{"report_id":"912a05a0-81c4-4db0-802a-69ea4d974f45","version":6,"status":"done","tags":[],"date":"2025-06-29T23:06:47Z","url":{"schema":"http","addr":"papaahd.live/","fqdn":"papaahd.live","domain":"papaahd.live","tld":"live"},"ip":{"addr":"104.21.16.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"papaahd.live/","fqdn":"papaahd.live","domain":"papaahd.live","tld":"live"},"title":"Papahdd.LIVE – Enjoy"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-07T23:06:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"adsco.re","ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":8541,"first_seen":"2017-04-03T03:11:30Z","last_seen":"2025-06-27T00:44:43.07784Z","alert_count":0,"request_count":1,"received_data":1788,"sent_data":444,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.playerhq.co","ip":{"addr":"54.240.174.81","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2023-11-14","domain_rank":0,"first_seen":"2024-03-24T22:20:25Z","last_seen":"2025-06-28T06:24:09.129664Z","alert_count":0,"request_count":1,"received_data":1198,"sent_data":686,"comment":"","tags":null,"fingerprints":null},{"fqdn":"4.adsco.re","ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":19179,"first_seen":"2021-01-04T16:47:52Z","last_seen":"2025-06-27T08:23:34.532248Z","alert_count":0,"request_count":2,"received_data":860,"sent_data":849,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":75,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-06-25T15:09:40.381554Z","alert_count":0,"request_count":1,"received_data":400346,"sent_data":433,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.cdn4ads.com","ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2020-04-18","domain_rank":105393,"first_seen":"2020-04-19T20:21:04Z","last_seen":"2025-06-23T10:30:13.276284Z","alert_count":0,"request_count":1,"received_data":37705,"sent_data":441,"comment":"","tags":null,"fingerprints":null},{"fqdn":"qdsivhivf3il.n4.adsco.re","ip":{"addr":"38.132.109.126","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":0,"first_seen":"2025-06-29T23:06:48.090297Z","last_seen":"2025-06-29T23:06:48.090297Z","alert_count":0,"request_count":1,"received_data":463,"sent_data":456,"comment":"","tags":null,"fingerprints":null},{"fqdn":"acscdn.com","ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-05-05","domain_rank":93608,"first_seen":"2020-05-06T08:07:13Z","last_seen":"2025-06-27T00:55:05.224189Z","alert_count":0,"request_count":4,"received_data":420031,"sent_data":1655,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn4ads.com","ip":{"addr":"216.59.63.128","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2020-04-18","domain_rank":46207,"first_seen":"2020-04-19T20:21:04Z","last_seen":"2025-06-25T19:05:18.233158Z","alert_count":0,"request_count":1,"received_data":257,"sent_data":1740,"comment":"","tags":null,"fingerprints":null},{"fqdn":"to.rezply.com","ip":{"addr":"172.67.200.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-09","domain_rank":0,"first_seen":"2025-05-16T23:33:53.329152Z","last_seen":"2025-06-27T02:05:40.619855Z","alert_count":0,"request_count":1,"received_data":935,"sent_data":705,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":235,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-06-25T15:17:31.124867Z","alert_count":0,"request_count":2,"received_data":211074,"sent_data":1035,"comment":"","tags":null,"fingerprints":null},{"fqdn":"6.adsco.re","ip":{"addr":"104.17.167.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":17812,"first_seen":"2018-01-15T04:15:29Z","last_seen":"2025-06-26T21:58:47.280284Z","alert_count":0,"request_count":2,"received_data":993,"sent_data":849,"comment":"","tags":null,"fingerprints":null},{"fqdn":"qdsivhivf3il.s4.adsco.re","ip":{"addr":"185.200.116.60","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"domain_registered":"2017-02-14","domain_rank":0,"first_seen":"2025-06-29T23:06:48.092077Z","last_seen":"2025-06-29T23:06:48.092078Z","alert_count":0,"request_count":1,"received_data":463,"sent_data":456,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.predictivdisplay.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-04-27","domain_rank":171692,"first_seen":"2018-04-17T20:47:33Z","last_seen":"2025-06-27T03:02:55.626522Z","alert_count":3,"request_count":3,"received_data":13107,"sent_data":2765,"comment":"","tags":null,"fingerprints":null},{"fqdn":"crrepo.com","ip":{"addr":"104.18.16.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-11-10","domain_rank":82002,"first_seen":"2017-11-14T18:58:13Z","last_seen":"2025-06-28T16:30:13.118305Z","alert_count":0,"request_count":1,"received_data":4113,"sent_data":494,"comment":"","tags":null,"fingerprints":null},{"fqdn":"papaahd.live","ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-10","domain_rank":0,"first_seen":"2025-06-29T23:06:48.077265Z","last_seen":"2025-06-29T23:06:48.077265Z","alert_count":0,"request_count":11,"received_data":308696,"sent_data":5132,"comment":"","tags":null,"fingerprints":null},{"fqdn":"usrpubtrk.com","ip":{"addr":"172.67.186.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-16","domain_rank":0,"first_seen":"2025-06-17T13:34:00.105327Z","last_seen":"2025-06-24T13:36:17.563283Z","alert_count":1,"request_count":1,"received_data":528,"sent_data":483,"comment":"","tags":null,"fingerprints":null},{"fqdn":"youradexchange.com","ip":{"addr":"104.18.25.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-11-09","domain_rank":273384,"first_seen":"2013-02-04T16:25:46Z","last_seen":"2025-06-27T00:55:05.208192Z","alert_count":0,"request_count":6,"received_data":6583,"sent_data":5139,"comment":"","tags":null,"fingerprints":null},{"fqdn":"qdsivhivf3il.l4.adsco.re","ip":{"addr":"185.200.118.62","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"domain_registered":"2017-02-14","domain_rank":0,"first_seen":"2025-06-29T23:06:48.080953Z","last_seen":"2025-06-29T23:06:48.080953Z","alert_count":0,"request_count":1,"received_data":463,"sent_data":456,"comment":"","tags":null,"fingerprints":null},{"fqdn":"c.adsco.re","ip":{"addr":"104.17.166.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":16577,"first_seen":"2017-11-29T18:42:15Z","last_seen":"2025-06-26T23:14:49.82901Z","alert_count":0,"request_count":1,"received_data":79662,"sent_data":509,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2025-06-29T23:06:25Z","timestamp":1751238385,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.16","port":41540,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-06-29T23:06:25.779672+0000\",\"flow_id\":1300721298433432,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":41540,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-06-29T23:06:25.779672+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-06-29T23:06:25Z","timestamp":1751238385,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.16","port":41540,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-06-29T23:06:25.799661+0000\",\"flow_id\":883057203688365,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":41540,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-06-29T23:06:25.799661+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-06-29T23:06:25Z","timestamp":1751238385,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.16","port":41540,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-06-29T23:06:25.819686+0000\",\"flow_id\":243459263922662,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":41540,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-06-29T23:06:25.819686+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-06-29T23:06:25Z","timestamp":1751238385,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.16","port":41540,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-06-29T23:06:25.880523+0000\",\"flow_id\":1300721298433432,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":41540,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-06-29T23:06:25.779672+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-06-29T23:06:25Z","timestamp":1751238385,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.16","port":41540,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-06-29T23:06:25.900109+0000\",\"flow_id\":883057203688365,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":41540,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-06-29T23:06:25.799661+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-06-29T23:06:25Z","timestamp":1751238385,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.16","port":41540,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-06-29T23:06:25.920151+0000\",\"flow_id\":243459263922662,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":41540,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":2,\"pkts_toclient\":0,\"bytes_toserver\":124,\"bytes_toclient\":0,\"start\":\"2025-06-29T23:06:25.819686+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-06-29T23:06:26Z","timestamp":1751238386,"ip_dst":{"addr":"185.200.118.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.16","port":41540,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-06-29T23:06:26.081036+0000\",\"flow_id\":1300721298433432,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":41540,\"dest_ip\":\"185.200.118.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":0,\"bytes_toserver\":186,\"bytes_toclient\":0,\"start\":\"2025-06-29T23:06:25.779672+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-06-29T23:06:26Z","timestamp":1751238386,"ip_dst":{"addr":"38.132.109.186","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.16","port":41540,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-06-29T23:06:26.100732+0000\",\"flow_id\":883057203688365,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":41540,\"dest_ip\":\"38.132.109.186\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":0,\"bytes_toserver\":186,\"bytes_toclient\":0,\"start\":\"2025-06-29T23:06:25.799661+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-06-29T23:06:26Z","timestamp":1751238386,"ip_dst":{"addr":"185.200.116.90","port":3478,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"172.18.0.16","port":41540,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2025-06-29T23:06:26.120350+0000\",\"flow_id\":243459263922662,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":41540,\"dest_ip\":\"185.200.116.90\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":0,\"bytes_toserver\":186,\"bytes_toclient\":0,\"start\":\"2025-06-29T23:06:25.819686+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-29","alert":"Sinkholed","trigger":"predictivdisplay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-29","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-29","alert":"Sinkholed","trigger":"predictivdisplay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-29","alert":"Sinkholed","trigger":"predictivdisplay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.cdn4ads.com/F/ideb.min.js","fqdn":"www.cdn4ads.com","domain":"cdn4ads.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6fb87451849f39b42188c3212e7c9c8","sha1":"de59b979ebcc276f34fdeaeb71ba871d5c11e464","sha256":"d798f5f64059874c590f304c7cf403db7041d9b5e5a74d1e022f3219d50f1706","sha512":"5b7615bc7aa3c57f82631c9c58c26a14eb29b3e04c2defacaa0256cab40358b8d7804ebeff085271c257964f5dc9504d71d06da41b49cde5a052376e0f26c427","ssdeep":"768:uOAu+1lQ5lQhybHUzdfn+4jf4wyXjZRoLO+cjhc90nk5bqgpnANnbWlqj4:yiWEWhVf4wyXjZRoLOPQJ","tlshash":"f2f23a67b296241500eb00ba503f731ab3331216b9025499fdb9cde85e3edca517bbbc","size":37166,"data":"","first_seen":"2025-06-29T23:06:50.332716Z","last_seen":"2025-06-29T23:06:50.332716Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"papaahd.live/wp-content/themes/papahd/assets/js/custom.js?ver=1.0.0%27%20defer=%27defer","fqdn":"papaahd.live","domain":"papaahd.live","tld":"live"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d51d4a94bbe3c0ba3e4a948861aabb54","sha1":"186f0a5743b736877f0f67f03e31d864c4c71471","sha256":"2c82ec8200720005cbd04b43e96bb0374892c8376214084b8085cbd465c54324","sha512":"dadb9eafa85f264603ca8c2792ae15f9d2ef2707a9d2b9377a72ecb610602e835616f039f49584ad0ac36cebf3223a5b6a2bf923eb81fbd0eacafc2f4c935da0","ssdeep":"","tlshash":"2611a87ad26009b2007fb311f76b6340fb7900b750c069067e1c8a891fb4d9024f1fc6","size":1095,"data":"","first_seen":"2024-12-14T04:07:57.320598Z","last_seen":"2025-11-26T23:27:45.735866Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"papaahd.live/","fqdn":"papaahd.live","domain":"papaahd.live","tld":"live"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d99588482a07a9b5b78e991c7041feff","sha1":"6b5a3bef34d7c6376b35236766430b4262172032","sha256":"c9b0f7346bd9d29f326d010a07a3663a9e7f56f6a22bb0796919109eb4288f21","sha512":"d9eb19093fa248f2ef76d56c880b41dabb7f32fb6abad8b8734c6f6852a81badc1f58dad2f03bc0b3f63aba3654dcf87dae6c832d291ad56722c6e69bb12caad","ssdeep":"","tlshash":"fa61979a3775388731b715d26a3f0e07eb7658361684c034c9a9f7541cb2463c379e89","size":3262,"data":"","first_seen":"2025-06-29T23:06:50.337947Z","last_seen":"2025-06-29T23:06:50.337947Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"papaahd.live/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"papaahd.live","domain":"papaahd.live","tld":"live"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-05T06:47:14.523982Z","times_seen":687052,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-M10DF2ED56","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"377a76778e4f40e09894223e50173a9d","sha1":"a4ff58f3664cc9fadcf7a8ca3189d207881f0677","sha256":"8aa8ca95e3387bbc5b70e1137d6df5660b0539d9bafdbdea6ad1b9a10ad27407","sha512":"7816ba929afdac53415426aac42a577b2e5d73416eb90cb7e05122455ca5399506cebf125c11bbb3754c5fe692fb9bbd58099a2987981177bdf0f562c56dfc3f","ssdeep":"12288:AdB/E2Fb84kxZNfj7q3s1fdSvUbUP6HSemkJYg/cQLOX4Wz2U0pK:iE2O4kxZNfj7q3s1fdSvUbUP6HSemkJQ","tlshash":"cb8409ce73c674625396f478503f018ba57b28a2b49cc89af185cce42e74a9a4177f7c","size":399345,"data":"","first_seen":"2025-06-29T23:06:50.327425Z","last_seen":"2025-06-29T23:06:50.327425Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/interstitial.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"778867a529916a0f64757e702863496e","sha1":"e385a995f106228b813145dd1f06bd4beb5fb6e5","sha256":"d91b44482d20e3ed55e882935781bfa1f3a8fde2a0b0fae2c073506603b5acd6","sha512":"d6e0b32832fb710bc2de0b0398b3ba9a04eabdb79563403437c2d73fe215cb70521dd31dbacf52e1f4b93b44982d064853530cc2e02d6e06dfc97d6f111fdd36","ssdeep":"","tlshash":"5c11240eb9c2e0fca676a6f8420f9b5954a317243546a8c3caa3d6c1cc31e4f04b7c2d","size":1000,"data":"","first_seen":"2025-06-27T03:02:57.711646Z","last_seen":"2025-10-08T11:10:39.625242Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/aclib.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d210ac36a390b2276c293cf05d4e4f1","sha1":"43f26ebd0f6555a5ac9bef8b197c9a42c3119f37","sha256":"adaa72975f47b7ddbaaecc9d255ab7da9eef23898bcbb8d5b3e7c02c9f6979ba","sha512":"482a47973fc2a4c2975fdbd79758ef25425d0b3409c05eb60642b77bcd4929198db2d664cd8ed4aa2dc1fa2207e156517e6f80956c5f8590705cf5b7bf996d62","ssdeep":"3072:Gs0EFNF2YwQc6OuovSM4MmMnTdoDSfIWFDx/Ig/:n0cF3PDUYSvVIg/","tlshash":"15e3d849b6d2b0f867d261e4942f9646e1372624740e98d5f6fac5c1a87aecf1033e3c","size":144709,"data":"","first_seen":"2025-06-17T15:31:47.76475Z","last_seen":"2025-07-03T15:12:12.125832Z","times_seen":200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/suv5.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a2e221c59381574d198d1a1d52e0cd3","sha1":"60537ff8143685ec98fb71090690628a667069b6","sha256":"e0696c70e67f4867b1c4c696a3f1df2990c3807b21ef8fece81d6a90dcd94187","sha512":"856da188e1a5bd5024f0dd6cdedf03d245b92c121d2ebc8984ba88d23a5bc2f50a4ac0b4fca82698a1e4f65796967fd31b78ce3e75e8ad534ddf035bbadbed05","ssdeep":"","tlshash":"ff11240eb9c2e0fca676aaf8021fab5958a71724364698d2c662d7c1cd31e4f0477928","size":1000,"data":"","first_seen":"2025-04-07T22:50:51.635205Z","last_seen":"2025-10-21T02:09:09.25103Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"papaahd.live/","fqdn":"papaahd.live","domain":"papaahd.live","tld":"live"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"82226db91e0af538b1b3badc8cfbc898","sha1":"8791981eb48cb72d1a626ca5cf78a1700c7afb06","sha256":"08481d5e53ef346ba10582908f1ea5eee680362e4c0107b5886038d5f5cebdbb","sha512":"413d01d20baa99533b0041354cd7ba92aa508fdf605d6be0ff5648bf9b28035e6b3eecb6d1f53af511a5912b5ce4377cf1d6e5a7dfb8545e2faa5870eb8cb360","ssdeep":"","tlshash":"afc09bcc211e5c7156fb27408b7fb704f442331499d56d324a5a6348ed31e17d754954","size":153,"data":"","first_seen":"2024-12-14T04:07:57.351698Z","last_seen":"2025-11-26T23:27:45.81138Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn4ads.com/epnauckkclbpoktftca?TECtKuZN=BQOCAAAAAAAACZUAAkWrnIMwmWIh731JlEGsK_xP-vzVUikHWOv9xjspHOQ4eqKwI7l5Xg4Ei-OFB8BPZZkH0OP4zUWKbJEAgGGhauI6zZAArOGqNxY9FfhBVxtw73vrbqRIgj-bR2oTXcdXSZ9QZhsuQrsXL3sojmhOchlJKSmnyYvbNMEkQdmvKHvVTK-oKJaz0E_tInS4s2kKXLQlNiD1zrAeCcVbF_sL-88o6uHuPEuT81ohhJytSs_E3ZUogFxpAwqVvMyxVXP_q4I3PT7quOyoCwCYHUwqhOcLWQeZaRy8ZiqlSB6-1M_yFa5g8daSUBfW4OfKRDBsRZ8nBRWo4df3vrhmd-nE3R85Qxslcf981Ccvo4IPGcBZybFkKe_WFCOlAjiR5yrXqFL8raK8eOBgrc-tPzJGQbEZJB_q0shF0OgMJvL6RXx8Buxby4iKGSNf8ZJckdA2bMiu0aXE0lvMFulhAypIPAtsLI0VqkYa8saRJxDVcAJyW86MG9nA9Dzams5hEpH2kq0DkT7dkTBDm9t08fXdRiAbUDiDCoM5UsW1RCNNqQ2hPaxaZUgHjGxdSBlcvJdRlJ7DBVVCHLqDgAOBWN3xrI5B-WCHgBMIY4o8z78xEa4e9mDw2yqEu02tdjPV5TDJ0XPGaZhqRgH9B5hVaJZlNh4J2ISxNw7W8KqZKAWlZEtlWUHqsBn4pjM_eo8SrPUUFwcQfO6ymlef2TblDN1_R3HJRmAS0KXkmS-yFtOjW7U3K-yvvtO2E5JwNq2vFtOY9AYjC2B7Pyn8Bd2wJPFJ_h0mnBjyNayyXULESDhJ0v7iAJxMCAspFPHsIhRVt3fro-rx3YmC9vcEfy4UHL8vpSKPCbJzamewOkKOpGYoPCfVqofUA4eeJMYka4ePxMBv-wSYb0qmECYcg3_umUUWsbS5FlZRLdGsGJ0sQeBBRCqceojU-FF6iRyImWgoXiFKawDDDhWLiE895eM6N6WYzVIoZes7kd5r0cZHpPamg7TXvUQJkyZttp9o3d4HP_x-FKjqwxNtqXe-PVRue31b1F3ck1enoQGk9v0Sf5tZXWfq7kop_msXuNLRWl8aABtU7-KiU9KoYCBNRBgMgdNjVBOixQ3AN16WzvWrztKhluP48wqWUEYJSJ31N1LcikO2OAoKhB3jMaiKH-8GMmRUG6ICwY-4PzidjnCgkacKTSGe\u0026kDftabNW=4\u0026OfJPCXno=5213909\u0026HZMPOgfv=0.001\u0026RJrpzQuD=0,0\u0026AXoKvjCg=\u0026BrJXOeSM=\u0026s=1280,1024,1,1280,1024,0","fqdn":"cdn4ads.com","domain":"cdn4ads.com","tld":"com"},"ip":{"addr":"216.59.63.128","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5f0a25e4d3522d56d48ce7bc3e518fb","sha1":"86794caff58f7fee6e684c2ba7195f970a8d6f4c","sha256":"9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5","sha512":"a3a81801f516a4eb11f00d6f56dab0ed4b8a79219e6b4f5436993479f09dae08f14cffbab3327ff66fb39201d8eba1153ae7114f7705a01cc6f0edf840ef1616","ssdeep":"","tlshash":"789002801814116115d1500b8d5159d01259b1a4540801324446ca502dc7883a415774","size":44,"data":"","first_seen":"2023-03-07T01:17:45Z","last_seen":"2026-04-05T06:37:04.828395Z","times_seen":22827,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"javascriptURL","is_inline":false,"md5":"68934a3e9455fa72420237eb05902327","sha1":"7cb6efb98ba5972a9b5090dc2e517fe14d12cb04","sha256":"fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa","sha512":"719fa67eef49c4b2a2b83f0c62bddd88c106aaadb7e21ae057c8802b700e36f81fe3f144812d8b05d66dc663d908b25645e153262cf6d457aa34e684af9e328d","ssdeep":"","tlshash":"aa3000000000000c000000000000000000000000000000000000000030000000000000","size":5,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-05T06:44:02.460429Z","times_seen":66332,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.adsco.re/#0.7983763140632835","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.17.166.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"77c8287be10ff4b66a8490ca4d999917","sha1":"7fccb364c5e22958503bcd8b92cdb648d5c4c96e","sha256":"c2d43195d015b5856873b3b0c6e717ee21599ca3f03f820b7c325f27b9b6a31d","sha512":"2007ec2f0297a0479f4507af110911f7022310f757533ba1bbd40228d9b26908758bc09afa59f09471cdc254e49b84baa61f80514a010195d288f8049dface07","ssdeep":"","tlshash":"e3f050ddb475e1e955d22580bd2fbf407876526e240361e0d20cbcc1041868e871dbca","size":486,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-01-09T03:52:32.475699Z","times_seen":6630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"papaahd.live/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"papaahd.live","domain":"papaahd.live","tld":"live"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-05T06:47:14.486589Z","times_seen":640229,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"papaahd.live/","fqdn":"papaahd.live","domain":"papaahd.live","tld":"live"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"da7a2c7c3bce105ad8325e727a4eb7a9","sha1":"6f361909d7bb44e02a1a6c887715c699dfe78f50","sha256":"7e721091ae5dbeed326114ebcd20855262371103a9b4b7050d042d1fadb419c3","sha512":"1b239d9a3ef3ecca845ad0e85408a45d6261ddce118e63892287fe8ee13cae37f16df9812ea59a657ff4fc84264351eebb0e6a711df86aef1be226fb1ac5dab9","ssdeep":"","tlshash":"461114196816621d51d664b8507ecd18a8b313c98a80f99528eaa6912f31ccb5d52ddc","size":953,"data":"","first_seen":"2025-06-29T23:06:50.34126Z","last_seen":"2025-06-29T23:06:50.34126Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/inpagepush.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"abf290a39daa3d561f34ca7cb53ac655","sha1":"ba329fcb8e7ce3a64453080229bc6a86cec0194b","sha256":"888a6cd0a1670969e15a7d184b00ba9cb57e354b429ef2d79ddbc5d4df7deeb9","sha512":"53138cac6b6b722c30a5108ec14bd2226d2244d6cf5998b4930f1e84f8764cba3450a49acd947caa8c67f37b5c70cd7c50e46f92d5375b61041761240f8a9048","ssdeep":"","tlshash":"e811f40eb9c2e1fc6672aaf8421f9f5954a317243546a9c3caa3d6d1cc31e4f0477c69","size":1000,"data":"","first_seen":"2025-05-15T07:09:48.732576Z","last_seen":"2025-09-06T20:00:00.809189Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"papaahd.live/","fqdn":"papaahd.live","domain":"papaahd.live","tld":"live"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"24fb640f611f4a611b8487bf291971e2","sha1":"b449a8ee263bd202141ce35b264b9f675401f1e0","sha256":"349f3e80f40df2b7e26f0e64241ed25cdc96fb693e33e0a5d4abe8ed561d0030","sha512":"0d7e69710613b598501f06d9c1a0b361571f3735a3ce9b7e912cfed5283e05ebba4b18e1fc2d3bc7d6fc725b8d478ccf1dd39674b1a85940ba59c93e1768f405","ssdeep":"","tlshash":"b20122312460722156a3a26be34f6380a571d00bb011e447367ec7982fe2ab5f2a76db","size":827,"data":"","first_seen":"2024-12-14T04:07:57.368878Z","last_seen":"2025-11-26T23:27:45.867138Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"papaahd.live/wp-includes/js/wp-emoji-release.min.js?ver=6.8.1","fqdn":"papaahd.live","domain":"papaahd.live","tld":"live"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1dafa7fe14b33c26fef9b0e5ba0c8e72","sha1":"62f67cdac55d89c43570bf0c338f4edf548b14e1","sha256":"50cc1a0490008ec62ca8b581fa9cdcfb2eda2d36a08ccbeb1f004da599e9cc61","sha512":"e202eb603564eb1e7d6fe4e0cf43592919441372b9d58e4c29db215b4d2e119c4d30c7a136e5a5e1866463865cf5cefcb90ed2e3aef46be422e91f964f758928","ssdeep":"384:W5evzW+ZTbXUH3o//bEPhXgA/k1efAJmpr:WC6UXUH3o//YpXgAJfACr","tlshash":"7d82f99bb33a4e9f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","size":19264,"data":"","first_seen":"2025-04-03T04:02:09.307185Z","last_seen":"2026-04-05T05:11:08.176407Z","times_seen":39613,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"papaahd.live/","fqdn":"papaahd.live","domain":"papaahd.live","tld":"live"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"29f3c0cf84d8db61a2c545560150be6a","sha1":"6e2dd38e2ea3adab5a5181806d5a714509d0dd5a","sha256":"3a938ead408afa1cbf136ce400a517cae72590210414fb460791c38f98ed6c50","sha512":"d16fc47c99883b600f2bc51b146c4f265cf77ede96aac02bcec0abbf0c7b69ce37b4c17a5a2528896e590692670233a28e44b19b4363ceb0bf05c44f7cd15176","ssdeep":"","tlshash":"28a0026b11a2402a7362641c4d6d9d9855692023cd1468c57b8c83fc4f86498101b60a","size":62,"data":"","first_seen":"2025-03-31T21:29:58.781899Z","last_seen":"2025-08-24T05:42:06.54523Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"youradexchange.com/ad/czcf.php?cz=basj9dmzy2\u0026atv=62.3","fqdn":"youradexchange.com","domain":"youradexchange.com","tld":"com"},"ip":{"addr":"104.18.25.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://papaahd.live/","date":"2025-06-29T23:06:23.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"youradexchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Jun 2025 20:52:12 GMT","end":"Sat, 30 Aug 2025 21:51:56 GMT"},"fingerprint":{"sha1":"5D:6F:35:ED:36:A9:D9:F7:69:BE:71:FD:6E:3A:C4:28:3D:88:9D:58","sha256":"18:D1:BF:CB:F5:38:3E:63:0B:52:AF:DF:41:98:00:D8:6E:94:A3:56:BB:3E:46:E2:D5:ED:D3:4C:62:93:90:7A"}}},"request":{"raw":"GET /ad/czcf.php?cz=basj9dmzy2\u0026atv=62.3 HTTP/1.1\r\nHost: youradexchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://papaahd.live/\r\nOrigin: https://papaahd.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Jun 2025 23:06:23 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-ray: 957912fadcdd0b02-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":388,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"ed7e5651b26eab81fc3d0389c391b616","sha1":"bea4ef5d34625c0e700230d7f6b0fb8ae9fa0c26","sha256":"304b11ac0945be5182ff95cbe55debbb0f87b9322ac8d65abf13d927360c2ede","sha512":"5c9d3cb39d9923542e6a698806754f61a78d36b504fed63e031366cd2bddffb587fd19af87d39377f1a0a9ee5c78aa2144b15c69fa7eceb41a6a6a88449eca36","ssdeep":"","tlshash":"ebe0f17df191e29ce7f5fe002e804c91820e10fb2ca8b47394e08200919515f0c48435","first_seen":"2025-06-27T03:02:57.706027Z","last_seen":"2025-08-28T20:55:49.38929Z","times_seen":20,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":77,"dns":38,"connect":2,"send":0,"wait":157,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"youradexchange.com/script/push.php?r=8591574\u0026ipp=1\u0026mads=2\u0026position=top\u0026czid=basj9dmzy2\u0026atag=1\u0026aggr=214\u0026srs=d1eee95ea005464f1d8b17162ce9070c\u0026ufp=Linux%20x86_64%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026cbpage=https%3A%2F%2Fpapaahd.live%2F\u0026atv=62.3\u0026cbref=","fqdn":"youradexchange.com","domain":"youradexchange.com","tld":"com"},"ip":{"addr":"104.18.25.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://papaahd.live/","date":"2025-06-29T23:06:24.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"youradexchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Jun 2025 20:52:12 GMT","end":"Sat, 30 Aug 2025 21:51:56 GMT"},"fingerprint":{"sha1":"5D:6F:35:ED:36:A9:D9:F7:69:BE:71:FD:6E:3A:C4:28:3D:88:9D:58","sha256":"18:D1:BF:CB:F5:38:3E:63:0B:52:AF:DF:41:98:00:D8:6E:94:A3:56:BB:3E:46:E2:D5:ED:D3:4C:62:93:90:7A"}}},"request":{"raw":"GET /script/push.php?r=8591574\u0026ipp=1\u0026mads=2\u0026position=top\u0026czid=basj9dmzy2\u0026atag=1\u0026aggr=214\u0026srs=d1eee95ea005464f1d8b17162ce9070c\u0026ufp=Linux%20x86_64%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026cbpage=https%3A%2F%2Fpapaahd.live%2F\u0026atv=62.3\u0026cbref= HTTP/1.1\r\nHost: youradexchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://papaahd.live/\r\nOrigin: https://papaahd.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Jun 2025 23:06:24 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-ray: 957912fd6e660b02-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1899,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e60d0895902bee158dec1337e35de706","sha1":"53e4988821519ae657e65b9a840bed92656a01b0","sha256":"35c88ce9d5abe80c8876a61231d7c5bca4e499958a60c72faf2bd63fe3631240","sha512":"ada0615caeb803625b70ee95b6ac70bfa4892736dc968ecf9492c7560a67cacaa3e3c189de964fbe0e6318abf100e04a2dc6a82b24151d71c8521e7f3c9fbe1b","ssdeep":"","tlshash":"b54119ede999a845874c2962043df5fc38a4930ac2193d25229ff610d9bccf0d04b171","first_seen":"2025-06-29T23:06:50.319901Z","last_seen":"2025-06-29T23:06:50.319901Z","times_seen":1,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.predictivdisplay.com/script/iprp.php?t=1\u0026c=23975936\u0026stamat=m%257C%252C%252CAjI6oiNmoGU3BJ-GH0dEdHP3xP.9be%252Cj9x9bTxIJeoz5J1DSE_bMK6tE95b8a68_Mi2soWi41vr7Bc8g9cnjv8MHVD_N96q36l_ehMTUw6RSIX3JMh0FrfGAwHyHiZ0iehMXPCyK0w9JezAm2KISjK3niaoe5LXlDfQtu4PkZw1_6Z6YM9Cbn_vXe16FzM2ML2WS4e9haVYBIouaEVe_1qa-v1F9L0-4ZzyySKcYKMfUrMaSQV55SaAFhUBnC_o7L4Hj70uinoOjEOXiStKfGOWDZm9rObKhYtYnx6poL9hUMrHKlg9BVC9R4Ji8hyq0sW1ozEfHOa3H1gD6ukIYqRiqi_8YhjJyR2-5WwZyDetI5F2uyLcMTN8gQorQViceCZl55mC5W8hQpit0RDk6GnF4uubv5cUCQH6uoQ8-e2Yjsp5TlKXonD4Edq3eTgoEKsYObPI2Zo3fvdAyqjoKY3u4NxyU3b8S0By-KJxTz-YjCXDKVPV9UMvHk9nd1N_FMWfE9j5awaanmcobcdn2D4LTvs3L4GmYRkg_pVB7euiIy6JlGJ_qqC_3852OQknHtKePXJGIeqrrOmGe8zwkApNPhYdT-j-s-BFmYaKR3p6u33B0EsoS3AEpXeF7or3-9mKHZLxFc9Q6DydL67tDU0XE7Qeoz95m2Iw7W7qUWfLESKHtQHcCA%252C%252C","fqdn":"www.predictivdisplay.com","domain":"predictivdisplay.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://papaahd.live/","date":"2025-06-29T23:06:41.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"predictivdisplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 May 2025 12:19:00 GMT","end":"Fri, 15 Aug 2025 13:17:33 GMT"},"fingerprint":{"sha1":"C3:A0:0C:8C:FB:FC:40:80:A7:F0:2E:E9:03:43:B0:91:80:DB:2D:B9","sha256":"2E:19:2D:50:A0:1B:E2:C6:09:CD:07:90:A7:D4:30:73:DF:FD:4E:A0:46:20:E1:DB:58:B7:38:FE:26:63:90:3E"}}},"request":{"raw":"GET /script/iprp.php?t=1\u0026c=23975936\u0026stamat=m%257C%252C%252CAjI6oiNmoGU3BJ-GH0dEdHP3xP.9be%252Cj9x9bTxIJeoz5J1DSE_bMK6tE95b8a68_Mi2soWi41vr7Bc8g9cnjv8MHVD_N96q36l_ehMTUw6RSIX3JMh0FrfGAwHyHiZ0iehMXPCyK0w9JezAm2KISjK3niaoe5LXlDfQtu4PkZw1_6Z6YM9Cbn_vXe16FzM2ML2WS4e9haVYBIouaEVe_1qa-v1F9L0-4ZzyySKcYKMfUrMaSQV55SaAFhUBnC_o7L4Hj70uinoOjEOXiStKfGOWDZm9rObKhYtYnx6poL9hUMrHKlg9BVC9R4Ji8hyq0sW1ozEfHOa3H1gD6ukIYqRiqi_8YhjJyR2-5WwZyDetI5F2uyLcMTN8gQorQViceCZl55mC5W8hQpit0RDk6GnF4uubv5cUCQH6uoQ8-e2Yjsp5TlKXonD4Edq3eTgoEKsYObPI2Zo3fvdAyqjoKY3u4NxyU3b8S0By-KJxTz-YjCXDKVPV9UMvHk9nd1N_FMWfE9j5awaanmcobcdn2D4LTvs3L4GmYRkg_pVB7euiIy6JlGJ_qqC_3852OQknHtKePXJGIeqrrOmGe8zwkApNPhYdT-j-s-BFmYaKR3p6u33B0EsoS3AEpXeF7or3-9mKHZLxFc9Q6DydL67tDU0XE7Qeoz95m2Iw7W7qUWfLESKHtQHcCA%252C%252C HTTP/1.1\r\nHost: www.predictivdisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sun, 29 Jun 2025 23:06:41 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://www.playerhq.co/f3027520-df91-42ee-b0d9-a200f268a687?zone=3018531-677639518-0\u0026campaign=444544020\u0026ip=91.90.42.154\u0026banner=23975936\u0026ssp=\u0026mzone=3018531\u0026ntk=29a\u0026redirection_cost=\u0026clickid=175123840110000TNOTV415326358024V9be52\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TQk9UPRcr2R%2BLkmTw%2BzIemzw5I9PA%2BWBw3vTyTP0hc58dvypCZTWyucvjHUEgiW4%2BJEqqcZ2BAgvql4aFNwmOOuxOnlcm6pjUMjgsReNFU59oVYO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 95791367393ab512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T06:47:06.202855Z","times_seen":13363998,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":157,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-29","alert":"Sinkholed","trigger":"predictivdisplay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/suv5.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://papaahd.live/","date":"2025-06-29T23:06:24.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acscdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 May 2025 15:22:09 GMT","end":"Mon, 11 Aug 2025 16:21:52 GMT"},"fingerprint":{"sha1":"E8:04:28:CD:40:56:EF:C8:19:07:48:1D:8F:83:82:58:38:D8:61:A1","sha256":"68:55:8C:DF:95:30:12:25:FD:39:66:5E:2A:AB:35:1A:AB:14:78:6D:E3:19:8E:FE:E7:DC:3A:1B:4A:53:99:22"}}},"request":{"raw":"GET /script/suv5.js HTTP/1.1\r\nHost: acscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://papaahd.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 29 Jun 2025 23:06:24 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: ABgVH89y56iz0vi8XrhBmbuF-VwcY4nj6x9yp-G7by0l4li752qEpkwoRgRsCR3BRXCAFSrZ\r\nx-goog-generation: 1750144809847972\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 96365\r\nx-goog-hash: crc32c=+9DX6Q==, md5=HxG/e3KUAtu9Uq+OrX/3Sw==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nexpires: Mon, 30 Jun 2025 00:06:24 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Tue, 17 Jun 2025 07:20:09 GMT\r\netag: W/\"1f11bf7b729402dbbd52af8ead7ff74b\"\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 1863\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 957912fc8c12568e-OSL\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":96365,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65493), with no line terminators","md5":"1f11bf7b729402dbbd52af8ead7ff74b","sha1":"ff9939314ed02768f253a1a91e56e9eaf327602a","sha256":"ae41adcca19895b51b4f8105210f5fc093d0a1f7dbd2f3ea8e44d5ed87485283","sha512":"7ad8e3242dc72610a2e770842335c25006ca26869ef7779edfdb6fb9a547a7c7050b0f1d7d5594f798744894f2981140a016c47625dd01028bf3f5b8afcb3420","ssdeep":"1536:LYbKU6qVopKmB3Nf+u2L6R+sq6jrDj/2SD/u/NNU48WQ/F1JOgg/si/OsWqGJlT9:L7hYzI9UTb6jL2SDm/NWPJU/qAmr","tlshash":"2d93d649bad2f0f86be365e4842f5646e1772a24740d98d5fab6c5c19839e8f4033e3c","first_seen":"2025-06-17T15:31:47.810333Z","last_seen":"2025-07-03T11:13:09.267886Z","times_seen":125,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crrepo.com/extban/447883020/creatives/23992856/b5e51ef773e2a9b8c965b358bcd83250_1560.jpg","fqdn":"crrepo.com","domain":"crrepo.com","tld":"com"},"ip":{"addr":"104.18.16.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://papaahd.live/","date":"2025-06-29T23:06:25.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crrepo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 May 2025 09:39:02 GMT","end":"Tue, 12 Aug 2025 10:38:57 GMT"},"fingerprint":{"sha1":"70:FC:30:D7:4D:82:6C:D4:0F:C4:29:7B:F0:84:5D:2E:78:82:27:75","sha256":"52:86:E4:6F:CF:54:AE:9B:CD:2E:30:C2:F6:8F:1E:3E:03:A6:17:3F:41:B5:42:5D:C5:43:17:B3:83:1E:85:A7"}}},"request":{"raw":"GET /extban/447883020/creatives/23992856/b5e51ef773e2a9b8c965b358bcd83250_1560.jpg HTTP/1.1\r\nHost: crrepo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://papaahd.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Jun 2025 23:06:25 GMT\r\ncontent-type: image/jpeg\r\ncf-bgj: h2pri\r\netag: W/\"685e50d7-e90\"\r\nlast-modified: Fri, 27 Jun 2025 08:05:43 GMT\r\nvia: 1.1 google\r\ncf-cache-status: HIT\r\nage: 311\r\nexpires: Mon, 30 Jun 2025 03:06:25 GMT\r\ncache-control: public, max-age=14400\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 95791306ace0b4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3728,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3","md5":"b5e51ef773e2a9b8c965b358bcd83250","sha1":"487df73aba6d70ffe33772975b05670ffe438df7","sha256":"11996da8158dd57c05d412859ccfb4c9da1026fb61e5328053bb061ef8c37afb","sha512":"bddd98b699cd5ed05814fa27edaefa3c039e7ab5386293eeef2c45302dc14c63c716b707bae395fe94bc8933b1af6a4d73cd01b76d51ef24d7419ee1fd49f0b2","ssdeep":"","tlshash":"f5713b831e1507e8f00946f582a46e25e3d837204a8623a9ddeca3bd587e5c51cbcec7","first_seen":"2025-06-14T02:58:47.613486Z","last_seen":"2025-07-08T17:07:43.197864Z","times_seen":42,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":96,"dns":40,"connect":1,"send":0,"wait":12,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adsco.re/p","fqdn":"adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://papaahd.live/","date":"2025-06-29T23:06:26.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 23 Sep 2024 00:00:00 GMT","end":"Mon, 29 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B","sha256":"A4:41:84:14:13:00:DA:93:54:10:5C:59:8A:A9:83:17:01:36:39:BE:1D:43:E5:FB:1C:F3:D6:AF:8A:ED:84:E2"}}},"request":{"raw":"POST /p HTTP/1.1\r\nHost: adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Length: 2315\r\nOrigin: https://papaahd.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://papaahd.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 29 Jun 2025 23:06:26 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAS-P-1: OK nyc123\r\nAS-P-2: OK\r\nAS-P-3: OK\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: no-transform\r\nAccept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR\r\nAccess-Control-Allow-Origin: https://papaahd.live\r\nAccess-Control-Allow-Credentials: true\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1212,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (1212), with no line terminators","md5":"ed472b38de18d1badc5f0c1f12f80a75","sha1":"a44387530c5e7ffe6ea0723ec4a83f9b13bd633f","sha256":"3415ef3eae3690df12f2afab3aab13fac09726df7f0fdf16c2f0bede0c7c9876","sha512":"63c1a5f07ec60dcbc736ff6f12e39e4bb8be8f6b7aac79bf2844598ef9e8cea076dcf4ff99c01f11763f508a9b6fa7026af74dba5c4f22d686c8f72153656301","ssdeep":"","tlshash":"9d211ae418dceca836d46c751de309300ec7c9695c84bc8698534d17232d0cf436257b","first_seen":"2025-06-29T23:06:50.322355Z","last_seen":"2025-06-29T23:06:50.322355Z","times_seen":1,"resource_available":false,"data":null}},"time_used":790,"timings":{"blocked":326,"dns":34,"connect":94,"send":0,"wait":137,"receive":1,"ssl":192},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn4ads.com/epnauckkclbpoktftca?TECtKuZN=BQOCAAAAAAAACZUAAkWrnIMwmWIh731JlEGsK_xP-vzVUikHWOv9xjspHOQ4eqKwI7l5Xg4Ei-OFB8BPZZkH0OP4zUWKbJEAgGGhauI6zZAArOGqNxY9FfhBVxtw73vrbqRIgj-bR2oTXcdXSZ9QZhsuQrsXL3sojmhOchlJKSmnyYvbNMEkQdmvKHvVTK-oKJaz0E_tInS4s2kKXLQlNiD1zrAeCcVbF_sL-88o6uHuPEuT81ohhJytSs_E3ZUogFxpAwqVvMyxVXP_q4I3PT7quOyoCwCYHUwqhOcLWQeZaRy8ZiqlSB6-1M_yFa5g8daSUBfW4OfKRDBsRZ8nBRWo4df3vrhmd-nE3R85Qxslcf981Ccvo4IPGcBZybFkKe_WFCOlAjiR5yrXqFL8raK8eOBgrc-tPzJGQbEZJB_q0shF0OgMJvL6RXx8Buxby4iKGSNf8ZJckdA2bMiu0aXE0lvMFulhAypIPAtsLI0VqkYa8saRJxDVcAJyW86MG9nA9Dzams5hEpH2kq0DkT7dkTBDm9t08fXdRiAbUDiDCoM5UsW1RCNNqQ2hPaxaZUgHjGxdSBlcvJdRlJ7DBVVCHLqDgAOBWN3xrI5B-WCHgBMIY4o8z78xEa4e9mDw2yqEu02tdjPV5TDJ0XPGaZhqRgH9B5hVaJZlNh4J2ISxNw7W8KqZKAWlZEtlWUHqsBn4pjM_eo8SrPUUFwcQfO6ymlef2TblDN1_R3HJRmAS0KXkmS-yFtOjW7U3K-yvvtO2E5JwNq2vFtOY9AYjC2B7Pyn8Bd2wJPFJ_h0mnBjyNayyXULESDhJ0v7iAJxMCAspFPHsIhRVt3fro-rx3YmC9vcEfy4UHL8vpSKPCbJzamewOkKOpGYoPCfVqofUA4eeJMYka4ePxMBv-wSYb0qmECYcg3_umUUWsbS5FlZRLdGsGJ0sQeBBRCqceojU-FF6iRyImWgoXiFKawDDDhWLiE895eM6N6WYzVIoZes7kd5r0cZHpPamg7TXvUQJkyZttp9o3d4HP_x-FKjqwxNtqXe-PVRue31b1F3ck1enoQGk9v0Sf5tZXWfq7kop_msXuNLRWl8aABtU7-KiU9KoYCBNRBgMgdNjVBOixQ3AN16WzvWrztKhluP48wqWUEYJSJ31N1LcikO2OAoKhB3jMaiKH-8GMmRUG6ICwY-4PzidjnCgkacKTSGe\u0026kDftabNW=4\u0026OfJPCXno=5213909\u0026HZMPOgfv=0.001\u0026RJrpzQuD=0,0\u0026AXoKvjCg=\u0026BrJXOeSM=\u0026s=1280,1024,1,1280,1024,0","fqdn":"cdn4ads.com","domain":"cdn4ads.com","tld":"com"},"ip":{"addr":"216.59.63.128","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://papaahd.live/","date":"2025-06-29T23:06:26.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cdn4ads.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 04 Apr 2025 00:00:00 GMT","end":"Tue, 05 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:E8:5F:67:E6:26:22:D5:AD:B6:B6:67:7C:38:20:45:99:C6:B1:7F","sha256":"7B:DB:ED:86:83:B7:92:84:B5:0C:52:DE:81:DC:EB:28:C6:80:A9:EC:C7:FA:B5:BB:A7:55:6E:17:99:E5:84:B6"}}},"request":{"raw":"GET /epnauckkclbpoktftca?TECtKuZN=BQOCAAAAAAAACZUAAkWrnIMwmWIh731JlEGsK_xP-vzVUikHWOv9xjspHOQ4eqKwI7l5Xg4Ei-OFB8BPZZkH0OP4zUWKbJEAgGGhauI6zZAArOGqNxY9FfhBVxtw73vrbqRIgj-bR2oTXcdXSZ9QZhsuQrsXL3sojmhOchlJKSmnyYvbNMEkQdmvKHvVTK-oKJaz0E_tInS4s2kKXLQlNiD1zrAeCcVbF_sL-88o6uHuPEuT81ohhJytSs_E3ZUogFxpAwqVvMyxVXP_q4I3PT7quOyoCwCYHUwqhOcLWQeZaRy8ZiqlSB6-1M_yFa5g8daSUBfW4OfKRDBsRZ8nBRWo4df3vrhmd-nE3R85Qxslcf981Ccvo4IPGcBZybFkKe_WFCOlAjiR5yrXqFL8raK8eOBgrc-tPzJGQbEZJB_q0shF0OgMJvL6RXx8Buxby4iKGSNf8ZJckdA2bMiu0aXE0lvMFulhAypIPAtsLI0VqkYa8saRJxDVcAJyW86MG9nA9Dzams5hEpH2kq0DkT7dkTBDm9t08fXdRiAbUDiDCoM5UsW1RCNNqQ2hPaxaZUgHjGxdSBlcvJdRlJ7DBVVCHLqDgAOBWN3xrI5B-WCHgBMIY4o8z78xEa4e9mDw2yqEu02tdjPV5TDJ0XPGaZhqRgH9B5hVaJZlNh4J2ISxNw7W8KqZKAWlZEtlWUHqsBn4pjM_eo8SrPUUFwcQfO6ymlef2TblDN1_R3HJRmAS0KXkmS-yFtOjW7U3K-yvvtO2E5JwNq2vFtOY9AYjC2B7Pyn8Bd2wJPFJ_h0mnBjyNayyXULESDhJ0v7iAJxMCAspFPHsIhRVt3fro-rx3YmC9vcEfy4UHL8vpSKPCbJzamewOkKOpGYoPCfVqofUA4eeJMYka4ePxMBv-wSYb0qmECYcg3_umUUWsbS5FlZRLdGsGJ0sQeBBRCqceojU-FF6iRyImWgoXiFKawDDDhWLiE895eM6N6WYzVIoZes7kd5r0cZHpPamg7TXvUQJkyZttp9o3d4HP_x-FKjqwxNtqXe-PVRue31b1F3ck1enoQGk9v0Sf5tZXWfq7kop_msXuNLRWl8aABtU7-KiU9KoYCBNRBgMgdNjVBOixQ3AN16WzvWrztKhluP48wqWUEYJSJ31N1LcikO2OAoKhB3jMaiKH-8GMmRUG6ICwY-4PzidjnCgkacKTSGe\u0026kDftabNW=4\u0026OfJPCXno=5213909\u0026HZMPOgfv=0.001\u0026RJrpzQuD=0,0\u0026AXoKvjCg=\u0026BrJXOeSM=\u0026s=1280,1024,1,1280,1024,0 HTTP/1.1\r\nHost: cdn4ads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://papaahd.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\npopads-node: wb5\r\naccess-control-allow-origin: *\r\nasf: 9\r\npopads-ec: ASB\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 44\r\ndate: Sun, 29 Jun 2025 23:06:27 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"d5f0a25e4d3522d56d48ce7bc3e518fb","sha1":"86794caff58f7fee6e684c2ba7195f970a8d6f4c","sha256":"9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5","sha512":"a3a81801f516a4eb11f00d6f56dab0ed4b8a79219e6b4f5436993479f09dae08f14cffbab3327ff66fb39201d8eba1153ae7114f7705a01cc6f0edf840ef1616","ssdeep":"","tlshash":"789002801814116115d1500b8d5159d01259b1a4540801324446ca502dc7883a415774","first_seen":"2023-03-07T01:17:45Z","last_seen":"2026-04-05T06:37:04.828395Z","times_seen":22827,"resource_available":true,"data":null}},"time_used":711,"timings":{"blocked":300,"dns":0,"connect":92,"send":0,"wait":112,"receive":0,"ssl":204},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"to.rezply.com/cmp/4XSRLJ8/27D9LRW/?source_id=8d1ede5b-d6cf-44b4-9af2-dd5226dde937\u0026sub1=f3027520-df91-42ee-b0d9-a200f268a687\u0026sub2=wllmr81226nn87uaj549o7ae\u0026sub3=bfd233ff-f5d1-4013-8da7-dd3d97f7a3de\u0026sub4=175123840110000TNOTV415326358024V9be52","fqdn":"to.rezply.com","domain":"rezply.com","tld":"com"},"ip":{"addr":"172.67.200.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://papaahd.live/","date":"2025-06-29T23:06:41.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rezply.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 May 2025 16:22:22 GMT","end":"Thu, 07 Aug 2025 17:20:47 GMT"},"fingerprint":{"sha1":"F5:A4:A4:39:67:DC:E2:8C:08:39:BE:1B:92:77:E1:1C:3E:69:C3:2B","sha256":"C3:CD:CA:F0:18:D4:66:12:AC:BD:7D:8B:F4:A8:3A:F2:B2:A0:56:29:B3:BA:E8:07:75:52:A6:8E:90:6B:30:E9"}}},"request":{"raw":"GET /cmp/4XSRLJ8/27D9LRW/?source_id=8d1ede5b-d6cf-44b4-9af2-dd5226dde937\u0026sub1=f3027520-df91-42ee-b0d9-a200f268a687\u0026sub2=wllmr81226nn87uaj549o7ae\u0026sub3=bfd233ff-f5d1-4013-8da7-dd3d97f7a3de\u0026sub4=175123840110000TNOTV415326358024V9be52 HTTP/1.1\r\nHost: to.rezply.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 29 Jun 2025 23:06:41 GMT\r\ncontent-length: 0\r\nlocation: https://www.opera.com/get/opera-gx?utm_medium=pa\u0026utm_campaign=PWN_NO_HVR_9571_WEB_741\u0026utm_id=fae90ebb9b674f30a8a1955df6968fa9\u0026utm_source=PWNgames\u0026edition=std-2\r\ncf-ray: 9579136989c956a5-OSL\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=OIs2rRnNQ0yn1ntlFACGRvcU5pGhJpLwMXuLzUuBAaSB9X0QqK1Gk2%2Filb2TmxbqtG%2B546qEjtTmi4nT%2FFPNaribAXeJJKSAbvJiAT6j5500Nj%2B8zMuJnFtpcyb7eUos\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfOrigin;dur=0,cfEdge;dur=226, cfL4;desc=\"?proto=TCP\u0026rtt=554\u0026min_rtt=436\u0026rtt_var=231\u0026sent=7\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3271\u0026recv_bytes=1414\u0026delivery_rate=7634446\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=3206c03b14cfe2ec\u0026ts=242\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T06:47:06.202855Z","times_seen":13363998,"resource_available":true,"data":null}},"time_used":313,"timings":{"blocked":43,"dns":20,"connect":1,"send":0,"wait":227,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"papaahd.live/wp-includes/css/dist/block-library/style.min.css?ver=6.8.1","fqdn":"papaahd.live","domain":"papaahd.live","tld":"live"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://papaahd.live/","date":"2025-06-29T23:06:23.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"papaahd.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Jun 2025 07:48:00 GMT","end":"Fri, 26 Sep 2025 08:45:21 GMT"},"fingerprint":{"sha1":"30:74:37:8D:EC:17:83:54:F8:BA:F6:79:04:8A:57:3A:6D:4B:94:58","sha256":"3B:88:55:2D:DE:75:10:4F:9D:6E:4B:9A:4A:BB:38:4E:9C:7C:3D:4F:B1:AA:1A:2B:81:B5:77:EE:0E:1F:4E:5B"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.8.1 HTTP/1.1\r\nHost: papaahd.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://papaahd.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Jun 2025 23:06:23 GMT\r\ncontent-type: text/css\r\ncontent-length: 14200\r\nserver: cloudflare\r\nlast-modified: Sun, 29 Jun 2025 05:00:12 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=10368000\r\nexpires: max-age=A10368000,\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F2llTGezzex9MmnGIYqB2spnGST3oGvlUCCnPYZwQ53et57VjOqB1DFIF47CnqSgV%2BtXfJb%2FmetV%2BBKh3o4NUEsXHkBGKGR3CbQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 36727\r\ncf-cache-status: HIT\r\ncf-ray: 957912f6abc656ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":116363,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55654)","md5":"dfe67cbbac3da53fdbbaed71c91db428","sha1":"8c82643ef63a8389c1b800b7c5d0af9d684b8b24","sha256":"597ddfdee7171750c16ec5aafd392cf992e9c53386d6bb6061d48e30334f09e9","sha512":"31f194ac37dc93680b60746a2a8cd67eb84af9ed74e270159ea37801c092ec9ee9217251865569fb5346a4b236aab6ca0999dd12a2fc8bcd0370013e1e764481","ssdeep":"3072:UeeJu1iQg5MG7x+qehvP0x2pck2qCA3Pu:T1iQg5MG7x+qehvP0x2pck2VA2","tlshash":"9ab3615417b4dcf935ffa73a5e4ee248a503aa41c68a57ebe066d190618ca490cf3f0f","first_seen":"2025-04-15T18:59:45.869691Z","last_seen":"2026-04-05T06:22:57.507705Z","times_seen":31202,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://papaahd.live/","date":"2025-06-29T23:06:23.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 May 2025 14:38:44 GMT","end":"Wed, 20 Aug 2025 15:38:38 GMT"},"fingerprint":{"sha1":"4B:06:E9:E2:47:47:F5:3C:33:58:F8:2A:95:70:22:5E:23:19:03:77","sha256":"92:B0:F4:51:5C:E9:3A:03:19:F4:50:36:49:FA:A1:01:1D:F0:A1:91:F7:A3:53:E6:19:AA:C4:FA:3D:C4:31:6E"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.0.0-beta3/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://papaahd.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 29 Jun 2025 23:06:23 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 125064\r\ncf-ray: 957912faab6c56bf-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"619c057b-1e888\"\r\nlast-modified: Mon, 22 Nov 2021 21:02:51 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 296776\r\nexpires: Fri, 19 Jun 2026 23:06:23 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=DA2EmPvtuQlFZtV371S9fGKGc9EL1ahERh%2BvB3hZ6%2BcHza4sTYOCIJufKfP1wycxVyiH%2FtV99djwIPvGizj3jCPqBTQ23zWaVIpEgSxklr9cc%2Bu4VeVXuP3GvB7FE24yDedEBd9E\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":125064,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 125064, version 768.67","md5":"57b380d27f14f16e737bcca7e849cf79","sha1":"2e4280929d4d76fc0e31601c98f167f14630c209","sha256":"94e1bbc1c2a41ebc73fa5253fd563256c0035b4d69181e48f9aef9e474a11251","sha512":"88dd2321cc4711333411a24dab612daa68caf7cc31c892405bcbb9e89629ca15fcdd781bb26d7485f5819b5b48170ec8eaa2135701f4695cf94a1cb0c15bf649","ssdeep":"3072:W0ZXsLdN0s2s3suUQwuHn6XEedsYoDAEMUdAgofJ:W0OdNj10uHwsYoMHPg+J","tlshash":"b0c3122be28d689365654613aedd23ae1e795b7d8c4b6315c1bb3046f7ac7b83003b13","first_seen":"2023-04-09T08:23:50Z","last_seen":"2026-04-05T07:17:17.234741Z","times_seen":11473,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":23,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"papaahd.live/wp-includes/js/wp-emoji-release.min.js?ver=6.8.1","fqdn":"papaahd.live","domain":"papaahd.live","tld":"live"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://papaahd.live/","date":"2025-06-29T23:06:23.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"papaahd.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Jun 2025 07:48:00 GMT","end":"Fri, 26 Sep 2025 08:45:21 GMT"},"fingerprint":{"sha1":"30:74:37:8D:EC:17:83:54:F8:BA:F6:79:04:8A:57:3A:6D:4B:94:58","sha256":"3B:88:55:2D:DE:75:10:4F:9D:6E:4B:9A:4A:BB:38:4E:9C:7C:3D:4F:B1:AA:1A:2B:81:B5:77:EE:0E:1F:4E:5B"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.8.1 HTTP/1.1\r\nHost: papaahd.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://papaahd.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 29 Jun 2025 23:06:23 GMT\r\ncontent-type: text/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=YH3NgILyfXqptN7sujg6xrJ2MxiBh5khY6hpLPkeHjczuHnuZzhQGHQ3ddVLDGx7f4DxilXTpA3aR1GC01xCwkrpz48rV%2B1Lf4t%2Bfr%2BIglc7qnoFTTjp3svF3SWrJhM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Sun, 29 Jun 2025 05:00:14 GMT\r\ncache-control: max-age=10368000\r\nexpires: max-age=A10368000,\r\nvary: Accept-Encoding\r\nage: 36727\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 957912fa9fbcb4fd-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1905\u0026min_rtt=501\u0026rtt_var=1609\u0026sent=245\u0026recv=311\u0026lost=0\u0026retrans=0\u0026sent_bytes=16486\u0026recv_bytes=16960\u0026delivery_rate=480373\u0026ss_exit_cwnd=14908\u0026ss_exit_reason=2\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=08feae69694bbe32\u0026ts=927\u0026inflight_dur=37\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19264,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (16290)","md5":"1dafa7fe14b33c26fef9b0e5ba0c8e72","sha1":"62f67cdac55d89c43570bf0c338f4edf548b14e1","sha256":"50cc1a0490008ec62ca8b581fa9cdcfb2eda2d36a08ccbeb1f004da599e9cc61","sha512":"e202eb603564eb1e7d6fe4e0cf43592919441372b9d58e4c29db215b4d2e119c4d30c7a136e5a5e1866463865cf5cefcb90ed2e3aef46be422e91f964f758928","ssdeep":"384:W5evzW+ZTbXUH3o//bEPhXgA/k1efAJmpr:WC6UXUH3o//YpXgAJfACr","tlshash":"7d82f99bb33a4e9f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","first_seen":"2025-04-03T04:02:09.307185Z","last_seen":"2026-04-05T05:11:08.176407Z","times_seen":39613,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":30,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usrpubtrk.com/ut/hb.php?cb=0.9663368497543804\u0026v=1","fqdn":"usrpubtrk.com","domain":"usrpubtrk.com","tld":"com"},"ip":{"addr":"172.67.186.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://papaahd.live/","date":"2025-06-29T23:06:23.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usrpubtrk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Jun 2025 11:32:07 GMT","end":"Sun, 14 Sep 2025 12:30:39 GMT"},"fingerprint":{"sha1":"73:D3:CF:85:0F:63:93:DD:FC:EC:C6:A5:AD:25:E8:9F:46:71:26:ED","sha256":"A8:B0:CB:2F:32:B5:AE:46:45:D1:0C:B8:85:56:D2:88:0C:43:C1:0E:61:09:34:D5:ED:78:EF:E0:E4:CE:AE:C7"}}},"request":{"raw":"POST /ut/hb.php?cb=0.9663368497543804\u0026v=1 HTTP/1.1\r\nHost: usrpubtrk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 822\r\nOrigin: https://papaahd.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://papaahd.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 29 Jun 2025 23:06:24 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=63Agto5Dm1pj7x2qK%2FxUrTM1YC3NQnX%2BDwN096pZE4bGjFT9ioRhBPyKyUy5nuRLHNgS881fjId%2F3g0z08jq%2Bj78jghFDafhDh6V\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 957912fbd9e3b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T06:47:06.202855Z","times_seen":13363998,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":55,"dns":23,"connect":1,"send":0,"wait":152,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-29","alert":"Sinkholed","trigger":"usrpubtrk.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.predictivdisplay.com/jump/next.php?r=3018531\u0026sub1=8591570-3775522587-3930541253","fqdn":"www.predictivdisplay.com","domain":"predictivdisplay.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://papaahd.live/","date":"2025-06-29T23:06:40.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"predictivdisplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 May 2025 12:19:00 GMT","end":"Fri, 15 Aug 2025 13:17:33 GMT"},"fingerprint":{"sha1":"C3:A0:0C:8C:FB:FC:40:80:A7:F0:2E:E9:03:43:B0:91:80:DB:2D:B9","sha256":"2E:19:2D:50:A0:1B:E2:C6:09:CD:07:90:A7:D4:30:73:DF:FD:4E:A0:46:20:E1:DB:58:B7:38:FE:26:63:90:3E"}}},"request":{"raw":"GET /jump/next.php?r=3018531\u0026sub1=8591570-3775522587-3930541253 HTTP/1.1\r\nHost: www.predictivdisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Jun 2025 23:06:40 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6mLZZ87EZLJntgzSBPW3qg3bvpk%2F%2F1Dy9S%2FGrpnt19%2FgLqTgv9KlxLX8NqTAoRSHi7GU6318Onqi11tua0znmKjn397Zt6epK%2Bov0GvCTMcYHK0N\"}]}\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 957913640c0a56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10052,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (8945)","md5":"b986cc7a6d80ceb8fe5153947eff9e21","sha1":"6368653ceb373521b56c0cda6cae44b0a3d203c0","sha256":"5ff7f0bc93faa4358c4174322e0d1f7e1c9de3ff635c1c602c558531570f1904","sha512":"941c407411b6120f95964e70b0fe72ac1a87e48ff09816d01594b7b9cdbc987c56b3e551b9d2c37f9e2539d446b2a97c1513a81225c764a26c004909f2d6537d","ssdeep":"192:RrhCXaGaTTwgilvabJ0JSMKxKOxSUgiLIL6VB1Dt:RrUXTaTTdil9UMK5JBEL6VB1J","tlshash":"57226420bff4e9280387073b733b615de5a60cbe598a648bf0066c59660471fe4f7a71","first_seen":"2025-06-27T03:02:57.704292Z","last_seen":"2026-02-08T07:16:53.822667Z","times_seen":17,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":65,"dns":39,"connect":1,"send":0,"wait":164,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-29","alert":"Sinkholed","trigger":"predictivdisplay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4.adsco.re/","fqdn":"4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://papaahd.live/","date":"2025-06-29T23:06:25.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 23 Sep 2024 00:00:00 GMT","end":"Mon, 29 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B","sha256":"A4:41:84:14:13:00:DA:93:54:10:5C:59:8A:A9:83:17:01:36:39:BE:1D:43:E5:FB:1C:F3:D6:AF:8A:ED:84:E2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://papaahd.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://papaahd.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 29 Jun 2025 23:06:25 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Methods: GET, HEAD, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type\r\nAccess-Control-Allow-Origin: https://papaahd.live\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: private, max-age=5\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":736,"timings":{"blocked":314,"dns":14,"connect":97,"send":0,"wait":101,"receive":0,"ssl":187},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6.adsco.re/","fqdn":"6.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.17.167.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://papaahd.live/","date":"2025-06-29T23:06:25.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 23 Sep 2024 00:00:00 GMT","end":"Mon, 29 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B","sha256":"A4:41:84:14:13:00:DA:93:54:10:5C:59:8A:A9:83:17:01:36:39:BE:1D:43:E5:FB:1C:F3:D6:AF:8A:ED:84:E2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://papaahd.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://papaahd.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Jun 2025 23:06:25 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 45\r\naccess-control-allow-origin: https://papaahd.live\r\ncache-control: private, max-age=10\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-max-age: 2592000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 95791306288756a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":42,"dns":25,"connect":1,"send":0,"wait":9,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6.adsco.re:2087/","fqdn":"6.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.17.167.186","port":2087,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://papaahd.live/","date":"2025-06-29T23:06:25.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 23 Sep 2024 00:00:00 GMT","end":"Mon, 29 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B","sha256":"A4:41:84:14:13:00:DA:93:54:10:5C:59:8A:A9:83:17:01:36:39:BE:1D:43:E5:FB:1C:F3:D6:AF:8A:ED:84:E2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6.adsco.re:2087\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://papaahd.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://papaahd.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Jun 2025 23:06:25 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 45\r\naccess-control-allow-origin: https://papaahd.live\r\ncache-control: private, max-age=10\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-max-age: 2592000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 957913062a5656ae-OSL\r\nalt-svc: h3=\":2087\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":37,"dns":24,"connect":4,"send":0,"wait":8,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"papaahd.live/wp-content/themes/papahd/assets/css/header-footer.css?ver=1.0","fqdn":"papaahd.live","domain":"papaahd.live","tld":"live"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://papaahd.live/","date":"2025-06-29T23:06:23.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"papaahd.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Jun 2025 07:48:00 GMT","end":"Fri, 26 Sep 2025 08:45:21 GMT"},"fingerprint":{"sha1":"30:74:37:8D:EC:17:83:54:F8:BA:F6:79:04:8A:57:3A:6D:4B:94:58","sha256":"3B:88:55:2D:DE:75:10:4F:9D:6E:4B:9A:4A:BB:38:4E:9C:7C:3D:4F:B1:AA:1A:2B:81:B5:77:EE:0E:1F:4E:5B"}}},"request":{"raw":"GET /wp-content/themes/papahd/assets/css/header-footer.css?ver=1.0 HTTP/1.1\r\nHost: papaahd.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://papaahd.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Jun 2025 23:06:23 GMT\r\ncontent-type: text/css\r\ncontent-length: 509\r\nserver: cloudflare\r\nlast-modified: Sun, 29 Jun 2025 05:00:09 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=10368000\r\nexpires: max-age=A10368000,\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=moQ%2BhoxBBjEGCPxRzzIoogB7jeOVH7BpC4%2FEu7il9C9CGiIdBi5JyZkU8x8sJaPwZDsHUylYTC7l7g1Dky%2B%2FArQV%2F2HA9RrzWGs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 36727\r\ncf-cache-status: HIT\r\ncf-ray: 957912f6bbcd56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1807,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"1289c8ab29ab1ffd29ed0bbf4b1f9e20","sha1":"b3e4a2e65d9fd08bb1d2e6f9db1d6b873fc8109c","sha256":"13ce9254acb15f3939bd41c2bda16bc294fc3f1890fff747c86b3714332e9b41","sha512":"5ee22aaf516029a5217c6c634bba88599984694f0f733209266e048032eb8903f94aae29ed04adf71d2b961ae49db0dadcab6dedd5d94bf908038d50fac86061","ssdeep":"","tlshash":"f031af19ea4520033137aef87bb68740e7949473cd0502b97eec52519ffd5b88265f8c","first_seen":"2025-04-07T22:50:51.596911Z","last_seen":"2025-11-01T19:01:25.905332Z","times_seen":51,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/aclib.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://papaahd.live/","date":"2025-06-29T23:06:23.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acscdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 May 2025 15:22:09 GMT","end":"Mon, 11 Aug 2025 16:21:52 GMT"},"fingerprint":{"sha1":"E8:04:28:CD:40:56:EF:C8:19:07:48:1D:8F:83:82:58:38:D8:61:A1","sha256":"68:55:8C:DF:95:30:12:25:FD:39:66:5E:2A:AB:35:1A:AB:14:78:6D:E3:19:8E:FE:E7:DC:3A:1B:4A:53:99:22"}}},"request":{"raw":"GET /script/aclib.js HTTP/1.1\r\nHost: acscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://papaahd.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Jun 2025 23:06:23 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: ABgVH8890SXVrTCbB-bEAToI9emEjp3odESuEZIS2-O_0m_8oamlatctDWNrSUmwZfJfSbje\r\nx-goog-generation: 1750144465368308\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 144709\r\nx-goog-hash: crc32c=tJ4ytg==, md5=jSEKw2o5CyJ2wpPPBdTk8Q==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccess-control-allow-origin: *\r\nexpires: Mon, 30 Jun 2025 00:06:23 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Tue, 17 Jun 2025 07:14:25 GMT\r\netag: W/\"8d210ac36a390b2276c293cf05d4e4f1\"\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 2424\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 957912f7189d5690-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":144709,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65499), with no line terminators","md5":"8d210ac36a390b2276c293cf05d4e4f1","sha1":"43f26ebd0f6555a5ac9bef8b197c9a42c3119f37","sha256":"adaa72975f47b7ddbaaecc9d255ab7da9eef23898bcbb8d5b3e7c02c9f6979ba","sha512":"482a47973fc2a4c2975fdbd79758ef25425d0b3409c05eb60642b77bcd4929198db2d664cd8ed4aa2dc1fa2207e156517e6f80956c5f8590705cf5b7bf996d62","ssdeep":"3072:Gs0EFNF2YwQc6OuovSM4MmMnTdoDSfIWFDx/Ig/:n0cF3PDUYSvVIg/","tlshash":"15e3d849b6d2b0f867d261e4942f9646e1372624740e98d5f6fac5c1a87aecf1033e3c","first_seen":"2025-06-17T15:31:47.76475Z","last_seen":"2025-07-03T15:12:12.125832Z","times_seen":200,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":38,"dns":35,"connect":1,"send":0,"wait":21,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-M10DF2ED56","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://papaahd.live/","date":"2025-06-29T23:06:23.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Jun 2025 08:35:30 GMT","end":"Mon, 25 Aug 2025 08:35:29 GMT"},"fingerprint":{"sha1":"79:AA:03:D4:F6:6B:0F:61:E5:C5:AB:19:F4:A5:5D:DC:97:80:AF:DA","sha256":"F5:17:47:03:4B:39:BD:9F:79:87:88:F4:F3:FF:C3:7D:05:5D:EB:4D:D3:F5:02:E8:2B:96:3B:BA:AA:97:0D:B3"}}},"request":{"raw":"GET /gtag/js?id=G-M10DF2ED56 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://papaahd.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 29 Jun 2025 23:06:23 GMT\r\nexpires: Sun, 29 Jun 2025 23:06:23 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0\r\nreport-to: {\"group\":\"ascgcycc:1077:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 132929\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":399345,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6004)","md5":"377a76778e4f40e09894223e50173a9d","sha1":"a4ff58f3664cc9fadcf7a8ca3189d207881f0677","sha256":"8aa8ca95e3387bbc5b70e1137d6df5660b0539d9bafdbdea6ad1b9a10ad27407","sha512":"7816ba929afdac53415426aac42a577b2e5d73416eb90cb7e05122455ca5399506cebf125c11bbb3754c5fe692fb9bbd58099a2987981177bdf0f562c56dfc3f","ssdeep":"12288:AdB/E2Fb84kxZNfj7q3s1fdSvUbUP6HSemkJYg/cQLOX4Wz2U0pK:iE2O4kxZNfj7q3s1fdSvUbUP6HSemkJQ","tlshash":"cb8409ce73c674625396f478503f018ba57b28a2b49cc89af185cce42e74a9a4177f7c","first_seen":"2025-06-29T23:06:50.327425Z","last_seen":"2025-06-29T23:06:50.327425Z","times_seen":1,"resource_available":true,"data":null}},"time_used":391,"timings":{"blocked":135,"dns":5,"connect":21,"send":0,"wait":43,"receive":58,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.predictivdisplay.com/jump/next.php?stamat=m%257C%252C4NjI2tjJqB1dAN0dEdHP3xP.eda%252CS0kXXHXf2ck-DOZ9HRvwuM9aL_G46JdZU-2oa3bmXM8ZtPjweASBZsGLxq4qhdiWW9sYbBcNFK03TgEjioY1Wgqf979FrjBZpAdOW_8DQWU%252C\u0026cbpage=https://www.predictivdisplay.com/jump/next.php?r=3018531\u0026sub1=8591570-3775522587-3930541253\u0026cbur=0.6379855075406343\u0026cbtitle=\u0026cbiframe=1\u0026cbWidth=1280\u0026cbHeight=1024\u0026cbdescription=\u0026cbkeywords=\u0026cbref=\u0026ufp=Linux%20x86_64%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits","fqdn":"www.predictivdisplay.com","domain":"predictivdisplay.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://papaahd.live/","date":"2025-06-29T23:06:40.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"predictivdisplay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 May 2025 12:19:00 GMT","end":"Fri, 15 Aug 2025 13:17:33 GMT"},"fingerprint":{"sha1":"C3:A0:0C:8C:FB:FC:40:80:A7:F0:2E:E9:03:43:B0:91:80:DB:2D:B9","sha256":"2E:19:2D:50:A0:1B:E2:C6:09:CD:07:90:A7:D4:30:73:DF:FD:4E:A0:46:20:E1:DB:58:B7:38:FE:26:63:90:3E"}}},"request":{"raw":"GET /jump/next.php?stamat=m%257C%252C4NjI2tjJqB1dAN0dEdHP3xP.eda%252CS0kXXHXf2ck-DOZ9HRvwuM9aL_G46JdZU-2oa3bmXM8ZtPjweASBZsGLxq4qhdiWW9sYbBcNFK03TgEjioY1Wgqf979FrjBZpAdOW_8DQWU%252C\u0026cbpage=https://www.predictivdisplay.com/jump/next.php?r=3018531\u0026sub1=8591570-3775522587-3930541253\u0026cbur=0.6379855075406343\u0026cbtitle=\u0026cbiframe=1\u0026cbWidth=1280\u0026cbHeight=1024\u0026cbdescription=\u0026cbkeywords=\u0026cbref=\u0026ufp=Linux%20x86_64%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits HTTP/1.1\r\nHost: www.predictivdisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sun, 29 Jun 2025 23:06:41 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://www.predictivdisplay.com/script/iprp.php?t=1\u0026c=23975936\u0026stamat=m%257C%252C%252CAjI6oiNmoGU3BJ-GH0dEdHP3xP.9be%252Cj9x9bTxIJeoz5J1DSE_bMK6tE95b8a68_Mi2soWi41vr7Bc8g9cnjv8MHVD_N96q36l_ehMTUw6RSIX3JMh0FrfGAwHyHiZ0iehMXPCyK0w9JezAm2KISjK3niaoe5LXlDfQtu4PkZw1_6Z6YM9Cbn_vXe16FzM2ML2WS4e9haVYBIouaEVe_1qa-v1F9L0-4ZzyySKcYKMfUrMaSQV55SaAFhUBnC_o7L4Hj70uinoOjEOXiStKfGOWDZm9rObKhYtYnx6poL9hUMrHKlg9BVC9R4Ji8hyq0sW1ozEfHOa3H1gD6ukIYqRiqi_8YhjJyR2-5WwZyDetI5F2uyLcMTN8gQorQViceCZl55mC5W8hQpit0RDk6GnF4uubv5cUCQH6uoQ8-e2Yjsp5TlKXonD4Edq3eTgoEKsYObPI2Zo3fvdAyqjoKY3u4NxyU3b8S0By-KJxTz-YjCXDKVPV9UMvHk9nd1N_FMWfE9j5awaanmcobcdn2D4LTvs3L4GmYRkg_pVB7euiIy6JlGJ_qqC_3852OQknHtKePXJGIeqrrOmGe8zwkApNPhYdT-j-s-BFmYaKR3p6u33B0EsoS3AEpXeF7or3-9mKHZLxFc9Q6DydL67tDU0XE7Qeoz95m2Iw7W7qUWfLESKHtQHcCA%252C%252C\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mRXl1sK%2Bq42EnQwcAgJZAnOq7aICjDo%2FhwWlcssrA9Ru6vuvuaNiPdQ7g360UuA1W3PkCWRoNuGaAHoDIQcXn4F0CE%2For2VIrvHWj%2Fcs%2FVWxGIr4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 95791365e81eb512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T06:47:06.202855Z","times_seen":13363998,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-29","alert":"Sinkholed","trigger":"predictivdisplay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"youradexchange.com/script/suurl5.php?r=8591578\u0026cbur=0.6781842301334136\u0026cbiframe=0\u0026cbWidth=1280\u0026cbHeight=1024\u0026cbtitle=Papahdd.LIVE%20%E2%80%93%20Enjoy\u0026cbpage=https%3A%2F%2Fpapaahd.live%2F\u0026cbref=\u0026cbdescription=\u0026cbkeywords=\u0026cbcdn=acscdn.com\u0026ufp=Linux%20x86_64%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026ts=1751238384156\u0026srs=d1eee95ea005464f1d8b17162ce9070c\u0026atv=62.3\u0026atag=1\u0026aggr=214\u0026czid=basj9dmzy2","fqdn":"youradexchange.com","domain":"youradexchange.com","tld":"com"},"ip":{"addr":"104.18.25.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://papaahd.live/","date":"2025-06-29T23:06:24.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"youradexchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Jun 2025 20:52:12 GMT","end":"Sat, 30 Aug 2025 21:51:56 GMT"},"fingerprint":{"sha1":"5D:6F:35:ED:36:A9:D9:F7:69:BE:71:FD:6E:3A:C4:28:3D:88:9D:58","sha256":"18:D1:BF:CB:F5:38:3E:63:0B:52:AF:DF:41:98:00:D8:6E:94:A3:56:BB:3E:46:E2:D5:ED:D3:4C:62:93:90:7A"}}},"request":{"raw":"GET /script/suurl5.php?r=8591578\u0026cbur=0.6781842301334136\u0026cbiframe=0\u0026cbWidth=1280\u0026cbHeight=1024\u0026cbtitle=Papahdd.LIVE%20%E2%80%93%20Enjoy\u0026cbpage=https%3A%2F%2Fpapaahd.live%2F\u0026cbref=\u0026cbdescription=\u0026cbkeywords=\u0026cbcdn=acscdn.com\u0026ufp=Linux%20x86_64%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026ts=1751238384156\u0026srs=d1eee95ea005464f1d8b17162ce9070c\u0026atv=62.3\u0026atag=1\u0026aggr=214\u0026czid=basj9dmzy2 HTTP/1.1\r\nHost: youradexchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://papaahd.live/\r\nOrigin: https://papaahd.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Jun 2025 23:06:24 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-ray: 957912fd6e5f0b02-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":921,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e1c47b87f531d71fc6135f7a928f9c03","sha1":"7c0d340a431abd41832f7079d72b4a3f4adab297","sha256":"a9e72bafd34266df653d6dcec208a0e5ba14d5895878b9c8333fcffe068ef153","sha512":"cebfdb2aff81a3b9c2b55edf9a9f0d21c7db726a96ed5fb59f1e404d104fe80e024d828c5507583c48032450851f0aee5a5e7485be91af3e1648d6196b0b62c2","ssdeep":"","tlshash":"141188130a401565c5af49e84daff4759ca079e4079dba45548f24a6c394c981969173","first_seen":"2025-06-29T23:06:50.328042Z","last_seen":"2025-06-29T23:06:50.328042Z","times_seen":1,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qdsivhivf3il.l4.adsco.re/","fqdn":"qdsivhivf3il.l4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"185.200.118.62","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"","requested_by":"https://papaahd.live/","date":"2025-06-29T23:06:25.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.l4.adsco.re","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Apr 2025 09:14:33 GMT","end":"Fri, 18 Jul 2025 09:14:32 GMT"},"fingerprint":{"sha1":"76:AD:98:EA:A8:8F:6F:6D:58:92:36:07:6D:91:B6:67:41:97:C1:4E","sha256":"26:2C:56:B9:5F:64:C4:20:BE:1C:50:3B:4C:EC:7D:C9:67:68:BB:55:A4:E0:55:0F:20:CE:87:11:30:D5:E3:D5"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: qdsivhivf3il.l4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 0\r\nOrigin: https://papaahd.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://papaahd.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Jun 2025 23:06:25 GMT\r\ncontent-type: text/html\r\ncontent-length: 0\r\nlast-modified: Fri, 02 Jun 2023 14:03:32 GMT\r\netag: \"6479f6b4-0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T06:47:06.202855Z","times_seen":13363998,"resource_available":true,"data":null}},"time_used":451,"timings":{"blocked":203,"dns":71,"connect":24,"send":0,"wait":31,"receive":1,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.playerhq.co/f3027520-df91-42ee-b0d9-a200f268a687?zone=3018531-677639518-0\u0026campaign=444544020\u0026ip=91.90.42.154\u0026banner=23975936\u0026ssp=\u0026mzone=3018531\u0026ntk=29a\u0026redirection_cost=\u0026clickid=175123840110000TNOTV415326358024V9be52","fqdn":"www.playerhq.co","domain":"playerhq.co","tld":"co"},"ip":{"addr":"54.240.174.81","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://papaahd.live/","date":"2025-06-29T23:06:41.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.playerhq.co","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Tue, 06 Aug 2024 00:00:00 GMT","end":"Thu, 04 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"16:B7:73:8E:0E:95:DF:24:14:13:D6:37:99:3E:F8:08:0B:0C:22:82","sha256":"6E:49:91:39:26:B7:AA:77:FD:89:59:BC:30:BF:1A:0E:BB:6A:E9:12:60:34:CE:CE:52:95:87:1E:E9:92:CE:B2"}}},"request":{"raw":"GET /f3027520-df91-42ee-b0d9-a200f268a687?zone=3018531-677639518-0\u0026campaign=444544020\u0026ip=91.90.42.154\u0026banner=23975936\u0026ssp=\u0026mzone=3018531\u0026ntk=29a\u0026redirection_cost=\u0026clickid=175123840110000TNOTV415326358024V9be52 HTTP/1.1\r\nHost: www.playerhq.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-length: 0\r\nlocation: https://to.rezply.com/cmp/4XSRLJ8/27D9LRW/?source_id=8d1ede5b-d6cf-44b4-9af2-dd5226dde937\u0026sub1=f3027520-df91-42ee-b0d9-a200f268a687\u0026sub2=wllmr81226nn87uaj549o7ae\u0026sub3=bfd233ff-f5d1-4013-8da7-dd3d97f7a3de\u0026sub4=175123840110000TNOTV415326358024V9be52\r\ndate: Sun, 29 Jun 2025 23:06:41 GMT\r\nserver: nginx\r\ncache-control: no-store, no-cache, pre-check=0, post-check=0\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nset-cookie: f3027520-df91-42ee-b0d9-a200f268a687-v4=CIjPvMVJ23PLSMSpw3glsf8kuziqVWRtQdjgS7LgDqY; Max-Age=86400; Expires=Mon, 30 Jun 2025 23:06:41 GMT; Domain=www.playerhq.co; Path=/; Secure; HttpOnly; SameSite=None\ncc-v4=JmN874b6jTEi%2F03Bj%2FfrywRvpDqk8Q4VV5yeyuR7yQ%2FDfGYKCD0uSLfVxSn%2F1jbPlb8W09vedYLtLrDF9NmipGHnimndwCihEdbaUe%2FHtATvOH1GcEDDY7FKdxBEt5OwSbrkNdZGgykqPW4Nw4zCEQ%3D%3D; Max-Age=31536000; Expires=Mon, 29 Jun 2026 23:06:41 GMT; Domain=www.playerhq.co; Path=/; Secure; HttpOnly; SameSite=None\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: Z9o_Q-oW8plZ0wtQxslvcmUy3rUAhwHgnsqo2qelNpBjiDyfdyC5pw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T06:47:06.202855Z","times_seen":13363998,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":123,"dns":107,"connect":1,"send":0,"wait":43,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"papaahd.live/","fqdn":"papaahd.live","domain":"papaahd.live","tld":"live"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-06-29T23:06:22.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"papaahd.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Jun 2025 07:48:00 GMT","end":"Fri, 26 Sep 2025 08:45:21 GMT"},"fingerprint":{"sha1":"30:74:37:8D:EC:17:83:54:F8:BA:F6:79:04:8A:57:3A:6D:4B:94:58","sha256":"3B:88:55:2D:DE:75:10:4F:9D:6E:4B:9A:4A:BB:38:4E:9C:7C:3D:4F:B1:AA:1A:2B:81:B5:77:EE:0E:1F:4E:5B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: papaahd.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Jun 2025 23:06:22 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nlink: \u003chttps://papaahd.live/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gNjdA10%2Fp8bC90V%2BzqJB50cHiqqeuUNxSzRXP9xqy%2BQX0NMSY8i8b8fVHuSuX9%2F6fe1dXs2yY9idmiR6NHgMGF2zpiOTTsJyk6E%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 957912effed556ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20131,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (8856), with CRLF, LF line terminators","md5":"0da353d4d8df899e9690810543de28f9","sha1":"db6fefb9853e1a6244b4407d704c0ed11bdb35ac","sha256":"c1b4c1903999a5f680ad35982f6364142f3dff9836090386e25d2cfcecbfb8ab","sha512":"65d66745c63ff35d9e682aab732969ba577dd08e8fefa47744a2ae64e09300983b823a8070876396a08fb62325f3094173a4b9207919b3108380438421c03c97","ssdeep":"384:1S+E00Kfr3ZdqZUaAWkWPkkcrgr9Zj9UeruTdnJkR:1i0rZdapzPkkcU6ek5SR","tlshash":"1f92b632e06440663b5e87a8c1a6b719fdb8e615ca02e77630fc71a85fa0df700b765d","first_seen":"2025-06-29T23:06:50.328805Z","last_seen":"2025-06-29T23:06:50.328805Z","times_seen":1,"resource_available":false,"data":null}},"time_used":870,"timings":{"blocked":36,"dns":12,"connect":1,"send":0,"wait":798,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"papaahd.live/wp-content/themes/papahd/assets/js/custom.js?ver=1.0.0%27%20defer=%27defer","fqdn":"papaahd.live","domain":"papaahd.live","tld":"live"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://papaahd.live/","date":"2025-06-29T23:06:23.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"papaahd.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Jun 2025 07:48:00 GMT","end":"Fri, 26 Sep 2025 08:45:21 GMT"},"fingerprint":{"sha1":"30:74:37:8D:EC:17:83:54:F8:BA:F6:79:04:8A:57:3A:6D:4B:94:58","sha256":"3B:88:55:2D:DE:75:10:4F:9D:6E:4B:9A:4A:BB:38:4E:9C:7C:3D:4F:B1:AA:1A:2B:81:B5:77:EE:0E:1F:4E:5B"}}},"request":{"raw":"GET /wp-content/themes/papahd/assets/js/custom.js?ver=1.0.0%27%20defer=%27defer HTTP/1.1\r\nHost: papaahd.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://papaahd.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Jun 2025 23:06:23 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 373\r\nserver: cloudflare\r\nlast-modified: Sun, 29 Jun 2025 05:00:09 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=10368000\r\nexpires: max-age=A10368000,\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6xVfFnHwKRb%2Bt47bbERfQYSiHh1OB9JRdDWTYD4NjfckgwB2860LqI9zrWIy5wuQeRNhxqC8vDviL8HgGRKQAQ78ou1smGmgEKA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 36727\r\ncf-cache-status: HIT\r\ncf-ray: 957912f6bbda56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1095,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"d51d4a94bbe3c0ba3e4a948861aabb54","sha1":"186f0a5743b736877f0f67f03e31d864c4c71471","sha256":"2c82ec8200720005cbd04b43e96bb0374892c8376214084b8085cbd465c54324","sha512":"dadb9eafa85f264603ca8c2792ae15f9d2ef2707a9d2b9377a72ecb610602e835616f039f49584ad0ac36cebf3223a5b6a2bf923eb81fbd0eacafc2f4c935da0","ssdeep":"","tlshash":"2611a87ad26009b2007fb311f76b6340fb7900b750c069067e1c8a891fb4d9024f1fc6","first_seen":"2024-12-14T04:07:57.320598Z","last_seen":"2025-11-26T23:27:45.735866Z","times_seen":128,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"papaahd.live/wp-content/uploads/2024/06/android-chrome-192x192-1-150x150.png","fqdn":"papaahd.live","domain":"papaahd.live","tld":"live"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://papaahd.live/","date":"2025-06-29T23:06:23.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"papaahd.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Jun 2025 07:48:00 GMT","end":"Fri, 26 Sep 2025 08:45:21 GMT"},"fingerprint":{"sha1":"30:74:37:8D:EC:17:83:54:F8:BA:F6:79:04:8A:57:3A:6D:4B:94:58","sha256":"3B:88:55:2D:DE:75:10:4F:9D:6E:4B:9A:4A:BB:38:4E:9C:7C:3D:4F:B1:AA:1A:2B:81:B5:77:EE:0E:1F:4E:5B"}}},"request":{"raw":"GET /wp-content/uploads/2024/06/android-chrome-192x192-1-150x150.png HTTP/1.1\r\nHost: papaahd.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://papaahd.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 29 Jun 2025 23:06:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 14058\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=nM5PSo%2F3xgQN28qJWdhYzs80fbDeXtfvauDpCKBt%2B4kPGs8hO4m2Faz3hbAnpuO15f6uuGvPWsGu2MbPdcIyazCoTd%2BA9k11SC%2B4E05PZdhI5G5yHNBLe1XtQLywclw%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Sun, 29 Jun 2025 05:00:10 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=10368000\r\nexpires: max-age=A10368000,\r\nage: 36725\r\ncf-cache-status: HIT\r\ncf-ray: 957912fbcfdcb4fd-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1722\u0026min_rtt=501\u0026rtt_var=1201\u0026sent=255\u0026recv=314\u0026lost=0\u0026retrans=0\u0026sent_bytes=27240\u0026recv_bytes=17628\u0026delivery_rate=1196437\u0026ss_exit_cwnd=14908\u0026ss_exit_reason=2\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=08feae69694bbe32\u0026ts=1098\u0026inflight_dur=43\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14058,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"1321666198344e7cf935eac0b9f93e45","sha1":"55b359098fb3f0b4233cdf404865773ba88884a9","sha256":"fc589fed8446d9a19e00c1a1752f4463c08349486fb44f6c5edb0afa6da4d8cf","sha512":"4e9b7c71c8832badc8c9aafc501e2012ab8f0f42063e97ee93f3c5715d97819aa78313d95f98dad05f82eca7aa7a3cd54c6de50b0360c960d51687cbed5921cf","ssdeep":"192:SUeefO0KBfw/yM0O6tgfnWRwtmTXRZiL9P+h/XEK3zbs/cagbFii/Lf6:SBef6nM0ztgP3Ijwh+hfEKjbsEJTf6","tlshash":"8152a03b6161e8dc1c07f9c722847a72b1b85fd603c9048f65f15aaeac53825d7ed724","first_seen":"2024-07-18T18:35:12Z","last_seen":"2026-02-08T07:16:53.82785Z","times_seen":170,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/interstitial.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://papaahd.live/","date":"2025-06-29T23:06:24.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acscdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 May 2025 15:22:09 GMT","end":"Mon, 11 Aug 2025 16:21:52 GMT"},"fingerprint":{"sha1":"E8:04:28:CD:40:56:EF:C8:19:07:48:1D:8F:83:82:58:38:D8:61:A1","sha256":"68:55:8C:DF:95:30:12:25:FD:39:66:5E:2A:AB:35:1A:AB:14:78:6D:E3:19:8E:FE:E7:DC:3A:1B:4A:53:99:22"}}},"request":{"raw":"GET /script/interstitial.js HTTP/1.1\r\nHost: acscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://papaahd.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 29 Jun 2025 23:06:24 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: ABgVH89afAUrPzEUkSHblMtrfiHfma5BJYsyuk9DBtNH9QhMleIZIFE-XKRlB_KhglXCX8_iQLoZZ7w\r\nx-goog-generation: 1750144631352142\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 88719\r\nx-goog-hash: crc32c=bsmREA==, md5=ZLzEpHQu1DTZliIg8aF7RQ==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccess-control-allow-origin: *\r\nexpires: Mon, 30 Jun 2025 00:06:24 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Tue, 17 Jun 2025 07:17:11 GMT\r\netag: W/\"64bcc4a4742ed434d9962220f1a17b45\"\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 3428\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 957912fc8c09568e-OSL\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":88719,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33090), with NEL line terminators","md5":"64bcc4a4742ed434d9962220f1a17b45","sha1":"d3fe04c9c9c2d7a87a638cab70a3108e4799e3ff","sha256":"daaa30bac6ccf0ac7b33606fa6fbbe13528c40773875e2a1042986256a29363b","sha512":"c2ea55dfb76791762938928fd3ac8903c189f0dd2a3db68b77815772b98efe48146b36301c371dbbf15485dff2c464ecf645b238fd92edd85a13b045d5dd3910","ssdeep":"1536:YSCbmkVCXM043rNsov9wQR+E3gGJGjHmGqM4MP2NnTDb/zk9:Kmahph25EgjHiM4MPMnTDi","tlshash":"a983a74dbad2b0f86bd265e4916f9646e0772a28740dd8d1eaf6c1c19879d8f1033e3c","first_seen":"2025-06-17T20:27:41.93381Z","last_seen":"2025-07-03T11:13:09.263387Z","times_seen":26,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acscdn.com/script/inpagepush.js","fqdn":"acscdn.com","domain":"acscdn.com","tld":"com"},"ip":{"addr":"104.18.16.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://papaahd.live/","date":"2025-06-29T23:06:24.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acscdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 May 2025 15:22:09 GMT","end":"Mon, 11 Aug 2025 16:21:52 GMT"},"fingerprint":{"sha1":"E8:04:28:CD:40:56:EF:C8:19:07:48:1D:8F:83:82:58:38:D8:61:A1","sha256":"68:55:8C:DF:95:30:12:25:FD:39:66:5E:2A:AB:35:1A:AB:14:78:6D:E3:19:8E:FE:E7:DC:3A:1B:4A:53:99:22"}}},"request":{"raw":"GET /script/inpagepush.js HTTP/1.1\r\nHost: acscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://papaahd.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 29 Jun 2025 23:06:24 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: ABgVH89kamR8zDt92HZWLX7VaiveETrvRhEksCrvmcdnS2K9L5Xu0jXDYatfSXsZJAt1ikR1vm-jjAU\r\nx-goog-generation: 1750144625244416\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 86830\r\nx-goog-hash: crc32c=mkRZVw==, md5=SnT5JzIJxD7no+oNJcrPqQ==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccess-control-allow-origin: *\r\nexpires: Mon, 30 Jun 2025 00:06:24 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Tue, 17 Jun 2025 07:17:05 GMT\r\netag: W/\"4a74f9273209c43ee7a3ea0d25cacfa9\"\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 2084\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 957912fc8c10568e-OSL\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":86830,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33238), with NEL line terminators","md5":"4a74f9273209c43ee7a3ea0d25cacfa9","sha1":"080fad154d7aee90dacbf363cec0a442ca83229c","sha256":"58e53d59bee9d81396d220a0191c488e2a7cc115b0cbe066fac7599cdf52ba3e","sha512":"e58b89b4edaad73bd30cf7d3bb7d628cd512c20216581790b79d3a35b4cbbe34bc2e751b29342c229880bf7edf7f92a8ddceaecf47318aff86a4851741c83d20","ssdeep":"1536:9cXjRdWAcYh5lfkW+Yg7mmWNMAWM4yDXmEILLbWIVhC+k2ZICp87oep9nqXhVk6S:Oj31Nxt3pWM4mmEILLa8C+k2ZICp87jH","tlshash":"1e83a64dfad2b0f91be265e4916f9646e0772a28340d98d1eab6c1c19879dcf0077e3c","first_seen":"2025-06-17T20:27:41.981415Z","last_seen":"2025-07-03T13:35:44.543231Z","times_seen":49,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4.adsco.re:2087/","fqdn":"4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":2087,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://papaahd.live/","date":"2025-06-29T23:06:25.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 23 Sep 2024 00:00:00 GMT","end":"Mon, 29 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B","sha256":"A4:41:84:14:13:00:DA:93:54:10:5C:59:8A:A9:83:17:01:36:39:BE:1D:43:E5:FB:1C:F3:D6:AF:8A:ED:84:E2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 4.adsco.re:2087\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://papaahd.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://papaahd.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 29 Jun 2025 23:06:25 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Methods: GET, HEAD, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type\r\nAccess-Control-Allow-Origin: https://papaahd.live\r\nAccess-Control-Max-Age: 2592000\r\nCache-Control: private, max-age=5\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":712,"timings":{"blocked":301,"dns":12,"connect":97,"send":0,"wait":100,"receive":0,"ssl":190},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"papaahd.live/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"papaahd.live","domain":"papaahd.live","tld":"live"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://papaahd.live/","date":"2025-06-29T23:06:23.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"papaahd.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Jun 2025 07:48:00 GMT","end":"Fri, 26 Sep 2025 08:45:21 GMT"},"fingerprint":{"sha1":"30:74:37:8D:EC:17:83:54:F8:BA:F6:79:04:8A:57:3A:6D:4B:94:58","sha256":"3B:88:55:2D:DE:75:10:4F:9D:6E:4B:9A:4A:BB:38:4E:9C:7C:3D:4F:B1:AA:1A:2B:81:B5:77:EE:0E:1F:4E:5B"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: papaahd.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://papaahd.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Jun 2025 23:06:23 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 29769\r\nserver: cloudflare\r\nlast-modified: Sun, 29 Jun 2025 05:00:13 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=10368000\r\nexpires: max-age=A10368000,\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KubKHMlYyI%2BkUe8jT0ozeKFV5MvUA2XQQjCkgXOVvoji1In1J%2BlRuFJnhdFtcupPbwb9P6ATqTidRGnTbNcqP8sr7S8PdF%2BPS8E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 36727\r\ncf-cache-status: HIT\r\ncf-ray: 957912f6bbd256ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-05T06:47:14.523982Z","times_seen":687052,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cdn4ads.com/F/ideb.min.js","fqdn":"www.cdn4ads.com","domain":"cdn4ads.com","tld":"com"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://papaahd.live/","date":"2025-06-29T23:06:23.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1037973644.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Jun 2025 06:30:53 GMT","end":"Tue, 23 Sep 2025 06:30:52 GMT"},"fingerprint":{"sha1":"E7:A1:72:0E:78:64:C8:C9:E6:91:66:68:34:78:4C:D2:02:78:20:37","sha256":"18:FC:A5:28:B7:B0:50:24:03:D1:93:C4:ED:A5:FF:08:02:D4:C2:EA:B3:02:0F:46:33:4A:1F:E0:21:06:8A:E3"}}},"request":{"raw":"GET /F/ideb.min.js HTTP/1.1\r\nHost: www.cdn4ads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://papaahd.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://papaahd.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Jun 2025 23:06:23 GMT\r\ncontent-type: application/x-javascript\r\npopads-node: wb5\r\nexpires: Sun, 06 Jul 2025 06:27:09 GMT\r\naccess-control-allow-origin: https://papaahd.live\r\nlink: \u003chttps://cdn4ads.com/\u003e;rel=preconnect\r\ncache-control: public, max-age=604800\r\nx-77-nzt: EwgBX63NDQFBDAG5TAoMAffz6QAADAElE8IuAbc/AAAA\r\nx-77-nzt-ray: 2a494a15d128cc1914c761680de0112f\r\nx-77-cache: HIT\r\nx-77-age: 59891\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37166,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (1568)","md5":"a6fb87451849f39b42188c3212e7c9c8","sha1":"de59b979ebcc276f34fdeaeb71ba871d5c11e464","sha256":"d798f5f64059874c590f304c7cf403db7041d9b5e5a74d1e022f3219d50f1706","sha512":"5b7615bc7aa3c57f82631c9c58c26a14eb29b3e04c2defacaa0256cab40358b8d7804ebeff085271c257964f5dc9504d71d06da41b49cde5a052376e0f26c427","ssdeep":"768:uOAu+1lQ5lQhybHUzdfn+4jf4wyXjZRoLO+cjhc90nk5bqgpnANnbWlqj4:yiWEWhVf4wyXjZRoLOPQJ","tlshash":"f2f23a67b296241500eb00ba503f731ab3331216b9025499fdb9cde85e3edca517bbbc","first_seen":"2025-06-29T23:06:50.332716Z","last_seen":"2025-06-29T23:06:50.332716Z","times_seen":1,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":61,"dns":21,"connect":1,"send":0,"wait":26,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"papaahd.live/wp-content/uploads/2024/06/android-chrome-192x192-1.png","fqdn":"papaahd.live","domain":"papaahd.live","tld":"live"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://papaahd.live/","date":"2025-06-29T23:06:23.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"papaahd.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Jun 2025 07:48:00 GMT","end":"Fri, 26 Sep 2025 08:45:21 GMT"},"fingerprint":{"sha1":"30:74:37:8D:EC:17:83:54:F8:BA:F6:79:04:8A:57:3A:6D:4B:94:58","sha256":"3B:88:55:2D:DE:75:10:4F:9D:6E:4B:9A:4A:BB:38:4E:9C:7C:3D:4F:B1:AA:1A:2B:81:B5:77:EE:0E:1F:4E:5B"}}},"request":{"raw":"GET /wp-content/uploads/2024/06/android-chrome-192x192-1.png HTTP/1.1\r\nHost: papaahd.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://papaahd.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 29 Jun 2025 23:06:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 18156\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=fYT8Ill7wMCIndyqZzog7cnNKmnNcAhAGwmdOjfpZd18P%2ByjRMbKXdZRKJ2VfZ94TRwUbCFA86sPUwpHAdJyyRBZDgIZlcED24ZojOUHGaMqN2W8o7wCgyE6zAIiZ5U%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Sun, 29 Jun 2025 05:00:10 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=10368000\r\nexpires: max-age=A10368000,\r\nage: 36155\r\ncf-cache-status: HIT\r\ncf-ray: 957912fbcfdbb4fd-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1722\u0026min_rtt=501\u0026rtt_var=1201\u0026sent=251\u0026recv=314\u0026lost=0\u0026retrans=0\u0026sent_bytes=22440\u0026recv_bytes=17628\u0026delivery_rate=1196437\u0026ss_exit_cwnd=14908\u0026ss_exit_reason=2\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=08feae69694bbe32\u0026ts=1096\u0026inflight_dur=42\u0026x=44\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18156,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"6871d259fffdef14e46b5b98a618cc42","sha1":"df191e794da66c25c3d9b9de5dc0040df3aa0d3a","sha256":"320331e797313637ac55e0687b2940dc93156c3b060ac85039dd9f688e27ee9a","sha512":"bad9fa3168464a0040841f1f757d2304c4a59b2815b5ebe9b1dc974602f5394a8a4c1ded85da9e2f066e03218dbd56cacb071450265cc565e22c0b1039dfb3c6","ssdeep":"384:ZyDR2QR1kguKb3U2CQ8KNKta4APy4GaPEAhAqDt:ZyDRjR1AK4mJNUWyEEGv","tlshash":"2282e121465573bb40f0d8bf82bbefd180b8c165cd350d656aeb9ee5a2dc80905f861b","first_seen":"2024-07-18T18:35:12Z","last_seen":"2026-02-08T07:16:53.838186Z","times_seen":170,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":15,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qdsivhivf3il.n4.adsco.re/","fqdn":"qdsivhivf3il.n4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"38.132.109.126","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://papaahd.live/","date":"2025-06-29T23:06:25.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.n4.adsco.re","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Jun 2025 09:14:20 GMT","end":"Wed, 17 Sep 2025 09:14:19 GMT"},"fingerprint":{"sha1":"4D:DD:91:35:47:42:EC:48:83:34:7C:65:94:27:32:74:C7:40:5B:5E","sha256":"FE:06:59:E3:BD:7E:57:1C:A3:43:CA:C3:FC:07:85:77:AC:29:C6:B1:17:9F:8F:04:CA:43:B8:79:C1:42:C0:52"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: qdsivhivf3il.n4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 0\r\nOrigin: https://papaahd.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://papaahd.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Jun 2025 23:06:26 GMT\r\ncontent-type: text/html\r\ncontent-length: 0\r\nlast-modified: Fri, 16 Jun 2023 08:37:42 GMT\r\netag: \"648c1f56-0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T06:47:06.202855Z","times_seen":13363998,"resource_available":true,"data":null}},"time_used":902,"timings":{"blocked":403,"dns":130,"connect":90,"send":0,"wait":88,"receive":0,"ssl":183},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"papaahd.live/wp-content/themes/papahd/assets/css/main.css?ver=1.0.1","fqdn":"papaahd.live","domain":"papaahd.live","tld":"live"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://papaahd.live/","date":"2025-06-29T23:06:23.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"papaahd.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Jun 2025 07:48:00 GMT","end":"Fri, 26 Sep 2025 08:45:21 GMT"},"fingerprint":{"sha1":"30:74:37:8D:EC:17:83:54:F8:BA:F6:79:04:8A:57:3A:6D:4B:94:58","sha256":"3B:88:55:2D:DE:75:10:4F:9D:6E:4B:9A:4A:BB:38:4E:9C:7C:3D:4F:B1:AA:1A:2B:81:B5:77:EE:0E:1F:4E:5B"}}},"request":{"raw":"GET /wp-content/themes/papahd/assets/css/main.css?ver=1.0.1 HTTP/1.1\r\nHost: papaahd.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://papaahd.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Jun 2025 23:06:23 GMT\r\ncontent-type: text/css\r\ncontent-length: 1550\r\nserver: cloudflare\r\nlast-modified: Sun, 29 Jun 2025 05:00:09 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=10368000\r\nexpires: max-age=A10368000,\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OJGSESdV35Q%2Fiy7WZXlPHeAhvye5hQ5K%2BD8crmFzRw02TcGDpogtaIpPLT5NVNoosG0PM7yy4PNXYKe08ydYjJTZjAtJJViDotA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 36727\r\ncf-cache-status: HIT\r\ncf-ray: 957912f6bbca56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7143,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"55e03f078c06308fbdd12f4678b441c8","sha1":"6e2fcab00c4b2e8533563dba7d50bd98062d2502","sha256":"5bd55cf201306dcbcf0a53a57409f1a32d53165bc4911e8cf1414d3d952cc31a","sha512":"1c9f1f25d5b185bc131a0bbcb64cf72a4df3f2890c8e7e1b40faa6df9eb447b0443b408966dceb085014537db5a3236dca057bd713faddad72798458fb5a52f6","ssdeep":"96:EIv8t+s3Jo5Qi89Fy61wQwFHw9OFw9e7Hz8TYwoUlnEnMrD:EYe3i5Q7FyO/wlw9OFw9GHgkw7JEM/","tlshash":"33e1124b5ba62401750bd53c77bb4354737ba107d20deaf93e9ca2588f857e0a4a2bcc","first_seen":"2025-04-07T22:50:51.608604Z","last_seen":"2025-11-26T23:27:45.704582Z","times_seen":125,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"papaahd.live/wp-content/themes/papahd/assets/css/home.css?ver=1.0","fqdn":"papaahd.live","domain":"papaahd.live","tld":"live"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://papaahd.live/","date":"2025-06-29T23:06:23.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"papaahd.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Jun 2025 07:48:00 GMT","end":"Fri, 26 Sep 2025 08:45:21 GMT"},"fingerprint":{"sha1":"30:74:37:8D:EC:17:83:54:F8:BA:F6:79:04:8A:57:3A:6D:4B:94:58","sha256":"3B:88:55:2D:DE:75:10:4F:9D:6E:4B:9A:4A:BB:38:4E:9C:7C:3D:4F:B1:AA:1A:2B:81:B5:77:EE:0E:1F:4E:5B"}}},"request":{"raw":"GET /wp-content/themes/papahd/assets/css/home.css?ver=1.0 HTTP/1.1\r\nHost: papaahd.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://papaahd.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Jun 2025 23:06:23 GMT\r\ncontent-type: text/css\r\ncontent-length: 421\r\nserver: cloudflare\r\nlast-modified: Sun, 29 Jun 2025 05:00:09 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=10368000\r\nexpires: max-age=A10368000,\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BCxAtuaRLM4HPWbulRzGk091vwipZirxYdtZEmUlRLzfKZ9wM9wefUjtkvVkSzYCHCoEiYhgN0z9puNlRLI%2FXk7i7dO00e0ZKuA%3D\"}]}\r\ncf-ray: 957912f6bbd056ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1141,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"ce2596f50109f038fac89607bca61345","sha1":"3e0efc52726f6ad4862af0c8564259e5e13cd121","sha256":"9e9d6685d007c72c9502766541716eb6d0f3654457d4f0636e51658a61422cf0","sha512":"04a6ba9d0d2366653973068fea1fc2a84bd60801df38e33009c759d0d3ec24a56cd3297128f0c25cbd11eb4822838bc5405697d9b8366a481f88011a35a21e75","ssdeep":"","tlshash":"c5218e08e7012202b23789b8abad4395db75406b8f5366f879aca1614f7a4b45271fdc","first_seen":"2025-04-11T08:08:23.366155Z","last_seen":"2025-10-19T18:22:48.51784Z","times_seen":7,"resource_available":false,"data":null}},"time_used":505,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":504,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qdsivhivf3il.s4.adsco.re/","fqdn":"qdsivhivf3il.s4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"185.200.116.60","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"","requested_by":"https://papaahd.live/","date":"2025-06-29T23:06:25.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.s4.adsco.re","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Jun 2025 09:14:19 GMT","end":"Wed, 17 Sep 2025 09:14:18 GMT"},"fingerprint":{"sha1":"CD:E3:30:8E:24:D4:56:97:9B:37:D3:2E:69:DE:B3:63:95:43:9A:83","sha256":"98:D6:F7:C3:B0:8D:95:56:36:FF:3A:DB:F3:F5:8F:B3:19:A5:8B:A5:83:D7:04:6B:06:EC:3B:BD:19:17:A4:33"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: qdsivhivf3il.s4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 0\r\nOrigin: https://papaahd.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://papaahd.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Jun 2025 23:06:26 GMT\r\ncontent-type: text/html\r\ncontent-length: 0\r\nlast-modified: Tue, 03 Oct 2023 13:29:59 GMT\r\netag: \"651c1757-0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T06:47:06.202855Z","times_seen":13363998,"resource_available":true,"data":null}},"time_used":1349,"timings":{"blocked":-1,"dns":327,"connect":253,"send":0,"wait":254,"receive":0,"ssl":514},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.adsco.re/#0.7983763140632835","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.17.166.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://papaahd.live/","date":"2025-06-29T23:06:25.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 23 Sep 2024 00:00:00 GMT","end":"Mon, 29 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"3B:64:1C:DA:8C:64:22:01:36:0F:54:7A:99:6E:AD:26:C2:EF:59:8B","sha256":"A4:41:84:14:13:00:DA:93:54:10:5C:59:8A:A9:83:17:01:36:39:BE:1D:43:E5:FB:1C:F3:D6:AF:8A:ED:84:E2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: c.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://papaahd.live/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 29 Jun 2025 23:06:25 GMT\r\ncontent-type: text/html\r\ncache-control: public, max-age=2678400\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR\r\npermissions-policy: ch-ua=(self \"https://adsco.re\"),ch-ua-mobile=(self \"https://adsco.re\"),ch-ua-full-version=(self \"https://adsco.re\"),ch-ua-platform=(self \"https://adsco.re\"),ch-ua-platform-version=(self \"https://adsco.re\"),ch-ua-arch=(self \"https://adsco.re\"),ch-ua-model=(self \"https://adsco.re\"),ch-device-memory=(self \"https://adsco.re\"),ch-downlink=(self \"https://adsco.re\"),ch-ect=(self \"https://adsco.re\"),ch-rtt=(self \"https://adsco.re\"),ch-width=(self \"https://adsco.re\"),ch-viewport-width=(self \"https://adsco.re\"),ch-dpr=(self \"https://adsco.re\")\r\nlink: \u003c//6.adsco.re/\u003e;rel=prefetch;crossorigin;as=fetch,\u003c//4.adsco.re/\u003e;rel=prefetch;crossorigin;as=fetch,\u003c//adsco.re/\u003e;rel=preconnect\r\nexpires: Wed, 30 Jul 2025 23:06:25 GMT\r\netag: W/\"C6pTuopbpe5oM6YpwwANTg==\"\r\ncf-cache-status: HIT\r\nage: 1312444\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 957913060be1b518-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":78356,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (689)","md5":"0baa53ba8a5ba5ee6833a629c3000d4e","sha1":"d5de057adc1eaa7888ca975199cf0a116b923aa0","sha256":"0679a036a8577f9592e070f780d06c6bb427a8f15f58008bdeaae2277ce607b4","sha512":"a7e5a993e1e12e7d73d98ab3834fb488a1e3ce361108f3f4583cde7e4454e97768303649ae9fa22bce7cce65aed74d081b69317f169c18dc49e8093ac4d3a60b","ssdeep":"768:dsmoTk+UwrAjMo3m4MSHRJtlgfWivYb7QL19/lw3mcIwT2vB03c9MZjyQoTHKePc:pok3m4bHRDuWWL19/lw3mcKJpAGPKmjo","tlshash":"81734ba97162702a43b238e9967f5311f1ba06902c4690d0d37dc8643c74edf927bb9e","first_seen":"2025-06-14T18:46:22.558225Z","last_seen":"2025-08-28T19:40:38.269373Z","times_seen":3673,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"youradexchange.com/script/i.php?t=1\u0026c=23992856\u0026stamat=m%257C%252C%252CgiY7IjMyoGU3BE-GH0dEdHP3xP.598%252CA4QpH5IKK7BgDetC-W1Y8JhoGrPhS95wztfAXS7UIiSY1x8HVuxm56L0Nrpm9hEtKXC45UxYKjaWwx-jPtYXHmE8TN_W62t-HNwHhNpCkOapCxMmwMRKiq90OeTPeMppFyWtA5gZ7-Z5jzFJpkIrUXjujfo5n9TJBurOR2fWctPFY2MZUqWAOmzpE79y10noARvlzkxJPYoYP-SF1H4udV1v8qQyqu80CvlS7HAyXfeHS7Q6O9InIQoqqln3F15Gdrj75koJ2hwMnmO1CMIHNDjsLayZHuzGK-gDP4snb0uQOTYDiynr1Wp1GUnoqLMl5In6nSB3739HxjfddC51_XwQq89hflYWR0klRzgvb5BkABJMOYX7kZJCQsj33VCehRWYlZUMK0mn7605W7u9CUMzX9r1fsr7FOmXfaFMNPXkGZ07Qjt647-RLsdm7gBw1J4HED1MUzn6DBbkFkxCXvNwTVGN3TeMNUPIKXCQgyERlzzMYuvx8UPH1DOovX8WMDK_0Ja2nmCeGsSR9q--wNICMLDxupyNb1mcxAnowXG6iIDXrFzugrQkm2NnBdrBOgaX_Y98lMMWHcVluCrUTW92Dr6rnRzoEoYc21BxX2-T8Gp6b5PZ_vdsku4hDIHaup_7u-MqWsWNmmlM_Q_DMBkdxbIk_ttamrLsaejz58A%252C\u0026utsid=d1eee95ea005464f1d8b17162ce9070c\u0026cbpage=https%3A%2F%2Fpapaahd.live%2F\u0026cbref=","fqdn":"youradexchange.com","domain":"youradexchange.com","tld":"com"},"ip":{"addr":"104.18.25.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://papaahd.live/","date":"2025-06-29T23:06:25.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"youradexchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Jun 2025 20:52:12 GMT","end":"Sat, 30 Aug 2025 21:51:56 GMT"},"fingerprint":{"sha1":"5D:6F:35:ED:36:A9:D9:F7:69:BE:71:FD:6E:3A:C4:28:3D:88:9D:58","sha256":"18:D1:BF:CB:F5:38:3E:63:0B:52:AF:DF:41:98:00:D8:6E:94:A3:56:BB:3E:46:E2:D5:ED:D3:4C:62:93:90:7A"}}},"request":{"raw":"GET /script/i.php?t=1\u0026c=23992856\u0026stamat=m%257C%252C%252CgiY7IjMyoGU3BE-GH0dEdHP3xP.598%252CA4QpH5IKK7BgDetC-W1Y8JhoGrPhS95wztfAXS7UIiSY1x8HVuxm56L0Nrpm9hEtKXC45UxYKjaWwx-jPtYXHmE8TN_W62t-HNwHhNpCkOapCxMmwMRKiq90OeTPeMppFyWtA5gZ7-Z5jzFJpkIrUXjujfo5n9TJBurOR2fWctPFY2MZUqWAOmzpE79y10noARvlzkxJPYoYP-SF1H4udV1v8qQyqu80CvlS7HAyXfeHS7Q6O9InIQoqqln3F15Gdrj75koJ2hwMnmO1CMIHNDjsLayZHuzGK-gDP4snb0uQOTYDiynr1Wp1GUnoqLMl5In6nSB3739HxjfddC51_XwQq89hflYWR0klRzgvb5BkABJMOYX7kZJCQsj33VCehRWYlZUMK0mn7605W7u9CUMzX9r1fsr7FOmXfaFMNPXkGZ07Qjt647-RLsdm7gBw1J4HED1MUzn6DBbkFkxCXvNwTVGN3TeMNUPIKXCQgyERlzzMYuvx8UPH1DOovX8WMDK_0Ja2nmCeGsSR9q--wNICMLDxupyNb1mcxAnowXG6iIDXrFzugrQkm2NnBdrBOgaX_Y98lMMWHcVluCrUTW92Dr6rnRzoEoYc21BxX2-T8Gp6b5PZ_vdsku4hDIHaup_7u-MqWsWNmmlM_Q_DMBkdxbIk_ttamrLsaejz58A%252C\u0026utsid=d1eee95ea005464f1d8b17162ce9070c\u0026cbpage=https%3A%2F%2Fpapaahd.live%2F\u0026cbref= HTTP/1.1\r\nHost: youradexchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://papaahd.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 29 Jun 2025 23:06:25 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 957913060b8e0b02-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T06:47:06.202855Z","times_seen":13363998,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"youradexchange.com/script/i.php?t=1\u0026c=22973238\u0026stamat=m%257C%252C%252CgjZ393N2tGU3BJ-GH0dEdHP3xP.4d8%252CNRvqiFOJu7ZOHBvhxAueTpjq81jCoL6Q-MJLJQl_IXsGF0Tyj6VdvknFDmUV390FSETKJvUyffyzpNz-ymp1ihu9RwJm43XNkdqMOHJZuV24S6BWXjFQ5dnWv8YKgc35aIh7JtCDDejnaiubaLyTpJ1Y4G6FR7c9E1QocC8eS4E8rnB0lb1tfY86H6huVjf0-2QidZCKpvJaV8LuL-rrYCnX6hNZ-5HvXb6vHarxBlgp9WY_7fjgUbfB_YYpuxPsf9SNvTdoUK8ToIcgBU2hilOUKNbWPxORse0yC2AnqSlGQt1NafmzJ_Yszr29zp4BiSu3p4WWYEGkt9eayZAymisDEme2nXW-cXM5ow7ptWWQfJkkiuNzAAzfsUXmUlVbCNVg5GKGAVvyuLVH7IuD0Qf_YNbG9EQE_lyOilnXmB0SNY8J97iKiQ3HMBB6yz8zcbfAlqPpgzN7w8c3C-Ka9aaFjEWVlTk6uy8utrvw3XjwC6eQ0c_OI6zjRNH7Ko613oYRl657c9a1GMuitVmsvIAtfboEbU6GqU9XzqrIZZ0-wciiZlWPhMuLeFzI7_02lk5bs90rGZfi55YrvMq5b9pilCW_7pN32oKqBNnhB9_NurnfaF4ejQfu4uBlO3qqeOQq2ddnGGI4pwF4xeMTwA%252C%252C","fqdn":"youradexchange.com","domain":"youradexchange.com","tld":"com"},"ip":{"addr":"104.18.25.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://papaahd.live/","date":"2025-06-29T23:06:40.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"youradexchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Jun 2025 20:52:12 GMT","end":"Sat, 30 Aug 2025 21:51:56 GMT"},"fingerprint":{"sha1":"5D:6F:35:ED:36:A9:D9:F7:69:BE:71:FD:6E:3A:C4:28:3D:88:9D:58","sha256":"18:D1:BF:CB:F5:38:3E:63:0B:52:AF:DF:41:98:00:D8:6E:94:A3:56:BB:3E:46:E2:D5:ED:D3:4C:62:93:90:7A"}}},"request":{"raw":"GET /script/i.php?t=1\u0026c=22973238\u0026stamat=m%257C%252C%252CgjZ393N2tGU3BJ-GH0dEdHP3xP.4d8%252CNRvqiFOJu7ZOHBvhxAueTpjq81jCoL6Q-MJLJQl_IXsGF0Tyj6VdvknFDmUV390FSETKJvUyffyzpNz-ymp1ihu9RwJm43XNkdqMOHJZuV24S6BWXjFQ5dnWv8YKgc35aIh7JtCDDejnaiubaLyTpJ1Y4G6FR7c9E1QocC8eS4E8rnB0lb1tfY86H6huVjf0-2QidZCKpvJaV8LuL-rrYCnX6hNZ-5HvXb6vHarxBlgp9WY_7fjgUbfB_YYpuxPsf9SNvTdoUK8ToIcgBU2hilOUKNbWPxORse0yC2AnqSlGQt1NafmzJ_Yszr29zp4BiSu3p4WWYEGkt9eayZAymisDEme2nXW-cXM5ow7ptWWQfJkkiuNzAAzfsUXmUlVbCNVg5GKGAVvyuLVH7IuD0Qf_YNbG9EQE_lyOilnXmB0SNY8J97iKiQ3HMBB6yz8zcbfAlqPpgzN7w8c3C-Ka9aaFjEWVlTk6uy8utrvw3XjwC6eQ0c_OI6zjRNH7Ko613oYRl657c9a1GMuitVmsvIAtfboEbU6GqU9XzqrIZZ0-wciiZlWPhMuLeFzI7_02lk5bs90rGZfi55YrvMq5b9pilCW_7pN32oKqBNnhB9_NurnfaF4ejQfu4uBlO3qqeOQq2ddnGGI4pwF4xeMTwA%252C%252C HTTP/1.1\r\nHost: youradexchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://papaahd.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 29 Jun 2025 23:06:40 GMT\r\naccess-control-allow-origin: *\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 957913639a850b02-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T06:47:06.202855Z","times_seen":13363998,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css?ver=6.8.1","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://papaahd.live/","date":"2025-06-29T23:06:23.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 May 2025 14:38:44 GMT","end":"Wed, 20 Aug 2025 15:38:38 GMT"},"fingerprint":{"sha1":"4B:06:E9:E2:47:47:F5:3C:33:58:F8:2A:95:70:22:5E:23:19:03:77","sha256":"92:B0:F4:51:5C:E9:3A:03:19:F4:50:36:49:FA:A1:01:1D:F0:A1:91:F7:A3:53:E6:19:AA:C4:FA:3D:C4:31:6E"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css?ver=6.8.1 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://papaahd.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Jun 2025 23:06:23 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 14850\r\ncf-ray: 957912f6ec91b512-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"619c057b-3a02\"\r\nlast-modified: Mon, 22 Nov 2021 21:02:51 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 938859\r\nexpires: Fri, 19 Jun 2026 23:06:23 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=cctZLDLYFocmC5lU91gXR2Qc2CwWmLSVMwPD1HE4xUkrV6hojZdgRdKMJ03AdJx%2Bii%2BJRwgJeUSXMV8qvEY74cAC4rdf0hbhDT1IKMozId42VUM7f8I0lBrIMyyWd07R9E%2Byb1Nh\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83981,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65311)","md5":"3d5ef2bf867c4054a2f336cdbad9e1dc","sha1":"07228d1fa3245ee156a27a353f45758a3207849f","sha256":"a361e7885c36bacb3fd9cb068da207c3b9329962cac022d06e28923939f575e8","sha512":"168deb96b663fe4eee8d39c78380864760fb912b34bf82cb6a7c36aa4b18b91944ccefad71a10f428810d0a6a818ddbaff3ae7db42264750dfb8b5a73a8eda04","ssdeep":"1536:YlMVM6MVM9MVMKMVMRsVMNdhwJHQ9Kll3ITRUHrt+z:sdhgw9kITRULt+z","tlshash":"458376e8e44c05d56732c44baf55b378a1b6f73cd5810da9f02f590c29d26a822c6f7a","first_seen":"2023-04-09T08:23:50Z","last_seen":"2026-04-05T05:55:34.997128Z","times_seen":16120,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":25,"dns":1,"connect":1,"send":0,"wait":17,"receive":1,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"papaahd.live/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"papaahd.live","domain":"papaahd.live","tld":"live"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://papaahd.live/","date":"2025-06-29T23:06:23.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"papaahd.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Jun 2025 07:48:00 GMT","end":"Fri, 26 Sep 2025 08:45:21 GMT"},"fingerprint":{"sha1":"30:74:37:8D:EC:17:83:54:F8:BA:F6:79:04:8A:57:3A:6D:4B:94:58","sha256":"3B:88:55:2D:DE:75:10:4F:9D:6E:4B:9A:4A:BB:38:4E:9C:7C:3D:4F:B1:AA:1A:2B:81:B5:77:EE:0E:1F:4E:5B"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: papaahd.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://papaahd.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Jun 2025 23:06:23 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4685\r\nserver: cloudflare\r\nlast-modified: Sun, 29 Jun 2025 05:00:13 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=10368000\r\nexpires: max-age=A10368000,\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IWy6zEz0SMnnnhwKRR3Bue6V96wH8Z8DPaK2XUOqQQJzb%2BGuMMp5B%2FUXfzng8TDH2RI%2BtbNpyPspUnNZ2D3VQTr7eJXBiCgyDBk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 36727\r\ncf-cache-status: HIT\r\ncf-ray: 957912f6bbd456ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13577,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-05T06:47:14.486589Z","times_seen":640229,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"youradexchange.com/script/interstitial.php?r=8591570\u0026srs=d1eee95ea005464f1d8b17162ce9070c\u0026ufp=Linux%20x86_64%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026cbpage=https%3A%2F%2Fpapaahd.live%2F\u0026atv=62.3\u0026cbref=\u0026atag=1\u0026czid=basj9dmzy2\u0026aggr=214\u0026ppv=1","fqdn":"youradexchange.com","domain":"youradexchange.com","tld":"com"},"ip":{"addr":"104.18.25.98","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://papaahd.live/","date":"2025-06-29T23:06:24.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"youradexchange.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Jun 2025 20:52:12 GMT","end":"Sat, 30 Aug 2025 21:51:56 GMT"},"fingerprint":{"sha1":"5D:6F:35:ED:36:A9:D9:F7:69:BE:71:FD:6E:3A:C4:28:3D:88:9D:58","sha256":"18:D1:BF:CB:F5:38:3E:63:0B:52:AF:DF:41:98:00:D8:6E:94:A3:56:BB:3E:46:E2:D5:ED:D3:4C:62:93:90:7A"}}},"request":{"raw":"GET /script/interstitial.php?r=8591570\u0026srs=d1eee95ea005464f1d8b17162ce9070c\u0026ufp=Linux%20x86_64%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits\u0026cbpage=https%3A%2F%2Fpapaahd.live%2F\u0026atv=62.3\u0026cbref=\u0026atag=1\u0026czid=basj9dmzy2\u0026aggr=214\u0026ppv=1 HTTP/1.1\r\nHost: youradexchange.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://papaahd.live/\r\nOrigin: https://papaahd.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Jun 2025 23:06:24 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-ray: 957912fd7e6c0b02-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1420,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"20d95ae3a6d81765061a51b5a3ec8ade","sha1":"e9f767cf636e976e5ca0712e0aabeb32b473eaa5","sha256":"3eb76a5b0bc73e03c81bb4d0b2e9a56a7f41d46ec9f8648719417c29b428fa44","sha512":"57951009a571fa3a98c6fb8be8a483a924698f7973732a5807e19e1b04d62f70e6cf28d1091a8c901ab3d8a784c98494ccafbdc7232bf34610c53d784fc6b2e2","ssdeep":"","tlshash":"382108de186c8598085fe4dac48fe28d87820523fe843c9dd9e1ad91c92ecda742c953","first_seen":"2025-06-29T23:06:50.337147Z","last_seen":"2025-06-29T23:06:50.337147Z","times_seen":1,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}