69:22:87:25:83:3A:5C:44:F1:33:DB:B1:48:E3:94:87:BA:16:59:80:31"}}},"request":{"raw":"GET /e/N2T6RstELaLp HTTP/1.1\r\nHost: vidara.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 20:12:29 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wb60Wz6Z3b5KvBZCfxZpPL4%2Bn262zXaJvCFwNFwofCSYJXwMhOuVBxf9ew27WG1zPnN%2BF%2FafYpgTKNYsWymdFWnWJE3g22LuKvQHrXLDK%2FHM%2Fd2twTzzYBCY9ww%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e394a37dd0756c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"crypto-js:4.2.0","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]},{"name":"JW Player","description":"JW Player is a online video player with video engagement analytics, custom video player skins, and live video streaming capability.","website":"https://www.jwplayer.com","common_platform_enumeration":"","icon":"JW Player.svg","categories":["Video players"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"TrafficStars","description":"TrafficStars is a self-served ad network and ad exchange that operates mainly in adult-related verticals.","website":"https://trafficstars.com","common_platform_enumeration":"","icon":"TrafficStars.png","categories":["Advertising"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":54412,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (28042), with CRLF, LF line terminators","md5":"31c04a9a1420a519939ea6f7f102af65","sha1":"ddbe0c931330a24d5cd1ebcde68eddc59537db30","sha256":"13632968fc8254504d2f261c7dc4c66772a4ac5d67a61864fd6123d909b8614d","sha512":"5b64e52227ac39c922334fba6596d9480d90bdecbc8830e4f0bbe19eca452fb6df968806d6dd1a331a543bc5b6fcdef271ca57fdf5e498bd2d37d9341fa66be1","ssdeep":"1536:uRyPvhNIwpZeTRP2lgcGrlbfmSXDhKyK+0witQhJx3981:uRyhNxpWRP6/GroSNJK+0wEQhJd981","tlshash":"be334ab636597929033940a520ff2558b2bc49c1348f4978f518e86639ebe3291f7fb8","first_seen":"2026-03-28T20:13:04.989192Z","last_seen":"2026-03-28T20:13:04.989192Z","times_seen":1,"resource_available":true,"data":null}},"time_used":329,"timings":{"blocked":22,"dns":1,"connect":1,"send":0,"wait":284,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:35.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:47 GMT","end":"Mon, 01 Jun 2026 08:37:46 GMT"},"fingerprint":{"sha1":"84:E2:03:36:CA:39:FF:65:64:D9:12:E7:E2:28:88:8C:3C:A0:CA:BA","sha256":"45:AF:9C:39:77:2B:D1:D7:B8:04:BB:2C:0E:98:C5:BB:8A:E8:99:A6:C3:AF:7F:90:AA:23:EA:F2:8F:AD:8F:B1"}}},"request":{"raw":"GET /css2?family=Roboto:wght@100;300;400;500;700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 28 Mar 2026 20:12:35 GMT\r\ndate: Sat, 28 Mar 2026 20:12:35 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26935,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"0884e8d931818487176e13036ed24c91","sha1":"41cdee85bfbf1ec21d37a75ba943b02f6a006052","sha256":"1569faead504fad87314df59b1c41e8005925e8dd8be6a8e1600b43252f245ab","sha512":"5c2eed246d34b868dba07eac69f94967d132496913ec3a32ca3db10b545cee7d78eecb435ec3612e51747a9a45998d2d456dc0d37df9c862ab4b8d71de9e808c","ssdeep":"768:DFZFCFHFHFY4FRLFuFWFMFsbbYSRv4wFMl22YfRiJhan6BBYERNeWwhQHHYORjUF:9HIHTj","tlshash":"99c20da10417440097834ce223cebf35fe1f92507142d0b5abfd9b6baddbca652693ad","first_seen":"2026-02-19T23:47:10.293756Z","last_seen":"2026-04-05T11:37:19.765434Z","times_seen":486,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":52,"dns":0,"connect":15,"send":0,"wait":34,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/pako/2.1.0/pako.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:29.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/pako/2.1.0/pako.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 20:12:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 13233\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"636858ed-33b1\"\r\nlast-modified: Mon, 07 Nov 2022 01:01:33 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1428982\r\nexpires: Thu, 18 Mar 2027 20:12:29 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pe6CoGSm1yjZMFresuwO0g7H1YN4ugmOpyLLLdBNV%2BjlRtUHZjoNTha1C5sMVkT9uDXdthSdX%2Fn%2BLxlmYWoWNylELtZokdl1KLPSkIJytcOo38ViJgbeh%2FH2zbsxvYsOaAp5swWy\"}]}\r\ncf-ray: 9e394a3adfb28deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46859,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (46785)","md5":"e647868246b70926c4d716f7640bd51a","sha1":"c64471d33f9a3d20b5d9219159fe102d8763adcb","sha256":"ede2693a4a6a5126b9d35669062b358ecab6ae7b9b86a1cf302feb45a8514907","sha512":"8364de016c3918f9d7ef3d0a9fc9c56d87de1dcbc0bbfb71e9dea6acb7bff749a40b13be45ca6dc98a64b14cf7e443b7dfb17cddb6707265321e21da9aca647e","ssdeep":"768:fXHw8wA4ZIlEf4WLNiAAAAAA84YrI9OVsLMeu/pJCU5ejR9PNB57szzsE1s1A1m9:yeBomKTCsJ6b3","tlshash":"3423f8b221f754691bd01cd880970ba162b091722c4655f8e77c9ce538b0adbf0bfabd","first_seen":"2023-09-10T07:22:30Z","last_seen":"2026-04-05T11:28:19.20108Z","times_seen":1486,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":22,"dns":3,"connect":6,"send":0,"wait":8,"receive":1,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xk.grayedmellit.com/rw5Dx69wrk3/134585","fqdn":"xk.grayedmellit.com","domain":"grayedmellit.com","tld":"com"},"ip":{"addr":"188.42.138.213","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:29.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xk.grayedmellit.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 20:14:25 GMT","end":"Sat, 13 Jun 2026 20:14:24 GMT"},"fingerprint":{"sha1":"E7:21:49:8D:0F:F4:A6:F1:FD:40:F8:2D:12:52:AE:5B:04:98:81:45","sha256":"9C:F6:1C:0E:9F:02:90:81:86:38:EC:6F:36:77:F6:4F:30:80:24:CC:E5:CB:0F:C1:3A:F5:50:54:A5:74:72:83"}}},"request":{"raw":"GET /rw5Dx69wrk3/134585 HTTP/1.1\r\nHost: xk.grayedmellit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 20:12:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://vidara.so\r\naccess-control-allow-headers: content-type, gyfr29qt4j80vdr0zhsj, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\naccess-control-max-age: 600\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nset-cookie: GL_UI4=eJw9jc1OhDAcB%2FkGddnkl%2FAA%2BwgtUtKrF1%2FBI2npn7UKdFMqq28v8eBtDjOZKIqSpka8FyekX0rgwrnsZSdaybpRqlZr2feCaSEZb8U0CTzYbQhKzxQyVNuifBjCniHXXq2mRr44Q3ONUnt338g3KbJVLYTy1Xqa3PdhqA%2FnkfLn7mC7HhwzJG5r0nOF8s2u5ijPj0g4O5%2BKCE%2B3WYXJ%2BWWwpoiRX70yhPgF1agCXZ3%2FQWlo%2BwzuBrjZDP%2F%2B3zi9c4bC0G5HQu7CO%2FlfoWNCFg%3D%3D; expires=Sun, 29-Mar-2026 20:12:29 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJxjYGBgEuEXZMosEOSxNNSzNNAzMdIzNDURZEwXZPLzF2RKzhNk88svKk%2BsFGQsEmQyMBZkKsoT5PYvzslXcM4vzSsBiicLsoD4goyZgnxOOZkVCsH5OaUlmfl5xYJMQMzpnJiUk6rvEuwjyFjAxijIVJIPIotTRBgEGcvYJASZchJ5HHw%2Fv9qcvuAnkJPP46BavzE63G61IFNBsSCLoaGZEQCHQinh; expires=Sun, 29-Mar-2026 20:12:29 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"848667c49f5d3aef59cd65ed276cd7ae","sha1":"bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763","sha256":"cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8","sha512":"4248ad0e684224ba8503b1e73517aae6ffe4431cd16b7633d2ccbf4b96f845e318dbee175d19cd4676ca37353f53add2231ed167ad6c4aa0d9fe185f7359238c","ssdeep":"","tlshash":"f23000000000000000cc00000000000000000000c000000000000000000000003c0000","first_seen":"2025-04-24T10:17:49.831301Z","last_seen":"2026-04-05T12:07:16.230405Z","times_seen":14854,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":81,"dns":43,"connect":18,"send":0,"wait":23,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"xk.grayedmellit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tsyndicate.com/dsp-pixels","fqdn":"cdn.tsyndicate.com","domain":"tsyndicate.com","tld":"com"},"ip":{"addr":"45.133.44.70","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:29.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.tsyndicate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 04:32:19 GMT","end":"Wed, 29 Apr 2026 04:32:18 GMT"},"fingerprint":{"sha1":"82:62:34:52:A9:E7:DA:4D:26:88:80:06:2F:BC:5C:DA:1D:69:85:1C","sha256":"76:DF:7A:DD:FF:3D:83:17:E5:A1:5C:BA:E1:49:7D:28:B5:3C:6B:57:BE:C0:89:9E:73:BB:66:B2:4D:70:D3:FD"}}},"request":{"raw":"GET /dsp-pixels HTTP/1.1\r\nHost: cdn.tsyndicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 20:12:29 GMT\r\ncontent-type: application/json\r\ncontent-length: 70\r\nserver: nginx\r\ncache-control: max-age=172800\r\nx-request-id: 8712f0ef-a7d0-4d7a-a052-b1a44f5c674a\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Accept\r\nexpires: Mon, 30 Mar 2026 20:12:29 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: DS9225,DS5058\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d65d54baa73d8c5cf1b4145ed2f566ce","sha1":"1924c807418dc7cdf8135bbf2be4e89402e21bfd","sha256":"282322db040ca32cc2f1657864a542d7b60f5d47f4f0f0f7708704acb3c54a88","sha512":"4d9b73b80c65606c0e31a0666a398ee5660fba63277c5abba2938038ba02c1de315fc3e9be8db67e252b8789699f93644347c5805b5a6cdc1b1063cfc9eb4b37","ssdeep":"","tlshash":"5ba022bb00a8b0ceaf20e0c83008a0000ccf80b820a88088ccf22cc0820b3a23030288","first_seen":"2025-06-26T11:56:09.222052Z","last_seen":"2026-04-05T11:36:00.783402Z","times_seen":2914,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vidara.so/e/N2T6RstELaLp","date":"2026-03-28T20:12:35.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Mar 2026 10:17:38 GMT\r\nexpires: Fri, 26 Mar 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 208497\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-05T11:49:31.572986Z","times_seen":64002,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":166,"dns":5,"connect":28,"send":0,"wait":16,"receive":7,"ssl":131},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}