{"report_id":"9297c999-5999-46b5-9f7b-9c4e101a5c25","version":6,"status":"done","tags":[],"date":"2026-03-07T20:53:16Z","url":{"schema":"http","addr":"vidara.so/v/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"vidara.so/v/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"title":"Watch Lolita_serveuse_dans_un_restaurant_du_10eme_arrondissement_de_Paris","dom":{"size":5538,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4442)","md5":"25710b97cb91fe22039148f01003db36","sha1":"b178e2d6e7cb50d55c8c6e16a0fabbdb662f002d","sha256":"339b375ba0054e0cfe1866b74edac16690bda71307a3d81d72e78a617e4521c6","sha512":"8a4e42a558e6d0a28012a824ee98830fb7fdb41b88c75d9257949ad310acd1c6b3424b0c5dc04bc9704a5c327e24d00415dbc098553fbb9729d0cfbd904f6af6","ssdeep":"96:zkeljFm+bt3kOJo1gk8s6G84ISTP9J1e+GRJe:zkelpfo1FC679J8+wJe","tlshash":"1eb1fb6bf9d120400107819c65a7b7bdbfbe911187054d7a75ad37bcaf8edf708a1288","dom_hash":"domhash5128625ecf67ad91d375a42e49456f5b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"vidara.so/v/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-11T20:53:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":7}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-07T20:52:53Z","timestamp":1772916773,"ip_dst":{"addr":"162.159.207.0","port":3478,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":55600,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)","source":"{\"timestamp\":\"2026-03-07T20:52:53.235290+0000\",\"flow_id\":248363197241114,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.37\",\"src_port\":55600,\"dest_ip\":\"162.159.207.0\",\"dest_port\":3478,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016149,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2026-03-07T20:52:53.235290+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-07T20:52:53Z","timestamp":1772916773,"ip_dst":{"addr":"Client IP","port":55600,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"162.159.207.0","port":3478,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)","source":"{\"timestamp\":\"2026-03-07T20:52:53.241903+0000\",\"flow_id\":248363197241114,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"162.159.207.0\",\"src_port\":3478,\"dest_ip\":\"172.18.0.37\",\"dest_port\":55600,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2016150,\"rev\":3,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Response)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2013_01_04\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":62,\"bytes_toclient\":74,\"start\":\"2026-03-07T20:52:53.235290+0000\"}}"}],"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"displayvertising.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"qi.evasivelimnite.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"www.displayvertising.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"nereserv.com","ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2020-12-21","domain_rank":17097,"first_seen":"2020-12-21T11:07:56Z","last_seen":"2026-03-06T02:47:45.090592Z","alert_count":4,"request_count":2,"received_data":644,"sent_data":1096,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fedoq.com","ip":{"addr":"139.45.197.116","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2022-07-06","domain_rank":0,"first_seen":"2025-10-14T06:17:47.619418Z","last_seen":"2026-02-28T22:47:33.253108Z","alert_count":0,"request_count":4,"received_data":7864,"sent_data":3944,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"tzegilo.com","ip":{"addr":"172.67.193.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-01-14","domain_rank":18163,"first_seen":"2022-01-14T15:27:15Z","last_seen":"2026-03-06T16:58:13.490039Z","alert_count":0,"request_count":1,"received_data":18626,"sent_data":404,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"adsco.re","ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":3069,"first_seen":"2017-04-03T03:11:30Z","last_seen":"2026-03-05T01:32:32.163447Z","alert_count":0,"request_count":2,"received_data":2771,"sent_data":903,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-01T22:32:56.293355Z","alert_count":0,"request_count":1,"received_data":81451,"sent_data":450,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"4.adsco.re","ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2017-02-14","domain_rank":95532,"first_seen":"2021-01-04T16:47:52Z","last_seen":"2026-03-06T23:26:08.699662Z","alert_count":0,"request_count":2,"received_data":1424,"sent_data":837,"comment":"","tags":null,"fingerprints":null},{"fqdn":"4fpvo6krw5e6.l4.adsco.re","ip":{"addr":"185.200.118.62","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":166,"sent_data":410,"comment":"","tags":null,"fingerprints":null},{"fqdn":"accounts.google.com","ip":{"addr":"64.233.161.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":103,"first_seen":"2012-05-23T06:57:57Z","last_seen":"2026-03-02T00:29:11.783321Z","alert_count":0,"request_count":3,"received_data":6891,"sent_data":1784,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]}]},{"fqdn":"4fpvo6krw5e6.s4.adsco.re","ip":{"addr":"185.200.116.60","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":166,"sent_data":410,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.21.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-01T22:18:12.522658Z","alert_count":0,"request_count":2,"received_data":35868,"sent_data":895,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"js.mbidadm.com","ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2023-02-20","domain_rank":347799,"first_seen":"2023-02-21T18:08:24Z","last_seen":"2026-02-28T12:07:39.90483Z","alert_count":0,"request_count":1,"received_data":150226,"sent_data":414,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"qi.evasivelimnite.com","ip":{"addr":"172.241.53.69","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-03-03","domain_rank":0,"first_seen":"2026-03-07T06:26:28.581045Z","last_seen":"2026-03-07T06:26:28.581045Z","alert_count":1,"request_count":1,"received_data":1409,"sent_data":426,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"js.mbidpp.com","ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2023-02-20","domain_rank":612388,"first_seen":"2023-04-22T00:02:45Z","last_seen":"2026-03-03T00:06:16.095081Z","alert_count":0,"request_count":1,"received_data":107609,"sent_data":425,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fp.metricswpsh.com","ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2021-10-29","domain_rank":154722,"first_seen":"2022-04-22T11:20:32Z","last_seen":"2026-03-06T08:33:29.89901Z","alert_count":2,"request_count":2,"received_data":809,"sent_data":1036,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"6.adsco.re","ip":{"addr":"104.16.84.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":91627,"first_seen":"2018-01-15T04:15:29Z","last_seen":"2026-03-07T06:13:22.98475Z","alert_count":0,"request_count":2,"received_data":1191,"sent_data":837,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"c.adsco.re","ip":{"addr":"104.16.84.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-14","domain_rank":100769,"first_seen":"2017-11-29T18:42:15Z","last_seen":"2026-03-05T22:27:07.515819Z","alert_count":0,"request_count":3,"received_data":178741,"sent_data":1628,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"oyo4d.com","ip":{"addr":"139.45.197.118","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2019-03-26","domain_rank":201644,"first_seen":"2025-06-02T17:08:26.404235Z","last_seen":"2026-03-06T23:32:19.150699Z","alert_count":0,"request_count":1,"received_data":824,"sent_data":601,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"4fpvo6krw5e6.n4.adsco.re","ip":{"addr":"38.132.109.126","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":166,"sent_data":410,"comment":"","tags":null,"fingerprints":null},{"fqdn":"my.rtmark.net","ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-29","domain_rank":43911,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2026-03-04T15:45:48.25184Z","alert_count":0,"request_count":2,"received_data":1689,"sent_data":935,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fleraprt.com","ip":{"addr":"139.45.195.252","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2022-01-14","domain_rank":17838,"first_seen":"2022-01-14T22:55:14Z","last_seen":"2026-03-06T16:58:12.653273Z","alert_count":0,"request_count":2,"received_data":896,"sent_data":1147,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"mbdippex.com","ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2023-04-26","domain_rank":21571,"first_seen":"2023-06-06T01:40:19Z","last_seen":"2026-02-28T12:07:40.047713Z","alert_count":0,"request_count":2,"received_data":681,"sent_data":1007,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"imasdk.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3922,"first_seen":"2014-02-25T09:02:53Z","last_seen":"2026-03-04T22:26:41.259511Z","alert_count":0,"request_count":2,"received_data":1403561,"sent_data":977,"comment":"","tags":null,"fingerprints":null},{"fqdn":"dd133.com","ip":{"addr":"104.21.71.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-06-30","domain_rank":0,"first_seen":"2025-09-25T23:17:10.545176Z","last_seen":"2026-03-01T10:50:55.794513Z","alert_count":0,"request_count":1,"received_data":171894,"sent_data":407,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ssl.p.jwpcdn.com","ip":{"addr":"151.101.2.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-08-07","domain_rank":16928,"first_seen":"2017-01-30T05:00:14Z","last_seen":"2026-03-05T06:22:50.404674Z","alert_count":0,"request_count":5,"received_data":1088104,"sent_data":2147,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"2r90j1fn28.s1q2105.com","ip":{"addr":"50.7.24.26","port":443,"asn":174,"as":"COGENT-174","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-01-13","domain_rank":0,"first_seen":"2026-02-12T11:05:23.868996Z","last_seen":"2026-03-03T12:53:31.819482Z","alert_count":0,"request_count":3,"received_data":1214176,"sent_data":1567,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"bobapsoabauns.com","ip":{"addr":"104.21.73.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-01-23","domain_rank":16239,"first_seen":"2025-03-26T18:52:40.148632Z","last_seen":"2026-03-06T16:58:12.925856Z","alert_count":0,"request_count":2,"received_data":138335,"sent_data":907,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"mcpuwpsh.com","ip":{"addr":"94.130.197.240","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2022-08-12","domain_rank":38934,"first_seen":"2022-08-12T16:58:44Z","last_seen":"2026-03-03T12:53:13.894042Z","alert_count":0,"request_count":1,"received_data":5118,"sent_data":485,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.16.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.displayvertising.com","ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2020-04-18","domain_rank":639069,"first_seen":"2020-04-29T17:59:02Z","last_seen":"2026-03-01T12:32:29.940349Z","alert_count":1,"request_count":1,"received_data":42501,"sent_data":444,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"llvpn.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-03-24","domain_rank":0,"first_seen":"2025-07-24T23:05:45.337747Z","last_seen":"2026-03-01T17:36:44.611522Z","alert_count":0,"request_count":1,"received_data":115234,"sent_data":402,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"displayvertising.com","ip":{"addr":"216.59.56.9","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"domain_registered":"2020-04-18","domain_rank":40391,"first_seen":"2020-04-29T21:21:45Z","last_seen":"2026-03-01T04:43:24.32705Z","alert_count":2,"request_count":2,"received_data":542,"sent_data":2362,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-01T22:15:00.771016Z","alert_count":0,"request_count":5,"received_data":236043,"sent_data":2735,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-01T22:28:03.022415Z","alert_count":0,"request_count":3,"received_data":197661,"sent_data":1319,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bid.mbidtg.com","ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2023-03-09","domain_rank":366400,"first_seen":"2023-03-09T15:21:27Z","last_seen":"2026-02-28T12:07:39.990659Z","alert_count":0,"request_count":1,"received_data":1728,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-03-01T22:48:56.265504Z","alert_count":0,"request_count":1,"received_data":87249,"sent_data":417,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"entitlements.jwplayer.com","ip":{"addr":"52.84.50.29","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2007-09-17","domain_rank":18344,"first_seen":"2016-06-21T17:08:11Z","last_seen":"2026-03-06T04:12:28.188447Z","alert_count":0,"request_count":1,"received_data":506,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"renamereptiliantrance.com","ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-03-12","domain_rank":60260,"first_seen":"2025-04-21T07:59:25.487224Z","last_seen":"2026-03-02T22:36:12.672754Z","alert_count":0,"request_count":4,"received_data":81710,"sent_data":3105,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"metricswpsh.com","ip":{"addr":"94.130.197.136","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2021-10-29","domain_rank":8777,"first_seen":"2021-11-02T17:43:55Z","last_seen":"2026-03-01T07:35:28.191187Z","alert_count":1,"request_count":1,"received_data":322,"sent_data":819,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"b7510.com","ip":{"addr":"139.45.197.115","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2021-03-21","domain_rank":0,"first_seen":"2025-06-19T09:08:24.947983Z","last_seen":"2026-03-06T09:56:09.422952Z","alert_count":0,"request_count":1,"received_data":824,"sent_data":601,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"vidara.so","ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-04","domain_rank":0,"first_seen":"2026-02-06T12:29:16.405718Z","last_seen":"2026-03-07T12:36:16.30468Z","alert_count":0,"request_count":19,"received_data":702780,"sent_data":8743,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:5.3.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"crypto-js:4.2.0","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]},{"name":"JW Player","description":"JW Player is a online video player with video engagement analytics, custom video player skins, and live video streaming capability.","website":"https://www.jwplayer.com","common_platform_enumeration":"","icon":"JW Player.svg","categories":["Video players"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}]},{"fqdn":"jnbhi.com","ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2022-08-31","domain_rank":0,"first_seen":"2025-11-13T12:34:48.915898Z","last_seen":"2026-02-28T20:36:46.373765Z","alert_count":0,"request_count":1,"received_data":114864,"sent_data":402,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8ebf5362b8c92e5d5129f780a112d96f","sha1":"ee52a6631fe676da2e0e303da9aaeb357cf492f7","sha256":"980db35f7ae0a0e4bc5f749f27854f6851f0d5104e2234eab8e4e90259ce93ca","sha512":"b181a816b08fcd0b514d963c281603a043435d8b1cd131dfafaf527fbc94b5300576429b2d7202a28b30f5f8dd5f758ecffd6790c45e7bf0ccd4866eee61abac","ssdeep":"","tlshash":"01c04cbaa362d0a4c5065d5eb03ec7d7797b05402d1f7323d06c45203415e1e5b548a4","size":159,"data":"","first_seen":"2026-03-06T13:22:23.881536Z","last_seen":"2026-04-01T18:43:21.973227Z","times_seen":878,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"599df6231f61cf33ed2dc257e9c80a8a","sha1":"6c5bccefd21b0c8fb5dadaf4bc202e7750230976","sha256":"dff86c8a31627a391cb8cdd0247c4dce902d34149cb7867e93557651a21a8097","sha512":"03693b913aa81ac296ff93bcb53be30483d8397d29f91809915a03d306f15e6236a84b5c3234eb8fc79f770153363b4a834f13b91454a2fcce34e519fb61da61","ssdeep":"","tlshash":"8aa011ae32a3b0008208322f002a8202a2ba8a808a0c08888000a200380c82883aa8b8","size":76,"data":"","first_seen":"2026-03-06T13:22:23.911886Z","last_seen":"2026-04-01T18:43:21.983405Z","times_seen":857,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.mbidpp.com/popunder-admanager/build.m.js","fqdn":"js.mbidpp.com","domain":"mbidpp.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e12e141f3c1d3a58eeb156cf154fa84b","sha1":"5abd5a6cc26ecad518fb4747bebc141781daded6","sha256":"17a70ab93a39d655380ac36da94da7cb0ba0dfc8d05446e6cb41576922a09aa9","sha512":"85a5a23b6438723239b0ae629698ed4e286954e44b9e40691f2ea1194aa41ac70880d83df0d289e14c5e1d374e7f1acca0d7b97b9b3ff4abb62b6ecf561bc6dd","ssdeep":"768:W0qmOOA1FJb8zunREimbZLrxL5mVuzYB3bPAgCp+dFAioTIZKOxvuoUjYClRtg2X:zOOVYpE1J0I0ui/d+J8EsE48JJI65v","tlshash":"f6a31aca32a1b4b002e244da943b0216f33d1929740e905cb7adddd6791ad4fa277f7e","size":107221,"data":"","first_seen":"2026-02-25T12:57:29.101042Z","last_seen":"2026-04-06T08:09:40.712615Z","times_seen":325,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"427d193356f9e6b7dfd531ad15548ce3","sha1":"9a96a74dfa694c781f58aa3fcac02e15cfcbc9fa","sha256":"cfc5289a8e001a0b9f288c21a000ef0aded585439e4fb2ba303cc09aa4e3ed8c","sha512":"f81ed99e795f3b25dc638d4af84fbe97acff191aa1c826875044d5162f644e34defd71980ac752eb5702de845045094f7b6fb54cc210a6008beba1047db346e5","ssdeep":"","tlshash":"3ab0129e739570080f013499c03a4141a27f5a604f4d0031d0626d183ca9e74d3bd26c","size":99,"data":"","first_seen":"2026-03-06T13:22:23.878896Z","last_seen":"2026-04-01T17:04:52.930519Z","times_seen":214,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/v/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"21f547b5958183900039a83614831722","sha1":"0be55db6282bf56e1792fe355eb7015f0662752f","sha256":"244455a9c111ad2412ff65d65de0841e8e6ff41a20a895c113ddcdd74e14dddf","sha512":"f6c52b521186e084747d6d5712ef64cdb3787b51f3cf823cd74579b69998c1ee423bdd4e60c61eb09ddaa53d2efecfa95e5d54855b2b6d294c9091330de28ca0","ssdeep":"","tlshash":"4d4138773c7a0dac4beba1f733ae728135110003a843ae6eb9dc57645f58e50a9b63d4","size":1980,"data":"","first_seen":"2026-02-22T06:54:34.075396Z","last_seen":"2026-04-05T11:28:19.202981Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/assets/js/new100.js?v=max","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d417c5dbae8a3d933a478e1a0d886a5","sha1":"e3fc7ca463c6e4a759866790911ee6aa23a4b842","sha256":"3718b865d7162567322249682a0c6113ad4ddc91bb48c33285cdc5d491dde1bc","sha512":"dbb728632688f60dbbcc3a8bf2e5ba00d53cc9b1ab3552d605ba500e19c1b944413e4dc0e44f3b9c651ffdb3d62f67a1470727127fb0666f5b0268569e0c85a6","ssdeep":"","tlshash":"b7115c767ce4763031ea094a3427a185f0f20b642d19e574519c0b6a38a8e4d9d37afd","size":928,"data":"","first_seen":"2025-04-02T00:26:38.94272Z","last_seen":"2026-04-05T19:01:43.399409Z","times_seen":531,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8ae24f508377485c4abd2cce7b8121ed","sha1":"94dd9145322d3232a03c89e84286d5332017a896","sha256":"0eae40aa201ae794fe47aa0b2b324480e8a274c8a43eb731b4cb609d409b947d","sha512":"62b3318048c7fdc738da003844317541efb947e20db92afb83f4c42ae2d3de198ec89d185655d79454d8ff269e210ef77d0e7b9ec95e1d85bfda73c0a0a3a0eb","ssdeep":"","tlshash":"abb012bb30d571006326361500af239ef5bd0f814e8d141061101144f8eca6bc2fc4b9","size":110,"data":"","first_seen":"2026-03-06T13:22:23.927123Z","last_seen":"2026-04-01T04:34:24.352513Z","times_seen":170,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6baf57f25796c332144ed58a2a0cd9ee","sha1":"f7fd0f3dc84b2cf93bf81e832505a673f354e0a3","sha256":"82f64f62bb03c1bc1824b0f9c9e05f70dba33e146818e63cdf5c306c8cf3dedd","sha512":"5ff6240d9ca34dfe30c9cd95cb5e981823c7c0063cad9258f8f3a0a24663401da684844524272410673a6325fd78db0f7e7d0fcd3844b8db3eb9aa2613908ee8","ssdeep":"1536:Qmw0iELO+TBR2t472RirWyKsVfK5GEfy3YJtCRv/45wZbqbXZTbYWU178:VwXza3YCl45wZODZTbYR8","tlshash":"cc73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","size":80663,"data":"","first_seen":"2023-09-18T01:21:14Z","last_seen":"2026-04-06T08:15:35.703979Z","times_seen":14236,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"renamereptiliantrance.com/check.html","fqdn":"renamereptiliantrance.com","domain":"renamereptiliantrance.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bb5909608b8f34c5a1230455c44160c3","sha1":"31f84c1a46d83e344c97a8a62bcde987e1960c27","sha256":"46031a60039a5d4861c1971d070623fbefa0669f7c93588e9698aed4931099ef","sha512":"f4138fd8e40a2765f25e399eea82c956213e2b8126d7a2fe3c168f1798787fc60146bf452ed6c7a47cc58d40442c234bb8c491be1db8220d2b50a6251ffb28f3","ssdeep":"","tlshash":"6a01b81930f8284c1117b630265b23182c32a40325cbd94efb2cdb301f425a7eca8aef","size":779,"data":"","first_seen":"2026-03-04T14:32:10.343547Z","last_seen":"2026-04-06T08:23:24.723538Z","times_seen":453,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"bfa36ebc446d7bd4852e5a4d4799175b","sha1":"f2e6ddd19392da0ebd1ffbf8f7aef15c9e1bc73d","sha256":"0ab7f333256694855894a88e10a6e77879b27a9feedc4d4c1ee4b031af657fbb","sha512":"9091249f76b8f1a8616a757c0b16aaaeb65645ecc1875d76b8b973cf63d3e6f5c4f71a7e23ab68db87f1c1425eaf55129940d86806bd814e2cce58976b8a8d1c","ssdeep":"","tlshash":"63a022af32f2b0008a0a3220803f0300f8fe08e08e8c0030a0008b003c2c823cbfa2b8","size":73,"data":"","first_seen":"2026-03-06T13:22:23.87569Z","last_seen":"2026-04-01T18:43:21.980298Z","times_seen":876,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"llvpn.com/tag.min.js","fqdn":"llvpn.com","domain":"llvpn.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d446b46fac8c9aa47752dcfb8be1d2f4","sha1":"c74258a4be880592f39f89dfdd6a35cd1ad51c3f","sha256":"4bff632778ff969c9bb1c4e0a2f358681456f0830a8201ee1ab133d0677fd5c4","sha512":"a2949432dac9ceafc95568600ad60fea0f759d59d6bda19b31fa48a5651dfde3517ad9f43af1f9dc8ac5740d9eb4a5f5ed5e64bf4b05a89f61498ddd07384a4e","ssdeep":"1536:cHmN4N1pAb5SNrC6WuDVmYdP2rH9kZrY/4ODiUtsABe3a5qLwutBiJgqXoB44ae:5NKoWHWuDx/ZrY/4ODXxcqUbi7E55","tlshash":"32b31b6073d1741252bfb12c086ac92d755a4e90084e8afbd2e9a876d4b531cc3bbff5","size":114033,"data":"","first_seen":"2026-03-05T14:26:31.19399Z","last_seen":"2026-03-09T10:02:04.750097Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/assets/js/swiper-bundle.min.js","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6d57f85db472dc869a61ab20d102dc1","sha1":"32474efb5d26ae7850dd0d17d90a132fb91b752e","sha256":"559670fbf6038e292bfde151ad31fcc09d706c0ea8ca9cf9bc7941e1eeb55ab1","sha512":"03a872140004eff89263eb7b826474d82bcba79447deebb8e718a7b404db845cd47c7c3265e0c0966dac5206bf7b277f9cc7a523c1d5d040d30893afc2a4bc3b","ssdeep":"3072:iQcYBYNrja+8b7kHGe4G5PqTbWaqGVjj+Anq:iQ7B0ja+8HkHd4G5P8awVjj+Anq","tlshash":"c6e308896120b57646e716cb93e8c25172b54844b40ec5f870bd4caf99bec9803bfef9","size":154200,"data":"","first_seen":"2025-10-21T15:36:20.322141Z","last_seen":"2026-04-06T03:09:16.241498Z","times_seen":2324,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8b318b5e70211d9fac2d7eaa41ff9022","sha1":"f2d95ab822a53760839b2a5650a10fd3576df68b","sha256":"3d68d9ef0e24d6b71ee5e2b64fcfd9d542a8627848fc03eb4235a4e2b42de358","sha512":"77133c57503fa16df9a6811019ae2d7bfa56f652d9625b551c708c6866523bbb044548c1e0f35267386057293feb519dff92aeaeeacc97c016e8135d80562216","ssdeep":"","tlshash":"24a022ff30e2b00023203a2a003f03a0f2bf8880ce8c00808023030030a803bc3e8cf8","size":78,"data":"","first_seen":"2026-03-06T13:22:23.903334Z","last_seen":"2026-04-01T18:43:21.987377Z","times_seen":874,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"911688fd7d23364fe4440e64e02eda97","sha1":"d1a0354677fcaa2e0ae02e9d11daf949f3daccc5","sha256":"178d692763aec699db3e5cc12714e3b56cd08c2af6b430f7e5f6313294dc859a","sha512":"b443701df7c70308f6bd997579b3fac34a64d962b64ffde972aa356ecf7569b9bacec2bdfa630a6378403c0205780c584f9f0a46b6223016054f0e08b1a0702f","ssdeep":"","tlshash":"65a022be30e2b0308a032800203ecb8ef2be08c00b0e2800c008000030e8820c3eca3c","size":70,"data":"","first_seen":"2026-03-06T13:22:23.920922Z","last_seen":"2026-04-01T18:43:21.990726Z","times_seen":874,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tzegilo.com/stattag.js","fqdn":"tzegilo.com","domain":"tzegilo.com","tld":"com"},"ip":{"addr":"172.67.193.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"01227f5edc20e0ff4ed643b27cb8bb68","sha1":"d71a88f7341f2b1bdaa7deb9a66888607bd52598","sha256":"75c91d86601e23ab56d872b31b42660f893fc6d6b0785e085c06c2c038e98fb2","sha512":"88046b07c07ff6de47ef7d1e0d7ca281fc48e91fc6a292cdf611457b96ac92bb0068971cfd55c0cc3e6179d7335e77a6a14b15fa502bbae7b2233546da6c0f98","ssdeep":"384:WDWdyJ+TJTwWV+6RUL2qq8L6jW4+QL1zWAWvVRIDiei:7so1V+g+d+j4pJ5","tlshash":"8d82094a72d525ee82a3a1d10cef612ffb664e86a97e1785e381b49c187404ec3d7f90","size":17879,"data":"","first_seen":"2024-07-11T16:28:55Z","last_seen":"2026-04-06T08:14:17.090265Z","times_seen":6377,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"005b9bde4054e5a15048ee4d2652ebeb","sha1":"d35d299ef026cab6fd1fcca1586c5a57ad29d436","sha256":"ef8a0c7d4994e7222dc64e0821fcf479ad22111250197caf202aa260f5ab0dcb","sha512":"67bcf3d0083cdd045cdeefc2fc7981b304893a25fa290cd3b4b794d8630c30d08073c8890d08ab24d89a54e2b3f91430cb6799c2fa96c7e07f616b494c238766","ssdeep":"","tlshash":"7aa022ff30a2b0000222282b003e8208f0bf0a800e8c2800a020ea00300c020e3eb83c","size":71,"data":"","first_seen":"2026-03-06T13:22:23.91547Z","last_seen":"2026-04-01T18:43:21.973718Z","times_seen":874,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"88785d920e57bdd708d6bf596d0e4841","sha1":"d387862b2d1f4c11974a42cd2800bb735e103ba5","sha256":"119e5669859711b3bf00b9940ebfd6ac77f961862087a0d525b8f3b65a353483","sha512":"d8ae2243c79a5f60b61d4a350846947025c24f498822463e018a98b587a476a768faf9a373c0cdeb186cfb020e63a8ac79a005215fc0a90a412f60b151aaa05d","ssdeep":"","tlshash":"16b012bb30d5760013213614007f2759f5fd0a920ecd141060204180bcbd627c6f88b8","size":103,"data":"","first_seen":"2026-03-07T03:14:40.457797Z","last_seen":"2026-04-01T04:34:24.383236Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"598f4a8ed87b037b941a777b9ca12662","sha1":"bd0edc5e47443ac09b66e7ce721f9ad04ed28a42","sha256":"3eb540987f896b5dd67a41d8ca45a8808acda4e1806597b59ba75ba0b8c59b3b","sha512":"e7b07b3230e12961d5592f2b5da4a10892a1189ea12c3c9b208708624661f31978547012977fc4e9695652f91bf9e21d17ae2c47fcf6cca0a54a06bd195d4fc2","ssdeep":"","tlshash":"6cb012bb70e5750053213514017f135df5bd0ec10ecd1c2060104140b8ad627c2f8878","size":102,"data":"","first_seen":"2026-03-06T22:51:16.684086Z","last_seen":"2026-04-01T04:34:24.329409Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.36.2/provider.hlsjs.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.2.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"283d59c375ad57728e89bd2fd1b6af1d","sha1":"1ae8e4b8bf7141cecc15442f9d83dc10a066fcdb","sha256":"423fb0c266f4a755fb3e2d9093f92b92a7e9bfe4c0c4a900b4342c5b9f6ea0cb","sha512":"fe8272ea849648c625e7810dd76a9ffec8d9877cf63f0c9a2bb18ba7feec6c97f559bbbfe51324a68039ca3b1bd06802124af02e833ced161128555d17434486","ssdeep":"6144:h49gZtOST1zXBUkGHZu08Q9Eu969j3/nqJxgEMmew9rrqIZk6:Gy1VGHZu0pU9TqJxgEXZF","tlshash":"2ea43bdd77a5a02642c2a1a5903f4607633b7d0a740dc1acfa2be9d75db8849b03bf74","size":461432,"data":"","first_seen":"2024-09-18T21:59:43Z","last_seen":"2026-04-05T19:01:43.386314Z","times_seen":594,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.36.2/jwplayer.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.2.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5454f51ab2c9ba10955938c3458ef45d","sha1":"207795d527b8205d07fecb668a2d3a150db56f9f","sha256":"ee28fb495ac5b28ae38033e36a640d41dfeb2528c5124ff0203b09b06c05a36d","sha512":"4b4e4358522d6cec1e32343e5c219658535fdf01ab5805d6d9f7a0d98e94eaba4a69c0c5862ca7bf0985367b48287e071617b81f62c43c35b97f4a3ee1cb4124","ssdeep":"1536:VCLyl/ByE1iqx9JaGB2lAqU6ePRtwoIWz0Bk+5VH3wen+LhUi3LhflsqKkcRPUeV:VVbpk+Ui3LhddhHwSy","tlshash":"a3e33aa631c2f4a617e264c7e47a4101f1790988744de864faacecda3916947b1b3ffc","size":148627,"data":"","first_seen":"2024-09-28T01:51:51Z","last_seen":"2026-04-05T19:01:43.338605Z","times_seen":558,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f22c2a64fe45f72808713deb56617348","sha1":"b14b4fe58e37dac48335d4752d16b3e97be419ab","sha256":"eab910c420c5d27b870bc73f85f88dba105e504a7803273cacb50411a3d48a16","sha512":"25c71ca68bc8eeebb9328a56cc0b82a478ff30d3a290506de5c99c5998ffd57358c90ebe02c1bf2e48c83b011d59d70b146daf24f1f23f59f7910355f6554b21","ssdeep":"","tlshash":"bca022ef30f2b00002222033003a8202f0bf0a820a8c20808022ca20320c020e3ab8b8","size":74,"data":"","first_seen":"2026-03-06T13:22:23.891602Z","last_seen":"2026-04-01T18:43:21.991201Z","times_seen":880,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e84920575919fee3a9d32e60f84aab44","sha1":"1a1c242066a018d8d6c2d6b70d991583d40deda9","sha256":"4673c7b8519fc373430ffa97f9425b228ef6a235a1491012f068f1ffbe91465c","sha512":"e47f81c65a83e0f41ee3234b34c42a3e1c7675d4d3d62df4f5d454a9c1e500b5d2ff74c2fc7e5ad436ada638e1db2e0b50e2b17c1919ac7c30b3abde96c1e495","ssdeep":"","tlshash":"daa002be72e2b4608a072616603ecb8df6bd0ac05e5d2451d11995583468c24dbadd7d","size":71,"data":"","first_seen":"2026-03-06T13:22:23.87644Z","last_seen":"2026-04-01T18:43:21.977821Z","times_seen":878,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"36f619162b9d92fab1bcdfeb63b3a00a","sha1":"500cd25793f5fedc7b4a924f263694cb58e68d68","sha256":"2b7f3877d8f52ec42786ce9f80382c56c65faa1df804f5aed4f2215dfea3e5bd","sha512":"025b640d7e36a4de563b10ae85cfc55978ab1c91f4387a56c63fc5e6678a01b725becbcf9d0b3b74a096455127bd606447f7a342499e60261a386c7c6a6feca3","ssdeep":"","tlshash":"0650003f0030000000000c00000c00000003000000f0000300000000c00000300000cf","size":10,"data":"","first_seen":"2026-02-02T19:30:14.747385Z","last_seen":"2026-04-05T19:01:43.404833Z","times_seen":191,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-06T08:05:01.58849Z","times_seen":118587,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jnbhi.com/tag.min.js","fqdn":"jnbhi.com","domain":"jnbhi.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"16ce8e2ff2ceab779dc731fe51dba974","sha1":"cac73ee29b7735615da349f93f38d35705a58ca4","sha256":"e5ed7b0a245533095708b1e4632939a7f39035771b2714fb3adb1cef2e95ac09","sha512":"c671a691b7ceb29299483bf3142cd2386e1538ddfaeb56eaf0c57356246eb9f3b41605af0359d3a615a6e436354ceb3dfb6b7cc00a41b1077a6cb87d58297756","ssdeep":"1536:cHmN4N1pAb5SNrC6WuDemYdP2rH9kZrY/4ODiUtsABe3a5qLwutBiJgqXoB44ae:5NKoWHWuDo/ZrY/4ODXxcqUbi7E55","tlshash":"83b31b6073d1741252bfb12c086ac92d755a4e90084e8afbd2e9a876d4b531cc3bbff5","size":114030,"data":"","first_seen":"2026-03-05T19:18:04.457863Z","last_seen":"2026-03-09T10:02:04.74564Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b425101c7742512e71d88dad42123261","sha1":"c0ce42523e75c6983664ed26d7220ada1e7e2845","sha256":"2d99164db05e3794b53a49466a0b5643c5066fbee5639f816a583f0b8c282a84","sha512":"17b34c70fd15ce473fa08f31735815a4eb704e548ae42ead98436f10927462af0a995235cc9fa946a972df8c2bcd86826c73c2804d737c0d8875b43ae825dd02","ssdeep":"","tlshash":"bba0125f3142700042022501422f8300b2790850074c0040401055507878622cbe50e8","size":81,"data":"","first_seen":"2026-03-06T13:22:23.928869Z","last_seen":"2026-04-01T17:04:52.919134Z","times_seen":235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.2.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9f5aeeca3ad37bf2aa006139b935f0a","sha1":"1055018c28ab41087ef9ccefe411606893dabea2","sha256":"87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de","sha512":"dcff2b5c2b8625d3593a7531ff4ddcd633939cc9f7acfeb79c18a9e6038fdaa99487960075502f159d44f902d965b0b5aed32b41bfa66a1dc07d85b5d5152b58","ssdeep":"1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9","tlshash":"4483e6d9b2c67062977730b950bf410bb17a98dab44c8c60f158d9d47eb8a8d907bf2c","size":86659,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-06T08:18:00.157455Z","times_seen":77615,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8bf7b38523024c85ba7d58adce06782d","sha1":"e59fece7ba043dc5e369cd5e109eb848c43b7bc6","sha256":"ead6750342664e83f06fb64f826a27a5a7e896aceda7c7f419e170222d837508","sha512":"15d97206fca24c9c6d29519d389f1b5457b337688c8c5f26096e964d352357d92b1ab34c9a9ecc1f1d486f5f3324ff965609fab204be4b54271b2e53b024c8c1","ssdeep":"","tlshash":"368004041cd4dd7430054c41341070d311134f11c0007400f54c471704c054d5c1075c","size":38,"data":"","first_seen":"2024-12-27T13:53:56.12858Z","last_seen":"2026-04-06T08:23:24.710641Z","times_seen":1107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0e3e20d09d2161b305ff5410b7645064","sha1":"172a248011597b84c4517da9226c6dc72efb384a","sha256":"3a3d966fa3321464bfb7320b5428a092d444dda7764ef463960354039c72a521","sha512":"1e030cca4d46a493ef32e1d4bd5f1b6fc82ca69e9a008a7b59e0246ffb1c841c3a8e1afe876fd78fe660e5b759c5e006f55e135716cf8e405f0ffb8330393718","ssdeep":"","tlshash":"8ba022bf30e3b0200f8a2002203e8380f8bc0c802a0c0022800c02883008c30c3ec838","size":70,"data":"","first_seen":"2026-03-06T13:22:23.886646Z","last_seen":"2026-04-01T18:43:21.975816Z","times_seen":871,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"dc42e33565b66b769ddce1483c6f53c5","sha1":"7e055cd8fe38e7bd5424bef854ecf7aa3fb77af5","sha256":"f4c1a7e13b7a7be2069759c6b58f7c84ca2323dc7bb6d84aec4ed0c6e250104b","sha512":"4864e64434b651591c8c17cbafad9a8a5361748fbf9c4f12bd036e8ae2bc8145bd7ba153fae9ae35b4f289ac0a12e4cc9a7a8c94bf5f728c799bf06d4a3532f7","ssdeep":"","tlshash":"1ca011be32a2b00002202022002a8202a0ba8a808aac08e0a0208200328802083aa828","size":72,"data":"","first_seen":"2026-03-06T13:22:23.896284Z","last_seen":"2026-04-01T18:43:21.9716Z","times_seen":884,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"64e28cfae2dc21213adb8084a9688488","sha1":"7fb50b89b006147744714955fec0814e3011616f","sha256":"b9e5e563222aa54ac54a92b3c704d3ca63b57623ea890740906ad2e79337897c","sha512":"762b5617c21e38e710cdc463636507d41ac3f25e218b6678b6649b25ab7f2d62c554384632724edb47fe37460bd9ceba8aa874029f0c6a590eb7c8f03faf7210","ssdeep":"","tlshash":"f8a011aa3883b0000a022b0282aa0200b0be0a800aac2080a020882830a882ae2a80a8","size":75,"data":"","first_seen":"2026-03-06T13:22:23.892642Z","last_seen":"2026-04-01T18:43:21.96687Z","times_seen":877,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.36.2/jwpsrv.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.2.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9449982aabf38639d014274af3ad474","sha1":"f99f5ba761f1945f19da3cf4a9ca52c1aeee47d5","sha256":"fb1c762c222ed003d9bd932a1bf94a36879b73967f3aaf2797cae7f6d5302352","sha512":"f4c80f0c7c44b72303aa3494f19d164095b24bf83e013ddf92d20b75fc618cbaa505c183557bbb14cb9a836c514b21fcb623c00059ef7e9d04ffe16ae4a12fc3","ssdeep":"768:DiDjPSAlvbtXral8WK/2R7pr1oJl92LCaA1YL9ncpgW:+nPlZral8WK/GEJl92LCcLWpV","tlshash":"fd63d78d3685b16a5a6770b8806fb546723d1dd6308dc250ea50eec93c3de5ee237b2c","size":67288,"data":"","first_seen":"2025-02-26T11:57:34.810186Z","last_seen":"2026-04-06T05:20:31.473373Z","times_seen":3993,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/assets/js/app.js","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3519c491f3ade96823e36612b602f0b0","sha1":"d182cb07c5f9243c57295c6148096e3270e0819f","sha256":"3091037a92d5a180b90d680582c1f37a3fbebe419b33f69d3c42c6190f5ecf8e","sha512":"49e0e7323be18795a96c8e0d4719838e6190494b2dbca0f50e2a14ce0b6d318a7a1303def3bcbb273906a58155089757238ddd4e335747a88b8e89a76fb383cf","ssdeep":"","tlshash":"6641ac625509083206dbebdb38ade7913af21486f5dbc43004b8c45e59adf8da1f17f5","size":2245,"data":"","first_seen":"2026-01-21T08:59:35.575696Z","last_seen":"2026-04-05T11:28:19.184161Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8279bd102cdf4bc1403722db32798ed7","sha1":"253bc05cdf60261014a923b92f991c4d97f033a9","sha256":"a02800c355cfa2671fa8e7214c058b18cf5035fd1f2d63fd768eae85832b2959","sha512":"c551213b07904ebee80b7347c13c78762e035bb79386566d0ceda66641dd6f0e56e59ffbd2a22bcced665aa7adafc6e583cc3dfa9162ddf06fbc5d04400c15ea","ssdeep":"","tlshash":"6da022ae3082b00002003a00003f0308f8bf0a800b8c0080a000000830e8023c3ec8b8","size":64,"data":"","first_seen":"2026-03-06T13:22:23.931917Z","last_seen":"2026-04-01T18:43:21.98935Z","times_seen":878,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ff979a8477d3016b530c934392900a3a","sha1":"e9ec792e8cd9d9556e24d103b098d306fa9714fa","sha256":"766d4f9aab5e53f2857de9e335e039e7bcf0a7f2fdbce99185349af44a3b0609","sha512":"0a3459aab9e5c5c4d666b0a822bcc903892c1802ed32438c6992a3d338d1157d930b98333f9f22159ddba979ea3155ea06c6af8896b181f15b2d9f968ac0a1e8","ssdeep":"","tlshash":"55a0245f70d1f0000710301144374300f07d074045fc0040417043503044c34c75f474","size":74,"data":"","first_seen":"2026-03-06T13:22:23.91019Z","last_seen":"2026-04-01T18:43:21.972673Z","times_seen":882,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f6145eac891ce3c0331693a13d5ae7f0","sha1":"4cbc65e52a1334e82b8df31f7b6e891bd2d5a248","sha256":"909ff2b17c912a9b85fdaae1bc995c470f921969f35a57f5984fae7e63d25c93","sha512":"b0d232e3c4528dbe90e983308f527f94f1c441f980205cceb8341b9c1207be275d43554c8e6734296c0ef412debe2657c1483619111b36704d6c708d582a530d","ssdeep":"","tlshash":"f7a012f93283600205142b03112f1300f0790444158c3087702401283058153daa60a4","size":83,"data":"","first_seen":"2026-03-06T13:22:23.899141Z","last_seen":"2026-04-01T18:43:21.987877Z","times_seen":875,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.36.2/googima.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.2.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e326dffdd285561fe42061b115c81d05","sha1":"7b5be6ed0aa57ca398fe44b5e343d23edf21b477","sha256":"fc91de238eebbd70ed2e63cf28a4f267ace01d38eb77cb04719de197ce8a6bd3","sha512":"08fbf336980ce3cb63a6a153648e646ee80dd646ba0829400abf832fbd79a1f47066dfe0773439c87861a8bf282e00a58626755bd366afd7c92d737cbf8498f4","ssdeep":"1536:j8shgCMQoN1vkzhFaJ/nyXqw86G+RnwNbpPWr7aEEI7wfTifTwRiwP0NZxY:IlkaJ/y6F6G+RnMbpU7aEEI7mTi0p","tlshash":"3e73d65732a8a43257d498eeb12442027339850f784bc76cf96cedef1d4e98772b6a70","size":78354,"data":"","first_seen":"2024-10-04T10:49:20.825367Z","last_seen":"2026-04-05T19:01:43.366118Z","times_seen":562,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/sdkloader/ima3.js","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"21726837f01c18f217959ee3678b9dd8","sha1":"ccedce098b69f664909a20818751c2da0d155651","sha256":"363655bf13970b9f94900937a7c35fc41abd6d479823181fbade171d5ac0022f","sha512":"c7f23d2c60f13c7f7fee23365921f780592bec40ec8adf023c05bc459ac756a6c8676641351c4b3c8939dfb7b16a0d3993d458d9a5635f3ced6066e3c3d57916","ssdeep":"6144:J1OiUS5XjSO9VRaRkBLGGL9yZP0PX5lyXhQPkc:reeRaRkNJLEZ8/5lqhQPkc","tlshash":"dda4eacdb6a674629363f4b5403f010fb23bb866f408886cb289d9e16e749495277f7c","size":471959,"data":"","first_seen":"2026-03-07T07:26:56.192247Z","last_seen":"2026-03-10T18:30:41.029277Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"784391bdf30e10c8745c020c94da9fd7","sha1":"4c31cfe298c84a0ffd8b6cf8c6b258630759c867","sha256":"7cd9c7e1e865ee939bb32f9f54fc0c886bdd37619cfd2982c3c49419d48c277a","sha512":"ec8465d03924f7538a28c94535965dc4c5b28ef3f2590cfdab342269486954b3e8953ee128cac72a0d6f7e65bc5b9e0be54f4a9f160b61519d379f8e898611f5","ssdeep":"","tlshash":"e1a002bf71b2b0484e553927853bc646f1fe4a958a5d4490929296543458438cfee878","size":70,"data":"","first_seen":"2026-03-06T13:22:23.900045Z","last_seen":"2026-04-01T18:43:21.968487Z","times_seen":842,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"73497a37c3561adbd8ce84e4f017b368","sha1":"9193ae73cb3dd2833be8c942714d5544bfb628c9","sha256":"9312a1adbbf0a4c05fc296d158ec3bd39acfe50e9e98ff02688139aad6fc3351","sha512":"b265a65f30fa9ffac3fb7ffca07326823466dcd67a238a47091a497c7f2b2d13e09603cbb8e85dce136efeb8bbb9d246e4894d6f672dededc47c88a1a85d9a5b","ssdeep":"","tlshash":"c150000003000003030c0000c000000000000003000030c000c0000000000000000000","size":9,"data":"","first_seen":"2023-03-07T01:03:23Z","last_seen":"2026-04-06T06:34:37.117978Z","times_seen":5320,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a87145114e958663cb80858aabf11d12","sha1":"3a70bb4de4bc378a451931f33a82cad017566450","sha256":"a4682fe010ce6bdafb39a7a630923c126bc0cb6111f5745c934dd439474f48ce","sha512":"b5b739cdfdc985afed0a5f6a1c476e2987059128224a564d2f571e23715b97b46486cdf10a3d47fe90023387db30078079c666901454811a63a886cb8bbbe31d","ssdeep":"","tlshash":"eca022ae30a2b00022003a00003f0328f8be2ba08b8c0000a000000038aa023c3ec0f8","size":68,"data":"","first_seen":"2026-03-06T13:22:23.907099Z","last_seen":"2026-04-01T18:43:21.970044Z","times_seen":883,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a722e51de1e95f3ef41b3ecb2b2e5c9b","sha1":"921a3f61a39b9726af51cdcb9814b28221cf13ac","sha256":"fc834b4ee3ded12f87fccac45c0504efc7adca76abfd5635b5897a16b8574a29","sha512":"4a1e93728b6d1c4669789e991b80153b05452b0d538b044c0b1bfff3fd6c836145ec37707e46b516622961681a021c75f6f5e5ef9cbc07ceb1daa79db233a866","ssdeep":"","tlshash":"50a011aa3a82a00002003a8a00ab0baab2ba08808b2c2800a0a0002038280a2c3e80a8","size":76,"data":"","first_seen":"2026-03-06T13:22:23.889745Z","last_seen":"2026-04-01T18:43:21.984932Z","times_seen":865,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ac62b02c726a10843decd676b58e6f72","sha1":"02218ebbc46bebaa71526055e5b4c65158c28ad0","sha256":"636804111a0b629e867a98fc08456eeb9a90b53633a39f8f17436a76f0366c2b","sha512":"95c611794ef9d551f6a263537a9c3940637c4f5854593dff4f6e9a5724cd1a86fbe1d667e0a21f4122704e6527a075b9c8d1490b59c0db1cb1e484673e2f136d","ssdeep":"","tlshash":"b7b0129e36e2640446291d0852298384f0fdb885051c084090242a15306c030c399069","size":88,"data":"","first_seen":"2026-03-06T13:22:23.882374Z","last_seen":"2026-04-01T18:43:21.994986Z","times_seen":867,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"982c3306e9b10daca9f44183cf9e5312","sha1":"862719de88d713221613afa6ba94b1297f281982","sha256":"baa41cd6666b510543528f4cf72f314bca8d1dd5443344cf6169e9a294ccb6c3","sha512":"a82d7924adfc6aff9a0a4d426f7305d82997c1adcf5c4f286da026fcfb1fe0725c7e4318fd660e87bbdf4fd82c4f9291a4bdb30d697f062aa53dffdb264fd6fa","ssdeep":"","tlshash":"5ba022fe3083b000028b3c02003f8300f0be08c00e0c0080a30008383c08e2aefec038","size":68,"data":"","first_seen":"2026-03-06T13:22:23.893588Z","last_seen":"2026-04-01T18:43:21.995513Z","times_seen":857,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"renamereptiliantrance.com/get/2098228?id=2098228\u0026jp=_clcevnijtnqbkzeoylelcm\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.21-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=2\u0026fn=3\u0026es=13\u0026ge=2\u0026th=72kZB_R9BHI2r7WqUzrGg\u0026pcs=1\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=R86VXwaaHR0cHM6Ly92aWRhcmEuc28vdi9FZ3NLcnN5dGdZSEZY\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=WYy7u0UaHR0cHM6Ly92aWRhcmEuc28vZS9FZ3NLcnN5dGdZSEZY\u0026afid=1805039733897728\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=8\u0026pkw=0\u0026pload=896\u0026rlp=%5B0%2C61%2C214%2C146%2C1210%2C1470%2C431%2C1274%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"renamereptiliantrance.com","domain":"renamereptiliantrance.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ebe914a39825c5ac1b58b1da9353f507","sha1":"06b2b5d7d787f740a080859dd758f1eaf247adc2","sha256":"1c18c36a276618a4dee42c3e2f359cb692ff332265722dea11af1c32b33ea547","sha512":"077788b8425a0c0be12e5f3cdfecc1a84cfde617c2a345229183368f44b990d0305dd2ff345f68d05fa3a8295c9dee4805c16056d2b118496b51076c2ed3c074","ssdeep":"","tlshash":"2171636c28c6e6872dff1cb81a361cb113d8585f24b3fcf18698b69603ac8b46397561","size":3505,"data":"","first_seen":"2026-03-07T20:53:28.520288Z","last_seen":"2026-03-07T20:53:28.520288Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.36.2/jwplayer.core.controls.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.2.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"96388c8374190b02b1c684940b0c267c","sha1":"c49462b6c0755a6be517da89213c6815a72658cb","sha256":"efd4bdf5c117754802f889555f4396867101f917ce259303d8171371e2903589","sha512":"6ab3adef3c69468d2645c352d6a902d9e6e409b1e88fa5c126b7928a546acd7f3f8ef29cf04ff017db5f1e24ad70a442484d7c5bfceb9b789a34bd0daae65c20","ssdeep":"3072:V+Y7nFuhslX/173uYqqIeGSJhoFjBkW64pOknUGp9W11Uy86C4YfrmYRJ:sYxAU/1732yGSJho9OaUG3xyl+frmYRJ","tlshash":"ee641932214252359aea82da66514604b3398085f516cfacff3ceddd4c6e9c731fabb4","size":329500,"data":"","first_seen":"2024-09-18T21:59:43Z","last_seen":"2026-04-05T19:01:43.396363Z","times_seen":596,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/core/bridge3.746.1_en.html?gdpr=1#deid=%22%22\u0026eventfe_experiment_ids=%5B%5D\u0026fid=%22goog_1995408960%22\u0026genotype_experiment_data=%7B%22experimentStateProto%22%3A%22%5B%5B%5B45713128%2Cnull%2Cnull%2C%5B%5D%5D%2C%5Bnull%2C745150931%2Cnull%2C%5Bnull%2C1%5D%5D%2C%5Bnull%2C749060184%2Cnull%2C%5Bnull%2C128%5D%5D%2C%5B841585769%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45761044%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45722344%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45706017%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45740207%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45668885%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45685340%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45734716%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45735891%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45663239%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45715032%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45661356%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B839547366%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45676441%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45675307%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45675308%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5Bnull%2C45645574%2Cnull%2C%5B%5D%5D%2C%5B45688859%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45656766%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45710689%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45710688%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45685601%2Cnull%2Cnull%2C%5B%5D%5D%2C%5Bnull%2C45685602%2Cnull%2C%5Bnull%2C500%5D%5D%2C%5B45756824%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45747172%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B775241416%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B781107959%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B781107958%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B792614055%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B781107957%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45729602%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45753603%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45753604%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45658982%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45725657%2Cnull%2Cnull%2C%5B%5D%5D%5D%2C%5B%5B16%2C%5B%5B1%2C%5B%5B31089630%5D%2C%5B31089631%2C%5B%5B45668885%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B1000%2C%5B%5B95332046%5D%5D%5D%2C%5Bnull%2C%5B%5B95332047%5D%5D%5D%2C%5B10%2C%5B%5B95338769%2C%5B%5Bnull%2C45645574%2Cnull%2C%5Bnull%2C1%5D%5D%5D%5D%2C%5B95338770%2C%5B%5Bnull%2C45645574%2Cnull%2C%5Bnull%2C2%5D%5D%5D%5D%5D%5D%2C%5B50%2C%5B%5B95345206%5D%2C%5B95345207%2C%5B%5B45661356%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B1%2C%5B%5B95351425%5D%2C%5B95351426%2C%5B%5B45676441%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B20%2C%5B%5B95356068%5D%2C%5B95356069%2C%5B%5B45685601%2Cnull%2Cnull%2C%5B%5D%5D%2C%5Bnull%2C45685602%2Cnull%2C%5B%5D%5D%5D%5D%2C%5B95356070%2C%5B%5B45685601%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5Bnull%2C45685602%2Cnull%2C%5B%5D%5D%5D%5D%2C%5B95356071%2C%5B%5B45685601%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5Bnull%2C45685602%2Cnull%2C%5Bnull%2C100%5D%5D%5D%5D%5D%5D%2C%5B1%2C%5B%5B95373378%2C%5B%5B792614055%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%2C%5B95373379%2C%5B%5B45747172%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B781107959%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B792614055%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B781107957%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5Bnull%2C%5B%5B95375930%5D%2C%5B95375931%2C%5B%5B45734716%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%2C%5B95376520%2C%5B%5B45734716%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45735891%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5Bnull%2C%5B%5B95378095%5D%2C%5B95378096%2C%5B%5B45740207%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B10%2C%5B%5B95378629%5D%2C%5B95378630%2C%5B%5B45729602%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%2C%5B95381582%2C%5B%5B45729602%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45753603%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%2C%5B95381583%2C%5B%5B45729602%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45753604%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B10%2C%5B%5B95382403%5D%2C%5B95382404%2C%5B%5B45756824%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B10%2C%5B%5B95385117%5D%2C%5B95385118%2C%5B%5B45761044%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%5D%5D%5D%2Cnull%2Cnull%2C%5Bnull%2C1000%2C1%2C1000%5D%5D%22%7D\u0026imalib_experiments=%5B95338773%2C95334214%2C95322027%2C95331589%2C95332046%2C95385117%5D\u0026is_eap_loader=false\u0026managed_js_experiment_id=0\u0026page_correlator=1001888054663263\u0026pvsid=310389063547467\u0026top_accessible_page_url=%22https%3A%2F%2Fvidara.so%2Fv%2FEgsKrsytgYHFX%22","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e51af2d5ea9a0dde44a21b7ae18290d8","sha1":"4ff083cec67cd189a421d76b65d081c769361776","sha256":"120720b68163bc9cd921bb82163109a15fd74036635f5b3c0ccc886ae8caeb72","sha512":"754cfa0b75b3f57de720d43ec8caf61e7df72e5c5b759791907d61e4522dcdccffd49785a1d73cd3dba3ca63db9b74b22a302197f31eeb43cac0b30f46855482","ssdeep":"6144:Rx92yqCMkr6VjBhuovDa73VzD9rSNS3Cn5P1oAWpb7ADl/VkqKJNwSE8FtclpinJ:R21Dk73vrSNS3Cn5PCXH+Fgpn/Cn4","tlshash":"90152bdcb76274168263f4f5503f014b723ba8a6e40889bcb689d9d17e7884a4277f7c","size":883411,"data":"","first_seen":"2026-03-04T08:07:06.761972Z","last_seen":"2026-03-12T22:21:59.970925Z","times_seen":244,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.displayvertising.com/fsass.min.css","fqdn":"www.displayvertising.com","domain":"displayvertising.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b286c34b32ab84507559e492e079c68","sha1":"874252cf59e6486687797ae41679404e0b320c4e","sha256":"8583fbaf00c9d08dfe1fc26918d72e3440d71674a521620d66a2dc957f43089c","sha512":"75d39372d0ed443defcc99a0ac5ff0805606ea51dcccab5063b6e45928798cf5790a0df39c6cfd07756e80d6bd4f0fcb9f5b6007960ad28291997a3fc86e685b","ssdeep":"768:bt9rqAYKKGZzFQ9JsQU+YDngZGihfzmMzhYrTsAysncCWcf5k5sigCVgCntlqoMA:bb1ZzFQ9JsTgZvfzmMzhYrTscpBZ+","tlshash":"68133aaab286282601e741b9513eb316b23305167812d458fcb9cdf96e3ddc6117b7fc","size":41949,"data":"","first_seen":"2026-03-05T01:32:38.881699Z","last_seen":"2026-03-07T22:31:12.194226Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"displayvertising.com/owunhddkqecabh?SLGOMngH=BQOCAAAAAAAACZUAAm_uU1fMAIlUyd1bBfd1wOZDz1HcrnfDyVgeMUw_tm8bbwbimV6TyCVuIuBz-DjFXlwYvgSboT2JmMO8Lef1AOPD2V5sNr0sfniLDZiQDj7x4WLd7TK8lpPaZtNAh_tbwIKwYIPt4in9ACXXt3ZSwZsK932dXVqY6unRhd0p4JmkztIvIACh5RR6rarlXJNEMo3glE3h4s6ehYqwmu-4QluahrBA25SuPojopDMlrX5i5OmDu5cCyDdok7lz3HsbJBKnwL61YvH1ywr9gW96eEewoJCEmNht7vPJUXiqqKHmsWeHjoY_UGh298K1P4zZFKjqbsIGqH1DGcB_zZneBXnmzva0O3vjPoV4MowJ8kyhYftGJyu0tRyYke8RWpmQHEdHVxmtjn2zipnpS7CEXy_2QzCQcd7-AaKsAyqIcpUvho8y04BsYQWSAWhiO9D4mfBrXejYEZ5a_RbQQFwEUOXK5qURy24UKPYfk0inrnRkkF-eW5a5hZs0yjhfqQ2wMicsvb7k6xTSxKyPBK4XT4dk78s0Xk_5fURLqQC8mMZiQTnFOAIvAryWS7H3C1PWesRAn1mv2AvYU5U3w50ZC71Ksm8nFXF0RbHplYgkN4rK1AOoR--fL0xQA0LLryU5_kteQke3Ug8F1_4BUfR6smXWluZ367sEGiI19ogbNxYJf-UWnb6s9987irKPQPaiWOO92WmdDsUQd6mKDyoUPdQnRh76wPp3OccH5WHeMzWAP8D7hVGTVwRJcf3jxRct_hcLjgwOdaQXv6k9g96EcNoybSvehowsITHWq300pFpZu45GCem42AMM77BizMALlnfYHB5Xnx8aCYqB739eMqdtPlj6uExm-io6ZJbA8NddAglo4avGjsZkj54Dgd9JZn_4Hsls6WLrS-ANTzFb8yS-vem3_B6Ws_k9EH03WO-PvcoPOQPOqnCw8p3pG9Cx9iugPIXx-B3CS6UWLGB5G6VUhVxH2LIMuxI5wMJWc7I00vb1xkAXX4_N_oeOKwGr_y0zBYvLMZ7mC24b6LNGo7H52F7KjeweLstfihVgraGoSvVgJ6Yn-9bCQx43K-8dFD2Yz8RMxkQuv_xKf6pOPHCBh27BjGfCdGGXPjwRblm9LAUgeUO7QrH-BmtreS0HxLga-1Vlac4iitL2UI1dQV9J3hVujeiYRIIFCq9QWnMw\u0026MJHtlFyb=4\u0026iWTPrLxS=5270867\u0026kjmCofHD=\u0026IclOZwas=0,0\u0026ohBMgxKF=\u0026mjgqAeEF=https%3A%2F%2Fvidara.so%2Fv%2FEgsKrsytgYHFX\u0026JBjSucel=1280,1024,1,1280,1024,1","fqdn":"displayvertising.com","domain":"displayvertising.com","tld":"com"},"ip":{"addr":"216.59.56.9","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5f0a25e4d3522d56d48ce7bc3e518fb","sha1":"86794caff58f7fee6e684c2ba7195f970a8d6f4c","sha256":"9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5","sha512":"a3a81801f516a4eb11f00d6f56dab0ed4b8a79219e6b4f5436993479f09dae08f14cffbab3327ff66fb39201d8eba1153ae7114f7705a01cc6f0edf840ef1616","ssdeep":"","tlshash":"789002801814116115d1500b8d5159d01259b1a4540801324446ca502dc7883a415774","size":44,"data":"","first_seen":"2023-03-07T01:17:45Z","last_seen":"2026-04-06T05:40:02.366907Z","times_seen":22886,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.mbidadm.com/static/scripts.js","fqdn":"js.mbidadm.com","domain":"mbidadm.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"50018904503297c6ad666a8153b84c16","sha1":"a091b1ac80b8d3494c378004694fbfe2e934e65b","sha256":"26cdcc0b81fa17c2d21e811221df7b49e40f793852c23beb776d811eca0e904f","sha512":"028b6cd743acf773d92579977368f4e58cc3f5546678d2f3c27f6b35e84a4ba268675e6c870d8afe0cafbb5a7f19cce8f91c6f4a20501d21390d4fc131ce5d28","ssdeep":"1536:O8d+dnC5OPJdQBo9aKRcZXRtK8wBghJ941LloXQTtQyodYm16NzKH6AKn7K0Setc:bBAHGXRt6YVdYmoNGhKG5etsz","tlshash":"61e349d8b2d2b07406e75099d43f1206f73a1a16780c9068f6a6e9c17878ddb9237f7e","size":149838,"data":"","first_seen":"2026-02-24T18:05:22.965018Z","last_seen":"2026-04-06T00:45:03.890884Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d8c81442e74e2aee0929479d20170ae0","sha1":"9de4f4b80c02779e4ae982e0638d2075b48db354","sha256":"a5a0d9be349f2f79e82bb0780285442f54e42939e5e4783db7843956e2ced445","sha512":"9b29a0f8504c6d1add7120c2278afbc4f13f7505f666a23669378c6834aaeeb07c9ec1012c247a8b694caebdffa0f0f5ff2d3f135434924682de4ea6eefda8e3","ssdeep":"","tlshash":"678000080ab880b830032a00ac00002222088f80a8a03ac0380e03bb0ca2c000802a2c","size":31,"data":"","first_seen":"2024-12-27T13:53:56.215783Z","last_seen":"2026-04-06T08:23:24.734026Z","times_seen":1098,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9c70f1ff07f62d0387c94bb6d72c96c4","sha1":"3426fb173f775440b91eb8307f0c337a978951fc","sha256":"a515b5056947bdf748452e6414fb2277f347ee75cc72123196ee5372c21250ea","sha512":"792165bc7fbeb3fdca3d167eec9cce82f0d0ce05e96c6d0e4f1c3a1e7ba86e4d7e04d8b866263273c3a0bca1f31597b623ddc564f77f1fd7e5fa5369ad50b706","ssdeep":"","tlshash":"3aa022ae30c2b00002003200003f0300f2be08808a8c2000e0000a2038a8023c3ec0b8","size":64,"data":"","first_seen":"2026-03-06T13:22:23.911033Z","last_seen":"2026-04-01T18:43:21.984445Z","times_seen":880,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.adsco.re/","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.84.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1161c5e1032526d6f1d7d76ebcf3bedc","sha1":"55eabbacac8d885f20eb0044356a0b1c4d7fa587","sha256":"be6bed04c6804e4a9b4a16b122289540c379c3f9a31cd79d11875d8a3044d5e5","sha512":"5a1b68c04d71b683c5f1cc9564439224a98c245c59ec025c366bacc9ba39a0c8c5bd1297fad014369342bd2d9fe905c1fddf3408eeeb4d8731f0ae2edbadbf67","ssdeep":"1536:zkblU+Wo++diB42UkFuYOumG2qOd4hc2AuGenzrJf9JNyrTgTkt9a4W:4CCv2UkF4G2qs4hc2AuGenzrJrMY","tlshash":"d1836cba7272703e02b220fe167f620671794f606c9684a15336d5e43c71e9b837bf99","size":88223,"data":"","first_seen":"2026-03-07T19:09:31.090782Z","last_seen":"2026-03-07T20:53:28.497566Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/core/bridge3.746.1_en.html?gdpr=1#deid=%22%22\u0026eventfe_experiment_ids=%5B%5D\u0026fid=%22goog_1995408960%22\u0026genotype_experiment_data=%7B%22experimentStateProto%22%3A%22%5B%5B%5B45713128%2Cnull%2Cnull%2C%5B%5D%5D%2C%5Bnull%2C745150931%2Cnull%2C%5Bnull%2C1%5D%5D%2C%5Bnull%2C749060184%2Cnull%2C%5Bnull%2C128%5D%5D%2C%5B841585769%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45761044%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45722344%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45706017%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45740207%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45668885%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45685340%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45734716%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45735891%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45663239%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45715032%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45661356%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B839547366%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45676441%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45675307%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45675308%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5Bnull%2C45645574%2Cnull%2C%5B%5D%5D%2C%5B45688859%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45656766%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45710689%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45710688%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45685601%2Cnull%2Cnull%2C%5B%5D%5D%2C%5Bnull%2C45685602%2Cnull%2C%5Bnull%2C500%5D%5D%2C%5B45756824%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45747172%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B775241416%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B781107959%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B781107958%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B792614055%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B781107957%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45729602%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45753603%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45753604%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45658982%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45725657%2Cnull%2Cnull%2C%5B%5D%5D%5D%2C%5B%5B16%2C%5B%5B1%2C%5B%5B31089630%5D%2C%5B31089631%2C%5B%5B45668885%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B1000%2C%5B%5B95332046%5D%5D%5D%2C%5Bnull%2C%5B%5B95332047%5D%5D%5D%2C%5B10%2C%5B%5B95338769%2C%5B%5Bnull%2C45645574%2Cnull%2C%5Bnull%2C1%5D%5D%5D%5D%2C%5B95338770%2C%5B%5Bnull%2C45645574%2Cnull%2C%5Bnull%2C2%5D%5D%5D%5D%5D%5D%2C%5B50%2C%5B%5B95345206%5D%2C%5B95345207%2C%5B%5B45661356%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B1%2C%5B%5B95351425%5D%2C%5B95351426%2C%5B%5B45676441%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B20%2C%5B%5B95356068%5D%2C%5B95356069%2C%5B%5B45685601%2Cnull%2Cnull%2C%5B%5D%5D%2C%5Bnull%2C45685602%2Cnull%2C%5B%5D%5D%5D%5D%2C%5B95356070%2C%5B%5B45685601%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5Bnull%2C45685602%2Cnull%2C%5B%5D%5D%5D%5D%2C%5B95356071%2C%5B%5B45685601%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5Bnull%2C45685602%2Cnull%2C%5Bnull%2C100%5D%5D%5D%5D%5D%5D%2C%5B1%2C%5B%5B95373378%2C%5B%5B792614055%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%2C%5B95373379%2C%5B%5B45747172%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B781107959%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B792614055%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B781107957%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5Bnull%2C%5B%5B95375930%5D%2C%5B95375931%2C%5B%5B45734716%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%2C%5B95376520%2C%5B%5B45734716%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45735891%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5Bnull%2C%5B%5B95378095%5D%2C%5B95378096%2C%5B%5B45740207%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B10%2C%5B%5B95378629%5D%2C%5B95378630%2C%5B%5B45729602%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%2C%5B95381582%2C%5B%5B45729602%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45753603%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%2C%5B95381583%2C%5B%5B45729602%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45753604%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B10%2C%5B%5B95382403%5D%2C%5B95382404%2C%5B%5B45756824%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B10%2C%5B%5B95385117%5D%2C%5B95385118%2C%5B%5B45761044%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%5D%5D%5D%2Cnull%2Cnull%2C%5Bnull%2C1000%2C1%2C1000%5D%5D%22%7D\u0026imalib_experiments=%5B95338773%2C95334214%2C95322027%2C95331589%2C95332046%2C95385117%5D\u0026is_eap_loader=false\u0026managed_js_experiment_id=0\u0026page_correlator=1001888054663263\u0026pvsid=310389063547467\u0026top_accessible_page_url=%22https%3A%2F%2Fvidara.so%2Fv%2FEgsKrsytgYHFX%22","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"56b0d0e8272fed6b9a44d08c14e5b1be","sha1":"0b2e66a7ca8c0319310adca7ba8d02b643526f9e","sha256":"b045c748093c314660ce2985a8dd0d6c3feb6af1026dc2b02229b2538c0da6ff","sha512":"a35fc7c77ba761303aff78d51b8fe387bbf1c8892861ad6655984ea7f43598e5d9b769c2607013d9ebdc08417e578e1a7e81043f346083de7accb7a90425f259","ssdeep":"","tlshash":"0ee0269dfa8a09384c1238a16f6f329483aa916fe228e264f81de7445f1044dd06b3e6","size":358,"data":"","first_seen":"2025-02-20T21:14:35.914719Z","last_seen":"2026-04-06T07:48:24.001392Z","times_seen":10213,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8aa76926470fe48bfe16061aae3c3270","sha1":"394334d81e17289ba02192082fdfa7829bfb84ab","sha256":"13c074cb0158057699ca3394e62139f2d78991149dee2e966e8c898747e2a131","sha512":"221aa9db5cc9072dd0118ee0dd24b208307a544d447b2275f205b062e6d70867f08c43c43e0e06ed47aeb6e2b6b340f9c8c6815c3a9313c26702308334123e25","ssdeep":"","tlshash":"66a022fe3083b00002833c02003f0300f0be08c00e0c0880a30008383c88e2afbec038","size":68,"data":"","first_seen":"2026-03-06T13:22:23.92178Z","last_seen":"2026-04-01T18:43:21.976834Z","times_seen":860,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dd133.com/vignette.min.js","fqdn":"dd133.com","domain":"dd133.com","tld":"com"},"ip":{"addr":"104.21.71.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e38568867b57e92c93a86c1bf1c3f54b","sha1":"f70e88ba028d031898b8bcc7e8c0924bf0c00106","sha256":"ea28a17d163b12afe2d7f1fd40a55a1da330f69d8c9d270458353cbac5f666ba","sha512":"21e6d4758a1b0a1b7e12aadef8d2f4d613ed54c665bda4aa317e8c8d1a8d6c1510cb3bdd9179b720c6ac1a2f332872ce53f9de524b4c5651f9689beed4be007a","ssdeep":"3072:+Xo/vOAWV/TDixCLiOuTiGQDGjqsMcH/Z09QuKCKK+CJTZQzM+ge0g8ttwVzwOdW:sp/TDixCLiOuTiGQDGjqsHH/Z09QuKCV","tlshash":"90f3d984b2c2b1a02d735134712fc64ea5ab7a70685ec590c19ae1f27f3706ad3b7dd8","size":171033,"data":"","first_seen":"2026-03-05T15:15:54.691486Z","last_seen":"2026-03-11T06:07:14.340625Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qi.evasivelimnite.com/rG0fbXHfk6LSDvj/134585","fqdn":"qi.evasivelimnite.com","domain":"evasivelimnite.com","tld":"com"},"ip":{"addr":"172.241.53.69","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"848667c49f5d3aef59cd65ed276cd7ae","sha1":"bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763","sha256":"cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8","sha512":"4248ad0e684224ba8503b1e73517aae6ffe4431cd16b7633d2ccbf4b96f845e318dbee175d19cd4676ca37353f53add2231ed167ad6c4aa0d9fe185f7359238c","ssdeep":"","tlshash":"f23000000000000000cc00000000000000000000c000000000000000000000003c0000","size":5,"data":"","first_seen":"2025-04-24T10:17:49.831301Z","last_seen":"2026-04-06T08:23:24.567456Z","times_seen":14900,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"7eed16bfbeeaca1b398682e4af799c76","sha1":"1ca48b5510c7e009b65cd7ee438afaa92c4e0fcf","sha256":"3b60fda551bafdbf7b58ef114eedabafa07b5f0bba5e062d994dc0bfd32fe12c","sha512":"9d692c94eec25762c18c2d399ad6757c01ba8aa9cfbf7dfcc91ed3b259ba290373c8ab30d1a9581644ebe77b79666b1093ad13e376de624d52d1a1ecc0b50479","ssdeep":"","tlshash":"4d5000000003333030000000030c00c0c0000000000cc00000000030000c3c00000030","size":10,"data":"","first_seen":"2026-02-28T10:26:40.617135Z","last_seen":"2026-04-05T19:01:43.403076Z","times_seen":130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"javascriptURL","is_inline":false,"md5":"68934a3e9455fa72420237eb05902327","sha1":"7cb6efb98ba5972a9b5090dc2e517fe14d12cb04","sha256":"fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa","sha512":"719fa67eef49c4b2a2b83f0c62bddd88c106aaadb7e21ae057c8802b700e36f81fe3f144812d8b05d66dc663d908b25645e153262cf6d457aa34e684af9e328d","ssdeep":"","tlshash":"aa3000000000000c000000000000000000000000000000000000000030000000000000","size":5,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-06T08:14:54.2073Z","times_seen":66514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"bf3cdfbdb08145365ecf6f468acc6a11","sha1":"1678608d03de0a1644e7a51454684d4ffd02368d","sha256":"50645c8fb524dc0f1cda2d94f209e3e406a5c77433550f5ead9f3a80af4e93d0","sha512":"71d758c4cdeb8cea6f0741aab83f590e5a1b633a84a22f69ec4f06e495436b789e242002f08ff722dafe137d9e5dda33ffe7f6bad46869762a4cc1a6cfd42668","ssdeep":"","tlshash":"8ea012fe3053604202102b02012f1301f07b04441a8c30a3b02040203814113d7950a4","size":84,"data":"","first_seen":"2026-03-06T13:22:23.885827Z","last_seen":"2026-04-01T18:43:21.98888Z","times_seen":878,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"953549f4dff87a072b677b4a79dc06d0","sha1":"aeea4db8a8254e4243cdb007426f7e6a6ea9d029","sha256":"07c2dbcfd887309bc9fba82b7bc1f7edfe40fc5eef256aea59fb8d706a412c55","sha512":"bf602a714ea3244fe7952fbf7664f97ececfaa1ef8d90bca97d0af681b54d22d0e62a1214e96a3d378aaef126f539d9c7cebbf42ad4f63f070530e55e6a732a9","ssdeep":"","tlshash":"83a012da7052b000c221101640355918a07f0640051c2010800042043188410e35e478","size":80,"data":"","first_seen":"2026-03-06T13:22:23.914604Z","last_seen":"2026-04-01T18:43:21.970582Z","times_seen":880,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"06ecf446dd61d6c9bab244eee545fd42","sha1":"f57cc579b3546e73783bdf856ddef779c7bb82d5","sha256":"6a38f6de97648e618fc380c3014e5669d5326b01d19868b02bfebe25401cfe04","sha512":"b593350ca2d089ec5456e3aa4c5b8355e639371b939a5b310f1336e5a01515009a7de2df22d7090a32b14b9d3f0bf7d0a5a11c1ed7148b9a2eec502c0934f210","ssdeep":"","tlshash":"6ea002af72b2b0044e553536913bc647f1be4aa08a5d0490a2929654349c534cbae878","size":67,"data":"","first_seen":"2026-03-06T13:22:23.883304Z","last_seen":"2026-04-01T18:43:21.974225Z","times_seen":841,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","size":60819,"data":"","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-04-05T21:49:34.561628Z","times_seen":29376,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e27f31ff23f7a83e273aa1238b641c13","sha1":"20bbd48ca5f98473697717bbb286f96dfc1351d5","sha256":"0845a8d79944bfca0d8e7b31c97436ec9ee936a05476dfcadeb8809f6e0b1d99","sha512":"3c189058ee55d6ad6a921f1557f7f4c5214faeb9ba5030eb47355c866c615b8194f7fd11d3be97a330685a0fa47b6fc6201ad9d25bbb943026fdaf07d02494e4","ssdeep":"","tlshash":"1da022af3083b000320bfb28a23f0300f0be08c00e8c2000c00080003028033cbec0bc","size":71,"data":"","first_seen":"2026-03-06T13:22:23.902455Z","last_seen":"2026-04-01T18:43:21.98838Z","times_seen":877,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"59aae9aeded53c3dfc36e099008845c4","sha1":"fa9fbb893a3a87a63215199bd43029f97bb3c394","sha256":"086712e2ec7496a2a360bb40991836324da71c4015a037965e4a5af9fcf8106f","sha512":"c43c6d2d8714cc2ab252a04981faadca827f611f6698cc8bf303d67a1ed6aa7fdf5d59889aa00f18206a264760c0a4d8d180a08b47dda479b10d66c3424dfe8e","ssdeep":"","tlshash":"e6a024df7051700cc3131017403d5514f07f0740150c1030c0004714300c410f35743c","size":78,"data":"","first_seen":"2026-03-06T13:22:23.880679Z","last_seen":"2026-04-01T18:43:21.986866Z","times_seen":880,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d2d2df549786ddf836ab06d3fbd5195b","sha1":"ef565f37f1e5317a9a93549d30a698b80b02b437","sha256":"3349e4173367aa79e96d2216bed36d9bbbdfad0707a093272ae648363d903995","sha512":"631478276ebd5edaa246eac6cc15e155f2d88c381a1e0a472418e3cff14d815f6475b57b957cdbc30db0a8f5ca8383d6e6b8216299789178883ecfaf4f8d2f7b","ssdeep":"","tlshash":"e650000c00303c0303030300300003300c003000c3000000f3c0000003300000000003","size":11,"data":"","first_seen":"2026-02-28T10:26:40.609005Z","last_seen":"2026-04-05T19:01:43.413557Z","times_seen":130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7f06acbee50edfe4f0224174782dbb2d","sha1":"229001b703b264dce783db5b89adc04f5177caed","sha256":"15a37eee8ddd61861fca478f53bf95f3ff23b156adad406623e5669cc1f89d2a","sha512":"e5c025e243609f1c6b2f66e1aa2d40c149e4fc931fcf4413cdeea4c924e4be115bf5d6113a7010e297d17a5c110ec836fa61d1013d294f7ea9585f4b8c364fc3","ssdeep":"","tlshash":"64b0125e7262a20406242304527e4a02b4790640451c0810701810103458853c3d557d","size":92,"data":"","first_seen":"2026-03-06T13:22:23.904753Z","last_seen":"2026-04-01T18:43:21.991695Z","times_seen":861,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5566c1c13f124855a7ed3fd7412ee87f","sha1":"dd5a849b04626fd97798cbf59f231358afb0fbf0","sha256":"b9825bfa74809406955be3529689e513d018db95c6a6af2d2a237f034d6faa2f","sha512":"5b0b874c383f586f4100aa4309fb6a750c5936030d6f240a316cddd4dc9af62e5bb15568a208c3667ca2647360bd3cfe3a0e2b0800f799fdb0bdedfaced463f0","ssdeep":"","tlshash":"1eb0125e3396700b0b4134d9803a0341e57f0a504f4e0461905268143ca9f7cd3fd66c","size":97,"data":"","first_seen":"2026-03-06T13:22:23.879771Z","last_seen":"2026-04-01T17:04:52.923564Z","times_seen":196,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/pako/2.1.0/pako.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e647868246b70926c4d716f7640bd51a","sha1":"c64471d33f9a3d20b5d9219159fe102d8763adcb","sha256":"ede2693a4a6a5126b9d35669062b358ecab6ae7b9b86a1cf302feb45a8514907","sha512":"8364de016c3918f9d7ef3d0a9fc9c56d87de1dcbc0bbfb71e9dea6acb7bff749a40b13be45ca6dc98a64b14cf7e443b7dfb17cddb6707265321e21da9aca647e","ssdeep":"768:fXHw8wA4ZIlEf4WLNiAAAAAA84YrI9OVsLMeu/pJCU5ejR9PNB57szzsE1s1A1m9:yeBomKTCsJ6b3","tlshash":"3423f8b221f754691bd01cd880970ba162b091722c4655f8e77c9ce538b0adbf0bfabd","size":46859,"data":"","first_seen":"2023-09-10T07:22:30Z","last_seen":"2026-04-05T23:41:11.798733Z","times_seen":1490,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"renamereptiliantrance.com/on.js","fqdn":"renamereptiliantrance.com","domain":"renamereptiliantrance.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"19df53e8ab7f6cd19822f72d79111aaa","sha1":"7e0cb8accb950ff1ab33ff04ea674584ce6bc105","sha256":"4a585fe6706e6e6029547f12d6eca36435878f0e4d63f633c5a6cffb002995b9","sha512":"93e66fa87ef721f05c65ac4a0b85c5740c315748753f8cecd908e79b131124fadf5b8f5e44e450769588b02f78294c77e35ec6ba97ae9fb1391d86937aa8acc1","ssdeep":"768:6VxKCaWGb49SZq77qaw4U/7HG1XKUQbrcS+aaVJRDXy++8jqpG5KN2jqGkhI0xms:s7GPyE4X1XKH+aEJRDCUqpG5KEjqMi1","tlshash":"b2739899f695b861035390f452bf401da33a7d6ce4ec5128b181e8e92cbcd8d9623f7b","size":73701,"data":"","first_seen":"2026-03-05T08:33:14.384329Z","last_seen":"2026-03-10T07:12:46.833872Z","times_seen":93,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"677460c625ed76584d26498c9727065b","sha1":"e8a4652301d5a7cb323ab02e18132b8b9f631f47","sha256":"c75f41e6916a47a62f23dde92bbdaf94c5d3fdd7dc7636c01c95ad565c95a542","sha512":"df908cde4d124d10b5707b6fdfe0999e5eaaf6f49c5f2b845316874ab8cd4a8886e4a5a7d99e338f37f507da359c3ffa6bba6eb914e951f8fe2397b80ee03732","ssdeep":"","tlshash":"afa022be3082f00802003a02023f0bc0f2be08808aac20008000280a3828023cfe80fc","size":66,"data":"","first_seen":"2026-03-06T13:22:23.90938Z","last_seen":"2026-04-01T18:43:21.967941Z","times_seen":879,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fe684251c64f27df9a72ad657584e44e","sha1":"233b4073c81fab979519694e1b7789b92f985265","sha256":"052361351b8f197a7dbc66c720f2903d97d31aac6de3933aaa5618081157bec9","sha512":"f55b604db7908efdf64ab55f3033d2c20e514d3eadd7ed172a79e0bf0445ed4d9ec7fc1eb276f608ed6d026f754bfb94d5594161fa97eade06a49e5e27df8f7d","ssdeep":"","tlshash":"1aa002ae31d3f01147156755413f9747f2bf19904a5d0450d1245764349d826c7aa4f9","size":65,"data":"","first_seen":"2026-03-06T13:22:23.874811Z","last_seen":"2026-04-01T18:43:21.985392Z","times_seen":876,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/v/EgsKrsytgYHFX","date":"2026-03-07T20:52:51.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.3.2\r\nx-jsd-version-type: version\r\netag: W/\"13b17-9/0PPchLLPk7+B6DJQWmc/NU4KM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 07 Mar 2026 20:52:51 GMT\r\nage: 841340\r\nx-served-by: cache-fra-eddf8230118-FRA, cache-osl6543-OSL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 24440\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80663,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"6baf57f25796c332144ed58a2a0cd9ee","sha1":"f7fd0f3dc84b2cf93bf81e832505a673f354e0a3","sha256":"82f64f62bb03c1bc1824b0f9c9e05f70dba33e146818e63cdf5c306c8cf3dedd","sha512":"5ff6240d9ca34dfe30c9cd95cb5e981823c7c0063cad9258f8f3a0a24663401da684844524272410673a6325fd78db0f7e7d0fcd3844b8db3eb9aa2613908ee8","ssdeep":"1536:Qmw0iELO+TBR2t472RirWyKsVfK5GEfy3YJtCRv/45wZbqbXZTbYWU178:VwXza3YCl45wZODZTbYR8","tlshash":"cc73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2023-09-18T01:21:14Z","last_seen":"2026-04-06T08:15:35.703979Z","times_seen":14236,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":8,"dns":0,"connect":2,"send":0,"wait":6,"receive":1,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dd133.com/vignette.min.js","fqdn":"dd133.com","domain":"dd133.com","tld":"com"},"ip":{"addr":"104.21.71.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:52.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dd133.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 17:41:05 GMT","end":"Sun, 12 Apr 2026 18:36:28 GMT"},"fingerprint":{"sha1":"AC:F9:7C:4D:B7:44:1E:D7:F6:DC:E3:20:8C:A3:F9:15:30:C7:90:DE","sha256":"3B:89:FE:6D:9A:D4:0B:68:32:11:0B:B9:BF:09:0A:20:53:7D:F1:4D:CD:A0:95:78:01:45:EE:CC:7D:72:5F:6D"}}},"request":{"raw":"GET /vignette.min.js HTTP/1.1\r\nHost: dd133.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 20:52:52 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=600, s-maxage=1800\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 1177\r\nlast-modified: Sat, 07 Mar 2026 20:33:14 GMT\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JljzeacOBY9scY5Kl8PrpzKZ%2BHOmu28e9daGO8SxwVsth2Ylo%2BrKp8InmEZAHeLc%2Fhz0vGpT5AR%2Bm2lgBs0ctKjHxzAkV19v9w%3D%3D\"}]}\r\ncf-ray: 9d8c7c81add7f375-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":171033,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e38568867b57e92c93a86c1bf1c3f54b","sha1":"f70e88ba028d031898b8bcc7e8c0924bf0c00106","sha256":"ea28a17d163b12afe2d7f1fd40a55a1da330f69d8c9d270458353cbac5f666ba","sha512":"21e6d4758a1b0a1b7e12aadef8d2f4d613ed54c665bda4aa317e8c8d1a8d6c1510cb3bdd9179b720c6ac1a2f332872ce53f9de524b4c5651f9689beed4be007a","ssdeep":"3072:+Xo/vOAWV/TDixCLiOuTiGQDGjqsMcH/Z09QuKCKK+CJTZQzM+ge0g8ttwVzwOdW:sp/TDixCLiOuTiGQDGjqsHH/Z09QuKCV","tlshash":"90f3d984b2c2b1a02d735134712fc64ea5ab7a70685ec590c19ae1f27f3706ad3b7dd8","first_seen":"2026-03-05T15:15:54.691486Z","last_seen":"2026-03-11T06:07:14.340625Z","times_seen":30,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":96,"dns":21,"connect":10,"send":0,"wait":12,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4.adsco.re/","fqdn":"4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:52.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vidara.so/\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 07 Mar 2026 20:52:52 GMT\r\nContent-Type: text/plain\r\nContent-Length: 62\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://vidara.so\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET, HEAD, OPTIONS, POST\r\nAccess-Control-Allow-Headers: Host, User-Agent, Accept, Accept-Language, Accept-Encoding, Referer, Origin, DNT, Connection, Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site, Pragma, Cache-Control\r\nCache-Control: private, max-age=300, immutable, stale-if-error=300, stale-while-revalidate=300\r\nExpires: Sat, 07 Mar 2026 20:57:52 GMT\r\nETag: \"5b41cb22f84f645a103acc7bfbf084ff\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":70,"dns":1,"connect":29,"send":0,"wait":33,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b7510.com/5/10652172/?oo=1\u0026js_build=iclick-v1.1728.1\u0026userId=q3mc544327yy034837022g9g7swyu862\u0026dmn=llvpn.com\u0026tt=2\u0026ix=1\u0026tspl=999\u0026cslt=68","fqdn":"b7510.com","domain":"b7510.com","tld":"com"},"ip":{"addr":"139.45.197.115","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:54.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b7510.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 05:10:51 GMT","end":"Thu, 09 Apr 2026 05:10:50 GMT"},"fingerprint":{"sha1":"22:4B:79:DA:A0:F6:FE:96:5F:8D:30:A3:1F:16:FF:F1:F0:3B:A3:4C","sha256":"E9:06:72:FC:F6:56:73:C5:90:3B:BE:C2:54:28:25:29:3E:35:63:7C:8B:6E:99:B2:9C:E4:61:37:52:FD:FA:93"}}},"request":{"raw":"POST /5/10652172/?oo=1\u0026js_build=iclick-v1.1728.1\u0026userId=q3mc544327yy034837022g9g7swyu862\u0026dmn=llvpn.com\u0026tt=2\u0026ix=1\u0026tspl=999\u0026cslt=68 HTTP/1.1\r\nHost: b7510.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 3465\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3465,"data":"{\"sync\":\"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\",\"async\":\"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\",\"quality_options\":{\"hil\":1,\"jsp\":1,\"ng\":false,\"ix\":true,\"pt\":false,\"np\":true,\"nw\":true,\"nb\":true,\"sw\":1280,\"sh\":1024,\"pl\":\"https://vidara.so/e/EgsKrsytgYHFX\",\"wy\":0,\"wx\":0,\"ww\":1280,\"wh\":1024,\"cw\":837,\"wiw\":837,\"wih\":471,\"wfc\":4,\"sah\":1024,\"navlng\":\"en-US\",\"drf\":\"https://vidara.so/v/EgsKrsytgYHFX\",\"wgl\":\"llvmpipe\",\"tb\":false,\"btz\":\"UTC\",\"bto\":0,\"pnt\":0,\"pnrc\":0,\"bml\":0,\"bmi\":false,\"vsbl\":true},\"client_hints\":{}}"}},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 20:52:54 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://vidara.so\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\npragma: no-cache, no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":61,"dns":1,"connect":26,"send":0,"wait":38,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"displayvertising.com/owunhddkqecabh?SLGOMngH=26\u0026MJHtlFyb=4\u0026iWTPrLxS=5270867\u0026kjmCofHD=\u0026IclOZwas=0,0\u0026ohBMgxKF=\u0026mjgqAeEF=https%3A%2F%2Fvidara.so%2Fv%2FEgsKrsytgYHFX\u0026JBjSucel=1280,1024,1,1280,1024,1","fqdn":"displayvertising.com","domain":"displayvertising.com","tld":"com"},"ip":{"addr":"216.59.56.9","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:55.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"displayvertising.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 04 Apr 2025 00:00:00 GMT","end":"Tue, 05 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BB:A7:E2:24:FF:EC:EC:B7:A1:F9:77:02:9A:AB:B1:8A:AD:9C:95:5F","sha256":"D1:55:30:57:68:7E:A4:DC:AD:2D:9F:A1:1B:7C:6C:B8:5C:58:E6:3B:4D:43:6F:96:32:54:96:A6:27:2D:D5:0A"}}},"request":{"raw":"GET /owunhddkqecabh?SLGOMngH=26\u0026MJHtlFyb=4\u0026iWTPrLxS=5270867\u0026kjmCofHD=\u0026IclOZwas=0,0\u0026ohBMgxKF=\u0026mjgqAeEF=https%3A%2F%2Fvidara.so%2Fv%2FEgsKrsytgYHFX\u0026JBjSucel=1280,1024,1,1280,1024,1 HTTP/1.1\r\nHost: displayvertising.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\npopads-node: wb4\r\naccess-control-allow-origin: *\r\ncontent-type: application/javascript\r\nasf: -3\r\npopads-ec: ASE\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 14 Mar 2026 20:52:55 GMT\r\ncontent-length: 0\r\ndate: Sat, 07 Mar 2026 20:52:55 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":854,"timings":{"blocked":313,"dns":0,"connect":99,"send":0,"wait":225,"receive":0,"ssl":212},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"displayvertising.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/assets/images/logo2.svg?v=5","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://vidara.so/v/EgsKrsytgYHFX","date":"2026-03-07T20:52:51.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidara.so","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 11:08:37 GMT","end":"Tue, 05 May 2026 12:07:22 GMT"},"fingerprint":{"sha1":"A6:7B:1F:15:8E:93:40:C2:D5:ED:5D:0E:F1:41:D9:F4:BC:D1:C7:F0","sha256":"0F:4A:DE:A1:CD:61:73:8E:21:8A:AD:69:22:87:25:83:3A:5C:44:F1:33:DB:B1:48:E3:94:87:BA:16:59:80:31"}}},"request":{"raw":"GET /assets/images/logo2.svg?v=5 HTTP/1.1\r\nHost: vidara.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/v/EgsKrsytgYHFX\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Mar 2026 20:52:51 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 11 Feb 2026 15:24:11 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 6585\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=71noJtV5MfSMpsEDVlHpfankfRaIUDGw56aQx53AUS%2FU2ZHE59cxhB2%2BLif9lLRKD6sGaWi95VkhQVv%2BOowPXttcygUCBHE%2FLQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8c7c7ced1f481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3403,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"13720c5c82759e83b36326153df9c6e9","sha1":"ad84db51a9a6dfe4821a55d81f38d90d1c09987f","sha256":"a03c573b6523cdbb1c77bc7b51ab91b6620afd875bdcf3b11d712f7db2388a76","sha512":"7ddc7d8b560bafde4e8696a9844314787ab30851acf9ac48ed925a084bc6bb4b5a1afb69bfd3a38624ea9cc7aa11c3aedfc106da04de1974030adb513b76aea2","ssdeep":"","tlshash":"176173dc4f648de4d6d593fea0045435332be5fbab05af10878c691f3da188c8861cca","first_seen":"2026-02-06T12:29:22.539033Z","last_seen":"2026-04-05T11:28:19.176804Z","times_seen":60,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jnbhi.com/tag.min.js","fqdn":"jnbhi.com","domain":"jnbhi.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:51.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jnbhi.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 02:32:37 GMT","end":"Sat, 02 May 2026 02:32:36 GMT"},"fingerprint":{"sha1":"06:51:0A:AB:35:00:72:97:59:5D:63:D5:5E:AB:BB:30:D0:45:EC:FC","sha256":"DB:6F:EE:7E:91:87:0E:AF:59:7A:FF:92:F7:2F:F9:4A:68:69:EB:19:A6:63:C5:13:B3:62:73:04:4B:08:0C:99"}}},"request":{"raw":"GET /tag.min.js HTTP/1.1\r\nHost: jnbhi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 20:52:51 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 114030\r\nserver: nginx\r\nx-trace-id: de4c5765176e8bee1271f68a4ab3ce9d\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ncache-control: max-age=1800\r\ntiming-allow-origin: *\r\nexpires: Sat, 07 Mar 2026 21:22:51 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":114030,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"16ce8e2ff2ceab779dc731fe51dba974","sha1":"cac73ee29b7735615da349f93f38d35705a58ca4","sha256":"e5ed7b0a245533095708b1e4632939a7f39035771b2714fb3adb1cef2e95ac09","sha512":"c671a691b7ceb29299483bf3142cd2386e1538ddfaeb56eaf0c57356246eb9f3b41605af0359d3a615a6e436354ceb3dfb6b7cc00a41b1077a6cb87d58297756","ssdeep":"1536:cHmN4N1pAb5SNrC6WuDemYdP2rH9kZrY/4ODiUtsABe3a5qLwutBiJgqXoB44ae:5NKoWHWuDo/ZrY/4ODXxcqUbi7E55","tlshash":"83b31b6073d1741252bfb12c086ac92d755a4e90084e8afbd2e9a876d4b531cc3bbff5","first_seen":"2026-03-05T19:18:04.457863Z","last_seen":"2026-03-09T10:02:04.74564Z","times_seen":69,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":71,"dns":22,"connect":19,"send":0,"wait":37,"receive":40,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qi.evasivelimnite.com/rG0fbXHfk6LSDvj/134585","fqdn":"qi.evasivelimnite.com","domain":"evasivelimnite.com","tld":"com"},"ip":{"addr":"172.241.53.69","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:51.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qi.evasivelimnite.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 16:08:03 GMT","end":"Mon, 01 Jun 2026 16:08:02 GMT"},"fingerprint":{"sha1":"B6:63:A9:78:8B:E1:DC:B1:59:99:58:8A:72:15:65:C8:86:EC:80:5E","sha256":"D9:D6:90:44:20:FE:F3:AB:F0:CD:E5:9D:95:23:56:99:76:48:DE:28:B5:13:36:C1:89:A0:3F:13:7C:10:D0:F0"}}},"request":{"raw":"GET /rG0fbXHfk6LSDvj/134585 HTTP/1.1\r\nHost: qi.evasivelimnite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 20:52:51 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://vidara.so\r\naccess-control-allow-headers: content-type, gyfr29qt4j80vdr0zhsj, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\naccess-control-max-age: 600\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nset-cookie: GL_UI4=eJw9jc1OhDAcB%2FkGddnkl%2FAA%2BwgtUtKrF1%2FBI2npn7UKdFMqq28v8eBtDjOZKIqSpka8FyekX0rgwrnsZSdaybpRqlZr2feCaSEZb8U0CTzYbQhKzxQyVNuifBjCniHXXq2mRr44Q3ONUnt338g3KbJVLYTy1Xqa3PdhqA%2FnkfLn7mC7HhwzJG5r0nOF8s2u5ijPj0g4O5%2BKCE%2B3WYXJ%2BWWwpoiRX70yhPgF1agCXZ3%2FQWlo%2BwzuBrjZDP%2F%2B3zi9c4bC0G5HQu7CO%2FlfoWNCFg%3D%3D; expires=Sun, 08-Mar-2026 20:52:51 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJxjYGBgEuEXZMosEOSxNNSzNNAzMdIzNDURZEwXZPLzF2RKzhNk88svKk%2BsFGQsEmQyMBZkKsoT5PYvzslXcM4vzSsBiicLsoD4goyZgnxOOZkVCsH5OaUlmfl5xYJMQMzpnJiUk6rvEuwjyFjAxijIVJIPIotTRBgEGcvYJASZchJ5HHw%2Fv9qcvuAnkJPP46BavzE63G61IFNBsSCLoaGZEQCHQinh; expires=Sun, 08-Mar-2026 20:52:51 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"848667c49f5d3aef59cd65ed276cd7ae","sha1":"bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763","sha256":"cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8","sha512":"4248ad0e684224ba8503b1e73517aae6ffe4431cd16b7633d2ccbf4b96f845e318dbee175d19cd4676ca37353f53add2231ed167ad6c4aa0d9fe185f7359238c","ssdeep":"","tlshash":"f23000000000000000cc00000000000000000000c000000000000000000000003c0000","first_seen":"2025-04-24T10:17:49.831301Z","last_seen":"2026-04-06T08:23:24.567456Z","times_seen":14900,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":78,"dns":37,"connect":18,"send":0,"wait":22,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"qi.evasivelimnite.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6.adsco.re/","fqdn":"6.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.84.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:52.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vidara.so/\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 20:52:52 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 45\r\ncf-ray: 9d8c7c83f84ca0f0-OSL\r\naccess-control-allow-origin: https://vidara.so\r\ncache-control: private, max-age=300, immutable, stale-if-error=300, stale-while-revalidate=300\r\netag: 5b41cb22f84f645a103acc7bfbf084ff\r\nexpires: Sat, 07 Mar 2026 20:52:52 GMT\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":19,"dns":20,"connect":1,"send":0,"wait":45,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4fpvo6krw5e6.l4.adsco.re/","fqdn":"4fpvo6krw5e6.l4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"185.200.118.62","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:52.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.l4.adsco.re","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 11 Jan 2026 09:14:23 GMT","end":"Sat, 11 Apr 2026 09:14:22 GMT"},"fingerprint":{"sha1":"34:5D:84:A1:5F:1B:C5:12:21:55:3B:2E:C6:65:F1:8D:ED:0F:6F:F6","sha256":"7A:0A:EF:86:3A:EA:94:43:8D:79:11:4B:B3:A5:EA:98:BF:65:C9:8D:EE:4E:AF:78:AE:4A:78:20:A1:80:FE:25"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: 4fpvo6krw5e6.l4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 07 Mar 2026 20:52:52 GMT\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":118,"dns":53,"connect":23,"send":0,"wait":25,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.adsco.re/","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.84.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:53.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: c.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 20:52:53 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: max-age=172800, immutable, stale-if-error=86400, stale-while-revalidate=86400, must-revalidate\r\nexpires: Mon, 09 Mar 2026 20:33:41 GMT\r\nlink: \u003chttps://adsco.re/\u003e;rel=preconnect;crossorigin,\u003chttps://4.adsco.re/\u003e;rel=preload;as=fetch;crossorigin;fetchpriority=high,\u003chttps://6.adsco.re/\u003e;rel=preload;as=fetch;crossorigin;fetchpriority=high,\u003chttps://4.adsco.re:2087/\u003e;rel=preload;as=fetch;crossorigin;fetchpriority=high,\u003chttps://6.adsco.re:2087/\u003e;rel=preload;as=fetch;crossorigin;fetchpriority=high\r\ntiming-allow-origin: *\r\netag: W/\"1161c5e1032526d6f1d7d76ebcf3bedc\"\r\nlast-modified: Sat, 07 Mar 2026 18:38:48 GMT\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nage: 0\r\nserver: cloudflare\r\ncf-ray: 9d8c7c88f9d9b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88223,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (659)","md5":"1161c5e1032526d6f1d7d76ebcf3bedc","sha1":"55eabbacac8d885f20eb0044356a0b1c4d7fa587","sha256":"be6bed04c6804e4a9b4a16b122289540c379c3f9a31cd79d11875d8a3044d5e5","sha512":"5a1b68c04d71b683c5f1cc9564439224a98c245c59ec025c366bacc9ba39a0c8c5bd1297fad014369342bd2d9fe905c1fddf3408eeeb4d8731f0ae2edbadbf67","ssdeep":"1536:zkblU+Wo++diB42UkFuYOumG2qOd4hc2AuGenzrJf9JNyrTgTkt9a4W:4CCv2UkF4G2qs4hc2AuGenzrJrMY","tlshash":"d1836cba7272703e02b220fe167f620671794f606c9684a15336d5e43c71e9b837bf99","first_seen":"2026-03-07T19:09:31.090782Z","last_seen":"2026-03-07T20:53:28.497566Z","times_seen":5,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nereserv.com/in/dip?event_id=4ad33f4b-b143-4061-b192-01cd333c8d83\u0026subid=1803414655\u0026spot_id=2009161\u0026created_at=2026-03-07\u0026timezone=0\u0026ver=1.172.4","fqdn":"nereserv.com","domain":"nereserv.com","tld":"com"},"ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:54.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 02:01:43 GMT","end":"Sun, 24 May 2026 02:01:42 GMT"},"fingerprint":{"sha1":"5A:69:12:00:47:60:61:04:6A:B6:3A:EA:C9:F3:9A:C9:67:83:61:91","sha256":"DD:DF:84:09:0C:5F:8C:36:B4:6D:81:49:72:9E:9C:CF:95:7F:D2:13:5D:58:B8:1B:58:5D:15:AA:4A:6B:6A:EE"}}},"request":{"raw":"GET /in/dip?event_id=4ad33f4b-b143-4061-b192-01cd333c8d83\u0026subid=1803414655\u0026spot_id=2009161\u0026created_at=2026-03-07\u0026timezone=0\u0026ver=1.172.4 HTTP/1.1\r\nHost: nereserv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Sat, 07 Mar 2026 20:52:54 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"displayvertising.com/owunhddkqecabh?SLGOMngH=BQOCAAAAAAAACZUAAm_uU1fMAIlUyd1bBfd1wOZDz1HcrnfDyVgeMUw_tm8bbwbimV6TyCVuIuBz-DjFXlwYvgSboT2JmMO8Lef1AOPD2V5sNr0sfniLDZiQDj7x4WLd7TK8lpPaZtNAh_tbwIKwYIPt4in9ACXXt3ZSwZsK932dXVqY6unRhd0p4JmkztIvIACh5RR6rarlXJNEMo3glE3h4s6ehYqwmu-4QluahrBA25SuPojopDMlrX5i5OmDu5cCyDdok7lz3HsbJBKnwL61YvH1ywr9gW96eEewoJCEmNht7vPJUXiqqKHmsWeHjoY_UGh298K1P4zZFKjqbsIGqH1DGcB_zZneBXnmzva0O3vjPoV4MowJ8kyhYftGJyu0tRyYke8RWpmQHEdHVxmtjn2zipnpS7CEXy_2QzCQcd7-AaKsAyqIcpUvho8y04BsYQWSAWhiO9D4mfBrXejYEZ5a_RbQQFwEUOXK5qURy24UKPYfk0inrnRkkF-eW5a5hZs0yjhfqQ2wMicsvb7k6xTSxKyPBK4XT4dk78s0Xk_5fURLqQC8mMZiQTnFOAIvAryWS7H3C1PWesRAn1mv2AvYU5U3w50ZC71Ksm8nFXF0RbHplYgkN4rK1AOoR--fL0xQA0LLryU5_kteQke3Ug8F1_4BUfR6smXWluZ367sEGiI19ogbNxYJf-UWnb6s9987irKPQPaiWOO92WmdDsUQd6mKDyoUPdQnRh76wPp3OccH5WHeMzWAP8D7hVGTVwRJcf3jxRct_hcLjgwOdaQXv6k9g96EcNoybSvehowsITHWq300pFpZu45GCem42AMM77BizMALlnfYHB5Xnx8aCYqB739eMqdtPlj6uExm-io6ZJbA8NddAglo4avGjsZkj54Dgd9JZn_4Hsls6WLrS-ANTzFb8yS-vem3_B6Ws_k9EH03WO-PvcoPOQPOqnCw8p3pG9Cx9iugPIXx-B3CS6UWLGB5G6VUhVxH2LIMuxI5wMJWc7I00vb1xkAXX4_N_oeOKwGr_y0zBYvLMZ7mC24b6LNGo7H52F7KjeweLstfihVgraGoSvVgJ6Yn-9bCQx43K-8dFD2Yz8RMxkQuv_xKf6pOPHCBh27BjGfCdGGXPjwRblm9LAUgeUO7QrH-BmtreS0HxLga-1Vlac4iitL2UI1dQV9J3hVujeiYRIIFCq9QWnMw\u0026MJHtlFyb=4\u0026iWTPrLxS=5270867\u0026kjmCofHD=\u0026IclOZwas=0,0\u0026ohBMgxKF=\u0026mjgqAeEF=https%3A%2F%2Fvidara.so%2Fv%2FEgsKrsytgYHFX\u0026JBjSucel=1280,1024,1,1280,1024,1","fqdn":"displayvertising.com","domain":"displayvertising.com","tld":"com"},"ip":{"addr":"216.59.56.9","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:55.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"displayvertising.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 04 Apr 2025 00:00:00 GMT","end":"Tue, 05 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BB:A7:E2:24:FF:EC:EC:B7:A1:F9:77:02:9A:AB:B1:8A:AD:9C:95:5F","sha256":"D1:55:30:57:68:7E:A4:DC:AD:2D:9F:A1:1B:7C:6C:B8:5C:58:E6:3B:4D:43:6F:96:32:54:96:A6:27:2D:D5:0A"}}},"request":{"raw":"GET /owunhddkqecabh?SLGOMngH=BQOCAAAAAAAACZUAAm_uU1fMAIlUyd1bBfd1wOZDz1HcrnfDyVgeMUw_tm8bbwbimV6TyCVuIuBz-DjFXlwYvgSboT2JmMO8Lef1AOPD2V5sNr0sfniLDZiQDj7x4WLd7TK8lpPaZtNAh_tbwIKwYIPt4in9ACXXt3ZSwZsK932dXVqY6unRhd0p4JmkztIvIACh5RR6rarlXJNEMo3glE3h4s6ehYqwmu-4QluahrBA25SuPojopDMlrX5i5OmDu5cCyDdok7lz3HsbJBKnwL61YvH1ywr9gW96eEewoJCEmNht7vPJUXiqqKHmsWeHjoY_UGh298K1P4zZFKjqbsIGqH1DGcB_zZneBXnmzva0O3vjPoV4MowJ8kyhYftGJyu0tRyYke8RWpmQHEdHVxmtjn2zipnpS7CEXy_2QzCQcd7-AaKsAyqIcpUvho8y04BsYQWSAWhiO9D4mfBrXejYEZ5a_RbQQFwEUOXK5qURy24UKPYfk0inrnRkkF-eW5a5hZs0yjhfqQ2wMicsvb7k6xTSxKyPBK4XT4dk78s0Xk_5fURLqQC8mMZiQTnFOAIvAryWS7H3C1PWesRAn1mv2AvYU5U3w50ZC71Ksm8nFXF0RbHplYgkN4rK1AOoR--fL0xQA0LLryU5_kteQke3Ug8F1_4BUfR6smXWluZ367sEGiI19ogbNxYJf-UWnb6s9987irKPQPaiWOO92WmdDsUQd6mKDyoUPdQnRh76wPp3OccH5WHeMzWAP8D7hVGTVwRJcf3jxRct_hcLjgwOdaQXv6k9g96EcNoybSvehowsITHWq300pFpZu45GCem42AMM77BizMALlnfYHB5Xnx8aCYqB739eMqdtPlj6uExm-io6ZJbA8NddAglo4avGjsZkj54Dgd9JZn_4Hsls6WLrS-ANTzFb8yS-vem3_B6Ws_k9EH03WO-PvcoPOQPOqnCw8p3pG9Cx9iugPIXx-B3CS6UWLGB5G6VUhVxH2LIMuxI5wMJWc7I00vb1xkAXX4_N_oeOKwGr_y0zBYvLMZ7mC24b6LNGo7H52F7KjeweLstfihVgraGoSvVgJ6Yn-9bCQx43K-8dFD2Yz8RMxkQuv_xKf6pOPHCBh27BjGfCdGGXPjwRblm9LAUgeUO7QrH-BmtreS0HxLga-1Vlac4iitL2UI1dQV9J3hVujeiYRIIFCq9QWnMw\u0026MJHtlFyb=4\u0026iWTPrLxS=5270867\u0026kjmCofHD=\u0026IclOZwas=0,0\u0026ohBMgxKF=\u0026mjgqAeEF=https%3A%2F%2Fvidara.so%2Fv%2FEgsKrsytgYHFX\u0026JBjSucel=1280,1024,1,1280,1024,1 HTTP/1.1\r\nHost: displayvertising.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\npopads-node: wb4\r\naccess-control-allow-origin: *\r\nasf: 9\r\npopads-ec: ASB\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 44\r\ndate: Sat, 07 Mar 2026 20:52:55 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"d5f0a25e4d3522d56d48ce7bc3e518fb","sha1":"86794caff58f7fee6e684c2ba7195f970a8d6f4c","sha256":"9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5","sha512":"a3a81801f516a4eb11f00d6f56dab0ed4b8a79219e6b4f5436993479f09dae08f14cffbab3327ff66fb39201d8eba1153ae7114f7705a01cc6f0edf840ef1616","ssdeep":"","tlshash":"789002801814116115d1500b8d5159d01259b1a4540801324446ca502dc7883a415774","first_seen":"2023-03-07T01:17:45Z","last_seen":"2026-04-06T05:40:02.366907Z","times_seen":22886,"resource_available":true,"data":null}},"time_used":730,"timings":{"blocked":304,"dns":1,"connect":97,"send":0,"wait":115,"receive":0,"ssl":209},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"displayvertising.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/v/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-07T20:52:50.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidara.so","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 11:08:37 GMT","end":"Tue, 05 May 2026 12:07:22 GMT"},"fingerprint":{"sha1":"A6:7B:1F:15:8E:93:40:C2:D5:ED:5D:0E:F1:41:D9:F4:BC:D1:C7:F0","sha256":"0F:4A:DE:A1:CD:61:73:8E:21:8A:AD:69:22:87:25:83:3A:5C:44:F1:33:DB:B1:48:E3:94:87:BA:16:59:80:31"}}},"request":{"raw":"GET /v/EgsKrsytgYHFX HTTP/1.1\r\nHost: vidara.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 20:52:50 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VwfB5Bt8NPaQPsv4uXrzG2H19iWm%2B21%2FFDLCz1naseQFpRwET8Pi4ilEkPXiTIm16OxhfxHnuBzTf55UkB%2B%2BvLZt8huKyBCM3A%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d8c7c78fcabc8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap:5.3.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17961,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (452)","md5":"e9f3b460e8cf91171fce7bdc799a1816","sha1":"af26e5d7efd32b334b94c54fa900236eadd2ddb2","sha256":"9e6176e34fadcdffd93f6ddacc55991c3def930332075bd769996bc531990184","sha512":"17778e0f0fa1243491a82fce5f046a7a17a6ad637e41a5b11397ff7581831169feff5656d3abc87556675fcc246fd168ec235290cd223afe862656991ceada51","ssdeep":"192:2Ub0nXjQneOyaAci5F6477xlT+xQqFjxNCxrUXwh4vKvsDAvAM:2Ub0OjIp3647nT/qF3ZkaKvs8YM","tlshash":"0e82c7b035f8086a09d792d87625bf03eb8af003dc46a688f9bc93d05fd6d91dda7158","first_seen":"2026-03-07T20:53:28.498722Z","last_seen":"2026-03-07T20:53:28.498722Z","times_seen":1,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":39,"dns":8,"connect":8,"send":0,"wait":118,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/assets/images/favicon/favicon-16x16.png","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vidara.so/v/EgsKrsytgYHFX","date":"2026-03-07T20:52:51.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidara.so","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 11:08:37 GMT","end":"Tue, 05 May 2026 12:07:22 GMT"},"fingerprint":{"sha1":"A6:7B:1F:15:8E:93:40:C2:D5:ED:5D:0E:F1:41:D9:F4:BC:D1:C7:F0","sha256":"0F:4A:DE:A1:CD:61:73:8E:21:8A:AD:69:22:87:25:83:3A:5C:44:F1:33:DB:B1:48:E3:94:87:BA:16:59:80:31"}}},"request":{"raw":"GET /assets/images/favicon/favicon-16x16.png HTTP/1.1\r\nHost: vidara.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/v/EgsKrsytgYHFX\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Mar 2026 20:52:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 449\r\nlast-modified: Mon, 29 Dec 2025 14:51:40 GMT\r\netag: \"6952957c-1c1\"\r\nexpires: Fri, 20 Mar 2026 20:41:29 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 1469482\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c%2BH372q3sKn2uiJh%2BgFS%2BUOmwBPxUk2M7Heewo1G1cf7bwosPfcI%2BIssJjvjbuXP2Ldj2YMT1jCVg57400ltUXxcEP70GhCpPQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9d8c7c7d9d41481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":449,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"08388bea222f52d9b1eba26bcee17532","sha1":"dbb7ce0780d0a19fc6e3c98b5c46fe42f0bce2d3","sha256":"bdebaa6bba84a4c4f3092b5b65c03da387ce6f77eda4abfb7bb5bd76c0885f21","sha512":"ddc9770eb7b357b2bf0ce340fafaa26b53876eee9c4a362a635cc040bd180a99a34ca58228517f0df9d9ffc3b232e8198aa3b010fda2b54821e25ed260a633fd","ssdeep":"","tlshash":"53f0dcca79511c35d9a020b2a10ba910ec23005554bc29bcd302b2f52d8dbc548b8540","first_seen":"2026-01-21T08:59:35.584725Z","last_seen":"2026-04-05T11:28:19.172589Z","times_seen":88,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.adsco.re/","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.84.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:52.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: c.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 20:52:52 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: max-age=172800, immutable, stale-if-error=86400, stale-while-revalidate=86400, must-revalidate\r\nexpires: Mon, 09 Mar 2026 20:33:41 GMT\r\nlink: \u003chttps://adsco.re/\u003e;rel=preconnect;crossorigin,\u003chttps://4.adsco.re/\u003e;rel=preload;as=fetch;crossorigin;fetchpriority=high,\u003chttps://6.adsco.re/\u003e;rel=preload;as=fetch;crossorigin;fetchpriority=high,\u003chttps://4.adsco.re:2087/\u003e;rel=preload;as=fetch;crossorigin;fetchpriority=high,\u003chttps://6.adsco.re:2087/\u003e;rel=preload;as=fetch;crossorigin;fetchpriority=high\r\ntiming-allow-origin: *\r\netag: W/\"1161c5e1032526d6f1d7d76ebcf3bedc\"\r\nlast-modified: Sat, 07 Mar 2026 18:38:48 GMT\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nage: 0\r\nserver: cloudflare\r\ncf-ray: 9d8c7c830f6d3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88223,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (659)","md5":"1161c5e1032526d6f1d7d76ebcf3bedc","sha1":"55eabbacac8d885f20eb0044356a0b1c4d7fa587","sha256":"be6bed04c6804e4a9b4a16b122289540c379c3f9a31cd79d11875d8a3044d5e5","sha512":"5a1b68c04d71b683c5f1cc9564439224a98c245c59ec025c366bacc9ba39a0c8c5bd1297fad014369342bd2d9fe905c1fddf3408eeeb4d8731f0ae2edbadbf67","ssdeep":"1536:zkblU+Wo++diB42UkFuYOumG2qOd4hc2AuGenzrJf9JNyrTgTkt9a4W:4CCv2UkF4G2qs4hc2AuGenzrJrMY","tlshash":"d1836cba7272703e02b220fe167f620671794f606c9684a15336d5e43c71e9b837bf99","first_seen":"2026-03-07T19:09:31.090782Z","last_seen":"2026-03-07T20:53:28.497566Z","times_seen":5,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":29,"dns":22,"connect":1,"send":0,"wait":19,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fleraprt.com/async_log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=b38dac99-d32f-4f9a-8516-b53215c73d56","fqdn":"fleraprt.com","domain":"fleraprt.com","tld":"com"},"ip":{"addr":"139.45.195.252","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:55.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fleraprt.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 11 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EB:E7:45:0B:C5:08:D8:7F:87:47:B3:6F:7B:0C:95:B3:ED:B5:92:AC","sha256":"37:B2:1A:19:FC:C4:69:69:2F:A0:6E:DA:D4:97:23:4A:C3:A5:FC:C4:C2:EE:FE:8C:AA:FD:3A:C0:4B:AD:40:B2"}}},"request":{"raw":"POST /async_log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=b38dac99-d32f-4f9a-8516-b53215c73d56 HTTP/1.1\r\nHost: fleraprt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 452\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":452,"data":"L\u001b[_\u001e\u0000\u001c\u0006*\u000b^\u001b\u0018T\u0004HT[^\u0016\f\fC\u001b\tMX\r\n7\u0017\u0003LKC\tMH\r\u0003\u0013F\t\u0004Y^\u0011\fJH[\u000b\u001d\u0003J\u000e\u0010W\u00065\u001a\u0002\u001fQLW\u0007\u0015\u0011R\u0013\u0017\u001a\u0000\u0014\u0010_\u0000\u0017^\u003e\u001e\u0007\u0006\u0017\u0016T]\u001b\u001b_S\f\u0001\u0015JOREE[Z\r\u0003\u000b\u0005\u0006k\u0007\t\u0015\u0003\u0011\u0007\u001e\u0006@YC[^D@\t\u0007^C_\u0010\u0006\n@U\f\u0002\u0001W\u0006\u001a\\B\u0003Y\u000bH\u0000\u0002[\bI^\u0016\u000f\u000bQP__\u001b\u0010\u001c7\u001c\u0006\u001aS[\u001bMH\u001a\u0019\u0013R\b\u0004Tf@Y\u000f\u0016\u001a\r*\u000b\\KC\u001bPZ[\\@\u0004X_\u0015\u0015\u0011W\u001e\u0012\u001c\u001a\u0001\u000bK\f\u000bf\b\u000eLQP\u0016BOTX^F\u001b\r\u001e\u0006*\u000b\\KC\u001bCFL\b\u0007G\u001a\u0002ZfZR%U[RW\u0012M\u001a\u0011R\b\u0004LGPW\u001b\u001eCV^i\u0013\u0000\u0026ZWX\u001aKU\u001b\u0002\u0006\u0007\b\u0019k\u0007\t\u0015\u0003\u0011X\u000b\u0014\u001fXLOM\n\u0011V\u0011R[\r\u0017LLA\u0015Z\\E\u000eFCJWN\u001a\u0004\u001cM\t\u0005\nIH\u0016\r\fTQV\u001b\u0010\u0017T\u001c\u0014\u0005\u001aE[K\u003e\u001f\u0007\u000fP\u000eL\u000f\u0004\u0001WW\u0019]@E\u0011Q\n\u000fT\r\u0007S\u000fFJ\u0001_[\u001a[\u0006\u0005HUL\u000bBQ\\\\O\u001bMH\u0001\n-]\nO\r\u001b\u0003\u000eJV\u001fZFZZ^@\u000eU\b]S\u0014V\\Z\u000f]\u0001UL\u0000K[L[\u000fQ[\u0015C\u000b\n\u000f\u001b@\u0007\u0002YX_i\u0013\u0000\nJO9e\u0014"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.25.5\r\nDate: Sat, 07 Mar 2026 20:52:55 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://vidara.so\r\nAccess-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE\r\nAccess-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":461,"timings":{"blocked":223,"dns":4,"connect":63,"send":0,"wait":28,"receive":0,"ssl":138},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.21.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:57.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Roboto:wght@100;300;400;500;700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 07 Mar 2026 20:52:57 GMT\r\ndate: Sat, 07 Mar 2026 20:52:57 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26935,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"0884e8d931818487176e13036ed24c91","sha1":"41cdee85bfbf1ec21d37a75ba943b02f6a006052","sha256":"1569faead504fad87314df59b1c41e8005925e8dd8be6a8e1600b43252f245ab","sha512":"5c2eed246d34b868dba07eac69f94967d132496913ec3a32ca3db10b545cee7d78eecb435ec3612e51747a9a45998d2d456dc0d37df9c862ab4b8d71de9e808c","ssdeep":"768:DFZFCFHFHFY4FRLFuFWFMFsbbYSRv4wFMl22YfRiJhan6BBYERNeWwhQHHYORjUF:9HIHTj","tlshash":"99c20da10417440097834ce223cebf35fe1f92507142d0b5abfd9b6baddbca652693ad","first_seen":"2026-02-19T23:47:10.293756Z","last_seen":"2026-04-06T06:34:37.112326Z","times_seen":495,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/assets/css/bootstrap.css","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vidara.so/v/EgsKrsytgYHFX","date":"2026-03-07T20:52:51.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidara.so","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 11:08:37 GMT","end":"Tue, 05 May 2026 12:07:22 GMT"},"fingerprint":{"sha1":"A6:7B:1F:15:8E:93:40:C2:D5:ED:5D:0E:F1:41:D9:F4:BC:D1:C7:F0","sha256":"0F:4A:DE:A1:CD:61:73:8E:21:8A:AD:69:22:87:25:83:3A:5C:44:F1:33:DB:B1:48:E3:94:87:BA:16:59:80:31"}}},"request":{"raw":"GET /assets/css/bootstrap.css HTTP/1.1\r\nHost: vidara.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/v/EgsKrsytgYHFX\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Mar 2026 20:52:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 06 Jan 2026 19:18:32 GMT\r\nvary: Accept-Encoding\r\netag: \"695d6008-52675\"\r\nexpires: Sat, 07 Mar 2026 21:20:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 41561\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L8xRq6xAOZDFriVuFtTHhDrGM6Q0oQb1pnln%2BsldOuSXmq3TNSCut7RvgoEhy%2BLblzyw%2FlnvbZcUiDcqPkreHWn2MjC92s4%2F%2BA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8c7c7afcc2481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":337525,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"722e4c02b32a501e6348d6b11766a33b","sha1":"788d80df85796d221296fa4977d94a970bb65965","sha256":"64b95504c938ba31c8b11cc44b9c972640e653c057c2ecdb5b3dce8f0696db9c","sha512":"20b4e36618a294bbc633f6750288203e528ed9a74d95b3a034cfacda89a7187ade7c849a16cde06a40f24c3511496cf624908d5dc44313df08237aa654718526","ssdeep":"1536:q6+vdfs48tm5ZgpaUwOGQCOr2V23uo1IjNbPZO:qx8d3uo1IjNbPZO","tlshash":"2b746629fde12528386b455867cbbff97b7c9087ca09ddb578cf22208f463d158929c8","first_seen":"2026-01-21T08:59:35.604943Z","last_seen":"2026-04-05T11:28:19.176195Z","times_seen":88,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4.adsco.re:2087/","fqdn":"4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":2087,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:52.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 4.adsco.re:2087\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vidara.so/\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 07 Mar 2026 20:52:52 GMT\r\nContent-Type: text/plain\r\nContent-Length: 62\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://vidara.so\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET, HEAD, OPTIONS, POST\r\nAccess-Control-Allow-Headers: Host, User-Agent, Accept, Accept-Language, Accept-Encoding, Referer, Origin, DNT, Connection, Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site, Pragma, Cache-Control\r\nCache-Control: private, max-age=300, immutable, stale-if-error=300, stale-while-revalidate=300\r\nExpires: Sat, 07 Mar 2026 20:57:52 GMT\r\nETag: \"5b41cb22f84f645a103acc7bfbf084ff\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":73,"dns":1,"connect":31,"send":0,"wait":32,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.36.2/provider.hlsjs.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.2.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:53.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.36.2/provider.hlsjs.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, immutable\r\nlast-modified: Thu, 12 Sep 2024 17:52:00 GMT\r\netag: \"283d59c375ad57728e89bd2fd1b6af1d\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 07 Mar 2026 20:52:53 GMT\r\nage: 2723229\r\nx-served-by: cache-lga21989-LGA, cache-hel1410026-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 22, 3602\r\nx-timer: S1772916773.414508,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 128674\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":461432,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65143)","md5":"283d59c375ad57728e89bd2fd1b6af1d","sha1":"1ae8e4b8bf7141cecc15442f9d83dc10a066fcdb","sha256":"423fb0c266f4a755fb3e2d9093f92b92a7e9bfe4c0c4a900b4342c5b9f6ea0cb","sha512":"fe8272ea849648c625e7810dd76a9ffec8d9877cf63f0c9a2bb18ba7feec6c97f559bbbfe51324a68039ca3b1bd06802124af02e833ced161128555d17434486","ssdeep":"6144:h49gZtOST1zXBUkGHZu08Q9Eu969j3/nqJxgEMmew9rrqIZk6:Gy1VGHZu0pU9TqJxgEXZF","tlshash":"2ea43bdd77a5a02642c2a1a5903f4607633b7d0a740dc1acfa2be9d75db8849b03bf74","first_seen":"2024-09-18T21:59:43Z","last_seen":"2026-04-05T19:01:43.386314Z","times_seen":594,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fedoq.com/500/10572062?excludes=\u0026oaid=0802f238b7974b38fb278d2c6d239978\u0026tgp=\u0026of=true\u0026sw_version=v1.796.0-s\u0026dmn=dd133.com\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=837\u0026wiw=837\u0026wih=471\u0026wfc=1\u0026pl=https%3A%2F%2Fvidara.so%2Fe%2FEgsKrsytgYHFX\u0026drf=https%3A%2F%2Fvidara.so%2Fv%2FEgsKrsytgYHFX\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=1\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1","fqdn":"fedoq.com","domain":"fedoq.com","tld":"com"},"ip":{"addr":"139.45.197.116","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:54.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fedoq.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Dec 2025 05:17:35 GMT","end":"Fri, 27 Mar 2026 05:17:34 GMT"},"fingerprint":{"sha1":"E7:2E:F6:2B:68:23:78:D9:1C:D1:5A:3D:D6:94:68:EF:FA:F7:FB:7C","sha256":"36:9D:A2:7D:77:45:6A:F3:90:EB:CD:3D:D2:2B:B7:6D:5B:03:B8:E3:DC:58:30:79:A9:C6:53:08:B7:E4:93:9C"}}},"request":{"raw":"GET /500/10572062?excludes=\u0026oaid=0802f238b7974b38fb278d2c6d239978\u0026tgp=\u0026of=true\u0026sw_version=v1.796.0-s\u0026dmn=dd133.com\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=837\u0026wiw=837\u0026wih=471\u0026wfc=1\u0026pl=https%3A%2F%2Fvidara.so%2Fe%2FEgsKrsytgYHFX\u0026drf=https%3A%2F%2Fvidara.so%2Fv%2FEgsKrsytgYHFX\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=1\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1 HTTP/1.1\r\nHost: fedoq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nCookie: OAID=q3mc544327yy034837022g9g7swyu862\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 20:52:54 GMT\r\ncontent-type: application/javascript\r\nx-trace-id: e7c8217d7e6796bea7906b20d6b351b6\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-origin: https://vidara.so\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nset-cookie: OAID=0802f238b7974b38fb278d2c6d239978; expires=Sun, 07 Mar 2027 20:52:54 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2028,"size_decoded":0,"mime_type":"application/javascript","magic":"JSON text data","md5":"a1a380c0922f7458b15aa32bb64675ec","sha1":"f9acf10875b95abb4459362980718045accb50f8","sha256":"bb02d513181286ad4a8a2f17e2459bc2f4d2858cfc5333e1b77c4eb53c648f79","sha512":"3946869f45cab00b5aed38b12685acf1bf2d3a7abea3f7a12d841869efada3877736b3fc9049047182da187ca445a90c3db64f8415e3364738681119229e5c16","ssdeep":"","tlshash":"3741287b4b4c2826a39c0b2875becc2bda43c156ac842dec5183ea9806cfe11954643e","first_seen":"2026-03-07T20:53:28.502052Z","last_seen":"2026-03-07T20:53:28.502052Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026dsh=S-231621976%3A1772916774381819\u0026hl=en\u0026ifkv=ASfE1-rqvnWStNVNZCOB2RW_gFhgxHYN_Up682VgQ7ghk0x_Wd1Z8eM9G0KlLQUYgg7Zi28gGS5R\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"64.233.161.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:55.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:42 GMT","end":"Mon, 27 Apr 2026 08:36:41 GMT"},"fingerprint":{"sha1":"F8:87:8B:2D:BD:F4:2F:EE:BB:C6:15:82:A2:65:BF:88:BA:75:EE:FB","sha256":"37:0D:FC:5C:8F:A5:2D:FC:55:69:BB:50:87:EC:B3:5F:62:0E:E5:90:5D:6D:23:E5:27:2D:EC:1D:D2:1C:7A:F0"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026dsh=S-231621976%3A1772916774381819\u0026hl=en\u0026ifkv=ASfE1-rqvnWStNVNZCOB2RW_gFhgxHYN_Up682VgQ7ghk0x_Wd1Z8eM9G0KlLQUYgg7Zi28gGS5R\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 07 Mar 2026 20:52:55 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce---vvuubqIVB5XWuiV7idPg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/ https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.130yI-HTbg8.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4fpvo6krw5e6.s4.adsco.re/","fqdn":"4fpvo6krw5e6.s4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"185.200.116.60","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:52.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.s4.adsco.re","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 11 Jan 2026 09:14:13 GMT","end":"Sat, 11 Apr 2026 09:14:12 GMT"},"fingerprint":{"sha1":"51:E7:23:97:3D:3C:52:F3:98:F3:6E:C5:5A:36:64:9B:FC:CE:8D:51","sha256":"FC:40:34:00:63:A4:87:1E:29:3C:BB:70:4B:A5:28:60:D9:4F:A3:4C:74:DC:D1:AF:7D:B2:CE:B4:4C:D6:DF:5B"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: 4fpvo6krw5e6.s4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 07 Mar 2026 20:52:53 GMT\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":1057,"timings":{"blocked":-1,"dns":323,"connect":181,"send":0,"wait":182,"receive":1,"ssl":369},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.36.2/jwplayer.core.controls.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.2.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:53.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.36.2/jwplayer.core.controls.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, immutable\r\nlast-modified: Thu, 12 Sep 2024 17:51:58 GMT\r\netag: \"96388c8374190b02b1c684940b0c267c\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 07 Mar 2026 20:52:53 GMT\r\nage: 2814072\r\nx-served-by: cache-lga21985-LGA, cache-hel1410026-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 22, 3550\r\nx-timer: S1772916773.413319,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 80695\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":329500,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65143)","md5":"96388c8374190b02b1c684940b0c267c","sha1":"c49462b6c0755a6be517da89213c6815a72658cb","sha256":"efd4bdf5c117754802f889555f4396867101f917ce259303d8171371e2903589","sha512":"6ab3adef3c69468d2645c352d6a902d9e6e409b1e88fa5c126b7928a546acd7f3f8ef29cf04ff017db5f1e24ad70a442484d7c5bfceb9b789a34bd0daae65c20","ssdeep":"3072:V+Y7nFuhslX/173uYqqIeGSJhoFjBkW64pOknUGp9W11Uy86C4YfrmYRJ:sYxAU/1732yGSJho9OaUG3xyl+frmYRJ","tlshash":"ee641932214252359aea82da66514604b3398085f516cfacff3ceddd4c6e9c731fabb4","first_seen":"2024-09-18T21:59:43Z","last_seen":"2026-04-05T19:01:43.396363Z","times_seen":596,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vidara.so/v/EgsKrsytgYHFX","date":"2026-03-07T20:52:51.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 00:25:48 GMT\r\nexpires: Fri, 05 Mar 2027 00:25:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 246423\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-06T08:10:10.3906Z","times_seen":134620,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":117,"dns":3,"connect":23,"send":0,"wait":8,"receive":5,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.21.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vidara.so/v/EgsKrsytgYHFX","date":"2026-03-07T20:52:51.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 07 Mar 2026 20:52:51 GMT\r\ndate: Sat, 07 Mar 2026 20:52:51 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7581,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"75d871927f5e58b96f7bf7b5de083ae0","sha1":"ba1c473216e2bfb9613075ac3729a7b976118e04","sha256":"0014d56cd9cf8b2d3da043344ee9c6e4c4ad96ad62cb3d167b838ea5dfbd2ffb","sha512":"748385a376279efccc77e2d9e1126f22d4f9c4329772c63c0f9cf383ec71a00caa6d0caf93536b8a0c836f390cb5e2ebb0b53f9aae74fbf92fbec704298d6445","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8ONEhYO3RrxGx:vXuM1+4","tlshash":"cbf17792002ba400ab971dc223cf7e3aaece10896085d1b95ffd0dc59ceed66436876d","first_seen":"2025-09-10T19:11:46.108203Z","last_seen":"2026-04-06T03:51:39.077955Z","times_seen":2184,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":116,"dns":1,"connect":22,"send":0,"wait":36,"receive":0,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/assets/js/swiper-bundle.min.js","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/v/EgsKrsytgYHFX","date":"2026-03-07T20:52:51.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidara.so","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 11:08:37 GMT","end":"Tue, 05 May 2026 12:07:22 GMT"},"fingerprint":{"sha1":"A6:7B:1F:15:8E:93:40:C2:D5:ED:5D:0E:F1:41:D9:F4:BC:D1:C7:F0","sha256":"0F:4A:DE:A1:CD:61:73:8E:21:8A:AD:69:22:87:25:83:3A:5C:44:F1:33:DB:B1:48:E3:94:87:BA:16:59:80:31"}}},"request":{"raw":"GET /assets/js/swiper-bundle.min.js HTTP/1.1\r\nHost: vidara.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/v/EgsKrsytgYHFX\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Mar 2026 20:52:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 26 Oct 1985 11:15:00 GMT\r\nvary: Accept-Encoding\r\netag: \"1dc0c7b4-25a58\"\r\nexpires: Sun, 08 Mar 2026 00:46:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 29210\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9YdIAopX49Fg7g7uvkhF5HA2p%2BskJF4%2BN58KnQvI%2BzOJ1%2FbyK8KsgpNUHdlUQpF18khD7nBTstCebN7pu%2FYR91YTDNw2nHNgdA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8c7c7afcc5481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":154200,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65279)","md5":"e6d57f85db472dc869a61ab20d102dc1","sha1":"32474efb5d26ae7850dd0d17d90a132fb91b752e","sha256":"559670fbf6038e292bfde151ad31fcc09d706c0ea8ca9cf9bc7941e1eeb55ab1","sha512":"03a872140004eff89263eb7b826474d82bcba79447deebb8e718a7b404db845cd47c7c3265e0c0966dac5206bf7b277f9cc7a523c1d5d040d30893afc2a4bc3b","ssdeep":"3072:iQcYBYNrja+8b7kHGe4G5PqTbWaqGVjj+Anq:iQ7B0ja+8HkHd4G5P8awVjj+Anq","tlshash":"c6e308896120b57646e716cb93e8c25172b54844b40ec5f870bd4caf99bec9803bfef9","first_seen":"2025-10-21T15:36:20.322141Z","last_seen":"2026-04-06T03:09:16.241498Z","times_seen":2324,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/assets/js/new100.js?v=max","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:51.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidara.so","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 11:08:37 GMT","end":"Tue, 05 May 2026 12:07:22 GMT"},"fingerprint":{"sha1":"A6:7B:1F:15:8E:93:40:C2:D5:ED:5D:0E:F1:41:D9:F4:BC:D1:C7:F0","sha256":"0F:4A:DE:A1:CD:61:73:8E:21:8A:AD:69:22:87:25:83:3A:5C:44:F1:33:DB:B1:48:E3:94:87:BA:16:59:80:31"}}},"request":{"raw":"GET /assets/js/new100.js?v=max HTTP/1.1\r\nHost: vidara.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/e/EgsKrsytgYHFX\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Mar 2026 20:52:51 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 21 Jan 2026 01:32:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 08 Mar 2026 05:05:16 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 13654\r\ncf-cache-status: HIT\r\netag: W/\"69702c99-3a0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Co%2F4JjxuCWtXXyb2DkGcbLPvyUBswbYvNRo9duIBW%2F2JAq%2FjQRLs5AvHQY8WEKYQ32bsLpI8Rlp5I88VUUqnPLIPArFW2DIq5A%3D%3D\"}]}\r\ncf-ray: 9d8c7c7e0d61481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":928,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (928), with no line terminators","md5":"9d417c5dbae8a3d933a478e1a0d886a5","sha1":"e3fc7ca463c6e4a759866790911ee6aa23a4b842","sha256":"3718b865d7162567322249682a0c6113ad4ddc91bb48c33285cdc5d491dde1bc","sha512":"dbb728632688f60dbbcc3a8bf2e5ba00d53cc9b1ab3552d605ba500e19c1b944413e4dc0e44f3b9c651ffdb3d62f67a1470727127fb0666f5b0268569e0c85a6","ssdeep":"","tlshash":"b7115c767ce4763031ea094a3427a185f0f20b642d19e574519c0b6a38a8e4d9d37afd","first_seen":"2025-04-02T00:26:38.94272Z","last_seen":"2026-04-05T19:01:43.399409Z","times_seen":531,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mbdippex.com/keywords","fqdn":"mbdippex.com","domain":"mbdippex.com","tld":"com"},"ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:53.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 02:01:43 GMT","end":"Sun, 24 May 2026 02:01:42 GMT"},"fingerprint":{"sha1":"5A:69:12:00:47:60:61:04:6A:B6:3A:EA:C9:F3:9A:C9:67:83:61:91","sha256":"DD:DF:84:09:0C:5F:8C:36:B4:6D:81:49:72:9E:9C:CF:95:7F:D2:13:5D:58:B8:1B:58:5D:15:AA:4A:6B:6A:EE"}}},"request":{"raw":"OPTIONS /keywords HTTP/1.1\r\nHost: mbdippex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://vidara.so/\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.24.0\r\ndate: Sat, 07 Mar 2026 20:52:53 GMT\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":108,"dns":16,"connect":35,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:51.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 20:52:51 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27433\r\ncf-ray: 9d8c7c7e1d82120a-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec4-1538f\"\r\nlast-modified: Mon, 04 May 2020 16:11:48 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 704242\r\nexpires: Thu, 25 Feb 2027 20:52:51 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ekpkSJdvNnAZ0Pc2OA%2F7j5fIEYq%2FD5QbefLK1zL1fI6pKXZcj2cReB4y0cTAGQGqt7R%2FJyKFOlao5IDjKjAiho9wmU8fVZhpT09uF8siWdJNr8JzIB%2BXhUS0XsxGlmarh6JZPFg6\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86927,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-04-06T08:05:01.58849Z","times_seen":118587,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":32,"dns":1,"connect":1,"send":0,"wait":12,"receive":1,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/api/heartbeat","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:53.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidara.so","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 11:08:37 GMT","end":"Tue, 05 May 2026 12:07:22 GMT"},"fingerprint":{"sha1":"A6:7B:1F:15:8E:93:40:C2:D5:ED:5D:0E:F1:41:D9:F4:BC:D1:C7:F0","sha256":"0F:4A:DE:A1:CD:61:73:8E:21:8A:AD:69:22:87:25:83:3A:5C:44:F1:33:DB:B1:48:E3:94:87:BA:16:59:80:31"}}},"request":{"raw":"POST /api/heartbeat HTTP/1.1\r\nHost: vidara.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vidara.so/e/EgsKrsytgYHFX\r\nContent-Type: application/json\r\nContent-Length: 57\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":57,"data":"{\"file_id\":318846,\"session_id\":\"1772916773264-tthnziun1\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Mar 2026 20:52:53 GMT\r\ncontent-type: application/json\r\ncontent-length: 17\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TCW5WQRMdOznRQLZ0pL2gdoTW7XGAb3TsO%2BD5r6aykPiBaxvLMjJomD0RLfjO1a1DnhpsID5kBSysDUiWTWQWBjPICJhRMm3HQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d8c7c88fec2481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6dec798efb56f56f33660938f6249ff6","sha1":"e889219883cef38754dc1e5df7ca5277b3b314c8","sha256":"b493cdb3b30ea63f6a924f814dfccfcfe305dac02106f9994ce2bcb2e8ed28c4","sha512":"d9e9d568dce3ba5605f1a1fac36441508e7b8d5f99806c6a049f4148c4d9b392bc99f27cb75dfbbd7d84c7c0923f26652c1c1404a7f3279e1d0b96a1cb1cb924","ssdeep":"","tlshash":"b5600003000000a2c000220002b82e202080002280000008800ca0088a20000208300e","first_seen":"2023-04-06T22:01:57Z","last_seen":"2026-04-06T04:47:41.352449Z","times_seen":3266,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/sdkloader/ima3.js","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:53.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /js/sdkloader/ima3.js HTTP/1.1\r\nHost: imasdk.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ndate: Sat, 07 Mar 2026 20:52:53 GMT\r\nexpires: Sat, 07 Mar 2026 20:52:53 GMT\r\ncache-control: private, max-age=900, stale-while-revalidate=3600\r\ncontent-type: text/javascript; charset=UTF-8\r\netag: 13270802667628442569\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: br\r\nserver: cafe\r\ncontent-length: 148020\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":471959,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2969)","md5":"21726837f01c18f217959ee3678b9dd8","sha1":"ccedce098b69f664909a20818751c2da0d155651","sha256":"363655bf13970b9f94900937a7c35fc41abd6d479823181fbade171d5ac0022f","sha512":"c7f23d2c60f13c7f7fee23365921f780592bec40ec8adf023c05bc459ac756a6c8676641351c4b3c8939dfb7b16a0d3993d458d9a5635f3ced6066e3c3d57916","ssdeep":"6144:J1OiUS5XjSO9VRaRkBLGGL9yZP0PX5lyXhQPkc:reeRaRkNJLEZ8/5lqhQPkc","tlshash":"dda4eacdb6a674629363f4b5403f010fb23bb866f408886cb289d9e16e749495277f7c","first_seen":"2026-03-07T07:26:56.192247Z","last_seen":"2026-03-10T18:30:41.029277Z","times_seen":23,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":58,"dns":40,"connect":21,"send":0,"wait":53,"receive":62,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2r90j1fn28.s1q2105.com/hls2/5SvvL9hmO9AF96jmQIR939P7kWZBQH/master.m3u8?token=37f57dece79cd153ba652111b07e4af1-1772945571-91.90.42.154-e195840b785e534f705ebadcf7534678671eaccaa555d55c6c23143e4210b4cb","fqdn":"2r90j1fn28.s1q2105.com","domain":"s1q2105.com","tld":"com"},"ip":{"addr":"50.7.24.26","port":443,"asn":174,"as":"COGENT-174","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:54.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2r90j1fn28.s1q2105.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 14:33:13 GMT","end":"Thu, 16 Apr 2026 14:33:12 GMT"},"fingerprint":{"sha1":"D4:40:F7:DC:F0:EC:71:C6:E2:FD:41:15:3A:6E:4A:94:C4:FC:4C:38","sha256":"B7:6B:08:93:70:34:D1:42:62:C4:6B:1A:EB:A2:F2:9C:6A:93:18:9F:2B:9F:17:12:96:6E:D9:38:8B:5B:DB:7E"}}},"request":{"raw":"GET /hls2/5SvvL9hmO9AF96jmQIR939P7kWZBQH/master.m3u8?token=37f57dece79cd153ba652111b07e4af1-1772945571-91.90.42.154-e195840b785e534f705ebadcf7534678671eaccaa555d55c6c23143e4210b4cb HTTP/1.1\r\nHost: 2r90j1fn28.s1q2105.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 20:52:54 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\ncontent-length: 172\r\nlast-modified: Mon, 02 Mar 2026 13:12:33 GMT\r\netag: \"69a58cc1-ac\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Range\r\naccess-control-expose-headers: Content-Length, Content-Range\r\nx-cache: MISS\r\ncache-control: public, max-age=259200, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":172,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"fd499d66be7cdfe629aa813ffecbcbbf","sha1":"2fa05d3b20235dda8c94075d6d56c6d658d89d8b","sha256":"044af20379eec17318c68703138b241164b858e2e2df7f276780294c329bd317","sha512":"555c240999a19bb3dc0269170805cac08e76f862a07c4b01fb2ea029d9fd65e1a95e7ba87ca8783bc6fa96d1a4c0e1320a41a569f261bcda1686b41afaaeaa12","ssdeep":"","tlshash":"cbc0c000221ff001980854d3620571103c953ced0dd40f1071db380c00c0d2427fd240","first_seen":"2026-03-07T20:53:28.50747Z","last_seen":"2026-03-07T20:53:28.50747Z","times_seen":1,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":104,"dns":21,"connect":15,"send":0,"wait":77,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2r90j1fn28.s1q2105.com/hls2/5SvvL9hmO9AF96jmQIR939P7kWZBQH/seg_640x360_000.ts","fqdn":"2r90j1fn28.s1q2105.com","domain":"s1q2105.com","tld":"com"},"ip":{"addr":"50.7.24.26","port":443,"asn":174,"as":"COGENT-174","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:54.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2r90j1fn28.s1q2105.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 14:33:13 GMT","end":"Thu, 16 Apr 2026 14:33:12 GMT"},"fingerprint":{"sha1":"D4:40:F7:DC:F0:EC:71:C6:E2:FD:41:15:3A:6E:4A:94:C4:FC:4C:38","sha256":"B7:6B:08:93:70:34:D1:42:62:C4:6B:1A:EB:A2:F2:9C:6A:93:18:9F:2B:9F:17:12:96:6E:D9:38:8B:5B:DB:7E"}}},"request":{"raw":"GET /hls2/5SvvL9hmO9AF96jmQIR939P7kWZBQH/seg_640x360_000.ts HTTP/1.1\r\nHost: 2r90j1fn28.s1q2105.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 20:52:54 GMT\r\ncontent-type: video/mp2t\r\ncontent-length: 1201320\r\nlast-modified: Mon, 02 Mar 2026 13:12:32 GMT\r\netag: \"69a58cc0-1254a8\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Range\r\naccess-control-expose-headers: Content-Length, Content-Range\r\nx-cache: HIT\r\ncache-control: public, max-age=259200, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1201320,"size_decoded":0,"mime_type":"video/mp2t","magic":"data","md5":"1c8ddff775e2e28c9aae17c78001df55","sha1":"69836ff9e731fe19fafa4bd632a46d62def1b58c","sha256":"7dc546c5a99651a5208a3bdb26dd51c09dc8e759d8b3e4d94b35032e4034e24d","sha512":"25f738a5f10008be305bc47275f49055faaa50f8b228bb63e7d99c0b87e08aeb393e7a38931d796709ddeb80c8a43d72069e12fc30874dbd63a12b510e884655","ssdeep":"24576:y2n1J/fR49QB/cZ7HqRGB+CxFeVRXjCWtvWXpOuDx89:y2n1dgas7KrCxFK5JtGOu9I","tlshash":"382523848783cebeca5599f5425ddbf7e6775e085e886f872206b708d8f86d0d820d38","first_seen":"2026-03-07T20:53:28.508493Z","last_seen":"2026-03-07T20:53:28.508493Z","times_seen":1,"resource_available":false,"data":null}},"time_used":994,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":277,"receive":717,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oyo4d.com/5/10652172/?oo=1\u0026js_build=iclick-v1.1728.1\u0026userId=0802f238b7974b38fb278d2c6d239978\u0026dmn=jnbhi.com\u0026tt=2\u0026ix=1\u0026tspl=958\u0026cslt=56","fqdn":"oyo4d.com","domain":"oyo4d.com","tld":"com"},"ip":{"addr":"139.45.197.118","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:55.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oyo4d.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 05:06:11 GMT","end":"Wed, 08 Apr 2026 05:06:10 GMT"},"fingerprint":{"sha1":"4E:6C:C5:80:71:FC:84:37:EB:DF:22:98:08:56:16:B7:4D:CA:6E:2C","sha256":"1D:EB:9C:AC:8B:48:04:32:58:78:6E:9D:1B:F7:78:8A:EC:DB:1C:1C:48:99:9C:6C:75:23:A2:C8:4E:23:A4:B9"}}},"request":{"raw":"POST /5/10652172/?oo=1\u0026js_build=iclick-v1.1728.1\u0026userId=0802f238b7974b38fb278d2c6d239978\u0026dmn=jnbhi.com\u0026tt=2\u0026ix=1\u0026tspl=958\u0026cslt=56 HTTP/1.1\r\nHost: oyo4d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 3465\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3465,"data":"{\"sync\":\"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\",\"async\":\"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\",\"quality_options\":{\"hil\":1,\"jsp\":1,\"ng\":false,\"ix\":true,\"pt\":false,\"np\":true,\"nw\":true,\"nb\":true,\"sw\":1280,\"sh\":1024,\"pl\":\"https://vidara.so/e/EgsKrsytgYHFX\",\"wy\":0,\"wx\":0,\"ww\":1280,\"wh\":1024,\"cw\":837,\"wiw\":837,\"wih\":471,\"wfc\":4,\"sah\":1024,\"navlng\":\"en-US\",\"drf\":\"https://vidara.so/v/EgsKrsytgYHFX\",\"wgl\":\"llvmpipe\",\"tb\":false,\"btz\":\"UTC\",\"bto\":0,\"pnt\":0,\"pnrc\":0,\"bml\":0,\"bmi\":false,\"vsbl\":true},\"client_hints\":{}}"}},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 20:52:55 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://vidara.so\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\npragma: no-cache, no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":109,"dns":13,"connect":30,"send":0,"wait":33,"receive":1,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bobapsoabauns.com/www/images/636e9eb53eb768ac9505a0636051db29.png","fqdn":"bobapsoabauns.com","domain":"bobapsoabauns.com","tld":"com"},"ip":{"addr":"104.21.73.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:55.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bobapsoabauns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 13:22:50 GMT","end":"Mon, 13 Apr 2026 14:21:33 GMT"},"fingerprint":{"sha1":"B0:D2:ED:80:50:F9:E9:B4:52:02:70:02:C3:93:83:13:28:CE:1D:1D","sha256":"CF:82:D5:83:EF:46:6C:06:FF:D9:6D:1B:F2:90:65:64:23:A4:03:55:4C:2A:CA:58:F1:7F:35:25:E9:9B:ED:C5"}}},"request":{"raw":"GET /www/images/636e9eb53eb768ac9505a0636051db29.png HTTP/1.1\r\nHost: bobapsoabauns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 20:52:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 68432\r\nserver: cloudflare\r\nlast-modified: Sun, 09 Feb 2025 17:41:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67a8e8e3-10b50\"\r\nexpires: Sun, 08 Mar 2026 20:22:29 GMT\r\ncache-control: max-age=86400\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1825\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lskdWGd1fdKAqFN%2FQRRD%2Bhxy2sOC1r%2BWipdjadA8LEW4jf3hppuyoRvVqPhecmOkkpIQrT%2BosBZv7%2BPYo1nrYeoGumHhuYAI%2Fh3UzjB6x8ny\"}]}\r\ncf-ray: 9d8c7c953a111f50-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68432,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"636e9eb53eb768ac9505a0636051db29","sha1":"a61d4595b4792d7e36d15bb37aade4bd6485b2a1","sha256":"ac596fa18cba106b1860d173208f91fb80c7735faadc16dfb517c6d5b658dda6","sha512":"d329bc4b0106ed46a27e8f8a5c6512f2928e7e3cf789cae0e8da244b2b7728319f282b2508d624d7d70a45fc0543cc9ff4a09e9890e549586119cdb3f924ed3e","ssdeep":"1536:a3vCXL85hpgD2VuM79j6u2cfx4FD9lrbucC/t:s6+gD2V779OuJUzacC/t","tlshash":"cb630254a3460b9e830ab42ec1845e1bf750eb9f50b4fd6d191661ac07bfe3bcc19a93","first_seen":"2024-09-12T00:47:20Z","last_seen":"2026-04-03T18:32:51.670811Z","times_seen":380,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":70,"dns":21,"connect":8,"send":0,"wait":38,"receive":8,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/assets/js/app.js","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/v/EgsKrsytgYHFX","date":"2026-03-07T20:52:51.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidara.so","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 11:08:37 GMT","end":"Tue, 05 May 2026 12:07:22 GMT"},"fingerprint":{"sha1":"A6:7B:1F:15:8E:93:40:C2:D5:ED:5D:0E:F1:41:D9:F4:BC:D1:C7:F0","sha256":"0F:4A:DE:A1:CD:61:73:8E:21:8A:AD:69:22:87:25:83:3A:5C:44:F1:33:DB:B1:48:E3:94:87:BA:16:59:80:31"}}},"request":{"raw":"GET /assets/js/app.js HTTP/1.1\r\nHost: vidara.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/v/EgsKrsytgYHFX\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Mar 2026 20:52:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 21 Jan 2026 00:34:43 GMT\r\nvary: Accept-Encoding\r\netag: \"69701f23-8c5\"\r\nexpires: Sun, 08 Mar 2026 04:15:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 16620\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BCWeNRaERL%2Fs9QRwb1wBPCWIoX%2BZ2K3gS5xjjBx9%2FmPW%2FxyQfnZK%2B3pYc8iI1qOQYcEIgxkV1l1Nzh7Jen%2FrCrH4B%2B7kbgNfjQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8c7c7afcc7481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2245,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2245), with no line terminators","md5":"3519c491f3ade96823e36612b602f0b0","sha1":"d182cb07c5f9243c57295c6148096e3270e0819f","sha256":"3091037a92d5a180b90d680582c1f37a3fbebe419b33f69d3c42c6190f5ecf8e","sha512":"49e0e7323be18795a96c8e0d4719838e6190494b2dbca0f50e2a14ce0b6d318a7a1303def3bcbb273906a58155089757238ddd4e335747a88b8e89a76fb383cf","ssdeep":"","tlshash":"6641ac625509083206dbebdb38ade7913af21486f5dbc43004b8c45e59adf8da1f17f5","first_seen":"2026-01-21T08:59:35.575696Z","last_seen":"2026-04-05T11:28:19.184161Z","times_seen":88,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mcpuwpsh.com/get/","fqdn":"mcpuwpsh.com","domain":"mcpuwpsh.com","tld":"com"},"ip":{"addr":"94.130.197.240","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:56.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"popunder-base.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 01:54:44 GMT","end":"Wed, 03 Jun 2026 01:54:43 GMT"},"fingerprint":{"sha1":"A2:B9:5E:9B:8F:4B:CB:BC:9C:5B:83:BE:89:7A:84:8B:D3:84:50:88","sha256":"5B:EB:8B:03:DC:D1:69:63:BA:BB:98:06:94:12:D2:8C:11:E3:23:5A:50:D0:58:89:B3:21:5F:EC:41:7C:8F:33"}}},"request":{"raw":"POST /get/ HTTP/1.1\r\nHost: mcpuwpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vidara.so/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1809\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1809,"data":"{\"imp\":[{\"secure\":1,\"ext\":{\"user_keywords\":\"\",\"tag_ab\":\"d\",\"id\":2612,\"spaceid\":2612,\"type\":\"pop\",\"subid\":\"1803414655\",\"utm1\":\"\",\"utm2\":\"\",\"utm4\":\"\",\"spot_id\":2009161,\"labels\":\"11,34,81\",\"blocked_verticals\":\"11,34,81\",\"allowed_labels\":\"\",\"ad_tags\":\"Lolita_serveuse_dans_un_restaurant_du_10eme_arrondissement_de_Paris\",\"refdomain\":\"vidara.so\",\"is_iframe\":true,\"gyr\":0,\"features\":\"\",\"accel\":0,\"ssp\":3758,\"rchange\":false,\"otype\":3,\"stratagem\":\"\",\"v2_track\":0,\"cla\":0,\"v2\":0,\"mn\":1,\"timezone_olson\":\"UTC\",\"event_id\":\"4ad33f4b-b143-4061-b192-01cd333c8d83\",\"testab\":0,\"approved_mainstream\":0,\"ver\":\"1.172.4\"},\"pext\":{\"ab\":0},\"metrics\":{\"sp_scr\":0,\"intes\":[],\"high_fr_clicks\":false,\"dev_cons_act\":false,\"scroll_percent\":0,\"empty_clicks\":0,\"prev_step_diff\":1927,\"act_su\":1,\"izb\":\"0\"}}],\"site\":{\"id\":\"2009161\",\"cat\":[\"IAB25\"],\"page\":\"https%3A//vidara.so/e/EgsKrsytgYHFX\"},\"device\":{\"w\":1280,\"h\":1024},\"user\":{\"id\":\"59af962887f337d7299b142fa6337684\",\"fp\":null,\"fp_str\":\"\",\"ua_data\":null,\"interest_ids\":[],\"is_webview\":false,\"is_inapp\":false,\"social_network\":\"\",\"device_specs\":{\"brand\":\"\",\"gpu_brand\":\"\",\"gpu_version\":\"\",\"os_name\":\"Windows\",\"cpu_cores\":48,\"device_memory\":0,\"width\":1024,\"height\":1280}},\"fp_params\":{\"plugins\":[\"PDF Viewer\",\"Chrome PDF Viewer\",\"Chromium PDF Viewer\",\"Microsoft Edge PDF Viewer\",\"WebKit built-in PDF\"],\"languages\":[\"en-US\",\"en\"],\"fonts\":[\"Bitstream Vera Sans Mono\",\"Century\"],\"fontPreferences\":{\"default\":173.11666870117188,\"apple\":173.11666870117188,\"serif\":173.11666870117188,\"sans\":162.01666259765625,\"mono\":122.68333435058594,\"min\":10.800003051757812,\"system\":162.01666259765625},\"platform\":\"Win32\",\"colorDepth\":24,\"deviceMemory\":0,\"hardwareConcurrency\":48,\"indexedDB\":true,\"sessionStorage\":true,\"localStorage\":true,\"cookiesEnabled\":true,\"colorGamut\":\"srgb\"},\"ext\":{\"dt\":1772916776109}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.16.0\r\ndate: Sat, 07 Mar 2026 20:52:56 GMT\r\ncontent-type: application/json\r\ncontent-length: 1623\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.16.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4739,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f615908455e890e4e294b61876d0f86d","sha1":"7d3f58b630a67e18abe3bbb09131c392bf4bd2b6","sha256":"96ee902f3018768759c9e157b15ed4b9d7633a1a9d7a927ee2290498264e5efc","sha512":"728e3a1576e458369dd761f240bca35da4cbfb613586e8f2d8700f975f5681196fc1adddc19b9edcf9241cc59f605c5d1bdeb983b222f7b4f05a064612bd5315","ssdeep":"96:78ZHreamVV9zQI/6eQE1wYsVZHTamVHQI/6eQE1wYya:yLEEgf6YWfwgf6Y9","tlshash":"c5a11a81aca7ef3108d6940ee104e2b637c4a733cbda9e5ed8758527dc543b652ec90c","first_seen":"2026-03-07T20:53:28.510852Z","last_seen":"2026-03-07T20:53:28.510852Z","times_seen":1,"resource_available":false,"data":null}},"time_used":496,"timings":{"blocked":125,"dns":14,"connect":35,"send":0,"wait":244,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bobapsoabauns.com/www/images/636e9eb53eb768ac9505a0636051db29.png","fqdn":"bobapsoabauns.com","domain":"bobapsoabauns.com","tld":"com"},"ip":{"addr":"104.21.73.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:57.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bobapsoabauns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 13:22:50 GMT","end":"Mon, 13 Apr 2026 14:21:33 GMT"},"fingerprint":{"sha1":"B0:D2:ED:80:50:F9:E9:B4:52:02:70:02:C3:93:83:13:28:CE:1D:1D","sha256":"CF:82:D5:83:EF:46:6C:06:FF:D9:6D:1B:F2:90:65:64:23:A4:03:55:4C:2A:CA:58:F1:7F:35:25:E9:9B:ED:C5"}}},"request":{"raw":"GET /www/images/636e9eb53eb768ac9505a0636051db29.png HTTP/1.1\r\nHost: bobapsoabauns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Mar 2026 20:52:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 68432\r\nlast-modified: Sun, 09 Feb 2025 17:41:55 GMT\r\npriority: u=4,i=?0\r\netag: \"67a8e8e3-10b50\"\r\nexpires: Sun, 08 Mar 2026 20:22:29 GMT\r\ncache-control: max-age=86400\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1828\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K3f48vZtuF%2F96igenWmagC%2FRiuntyAhOlJbuhzOY10NXbwHvprU0PC8mqLMuTunQ52mvqP%2B1uWAd3KBrMc5Bbn96Pa81K%2BmoNz0Kh%2BpXUbtP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8c7ca47f6c37c2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68432,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"636e9eb53eb768ac9505a0636051db29","sha1":"a61d4595b4792d7e36d15bb37aade4bd6485b2a1","sha256":"ac596fa18cba106b1860d173208f91fb80c7735faadc16dfb517c6d5b658dda6","sha512":"d329bc4b0106ed46a27e8f8a5c6512f2928e7e3cf789cae0e8da244b2b7728319f282b2508d624d7d70a45fc0543cc9ff4a09e9890e549586119cdb3f924ed3e","ssdeep":"1536:a3vCXL85hpgD2VuM79j6u2cfx4FD9lrbucC/t:s6+gD2V779OuJUzacC/t","tlshash":"cb630254a3460b9e830ab42ec1845e1bf750eb9f50b4fd6d191661ac07bfe3bcc19a93","first_seen":"2024-09-12T00:47:20Z","last_seen":"2026-04-03T18:32:51.670811Z","times_seen":380,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:57.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 14:22:28 GMT\r\nexpires: Thu, 04 Mar 2027 14:22:28 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 282629\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-06T08:10:06.5271Z","times_seen":65414,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.36.2/jwpsrv.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.2.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:53.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.36.2/jwpsrv.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=900, immutable\r\nlast-modified: Tue, 25 Feb 2025 08:24:55 GMT\r\netag: \"e9449982aabf38639d014274af3ad474\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 07 Mar 2026 20:52:53 GMT\r\nage: 137\r\nx-served-by: cache-lga21962-LGA, cache-hel1410026-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 52, 3666\r\nx-timer: S1772916773.393454,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 19075\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":67288,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e9449982aabf38639d014274af3ad474","sha1":"f99f5ba761f1945f19da3cf4a9ca52c1aeee47d5","sha256":"fb1c762c222ed003d9bd932a1bf94a36879b73967f3aaf2797cae7f6d5302352","sha512":"f4c80f0c7c44b72303aa3494f19d164095b24bf83e013ddf92d20b75fc618cbaa505c183557bbb14cb9a836c514b21fcb623c00059ef7e9d04ffe16ae4a12fc3","ssdeep":"768:DiDjPSAlvbtXral8WK/2R7pr1oJl92LCaA1YL9ncpgW:+nPlZral8WK/GEJl92LCcLWpV","tlshash":"fd63d78d3685b16a5a6770b8806fb546723d1dd6308dc250ea50eec93c3de5ee237b2c","first_seen":"2025-02-26T11:57:34.810186Z","last_seen":"2026-04-06T05:20:31.473373Z","times_seen":3993,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/assets/images/logo.svg?v=5","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vidara.so/v/EgsKrsytgYHFX","date":"2026-03-07T20:52:51.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidara.so","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 11:08:37 GMT","end":"Tue, 05 May 2026 12:07:22 GMT"},"fingerprint":{"sha1":"A6:7B:1F:15:8E:93:40:C2:D5:ED:5D:0E:F1:41:D9:F4:BC:D1:C7:F0","sha256":"0F:4A:DE:A1:CD:61:73:8E:21:8A:AD:69:22:87:25:83:3A:5C:44:F1:33:DB:B1:48:E3:94:87:BA:16:59:80:31"}}},"request":{"raw":"GET /assets/images/logo.svg?v=5 HTTP/1.1\r\nHost: vidara.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/v/EgsKrsytgYHFX\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Mar 2026 20:52:51 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 11 Feb 2026 15:24:11 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 4352\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3sP3YfximMCONeyr9jMWa%2FTlxVBMCXXlro%2FRJrCXyt0KVHXQ%2BU%2F7x4IoIGIAOmoPJTIOTDc4wgqoWWm9kan0XWBinBrZ9mOtNA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8c7c7afcc8481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3227,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8ab5557fd86db988208b39bd4ed53d4d","sha1":"66e2caef813cb5e08525028e1ef5b92902b2ce20","sha256":"e784079bd5da64f8e0e6e7a2063ff289b41a468cb6be007152e0a0005ccd3191","sha512":"91c301db14eda83ca6d7bd5d2fd0eb4a85d1ae59a26c922f83c11082daeccfa1aa3c52d369542943f4765e1208b5c692b28d24c7f5f4bb1143f16abcb90860fd","ssdeep":"","tlshash":"056135cc8b988ee1e2c9d3f9e5458434792b99f2db849a20c7ce2e0f38a145d5c71dc6","first_seen":"2026-02-05T07:49:25.419095Z","last_seen":"2026-04-05T11:28:19.178617Z","times_seen":70,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/assets/css/jwplayer.css","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:51.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidara.so","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 11:08:37 GMT","end":"Tue, 05 May 2026 12:07:22 GMT"},"fingerprint":{"sha1":"A6:7B:1F:15:8E:93:40:C2:D5:ED:5D:0E:F1:41:D9:F4:BC:D1:C7:F0","sha256":"0F:4A:DE:A1:CD:61:73:8E:21:8A:AD:69:22:87:25:83:3A:5C:44:F1:33:DB:B1:48:E3:94:87:BA:16:59:80:31"}}},"request":{"raw":"GET /assets/css/jwplayer.css HTTP/1.1\r\nHost: vidara.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/e/EgsKrsytgYHFX\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Mar 2026 20:52:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 16 May 2025 03:51:01 GMT\r\nvary: Accept-Encoding\r\netag: \"6826b625-c0f9\"\r\nexpires: Sun, 08 Mar 2026 05:17:53 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 12898\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZRUEhhPqvV%2FCLrakNF4QG%2F794OW1%2B4zIQzs%2B%2FbY0RRKhXZQJ66o4Nkbm6rppbL6EdhHbGbDUJZLxEIUrDWmOLXX1boKJONGMbQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8c7c7ded59481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49401,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text","md5":"aee1cc505893eae9bac231f379bcbe05","sha1":"f8699e76b0bda33e724e6bb71382c5b2e08f7d14","sha256":"f0e29054154a4b18f0ceb547f8ecda934e5fd172f50089d07695c76232db26a2","sha512":"0531311755b2b9cafb4ef2aac45b6250777637929b029d348845c640882639687ec726735a212873836156c4074e49470af071b9b77fd3a470feb29dad44553b","ssdeep":"1536:AQV8FxnYgpery2vYsRwq9AOOGvC4DfNaYj3RD:AQVMxnYTy2v/AOOkJRD","tlshash":"0c239522a7812c0cf06bd1b67d6197d6233e4053d92b1f7c7ab93578c28e4e85173b9a","first_seen":"2025-06-22T15:21:23.733231Z","last_seen":"2026-04-05T19:01:43.393355Z","times_seen":543,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/pako/2.1.0/pako.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:51.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/pako/2.1.0/pako.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 20:52:51 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 13233\r\ncf-ray: 9d8c7c7e3df7120a-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"636858ed-33b1\"\r\nlast-modified: Mon, 07 Nov 2022 01:01:33 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 706173\r\nexpires: Thu, 25 Feb 2027 20:52:51 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=dEeIfqqIgQaFZYvP57WDqb1PR%2FX3sHGQxrwlVNjFVSNnY4M64kn4KnQafiwEZ5mnahFevUq1fLW8Zdh95SGmfkNwh040SnwWpP%2BoJ%2BT1KMX3Yhv0cFJsW6NqqjYtCT37ZNVjFylp\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46859,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (46785)","md5":"e647868246b70926c4d716f7640bd51a","sha1":"c64471d33f9a3d20b5d9219159fe102d8763adcb","sha256":"ede2693a4a6a5126b9d35669062b358ecab6ae7b9b86a1cf302feb45a8514907","sha512":"8364de016c3918f9d7ef3d0a9fc9c56d87de1dcbc0bbfb71e9dea6acb7bff749a40b13be45ca6dc98a64b14cf7e443b7dfb17cddb6707265321e21da9aca647e","ssdeep":"768:fXHw8wA4ZIlEf4WLNiAAAAAA84YrI9OVsLMeu/pJCU5ejR9PNB57szzsE1s1A1m9:yeBomKTCsJ6b3","tlshash":"3423f8b221f754691bd01cd880970ba162b091722c4655f8e77c9ce538b0adbf0bfabd","first_seen":"2023-09-10T07:22:30Z","last_seen":"2026-04-05T23:41:11.798733Z","times_seen":1490,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":42,"dns":1,"connect":8,"send":0,"wait":15,"receive":1,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bid.mbidtg.com/tags/341049?version_name=d\u0026domain=vidara.so","fqdn":"bid.mbidtg.com","domain":"mbidtg.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:52.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bid.mbidtg.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 02:32:13 GMT","end":"Thu, 21 May 2026 02:32:12 GMT"},"fingerprint":{"sha1":"A2:B9:83:B0:E2:71:B2:DA:8A:D5:FE:97:08:CF:E2:68:5C:B8:25:8A","sha256":"A7:43:41:95:89:85:8F:ED:7C:78:2C:3C:F4:88:08:3D:3D:A4:2A:B8:2A:A6:15:E6:4E:F1:23:7A:82:2B:88:61"}}},"request":{"raw":"GET /tags/341049?version_name=d\u0026domain=vidara.so HTTP/1.1\r\nHost: bid.mbidtg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 20:52:52 GMT\r\ncontent-type: application/json\r\nserver: nginx/1.24.0\r\ncache-control: max-age=300, public\r\nx-cdn-host-id: DS5058\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1489,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b943afffda3727fdee5a63274cd33c2a","sha1":"e40b73bb0e52f040267ab09c5eaa32448f61d113","sha256":"f383854f05423b8ef70bec85078fb9e88cd6506570f1841077e90d69e04c56aa","sha512":"f22a937d1b65e1303f3541db66e4f734b22d6bc0aacc39bdb1f5cf40e1a8064a4b8aed8be7adfee7bee85205627166f6eeec207adaa5a19df6a3990cd1c41445","ssdeep":"","tlshash":"803110bcd6699cba80d0468a94d93f8803a53376b0c57446f4ac4db806cf596592b10f","first_seen":"2026-03-07T20:53:28.514839Z","last_seen":"2026-03-15T16:55:39.328701Z","times_seen":2,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":89,"dns":39,"connect":19,"send":0,"wait":19,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fedoq.com/impression/ULe2xzichMmkfnGtf_HFR5jVjIrwOjEEb8zszmX6P2ajsaugRXT2jGeQM4M0rnx5jvKKJ5ySbGUzy1vXgmq0dW8Ruu55rnrHdQdJfEw0ooLxB8_zUf3IYn2eWqrc7Q26IxtLbS2FI_rgtqRu3cLr8vchHkdFp1U-qKGXLpoTUmUX-6bwDT2pmX7dR1RWLA_V4QCkkrY9V0761XKvT4NCs5Yxt85aSi2OVBNm1kTn9KP3a8wLdJ0TEWr38x4PY2NSwvgWcffWtUjG1u2tdq7LU-cWsHfrLmBDms5KOxTwmPh3a1gjpYHNrYXv8ocrxIQOgqb1JODyIx9t-PymUqz9ZfviFNczsx29phtHs79wiLrxN3sfrmjRt3fe7R2RN2bEpj_qu-6yesppIXKmZcRt4lehUKLZu2acjT53GEDe4Fk-19cVYjLM3Av4Hr1j5jqOwIwLWoF66kGER9jExOtgaO7uBVIkIn5q188eKEsPnRmKWjVgQPaEGJDH4C-bXJOGb6oH0cV-L-1_WJErgG8wSMDFbrNFR3Qlc12_3RJI9KyxjEtDynrKF82bztWOy2ezrsguP8oD4Jonta0zRWIJjn4XZeciGjxhekaTmCMwdIvB5SWhRLE3R4X_SfgvKE7EPXwrASWFMl8Ae0bnEaFzh95LiZOrH9PFbTwFAG8IlFfpqv6C7sIGo5r4jAdQcq2vJV05h2gr6kj_Bldih2Fx5qFdzHHHSOITlwAd9LBzD7sGpLxIc738hFQqwGUUy3mIbT3C_CuMEducIyOmJp8DNqqeAQM6qk6dMOqOnEPqdRnAelCHoimOBq9wbk-icd4Eid4hVVLKQCJcw11GEKEnQx1wFvGpFK4yHxhUOsLzX4AsYo-V?_z=10572062\u0026sw_version=v1.796.0-s\u0026dmn=dd133.com\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=837\u0026wiw=837\u0026wih=471\u0026wfc=1\u0026pl=https%3A%2F%2Fvidara.so%2Fe%2FEgsKrsytgYHFX\u0026drf=https%3A%2F%2Fvidara.so%2Fv%2FEgsKrsytgYHFX\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=1\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1","fqdn":"fedoq.com","domain":"fedoq.com","tld":"com"},"ip":{"addr":"139.45.197.116","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:57.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fedoq.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Dec 2025 05:17:35 GMT","end":"Fri, 27 Mar 2026 05:17:34 GMT"},"fingerprint":{"sha1":"E7:2E:F6:2B:68:23:78:D9:1C:D1:5A:3D:D6:94:68:EF:FA:F7:FB:7C","sha256":"36:9D:A2:7D:77:45:6A:F3:90:EB:CD:3D:D2:2B:B7:6D:5B:03:B8:E3:DC:58:30:79:A9:C6:53:08:B7:E4:93:9C"}}},"request":{"raw":"GET /impression/ULe2xzichMmkfnGtf_HFR5jVjIrwOjEEb8zszmX6P2ajsaugRXT2jGeQM4M0rnx5jvKKJ5ySbGUzy1vXgmq0dW8Ruu55rnrHdQdJfEw0ooLxB8_zUf3IYn2eWqrc7Q26IxtLbS2FI_rgtqRu3cLr8vchHkdFp1U-qKGXLpoTUmUX-6bwDT2pmX7dR1RWLA_V4QCkkrY9V0761XKvT4NCs5Yxt85aSi2OVBNm1kTn9KP3a8wLdJ0TEWr38x4PY2NSwvgWcffWtUjG1u2tdq7LU-cWsHfrLmBDms5KOxTwmPh3a1gjpYHNrYXv8ocrxIQOgqb1JODyIx9t-PymUqz9ZfviFNczsx29phtHs79wiLrxN3sfrmjRt3fe7R2RN2bEpj_qu-6yesppIXKmZcRt4lehUKLZu2acjT53GEDe4Fk-19cVYjLM3Av4Hr1j5jqOwIwLWoF66kGER9jExOtgaO7uBVIkIn5q188eKEsPnRmKWjVgQPaEGJDH4C-bXJOGb6oH0cV-L-1_WJErgG8wSMDFbrNFR3Qlc12_3RJI9KyxjEtDynrKF82bztWOy2ezrsguP8oD4Jonta0zRWIJjn4XZeciGjxhekaTmCMwdIvB5SWhRLE3R4X_SfgvKE7EPXwrASWFMl8Ae0bnEaFzh95LiZOrH9PFbTwFAG8IlFfpqv6C7sIGo5r4jAdQcq2vJV05h2gr6kj_Bldih2Fx5qFdzHHHSOITlwAd9LBzD7sGpLxIc738hFQqwGUUy3mIbT3C_CuMEducIyOmJp8DNqqeAQM6qk6dMOqOnEPqdRnAelCHoimOBq9wbk-icd4Eid4hVVLKQCJcw11GEKEnQx1wFvGpFK4yHxhUOsLzX4AsYo-V?_z=10572062\u0026sw_version=v1.796.0-s\u0026dmn=dd133.com\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=837\u0026wiw=837\u0026wih=471\u0026wfc=1\u0026pl=https%3A%2F%2Fvidara.so%2Fe%2FEgsKrsytgYHFX\u0026drf=https%3A%2F%2Fvidara.so%2Fv%2FEgsKrsytgYHFX\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=1\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1 HTTP/1.1\r\nHost: fedoq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nCookie: OAID=0802f238b7974b38fb278d2c6d239978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 20:52:57 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-trace-id: e5607b7f5e667d101e6b282cbf0eae73\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4491705564909da7f9eaf749dbbfbb1","sha1":"279315d507855c6a4351e1e2c2f39dd9cd2fccd8","sha256":"4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49","sha512":"b8d82d64ec656c63570b82215564929adad167e61643fd72283b94f3e448ef8ab0ad42202f3537a0da89960bbdc69498608fc6ec89502c6c338b6226c8bf5e14","ssdeep":"","tlshash":"c5900403d140d041c351c0300d0cc740174471304514030f70fc175dfc353510c13000","first_seen":"2023-04-05T09:54:56Z","last_seen":"2026-04-06T08:14:17.083284Z","times_seen":96625,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/ajax/storage","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vidara.so/v/EgsKrsytgYHFX","date":"2026-03-07T20:52:51.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidara.so","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 11:08:37 GMT","end":"Tue, 05 May 2026 12:07:22 GMT"},"fingerprint":{"sha1":"A6:7B:1F:15:8E:93:40:C2:D5:ED:5D:0E:F1:41:D9:F4:BC:D1:C7:F0","sha256":"0F:4A:DE:A1:CD:61:73:8E:21:8A:AD:69:22:87:25:83:3A:5C:44:F1:33:DB:B1:48:E3:94:87:BA:16:59:80:31"}}},"request":{"raw":"GET /ajax/storage HTTP/1.1\r\nHost: vidara.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vidara.so/v/EgsKrsytgYHFX\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 303 See Other\r\nserver: cloudflare\r\ndate: Sat, 07 Mar 2026 20:52:51 GMT\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=4,i=?0\r\nlocation: /login?redirect=%2Fajax%2Fstorage\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C0vx1yUjkuQ2823PMUJ1lopcHtQhaEjv%2FCizTAwsmVCOXz7iyRHXQgRhLARXiD8dXmo5I2pOhcQlt5CWsSs%2FhLYC1%2F%2BGOYowQA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8c7c7cbd11481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"303","status_text":"See Other","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8330,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:51.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/crypto-js/4.2.0/crypto-js.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 20:52:51 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 19621\r\ncf-ray: 9d8c7c7e2de3120a-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65384d58-4ca5\"\r\nlast-modified: Tue, 24 Oct 2023 23:03:52 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 703878\r\nexpires: Thu, 25 Feb 2027 20:52:51 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=SrBDnqVOw80U06qLMPY5Lr%2BknBH1unK53lRzue0%2BUpsMYFAxbgwX5hjxQ6AMj2x8T1XO9zLGuG2SiHJt0o7P8r2%2FOcTLN%2Bnem1ZcYi9FdpAuPtgMxgypH6mFZnes6W5imiH3ryf9\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60819,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (60819), with no line terminators","md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-04-05T21:49:34.561628Z","times_seen":29376,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":32,"dns":12,"connect":1,"send":0,"wait":13,"receive":1,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.mbidadm.com/static/scripts.js","fqdn":"js.mbidadm.com","domain":"mbidadm.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:51.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.mbidadm.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 10:32:25 GMT","end":"Fri, 08 May 2026 10:32:24 GMT"},"fingerprint":{"sha1":"53:11:2F:DC:ED:2A:9F:48:9A:DA:79:55:E6:E7:A4:57:E1:3E:37:3A","sha256":"3C:CE:67:7F:4C:69:3F:EE:0A:FF:AA:94:6B:B0:A6:6F:54:BB:D5:67:1A:4F:64:BC:3C:E2:A2:3E:CB:8F:7E:63"}}},"request":{"raw":"GET /static/scripts.js HTTP/1.1\r\nHost: js.mbidadm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 20:52:51 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Tue, 24 Feb 2026 13:37:29 GMT\r\netag: W/\"699da999-2494e\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 07 Mar 2026 20:57:51 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":149838,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"50018904503297c6ad666a8153b84c16","sha1":"a091b1ac80b8d3494c378004694fbfe2e934e65b","sha256":"26cdcc0b81fa17c2d21e811221df7b49e40f793852c23beb776d811eca0e904f","sha512":"028b6cd743acf773d92579977368f4e58cc3f5546678d2f3c27f6b35e84a4ba268675e6c870d8afe0cafbb5a7f19cce8f91c6f4a20501d21390d4fc131ce5d28","ssdeep":"1536:O8d+dnC5OPJdQBo9aKRcZXRtK8wBghJ941LloXQTtQyodYm16NzKH6AKn7K0Setc:bBAHGXRt6YVdYmoNGhKG5etsz","tlshash":"61e349d8b2d2b07406e75099d43f1206f73a1a16780c9068f6a6e9c17878ddb9237f7e","first_seen":"2026-02-24T18:05:22.965018Z","last_seen":"2026-04-06T00:45:03.890884Z","times_seen":96,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":74,"dns":28,"connect":21,"send":0,"wait":21,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vidara.so/v/EgsKrsytgYHFX","date":"2026-03-07T20:52:51.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 00:25:48 GMT\r\nexpires: Fri, 05 Mar 2027 00:25:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 246423\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-06T08:10:10.3906Z","times_seen":134620,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":71,"dns":3,"connect":7,"send":0,"wait":9,"receive":10,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/assets/css/swiper.min.css","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vidara.so/v/EgsKrsytgYHFX","date":"2026-03-07T20:52:51.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidara.so","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 11:08:37 GMT","end":"Tue, 05 May 2026 12:07:22 GMT"},"fingerprint":{"sha1":"A6:7B:1F:15:8E:93:40:C2:D5:ED:5D:0E:F1:41:D9:F4:BC:D1:C7:F0","sha256":"0F:4A:DE:A1:CD:61:73:8E:21:8A:AD:69:22:87:25:83:3A:5C:44:F1:33:DB:B1:48:E3:94:87:BA:16:59:80:31"}}},"request":{"raw":"GET /assets/css/swiper.min.css HTTP/1.1\r\nHost: vidara.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/v/EgsKrsytgYHFX\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Mar 2026 20:52:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 26 Oct 1985 11:15:00 GMT\r\nvary: Accept-Encoding\r\netag: \"1dc0c7b4-f16\"\r\nexpires: Sat, 07 Mar 2026 21:20:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 41561\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jxnNH5%2FllixCpBshUKbhN%2F53ue%2F7gkhr4pVq2qqQh2ACtQLTlo%2BAJIAqIk%2FnCd3UKyaGqn8F1NXd9J1WUnc7aoV%2BYWNruIO2lA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8c7c7afcc3481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3862,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3605)","md5":"67130008fa7584d16d62cb6897ba1f83","sha1":"f85a96590f8be6df93337046cd61f5f094515f3d","sha256":"2d6eede45a09fb7b10cba8ddb2fe6b949ee4779127dfdbabb8d42110c458ea0e","sha512":"7a2aa9a9d3b21ebe506e0b462f1c7071a754a384047f5b6898e81778dd0e0c344fb05734f9bd3f36533ef94824e12eaf108008e52343493ee9cf8791e4325dc6","ssdeep":"","tlshash":"a781252063106c17d1338f3d9284f6b8a66864229f93815de685be2ce7bd8f4065e782","first_seen":"2025-10-24T17:13:28.243707Z","last_seen":"2026-04-05T11:28:19.171091Z","times_seen":129,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.2.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/v/EgsKrsytgYHFX","date":"2026-03-07T20:52:51.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.2.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15283\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 07 Mar 2026 20:52:51 GMT\r\nage: 1135037\r\nx-served-by: cache-lga21971-LGA, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 29, 7484\r\nx-timer: S1772916771.105485,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30125\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86659,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32058)","md5":"c9f5aeeca3ad37bf2aa006139b935f0a","sha1":"1055018c28ab41087ef9ccefe411606893dabea2","sha256":"87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de","sha512":"dcff2b5c2b8625d3593a7531ff4ddcd633939cc9f7acfeb79c18a9e6038fdaa99487960075502f159d44f902d965b0b5aed32b41bfa66a1dc07d85b5d5152b58","ssdeep":"1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9","tlshash":"4483e6d9b2c67062977730b950bf410bb17a98dab44c8c60f158d9d47eb8a8d907bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-06T08:18:00.157455Z","times_seen":77615,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":58,"dns":24,"connect":13,"send":0,"wait":13,"receive":5,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"entitlements.jwplayer.com/GCCG.json","fqdn":"entitlements.jwplayer.com","domain":"jwplayer.com","tld":"com"},"ip":{"addr":"52.84.50.29","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:53.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwplayer.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Fri, 19 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2F:FF:B9:03:44:93:31:3C:BF:52:A9:11:31:A1:70:35:48:94:BE:70","sha256":"CA:81:AC:A9:1D:64:33:27:CA:C6:60:1F:4D:67:17:E5:1E:D1:A2:16:8B:32:F1:E5:01:83:5F:8C:7E:54:4F:67"}}},"request":{"raw":"GET /GCCG.json HTTP/1.1\r\nHost: entitlements.jwplayer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\ncontent-type: application/json\r\ncontent-length: 71\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 20:06:50 GMT\r\ncache-control: max-age=1800, s-maxage=7200\r\naccess-control-allow-origin: *\r\nx-cache: Error from cloudfront\r\nvia: 1.1 d229ccc15dd984a81023d1b57fa0adbc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: dF40lFaFMoxecAjCQ_GM-MFFMjRsnQqXWaZcujKYsRwipEQl0iS6mg==\r\nage: 2763\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":71,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5534f424f1d6586164a58758f3e2c51a","sha1":"ef37ca3d8831aaad699430dcaa9967469542d602","sha256":"f28df38bea81995fd78f9077bff2dfc9d60ee13b8c414bc426c61c0e1b0bee86","sha512":"de8d4f36c7f0f85b1fb1a52e22e511fd2e52e7ba6010b39947d72eceb752a60b7578be34dc4c44be6add327cef42a82442099d803bcc3251d84ec05d26fe4d15","ssdeep":"","tlshash":"0da0023eec5654030de616dc3cdae44612f4135c1754544c8e8915ac1adfef24f13311","first_seen":"2023-05-03T00:46:19Z","last_seen":"2026-04-06T02:10:35.257526Z","times_seen":998,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":54,"connect":1,"send":0,"wait":2,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2r90j1fn28.s1q2105.com/hls2/5SvvL9hmO9AF96jmQIR939P7kWZBQH/index_640x360.m3u8","fqdn":"2r90j1fn28.s1q2105.com","domain":"s1q2105.com","tld":"com"},"ip":{"addr":"50.7.24.26","port":443,"asn":174,"as":"COGENT-174","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:54.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2r90j1fn28.s1q2105.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 16 Jan 2026 14:33:13 GMT","end":"Thu, 16 Apr 2026 14:33:12 GMT"},"fingerprint":{"sha1":"D4:40:F7:DC:F0:EC:71:C6:E2:FD:41:15:3A:6E:4A:94:C4:FC:4C:38","sha256":"B7:6B:08:93:70:34:D1:42:62:C4:6B:1A:EB:A2:F2:9C:6A:93:18:9F:2B:9F:17:12:96:6E:D9:38:8B:5B:DB:7E"}}},"request":{"raw":"GET /hls2/5SvvL9hmO9AF96jmQIR939P7kWZBQH/index_640x360.m3u8 HTTP/1.1\r\nHost: 2r90j1fn28.s1q2105.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 20:52:54 GMT\r\ncontent-type: application/vnd.apple.mpegurl\r\ncontent-length: 11241\r\nlast-modified: Mon, 02 Mar 2026 13:12:33 GMT\r\netag: \"69a58cc1-2be9\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Range\r\naccess-control-expose-headers: Content-Length, Content-Range\r\nx-cache: HIT\r\ncache-control: public, max-age=259200, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11241,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"96ef9b4cc576589d1c1cf8273cb34a17","sha1":"bb019d3b32e57374cf9ae2467427f425c9196422","sha256":"21e4930529595ef364cd2a7155051a62fdb7c0dc44a57b99252b52ea10cafe88","sha512":"285fe3440b3aae9011de47e421e81e436e993a715a7e1d72d3f6a2909194ff32bd3db8e3340e35447bb57fad445062812bf552e6982535f9e70f0b9eb0e2686e","ssdeep":"48:OfMXK7XV4Vo7WZcfqtdkc7wpP0PAzi6Lsi4Qj2YaUQXOjckYmg2N0zPKxin+nQj:OfmsFSkc7IsPAu6L9L2Y7Jgl","tlshash":"3832b99be092b2c0c05e7e75f743f0d290493ceb7ec16c8413807b9abd6875a66e5e25","first_seen":"2026-03-07T20:53:28.518955Z","last_seen":"2026-03-07T20:53:28.518955Z","times_seen":1,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"renamereptiliantrance.com/solid.gif?z=2098228\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.21-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=2\u0026fn=3\u0026es=13\u0026ge=2\u0026th=72kZB_R9BHI2r7WqUzrGg\u0026pcs=1\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=R86VXwaaHR0cHM6Ly92aWRhcmEuc28vdi9FZ3NLcnN5dGdZSEZY\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=WYy7u0UaHR0cHM6Ly92aWRhcmEuc28vZS9FZ3NLcnN5dGdZSEZY\u0026afid=1805039733897728\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=8\u0026pkw=0\u0026pload=896\u0026rlp=%5B0%2C61%2C214%2C146%2C1210%2C1470%2C431%2C1274%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5","fqdn":"renamereptiliantrance.com","domain":"renamereptiliantrance.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:53.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"renamereptiliantrance.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:15:36 GMT","end":"Mon, 06 Apr 2026 14:15:35 GMT"},"fingerprint":{"sha1":"DA:E7:93:82:08:63:8F:9E:D0:5F:7B:A0:CA:CC:39:B7:FF:74:BF:C5","sha256":"48:8E:F1:C2:AB:03:2D:6E:58:02:66:14:49:3D:62:F4:14:31:A7:A8:02:BD:0E:60:CE:27:E2:64:A9:D3:A6:D7"}}},"request":{"raw":"POST /solid.gif?z=2098228\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.21-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=2\u0026fn=3\u0026es=13\u0026ge=2\u0026th=72kZB_R9BHI2r7WqUzrGg\u0026pcs=1\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=R86VXwaaHR0cHM6Ly92aWRhcmEuc28vdi9FZ3NLcnN5dGdZSEZY\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=WYy7u0UaHR0cHM6Ly92aWRhcmEuc28vZS9FZ3NLcnN5dGdZSEZY\u0026afid=1805039733897728\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=8\u0026pkw=0\u0026pload=896\u0026rlp=%5B0%2C61%2C214%2C146%2C1210%2C1470%2C431%2C1274%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5 HTTP/1.1\r\nHost: renamereptiliantrance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 20:52:53 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-route-id: stats.tag.loaded\r\nset-cookie: UID=260307155244cc432bc6454c508ee1d3bdb4; Path=/; Expires=Sat, 10 Apr 2027 20:52:53 GMT; Secure; SameSite=None\nCHCK=1; Path=/; Expires=Sat, 10 Apr 2027 20:52:53 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Sat, 10 Apr 2027 20:52:53 GMT; Secure; SameSite=None\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28e463819a210071de3b45ebe7633613","sha1":"6dccd571828ec0912629119cf7eabfea9f33ddbc","sha256":"44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84","sha512":"8a82ac5a7883cd9b74bdb561cf825ce86474e259ad8c445e538d697b0003e3f2b1d6edcd3dc6512f4ad16e9074da204a79938257c457ecf68f4329eac0182e67","ssdeep":"","tlshash":"04900003e280e082c3a0c0300e0ccb802b88a2308a28030fb0fc2baefc3a3a20c23000","first_seen":"2023-04-05T09:26:54Z","last_seen":"2026-04-06T07:31:32.417342Z","times_seen":20522,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"renamereptiliantrance.com/get/2098228?id=2098228\u0026jp=_clcevnijtnqbkzeoylelcm\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.21-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=2\u0026fn=3\u0026es=13\u0026ge=2\u0026th=72kZB_R9BHI2r7WqUzrGg\u0026pcs=1\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=R86VXwaaHR0cHM6Ly92aWRhcmEuc28vdi9FZ3NLcnN5dGdZSEZY\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=WYy7u0UaHR0cHM6Ly92aWRhcmEuc28vZS9FZ3NLcnN5dGdZSEZY\u0026afid=1805039733897728\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=8\u0026pkw=0\u0026pload=896\u0026rlp=%5B0%2C61%2C214%2C146%2C1210%2C1470%2C431%2C1274%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"renamereptiliantrance.com","domain":"renamereptiliantrance.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:53.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"renamereptiliantrance.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:15:36 GMT","end":"Mon, 06 Apr 2026 14:15:35 GMT"},"fingerprint":{"sha1":"DA:E7:93:82:08:63:8F:9E:D0:5F:7B:A0:CA:CC:39:B7:FF:74:BF:C5","sha256":"48:8E:F1:C2:AB:03:2D:6E:58:02:66:14:49:3D:62:F4:14:31:A7:A8:02:BD:0E:60:CE:27:E2:64:A9:D3:A6:D7"}}},"request":{"raw":"GET /get/2098228?id=2098228\u0026jp=_clcevnijtnqbkzeoylelcm\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.1.21-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC+0\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=2\u0026fn=3\u0026es=13\u0026ge=2\u0026th=72kZB_R9BHI2r7WqUzrGg\u0026pcs=1\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026psr=R86VXwaaHR0cHM6Ly92aWRhcmEuc28vdi9FZ3NLcnN5dGdZSEZY\u0026ix=0\u0026x=801\u0026y=801\u0026md=0\u0026psu=WYy7u0UaHR0cHM6Ly92aWRhcmEuc28vZS9FZ3NLcnN5dGdZSEZY\u0026afid=1805039733897728\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=8\u0026pkw=0\u0026pload=896\u0026rlp=%5B0%2C61%2C214%2C146%2C1210%2C1470%2C431%2C1274%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0 HTTP/1.1\r\nHost: renamereptiliantrance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 20:52:53 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Sat, 10 Apr 2027 20:52:53 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Sat, 10 Apr 2027 20:52:53 GMT; Secure; SameSite=None\nUID=260307155236b3202659e44edab54597e36a; Path=/; Expires=Sat, 10 Apr 2027 20:52:53 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3505,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3505), with no line terminators","md5":"ebe914a39825c5ac1b58b1da9353f507","sha1":"06b2b5d7d787f740a080859dd758f1eaf247adc2","sha256":"1c18c36a276618a4dee42c3e2f359cb692ff332265722dea11af1c32b33ea547","sha512":"077788b8425a0c0be12e5f3cdfecc1a84cfde617c2a345229183368f44b990d0305dd2ff345f68d05fa3a8295c9dee4805c16056d2b118496b51076c2ed3c074","ssdeep":"","tlshash":"2171636c28c6e6872dff1cb81a361cb113d8585f24b3fcf18698b69603ac8b46397561","first_seen":"2026-03-07T20:53:28.520288Z","last_seen":"2026-03-07T20:53:28.520288Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/login?redirect=%2Fajax%2Fstorage","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vidara.so/v/EgsKrsytgYHFX","date":"2026-03-07T20:52:51.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidara.so","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 11:08:37 GMT","end":"Tue, 05 May 2026 12:07:22 GMT"},"fingerprint":{"sha1":"A6:7B:1F:15:8E:93:40:C2:D5:ED:5D:0E:F1:41:D9:F4:BC:D1:C7:F0","sha256":"0F:4A:DE:A1:CD:61:73:8E:21:8A:AD:69:22:87:25:83:3A:5C:44:F1:33:DB:B1:48:E3:94:87:BA:16:59:80:31"}}},"request":{"raw":"GET /login?redirect=%2Fajax%2Fstorage HTTP/1.1\r\nHost: vidara.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vidara.so/v/EgsKrsytgYHFX\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Mar 2026 20:52:51 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 04 Feb 2026 12:28:30 GMT\r\nstrict-transport-security: max-age=31536000\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5F7dJ7PxyxjQB6WaPWK74rp4j5UaaAfVz4B6gEpo4B6qcm3hswl17R3B%2B7Is0vj5TZUh7bW4BUA4Nk8y7IYKLLhZ7OxPDy52cA%3D%3D\"}]}\r\ncf-ray: 9d8c7c7d0d25481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:5.3.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":8330,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1792)","md5":"f5faaa2978ca0139b14e015eb2ee5655","sha1":"e820edd3e8d057767431060e62380dec60f39e25","sha256":"57550bd93caee422c03085ce5e29923611307a673647e9e80af940e394cd92f8","sha512":"ca1b4234ea423a7d4c92e73e45563bbfa8e846d9b0fb8186e243f19a2cd1ffe3622769d8c3b55b628ad4be5b4a3a44abaa9a05ef290bf0f29e9bfbf19243b72f","ssdeep":"96:2eTcoern0lRkZHyjKpf3RUJanNfxSZWc175cYWq0txgdUaLCu:2egoernmOyIPKJaNfxyOZx4LCu","tlshash":"4602343054f0157701e295e9b9657a0eaec2e103ee0b9904b2fd4fc59fe6e868c17db8","first_seen":"2026-02-05T07:49:25.437822Z","last_seen":"2026-04-05T11:28:19.18892Z","times_seen":71,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:51.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidara.so","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 11:08:37 GMT","end":"Tue, 05 May 2026 12:07:22 GMT"},"fingerprint":{"sha1":"A6:7B:1F:15:8E:93:40:C2:D5:ED:5D:0E:F1:41:D9:F4:BC:D1:C7:F0","sha256":"0F:4A:DE:A1:CD:61:73:8E:21:8A:AD:69:22:87:25:83:3A:5C:44:F1:33:DB:B1:48:E3:94:87:BA:16:59:80:31"}}},"request":{"raw":"HEAD /e/EgsKrsytgYHFX HTTP/1.1\r\nHost: vidara.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/e/EgsKrsytgYHFX\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Mar 2026 20:52:52 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1E0fhSS0emAAxQfhAmD5SFOytQK3bQZQbChVwdIz%2FJczrY8kHI1KXOLYXltNqwFgK%2FlHlPY88mVA%2B3mmkUek8JrnmlJMLnGqFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8c7c80fddb481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metricswpsh.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiI1NTk4MTI1OTEzODQzNjc5MDAwIiwidGltZXpvbmUiOjAsInZlciI6IjIuNDQuMSIsInRhZ19pZCI6MzQxMDQ5LCJzY3JlZW5fcmVzb2x1dGlvbiI6IjEyODB4MTAyNCIsImFkYmxvY2siOjAsInRpbWV6b25lX29sc29uIjoiVVRDIiwidXRtX3NvdXJjZSI6IiIsInV0bV9tZWRpdW0iOiIiLCJ1dG1fY2FtcGFpZ24iOiIiLCJ1dG1fY29udGVudCI6IiIsIm1tIjowLCJpbml0X3N0YXJ0X2xhdGVuY3kiOjEuMjMsImlzX3YyIjowLCJpc192Ml9lbXB0eSI6MH0=","fqdn":"metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"94.130.197.136","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:53.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 06:40:03 GMT","end":"Fri, 10 Apr 2026 06:40:02 GMT"},"fingerprint":{"sha1":"C7:51:D1:DF:5F:55:DC:AC:0B:B9:06:76:58:C5:A6:A5:E9:44:79:92","sha256":"D7:5F:06:4C:F7:01:BD:E8:0F:06:86:35:A2:D0:28:46:5D:B2:24:EE:0A:61:8D:C9:61:CA:AA:C4:5A:47:E6:CA"}}},"request":{"raw":"GET /in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiI1NTk4MTI1OTEzODQzNjc5MDAwIiwidGltZXpvbmUiOjAsInZlciI6IjIuNDQuMSIsInRhZ19pZCI6MzQxMDQ5LCJzY3JlZW5fcmVzb2x1dGlvbiI6IjEyODB4MTAyNCIsImFkYmxvY2siOjAsInRpbWV6b25lX29sc29uIjoiVVRDIiwidXRtX3NvdXJjZSI6IiIsInV0bV9tZWRpdW0iOiIiLCJ1dG1fY2FtcGFpZ24iOiIiLCJ1dG1fY29udGVudCI6IiIsIm1tIjowLCJpbml0X3N0YXJ0X2xhdGVuY3kiOjEuMjMsImlzX3YyIjowLCJpc192Ml9lbXB0eSI6MH0= HTTP/1.1\r\nHost: metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.22.0\r\ndate: Sat, 07 Mar 2026 20:52:53 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":296,"timings":{"blocked":128,"dns":17,"connect":34,"send":0,"wait":35,"receive":0,"ssl":79},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"js.mbidpp.com/popunder-admanager/build.m.js","fqdn":"js.mbidpp.com","domain":"mbidpp.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:53.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.mbidpp.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Feb 2026 02:32:17 GMT","end":"Fri, 08 May 2026 02:32:16 GMT"},"fingerprint":{"sha1":"50:3C:25:7E:AE:F3:B2:41:AD:C9:D0:64:9E:C5:35:60:7B:DF:A0:C9","sha256":"7D:7E:5A:70:2A:42:4A:EB:EC:36:96:23:4A:41:AE:13:09:2A:C7:C6:99:00:CB:C4:F1:40:3E:7E:90:F0:20:5F"}}},"request":{"raw":"GET /popunder-admanager/build.m.js HTTP/1.1\r\nHost: js.mbidpp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 20:52:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Wed, 25 Feb 2026 09:36:56 GMT\r\netag: W/\"699ec2b8-1a2d5\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 07 Mar 2026 20:57:53 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":107221,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e12e141f3c1d3a58eeb156cf154fa84b","sha1":"5abd5a6cc26ecad518fb4747bebc141781daded6","sha256":"17a70ab93a39d655380ac36da94da7cb0ba0dfc8d05446e6cb41576922a09aa9","sha512":"85a5a23b6438723239b0ae629698ed4e286954e44b9e40691f2ea1194aa41ac70880d83df0d289e14c5e1d374e7f1acca0d7b97b9b3ff4abb62b6ecf561bc6dd","ssdeep":"768:W0qmOOA1FJb8zunREimbZLrxL5mVuzYB3bPAgCp+dFAioTIZKOxvuoUjYClRtg2X:zOOVYpE1J0I0ui/d+J8EsE48JJI65v","tlshash":"f6a31aca32a1b4b002e244da943b0216f33d1929740e905cb7adddd6791ad4fa277f7e","first_seen":"2026-02-25T12:57:29.101042Z","last_seen":"2026-04-06T08:09:40.712615Z","times_seen":325,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":106,"dns":27,"connect":26,"send":0,"wait":23,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tzegilo.com/stattag.js","fqdn":"tzegilo.com","domain":"tzegilo.com","tld":"com"},"ip":{"addr":"172.67.193.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:53.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tzegilo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 06:54:37 GMT","end":"Thu, 09 Apr 2026 07:52:20 GMT"},"fingerprint":{"sha1":"2A:26:DB:3B:39:FD:D5:A2:0F:EC:F9:DF:F3:2C:3C:B3:E7:09:E5:7A","sha256":"9C:98:41:13:1C:AB:70:56:79:E3:FA:CA:AA:ED:48:B7:7F:3D:D1:ED:9E:25:5D:E8:10:31:D0:A2:A8:4F:4C:1C"}}},"request":{"raw":"GET /stattag.js HTTP/1.1\r\nHost: tzegilo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 20:52:54 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Jul 2024 10:23:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlink: \u003chttps://flerap.com/\u003e; rel=preconnect; crossorigin, \u003chttps://fleraprt.com/\u003e; rel=preconnect; crossorigin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BzoY51Z2pyGTPq6%2BvEnxkpvleXIsAWYcwko0UWfWDTDztgRl7ihl1v0CeRx2nvcK8yS3SkFGxsbPcCTC7aP9w6Vkh8gm4aYwsnGs\"}]}\r\nage: 1721\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"668fb2be-45d7\"\r\ncontent-encoding: br\r\ncf-ray: 9d8c7c8d9e3e516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17879,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17229)","md5":"01227f5edc20e0ff4ed643b27cb8bb68","sha1":"d71a88f7341f2b1bdaa7deb9a66888607bd52598","sha256":"75c91d86601e23ab56d872b31b42660f893fc6d6b0785e085c06c2c038e98fb2","sha512":"88046b07c07ff6de47ef7d1e0d7ca281fc48e91fc6a292cdf611457b96ac92bb0068971cfd55c0cc3e6179d7335e77a6a14b15fa502bbae7b2233546da6c0f98","ssdeep":"384:WDWdyJ+TJTwWV+6RUL2qq8L6jW4+QL1zWAWvVRIDiei:7so1V+g+d+j4pJ5","tlshash":"8d82094a72d525ee82a3a1d10cef612ffb664e86a97e1785e381b49c187404ec3d7f90","first_seen":"2024-07-11T16:28:55Z","last_seen":"2026-04-06T08:14:17.090265Z","times_seen":6377,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":52,"dns":22,"connect":8,"send":0,"wait":13,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adsco.re/p","fqdn":"adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:54.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"POST /p HTTP/1.1\r\nHost: adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vidara.so/\r\nContent-Type: text/plain; charset=x-user-defined\r\nContent-Length: 2991\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 07 Mar 2026 20:52:54 GMT\r\nContent-Type: text/plain\r\nContent-Length: 955\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://vidara.so\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET, HEAD, OPTIONS, POST\r\nCache-Control: no-cache, no-store, no-transform, max-age=0\r\nAccept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR\r\nAccess-Control-Allow-Headers: Host, User-Agent, Accept, Accept-Language, Accept-Encoding, Referer, Content-Type, Content-Length, Origin, DNT, Connection, Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site, Pragma, Cache-Control\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1212,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with very long lines (1212), with no line terminators","md5":"c93d99f6de6f1913303535a4ee5e062a","sha1":"dfc0186ae94a7dafc28c97cad909f3cf54e54faf","sha256":"7c9f17bd6e80f49f52ad6f9c917f693d9e63d5f563a10b25955371e024518be7","sha512":"c8cca5935c0bb9d69d3b60cdd1e9a51528e3efbcb65fbab5fe914a87385d9cddeba710eaa83e61b8d8416899c2e09733fd119be58a5e2e4e6c22db85e5a2167c","ssdeep":"","tlshash":"a621e7b0f06cb8c7af6ff27855fb907028b07467085def1211f8206e0e215346001f22","first_seen":"2026-03-07T20:53:28.523018Z","last_seen":"2026-03-07T20:53:28.523018Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/assets/css/style.css","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vidara.so/v/EgsKrsytgYHFX","date":"2026-03-07T20:52:51.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidara.so","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 11:08:37 GMT","end":"Tue, 05 May 2026 12:07:22 GMT"},"fingerprint":{"sha1":"A6:7B:1F:15:8E:93:40:C2:D5:ED:5D:0E:F1:41:D9:F4:BC:D1:C7:F0","sha256":"0F:4A:DE:A1:CD:61:73:8E:21:8A:AD:69:22:87:25:83:3A:5C:44:F1:33:DB:B1:48:E3:94:87:BA:16:59:80:31"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: vidara.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/v/EgsKrsytgYHFX\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Mar 2026 20:52:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 08 Jan 2026 21:52:37 GMT\r\nvary: Accept-Encoding\r\netag: \"69602725-8295\"\r\nexpires: Sun, 08 Mar 2026 04:09:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 16972\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cepok40JN%2Fb0jpc5zUY%2Bs1gN48xriXTLMZNGiGCTsMKzksPTBk7Wh84kEouMw%2F7XoFhps5fudswQWi1Gj4QgTx3Y4J3JapV%2Fuw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8c7c7afcc4481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33429,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (33429), with no line terminators","md5":"b74530d44f36eebac000a3cb97f67405","sha1":"fd5f30c4db2b5bc49e219f65a0670d7f6d635b11","sha256":"51777329d790140aff6906992cf1d6bebafa610c2b322ef988d5dc188b2156b7","sha512":"429e225fb13b8ac1330e91f672eb0304531229aab1612866036a21e19638bf7b50201c29191964dbb0af5f1c96fac93f60da83532c8fb488e6339fc61363b7fa","ssdeep":"384:mq65GNR0JiVdVaVOAjN8JK4AosZwp+ZPCrGvwbsWwrW:mq60H0Ji3c1jsjAhwp+hvwYWwrW","tlshash":"a9e2c872ea42320d7167c9b59952f69cf035c022eb0353fde6b726a8df839c943b1658","first_seen":"2026-01-21T08:59:35.606442Z","last_seen":"2026-04-05T11:28:19.187695Z","times_seen":88,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adsco.re/p","fqdn":"adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"162.252.214.5","port":443,"asn":53334,"as":"TUT-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:52.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET /p HTTP/1.1\r\nHost: adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vidara.so/\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 07 Mar 2026 20:52:52 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 20\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://vidara.so\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET, HEAD, OPTIONS, POST\r\nCache-Control: no-cache, no-store, no-transform, max-age=0\r\nAccept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR\r\nAccess-Control-Allow-Headers: Host, User-Agent, Accept, Accept-Language, Accept-Encoding, Referer, Origin, DNT, Connection, Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site, Pragma, Cache-Control\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":66,"dns":1,"connect":28,"send":0,"wait":28,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"6.adsco.re:2087/","fqdn":"6.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.84.77","port":2087,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:52.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 6.adsco.re:2087\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vidara.so/\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 20:52:52 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 45\r\ncf-ray: 9d8c7c841d4286c4-ARN\r\naccess-control-allow-origin: https://vidara.so\r\ncache-control: private, max-age=300, immutable, stale-if-error=300, stale-while-revalidate=300\r\netag: 5b41cb22f84f645a103acc7bfbf084ff\r\nexpires: Sat, 07 Mar 2026 20:52:52 GMT\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":2087\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5b41cb22f84f645a103acc7bfbf084ff","sha1":"bac3967b26d5ec4a0d09a580714e8219796816bd","sha256":"709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc","sha512":"772066ed1119519a19884fc94de2c9f2cc538b4528d9e2651a89b93d65bd4000b18297bfbdd8903b65146858935d33cac048c321dad2ea4f1f84ca6dd9b7d98f","ssdeep":"","tlshash":"7990041154441d34dc45470c4f0d0f0553dc5153df377374ddc50f0414531344141d00","first_seen":"2023-04-05T06:05:36Z","last_seen":"2026-03-30T19:07:46.969854Z","times_seen":25700,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":32,"dns":5,"connect":10,"send":0,"wait":15,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4fpvo6krw5e6.n4.adsco.re/","fqdn":"4fpvo6krw5e6.n4.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"38.132.109.126","port":443,"asn":9009,"as":"M247 Europe SRL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:52.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.n4.adsco.re","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 11 Jan 2026 09:14:11 GMT","end":"Sat, 11 Apr 2026 09:14:10 GMT"},"fingerprint":{"sha1":"48:79:9B:CA:07:7B:49:AB:47:FE:3A:2D:03:03:43:28:3A:D0:69:57","sha256":"49:56:60:AE:05:76:5B:10:7A:33:F9:81:B9:86:B0:61:75:52:3C:9B:BE:61:AE:F3:F9:AE:11:80:B9:EF:FC:F1"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: 4fpvo6krw5e6.n4.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 07 Mar 2026 20:52:52 GMT\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":487,"timings":{"blocked":-1,"dns":119,"connect":90,"send":0,"wait":91,"receive":0,"ssl":186},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js?userId=q3mc544327yy034837022g9g7swyu862","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:53.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Feb 2026 19:28:29 GMT","end":"Fri, 22 May 2026 20:28:25 GMT"},"fingerprint":{"sha1":"36:C6:D1:CA:01:47:A4:1B:73:8E:62:DB:CB:24:79:4D:06:01:3B:B5","sha256":"11:41:34:A5:A1:10:2F:10:C6:7F:8A:F2:77:75:66:AA:39:99:F9:E7:00:8D:1E:EE:4E:30:42:B7:A3:82:28:31"}}},"request":{"raw":"GET /gid.js?userId=q3mc544327yy034837022g9g7swyu862 HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nCookie: ID=0802f238b7974b38fb278d2c6d239978\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 20:52:53 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://vidara.so\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=0802f238b7974b38fb278d2c6d239978; expires=Sun, 07 Mar 2027 20:52:53 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d8c7c8919cb23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ea23989082664e3a59a2bf4a2f68b440","sha1":"2de7963e8b7a7fdb085f3a26339fd7f991c1ae86","sha256":"26e6f08b3538699927c1aaed3f67692e2af5c44c79d8a3997ee26d78d112180a","sha512":"f5594b324ae69dedfa404615d9f2e7ddfe5a8b5cab706657e80163128c42a8464cc5383cbef302970401657c854ad26aeb2417857d7527b573d8f36cf848637c","ssdeep":"","tlshash":"8fa02200000c02cc8200082288c3c303080800822c0a832e02c0c20033aeecc0a83200","first_seen":"2026-03-07T20:53:28.525088Z","last_seen":"2026-03-07T20:53:28.525088Z","times_seen":1,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fedoq.com/401/10572062?oo=1\u0026sw_version=v1.796.0-s\u0026oaid=q3mc544327yy034837022g9g7swyu862\u0026st=true","fqdn":"fedoq.com","domain":"fedoq.com","tld":"com"},"ip":{"addr":"139.45.197.116","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:53.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fedoq.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Dec 2025 05:17:35 GMT","end":"Fri, 27 Mar 2026 05:17:34 GMT"},"fingerprint":{"sha1":"E7:2E:F6:2B:68:23:78:D9:1C:D1:5A:3D:D6:94:68:EF:FA:F7:FB:7C","sha256":"36:9D:A2:7D:77:45:6A:F3:90:EB:CD:3D:D2:2B:B7:6D:5B:03:B8:E3:DC:58:30:79:A9:C6:53:08:B7:E4:93:9C"}}},"request":{"raw":"POST /401/10572062?oo=1\u0026sw_version=v1.796.0-s\u0026oaid=q3mc544327yy034837022g9g7swyu862\u0026st=true HTTP/1.1\r\nHost: fedoq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 24\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":24,"data":"{\"error\":\"adex timeout\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 20:52:53 GMT\r\ncontent-type: application/json\r\nx-trace-id: e271a0b78a7db94b82424795d883198f\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-origin: https://vidara.so\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nset-cookie: OAID=q3mc544327yy034837022g9g7swyu862; expires=Sun, 07 Mar 2027 20:52:53 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2588,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with very long lines (2588), with no line terminators","md5":"b5672b8e578ced39f9171a0c48600752","sha1":"4d6e526cbdfd47890b8ae54a0934df8feaa5640d","sha256":"7487b8c7dcff3eaa33f7a2cf98bfc9926c56819d4bf81995707ea41eab1d0db7","sha512":"9240739d353684b2428d7563e1f3de0d12641244bc3a34aa0fb8d7cea2aabeb54466967cf236554cf01e65ac406ab538e5e50edd01f3cabee37e9f3ba731ad36","ssdeep":"","tlshash":"96511613aed47d7ff59e9250cf68b74ad37ed484b2f91689ce259b2d77d42026067000","first_seen":"2026-03-07T20:53:28.52599Z","last_seen":"2026-03-07T20:53:28.52599Z","times_seen":1,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":80,"dns":14,"connect":28,"send":0,"wait":33,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"64.233.161.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:54.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:54 GMT","end":"Mon, 27 Apr 2026 08:38:53 GMT"},"fingerprint":{"sha1":"07:1E:D2:0D:5F:A5:AF:E8:26:91:FD:C3:DE:5B:BB:4D:68:90:1F:3A","sha256":"22:A1:18:EB:6B:19:59:23:4F:FF:AF:80:D6:ED:5C:1C:70:98:29:15:03:70:96:71:FF:A9:7A:45:6C:E8:1F:1A"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:tzCYQZwyLv-wKKr9w8lZimq4szBe0g:TJwfueNQeOWMPF8L; Expires=Mon, 06-Mar-2028 20:52:54 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 07 Mar 2026 20:52:54 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S-231621976:1772916774381819\u0026ifkv=ASfE1-olS4VD2JsjHUnVpaiwNa6E8VQEviKEe3t4u4rN1jDA1K_FZq0KVIVUbBH6roO8FgQIwy-vgw\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-Jt3xRKzpe393Jaq8tY9hUA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: unsafe-none\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":69,"dns":0,"connect":17,"send":0,"wait":24,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S-231621976:1772916774381819\u0026ifkv=ASfE1-olS4VD2JsjHUnVpaiwNa6E8VQEviKEe3t4u4rN1jDA1K_FZq0KVIVUbBH6roO8FgQIwy-vgw","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"64.233.161.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:54.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:42 GMT","end":"Mon, 27 Apr 2026 08:36:41 GMT"},"fingerprint":{"sha1":"F8:87:8B:2D:BD:F4:2F:EE:BB:C6:15:82:A2:65:BF:88:BA:75:EE:FB","sha256":"37:0D:FC:5C:8F:A5:2D:FC:55:69:BB:50:87:EC:B3:5F:62:0E:E5:90:5D:6D:23:E5:27:2D:EC:1D:D2:1C:7A:F0"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S-231621976:1772916774381819\u0026ifkv=ASfE1-olS4VD2JsjHUnVpaiwNa6E8VQEviKEe3t4u4rN1jDA1K_FZq0KVIVUbBH6roO8FgQIwy-vgw HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:e_61pJ3vQRs7r7-cb0c9SCKcfGFhXg:q22Zq9x_H8Wxypsc;Path=/;Expires=Mon, 06-Mar-2028 20:52:55 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 07 Mar 2026 20:52:55 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026dsh=S-231621976%3A1772916774381819\u0026hl=en\u0026ifkv=ASfE1-rqvnWStNVNZCOB2RW_gFhgxHYN_Up682VgQ7ghk0x_Wd1Z8eM9G0KlLQUYgg7Zi28gGS5R\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: script-src 'nonce-zy4TWQK1q-u2FTXTr_mNyQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 417\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vidara.so/v/EgsKrsytgYHFX","date":"2026-03-07T20:52:51.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 00:25:48 GMT\r\nexpires: Fri, 05 Mar 2027 00:25:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 246423\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-06T08:10:10.3906Z","times_seen":134620,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":103,"dns":1,"connect":21,"send":0,"wait":8,"receive":4,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.displayvertising.com/fsass.min.css","fqdn":"www.displayvertising.com","domain":"displayvertising.com","tld":"com"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:52.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1503693843.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 21 Jan 2026 18:36:08 GMT","end":"Tue, 21 Apr 2026 18:36:07 GMT"},"fingerprint":{"sha1":"C2:3B:E4:D9:A6:AA:57:59:68:54:01:C3:E7:BE:F9:FD:8C:55:FF:A4","sha256":"7D:44:01:89:FF:19:DC:DD:17:61:DC:65:25:43:91:F4:11:69:30:8A:AC:E3:DE:A1:D5:5A:69:9C:FB:88:09:27"}}},"request":{"raw":"GET /fsass.min.css HTTP/1.1\r\nHost: www.displayvertising.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 20:52:52 GMT\r\ncontent-type: application/x-javascript\r\npopads-node: wb9\r\nexpires: Sun, 08 Mar 2026 02:15:59 GMT\r\naccess-control-allow-origin: https://vidara.so\r\nlink: \u003chttps://displayvertising.com/\u003e;rel=preconnect\r\ncache-control: public, max-age=604800\r\nx-77-nzt: EwwBX63NDQH3AAEFAAwBuUwKDAH3xO0DAAwBw7WvBgG3AQAAAA\r\nx-77-nzt-ray: 2a494a1526d002824990ac69fee19e05\r\nx-77-cache: HIT\r\nx-77-age: 327936\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":41949,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (1568)","md5":"0b286c34b32ab84507559e492e079c68","sha1":"874252cf59e6486687797ae41679404e0b320c4e","sha256":"8583fbaf00c9d08dfe1fc26918d72e3440d71674a521620d66a2dc957f43089c","sha512":"75d39372d0ed443defcc99a0ac5ff0805606ea51dcccab5063b6e45928798cf5790a0df39c6cfd07756e80d6bd4f0fcb9f5b6007960ad28291997a3fc86e685b","ssdeep":"768:bt9rqAYKKGZzFQ9JsQU+YDngZGihfzmMzhYrTsAysncCWcf5k5sigCVgCntlqoMA:bb1ZzFQ9JsTgZvfzmMzhYrTscpBZ+","tlshash":"68133aaab286282601e741b9513eb316b23305167812d458fcb9cdf96e3ddc6117b7fc","first_seen":"2026-03-05T01:32:38.881699Z","last_seen":"2026-03-07T22:31:12.194226Z","times_seen":14,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":89,"dns":33,"connect":4,"send":0,"wait":3,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"www.displayvertising.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:52.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Feb 2026 19:28:29 GMT","end":"Fri, 22 May 2026 20:28:25 GMT"},"fingerprint":{"sha1":"36:C6:D1:CA:01:47:A4:1B:73:8E:62:DB:CB:24:79:4D:06:01:3B:B5","sha256":"11:41:34:A5:A1:10:2F:10:C6:7F:8A:F2:77:75:66:AA:39:99:F9:E7:00:8D:1E:EE:4E:30:42:B7:A3:82:28:31"}}},"request":{"raw":"GET /gid.js HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 20:52:52 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://vidara.so\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=0802f238b7974b38fb278d2c6d239978; expires=Sun, 07 Mar 2027 20:52:52 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9d8c7c82fe91b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ea23989082664e3a59a2bf4a2f68b440","sha1":"2de7963e8b7a7fdb085f3a26339fd7f991c1ae86","sha256":"26e6f08b3538699927c1aaed3f67692e2af5c44c79d8a3997ee26d78d112180a","sha512":"f5594b324ae69dedfa404615d9f2e7ddfe5a8b5cab706657e80163128c42a8464cc5383cbef302970401657c854ad26aeb2417857d7527b573d8f36cf848637c","ssdeep":"","tlshash":"8fa02200000c02cc8200082288c3c303080800822c0a832e02c0c20033aeecc0a83200","first_seen":"2026-03-07T20:53:28.525088Z","last_seen":"2026-03-07T20:53:28.525088Z","times_seen":1,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":48,"dns":33,"connect":1,"send":0,"wait":44,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.adsco.re/favicon.ico?cid=1772908728\u0026type=err\u0026code=6\u0026tt=2739\u0026j=00,1!STR,2!PRECON,2!dgpA,22!dgpS,620!dgcFDD,620!cFDD9,1028!cFDD1,1028!fDg,2330!sD:p,2330!sDi00,2729!sDiOP,2729!sAIF,2729!sDiOP,2729!sAIF,\u0026dmsg=hdr_0,aii_0_4,ai_0_4,ai_12_1,ai_14_1,ai_17_2,ai_18_1,ai_28_10,ai_29_1,canvas_0,context_37,webgl_85,s_7_1,s_8_1,s_10_12,s_11_43,s_12_103,s_13_1,s_14_1,s_15_16,s_17_1,s_19_1,s_21_1,s_25_14,s_27_40,s_30_1,s_34_6,s_35_74,s_36_197,aii_18_0","fqdn":"c.adsco.re","domain":"adsco.re","tld":"re"},"ip":{"addr":"104.16.84.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:55.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adsco.re","organization":"Adscore Technologies DMCC"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 15 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EC:13:B4:EC:A8:B2:CD:2E:12:E1:84:0E:E5:64:5D:88:D5:CA:3A:59","sha256":"C9:35:54:5E:EF:18:4E:21:62:7D:1D:23:55:D2:B9:CC:68:48:01:7B:AC:A5:8B:D9:3D:71:85:DC:07:17:02:2F"}}},"request":{"raw":"POST /favicon.ico?cid=1772908728\u0026type=err\u0026code=6\u0026tt=2739\u0026j=00,1!STR,2!PRECON,2!dgpA,22!dgpS,620!dgcFDD,620!cFDD9,1028!cFDD1,1028!fDg,2330!sD:p,2330!sDi00,2729!sDiOP,2729!sAIF,2729!sDiOP,2729!sAIF,\u0026dmsg=hdr_0,aii_0_4,ai_0_4,ai_12_1,ai_14_1,ai_17_2,ai_18_1,ai_28_10,ai_29_1,canvas_0,context_37,webgl_85,s_7_1,s_8_1,s_10_12,s_11_43,s_12_103,s_13_1,s_14_1,s_15_16,s_17_1,s_19_1,s_21_1,s_25_14,s_27_40,s_30_1,s_34_6,s_35_74,s_36_197,aii_18_0 HTTP/1.1\r\nHost: c.adsco.re\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 403 Forbidden\r\ndate: Sat, 07 Mar 2026 20:52:55 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: same-origin\r\ncache-control: public, max-age=31536000, immutable\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9d8c7c94cdb6b1b8-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nereserv.com/in/dip?event_id=4ad33f4b-b143-4061-b192-01cd333c8d83\u0026subid=1803414655\u0026spot_id=2009161\u0026created_at=2026-03-07\u0026timezone=0\u0026ver=1.172.4","fqdn":"nereserv.com","domain":"nereserv.com","tld":"com"},"ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:56.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 02:01:43 GMT","end":"Sun, 24 May 2026 02:01:42 GMT"},"fingerprint":{"sha1":"5A:69:12:00:47:60:61:04:6A:B6:3A:EA:C9:F3:9A:C9:67:83:61:91","sha256":"DD:DF:84:09:0C:5F:8C:36:B4:6D:81:49:72:9E:9C:CF:95:7F:D2:13:5D:58:B8:1B:58:5D:15:AA:4A:6B:6A:EE"}}},"request":{"raw":"GET /in/dip?event_id=4ad33f4b-b143-4061-b192-01cd333c8d83\u0026subid=1803414655\u0026spot_id=2009161\u0026created_at=2026-03-07\u0026timezone=0\u0026ver=1.172.4 HTTP/1.1\r\nHost: nereserv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Sat, 07 Mar 2026 20:52:56 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:57.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 14:22:28 GMT\r\nexpires: Thu, 04 Mar 2027 14:22:28 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 282629\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-06T08:10:06.5271Z","times_seen":65414,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":8,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.36.2/googima.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.2.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:53.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.36.2/googima.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=86400, immutable\r\nlast-modified: Thu, 12 Sep 2024 17:52:03 GMT\r\netag: \"e326dffdd285561fe42061b115c81d05\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 07 Mar 2026 20:52:53 GMT\r\nage: 53432\r\nx-served-by: cache-lga21958-LGA, cache-hel1410026-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 6, 55\r\nx-timer: S1772916773.391139,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 22142\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":78354,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e326dffdd285561fe42061b115c81d05","sha1":"7b5be6ed0aa57ca398fe44b5e343d23edf21b477","sha256":"fc91de238eebbd70ed2e63cf28a4f267ace01d38eb77cb04719de197ce8a6bd3","sha512":"08fbf336980ce3cb63a6a153648e646ee80dd646ba0829400abf832fbd79a1f47066dfe0773439c87861a8bf282e00a58626755bd366afd7c92d737cbf8498f4","ssdeep":"1536:j8shgCMQoN1vkzhFaJ/nyXqw86G+RnwNbpPWr7aEEI7wfTifTwRiwP0NZxY:IlkaJ/y6F6G+RnMbpU7aEEI7mTi0p","tlshash":"3e73d65732a8a43257d498eeb12442027339850f784bc76cf96cedef1d4e98772b6a70","first_seen":"2024-10-04T10:49:20.825367Z","last_seen":"2026-04-05T19:01:43.366118Z","times_seen":562,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"renamereptiliantrance.com/on.js","fqdn":"renamereptiliantrance.com","domain":"renamereptiliantrance.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:51.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"renamereptiliantrance.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:15:36 GMT","end":"Mon, 06 Apr 2026 14:15:35 GMT"},"fingerprint":{"sha1":"DA:E7:93:82:08:63:8F:9E:D0:5F:7B:A0:CA:CC:39:B7:FF:74:BF:C5","sha256":"48:8E:F1:C2:AB:03:2D:6E:58:02:66:14:49:3D:62:F4:14:31:A7:A8:02:BD:0E:60:CE:27:E2:64:A9:D3:A6:D7"}}},"request":{"raw":"GET /on.js HTTP/1.1\r\nHost: renamereptiliantrance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 20:52:51 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 05 Mar 2026 07:09:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a92c36-11fe5\"\r\nexpires: Sat, 14 Mar 2026 20:52:51 GMT\r\ncache-control: max-age=604800\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73701,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"19df53e8ab7f6cd19822f72d79111aaa","sha1":"7e0cb8accb950ff1ab33ff04ea674584ce6bc105","sha256":"4a585fe6706e6e6029547f12d6eca36435878f0e4d63f633c5a6cffb002995b9","sha512":"93e66fa87ef721f05c65ac4a0b85c5740c315748753f8cecd908e79b131124fadf5b8f5e44e450769588b02f78294c77e35ec6ba97ae9fb1391d86937aa8acc1","ssdeep":"768:6VxKCaWGb49SZq77qaw4U/7HG1XKUQbrcS+aaVJRDXy++8jqpG5KN2jqGkhI0xms:s7GPyE4X1XKH+aEJRDCUqpG5KEjqMi1","tlshash":"b2739899f695b861035390f452bf401da33a7d6ce4ec5128b181e8e92cbcd8d9623f7b","first_seen":"2026-03-05T08:33:14.384329Z","last_seen":"2026-03-10T07:12:46.833872Z","times_seen":93,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":69,"dns":25,"connect":17,"send":0,"wait":35,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"llvpn.com/tag.min.js","fqdn":"llvpn.com","domain":"llvpn.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:52.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"llvpn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 11:40:55 GMT","end":"Wed, 03 Jun 2026 12:39:38 GMT"},"fingerprint":{"sha1":"A5:46:52:67:CD:2F:07:2D:F5:82:5F:F5:08:59:32:86:C6:1F:F6:94","sha256":"BE:A3:9E:CD:42:36:B8:DC:D1:C7:99:4B:0A:7E:66:06:4F:82:04:DC:2E:FF:36:1B:BD:0D:34:58:F0:21:A0:0D"}}},"request":{"raw":"GET /tag.min.js HTTP/1.1\r\nHost: llvpn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 20:52:52 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-trace-id: cfb15fb66d4d08e53598391ff04b2dd9\r\ncache-control: public, max-age=600, s-maxage=1800\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 1124\r\nlast-modified: Sat, 07 Mar 2026 20:34:07 GMT\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=67nasB1wb9CJtsOEPo0rOphxOA%2FoGfpi1uDqwpimTPT95uWh2Zc%2BFS%2B1T4XsGfIl125E%2BmSAFXglCL7EoD%2FNqFyC%2FmsvojAfbg%3D%3D\"}]}\r\ncf-ray: 9d8c7c819cf351e0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114033,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d446b46fac8c9aa47752dcfb8be1d2f4","sha1":"c74258a4be880592f39f89dfdd6a35cd1ad51c3f","sha256":"4bff632778ff969c9bb1c4e0a2f358681456f0830a8201ee1ab133d0677fd5c4","sha512":"a2949432dac9ceafc95568600ad60fea0f759d59d6bda19b31fa48a5651dfde3517ad9f43af1f9dc8ac5740d9eb4a5f5ed5e64bf4b05a89f61498ddd07384a4e","ssdeep":"1536:cHmN4N1pAb5SNrC6WuDVmYdP2rH9kZrY/4ODiUtsABe3a5qLwutBiJgqXoB44ae:5NKoWHWuDx/ZrY/4ODXxcqUbi7E55","tlshash":"32b31b6073d1741252bfb12c086ac92d755a4e90084e8afbd2e9a876d4b531cc3bbff5","first_seen":"2026-03-05T14:26:31.19399Z","last_seen":"2026-03-09T10:02:04.750097Z","times_seen":85,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":88,"dns":21,"connect":8,"send":0,"wait":14,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"renamereptiliantrance.com/check.html","fqdn":"renamereptiliantrance.com","domain":"renamereptiliantrance.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:52.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"renamereptiliantrance.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:15:36 GMT","end":"Mon, 06 Apr 2026 14:15:35 GMT"},"fingerprint":{"sha1":"DA:E7:93:82:08:63:8F:9E:D0:5F:7B:A0:CA:CC:39:B7:FF:74:BF:C5","sha256":"48:8E:F1:C2:AB:03:2D:6E:58:02:66:14:49:3D:62:F4:14:31:A7:A8:02:BD:0E:60:CE:27:E2:64:A9:D3:A6:D7"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: renamereptiliantrance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 20:52:52 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Wed, 04 Mar 2026 09:48:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a7fff7-3bd\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":957,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"2e07a1f3cc040234bf835cb1fa43835f","sha1":"12cff839e3512a4dfcb5a00c135ce46881dbb331","sha256":"e3382cf06dd0d2a466d8a8bfecf242e128111d4bd11c32b0a23774b561404ef5","sha512":"75947e0c5f91a1cfa3b96e13105b103df6766d95442ae63d4c85c2720f2de4223caa299ebf75244dacbf3f8ddb327784b13709ad9c7fa715674850e4a7915437","ssdeep":"","tlshash":"7911974534e5684c5117a6301697a7187c22a40326cbdc4ebb9cd7305f826a3ec9aaef","first_seen":"2026-03-04T10:41:02.792715Z","last_seen":"2026-04-06T08:48:15.023191Z","times_seen":934,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=341049","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:53.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 06:40:03 GMT","end":"Fri, 10 Apr 2026 06:40:02 GMT"},"fingerprint":{"sha1":"C7:51:D1:DF:5F:55:DC:AC:0B:B9:06:76:58:C5:A6:A5:E9:44:79:92","sha256":"D7:5F:06:4C:F7:01:BD:E8:0F:06:86:35:A2:D0:28:46:5D:B2:24:EE:0A:61:8D:C9:61:CA:AA:C4:5A:47:E6:CA"}}},"request":{"raw":"OPTIONS /fp?tag_id=341049 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://vidara.so/\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.20.1\r\nDate: Sat, 07 Mar 2026 20:52:53 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nAccess-Control-Allow-Origin: https://vidara.so\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":4,"connect":39,"send":0,"wait":36,"receive":0,"ssl":85},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/core/bridge3.746.1_en.html?gdpr=1#deid=%22%22\u0026eventfe_experiment_ids=%5B%5D\u0026fid=%22goog_1995408960%22\u0026genotype_experiment_data=%7B%22experimentStateProto%22%3A%22%5B%5B%5B45713128%2Cnull%2Cnull%2C%5B%5D%5D%2C%5Bnull%2C745150931%2Cnull%2C%5Bnull%2C1%5D%5D%2C%5Bnull%2C749060184%2Cnull%2C%5Bnull%2C128%5D%5D%2C%5B841585769%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45761044%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45722344%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45706017%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45740207%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45668885%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45685340%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45734716%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45735891%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45663239%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45715032%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45661356%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B839547366%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45676441%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45675307%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45675308%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5Bnull%2C45645574%2Cnull%2C%5B%5D%5D%2C%5B45688859%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45656766%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45710689%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45710688%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45685601%2Cnull%2Cnull%2C%5B%5D%5D%2C%5Bnull%2C45685602%2Cnull%2C%5Bnull%2C500%5D%5D%2C%5B45756824%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45747172%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B775241416%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B781107959%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B781107958%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B792614055%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B781107957%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45729602%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45753603%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45753604%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45658982%2Cnull%2Cnull%2C%5B%5D%5D%2C%5B45725657%2Cnull%2Cnull%2C%5B%5D%5D%5D%2C%5B%5B16%2C%5B%5B1%2C%5B%5B31089630%5D%2C%5B31089631%2C%5B%5B45668885%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B1000%2C%5B%5B95332046%5D%5D%5D%2C%5Bnull%2C%5B%5B95332047%5D%5D%5D%2C%5B10%2C%5B%5B95338769%2C%5B%5Bnull%2C45645574%2Cnull%2C%5Bnull%2C1%5D%5D%5D%5D%2C%5B95338770%2C%5B%5Bnull%2C45645574%2Cnull%2C%5Bnull%2C2%5D%5D%5D%5D%5D%5D%2C%5B50%2C%5B%5B95345206%5D%2C%5B95345207%2C%5B%5B45661356%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B1%2C%5B%5B95351425%5D%2C%5B95351426%2C%5B%5B45676441%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B20%2C%5B%5B95356068%5D%2C%5B95356069%2C%5B%5B45685601%2Cnull%2Cnull%2C%5B%5D%5D%2C%5Bnull%2C45685602%2Cnull%2C%5B%5D%5D%5D%5D%2C%5B95356070%2C%5B%5B45685601%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5Bnull%2C45685602%2Cnull%2C%5B%5D%5D%5D%5D%2C%5B95356071%2C%5B%5B45685601%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5Bnull%2C45685602%2Cnull%2C%5Bnull%2C100%5D%5D%5D%5D%5D%5D%2C%5B1%2C%5B%5B95373378%2C%5B%5B792614055%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%2C%5B95373379%2C%5B%5B45747172%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B781107959%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B792614055%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B781107957%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5Bnull%2C%5B%5B95375930%5D%2C%5B95375931%2C%5B%5B45734716%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%2C%5B95376520%2C%5B%5B45734716%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45735891%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5Bnull%2C%5B%5B95378095%5D%2C%5B95378096%2C%5B%5B45740207%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B10%2C%5B%5B95378629%5D%2C%5B95378630%2C%5B%5B45729602%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%2C%5B95381582%2C%5B%5B45729602%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45753603%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%2C%5B95381583%2C%5B%5B45729602%2Cnull%2Cnull%2C%5B1%5D%5D%2C%5B45753604%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B10%2C%5B%5B95382403%5D%2C%5B95382404%2C%5B%5B45756824%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%2C%5B10%2C%5B%5B95385117%5D%2C%5B95385118%2C%5B%5B45761044%2Cnull%2Cnull%2C%5B1%5D%5D%5D%5D%5D%5D%5D%5D%5D%2Cnull%2Cnull%2C%5Bnull%2C1000%2C1%2C1000%5D%5D%22%7D\u0026imalib_experiments=%5B95338773%2C95334214%2C95322027%2C95331589%2C95332046%2C95385117%5D\u0026is_eap_loader=false\u0026managed_js_experiment_id=0\u0026page_correlator=1001888054663263\u0026pvsid=310389063547467\u0026top_accessible_page_url=%22https%3A%2F%2Fvidara.so%2Fv%2FEgsKrsytgYHFX%22","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:54.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /js/core/bridge3.746.1_en.html?gdpr=1 HTTP/1.1\r\nHost: imasdk.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-doubleclick-instream-static\"\r\nreport-to: {\"group\":\"ads-doubleclick-instream-static\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-instream-static\"}]}\r\ncontent-length: 275960\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 23:50:11 GMT\r\nexpires: Thu, 04 Mar 2027 23:50:11 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 04 Mar 2026 01:15:38 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nage: 248563\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":930149,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (46287)","md5":"b3b3ca1bc35deb71563ca95ca59fd6da","sha1":"0ebc44287b246c4a83a5223422000ed1381a0b70","sha256":"bb527629250795a73e3552f068270cee9f3958ca04459f2d306a1b3e55e4c83f","sha512":"b20e9b12a0b768775120f86c3aeeab82bae639ce79901356f397288319ac9cafc8784cdf4273d8f31a5047897797961f8821921e53652a8b9b97f672b6ab04da","ssdeep":"6144:hj/x92yqCMkr6VjBhuovDa73VzD9rSNS3Cn5P1oAWpb7ADl/VkqKJNwSE8FtclpU:N/21Dk73vrSNS3Cn5PCXH+Fgpn/Cn2","tlshash":"f2152bdcb76274168263f4f5503f014b723ba866e40889bcf689d9e16e7884a4277f7c","first_seen":"2026-03-04T08:07:06.726286Z","last_seen":"2026-03-12T22:21:59.740599Z","times_seen":242,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/api/heartbeat","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:53:08.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidara.so","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 11:08:37 GMT","end":"Tue, 05 May 2026 12:07:22 GMT"},"fingerprint":{"sha1":"A6:7B:1F:15:8E:93:40:C2:D5:ED:5D:0E:F1:41:D9:F4:BC:D1:C7:F0","sha256":"0F:4A:DE:A1:CD:61:73:8E:21:8A:AD:69:22:87:25:83:3A:5C:44:F1:33:DB:B1:48:E3:94:87:BA:16:59:80:31"}}},"request":{"raw":"POST /api/heartbeat HTTP/1.1\r\nHost: vidara.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vidara.so/e/EgsKrsytgYHFX\r\nContent-Type: application/json\r\nContent-Length: 57\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: UGVyc2lzdFN0b3JhZ2U=%7B%7D; _popprepop=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":57,"data":"{\"file_id\":318846,\"session_id\":\"1772916773264-tthnziun1\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Mar 2026 20:53:08 GMT\r\ncontent-type: application/json\r\ncontent-length: 17\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hIGsMdr2JOIkIvzbD0JITT7QfpLHrF0Dm4vvsTiE83YXkc0uqloxzy3Vp7xmN1j6WZlJdSW6A9D3ypWPglnfdj4QfpPUl%2FkDmg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d8c7ce6bcee481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6dec798efb56f56f33660938f6249ff6","sha1":"e889219883cef38754dc1e5df7ca5277b3b314c8","sha256":"b493cdb3b30ea63f6a924f814dfccfcfe305dac02106f9994ce2bcb2e8ed28c4","sha512":"d9e9d568dce3ba5605f1a1fac36441508e7b8d5f99806c6a049f4148c4d9b392bc99f27cb75dfbbd7d84c7c0923f26652c1c1404a7f3279e1d0b96a1cb1cb924","ssdeep":"","tlshash":"b5600003000000a2c000220002b82e202080002280000008800ca0088a20000208300e","first_seen":"2023-04-06T22:01:57Z","last_seen":"2026-04-06T04:47:41.352449Z","times_seen":3266,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/e/EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://vidara.so/v/EgsKrsytgYHFX","date":"2026-03-07T20:52:51.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidara.so","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 11:08:37 GMT","end":"Tue, 05 May 2026 12:07:22 GMT"},"fingerprint":{"sha1":"A6:7B:1F:15:8E:93:40:C2:D5:ED:5D:0E:F1:41:D9:F4:BC:D1:C7:F0","sha256":"0F:4A:DE:A1:CD:61:73:8E:21:8A:AD:69:22:87:25:83:3A:5C:44:F1:33:DB:B1:48:E3:94:87:BA:16:59:80:31"}}},"request":{"raw":"GET /e/EgsKrsytgYHFX HTTP/1.1\r\nHost: vidara.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/v/EgsKrsytgYHFX\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Mar 2026 20:52:51 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OG44%2FZYP9qFBR1rEh66kR4jV9eObfYk5RBZkwwyVT%2FPzcPUbX7tHMzKKEelUMBcEhcjIxDAH3t5%2BAeO5qKp0V8EXo4zFVcu8cA%3D%3D\"}]}\r\ncf-ray: 9d8c7c7c7cfe481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"crypto-js:4.2.0","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"JW Player","description":"JW Player is a online video player with video engagement analytics, custom video player skins, and live video streaming capability.","website":"https://www.jwplayer.com","common_platform_enumeration":"","icon":"JW Player.svg","categories":["Video players"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}],"data":{"size":54166,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (28042), with CRLF, LF line terminators","md5":"8cebdedacd326058d0288e369d3bfc90","sha1":"df4ed2ff3a3d6b10a59bc2d9968f390413f1c519","sha256":"0679866aa42518fd91ec7d89deddeac2d11753b40add8db5a18f7eca333b42ad","sha512":"3ce37c7c7d72b871eb7ea580f1f66ee45563c09feee79ca0eb226390cfdd52fae9e4328be173a168b394de915cbd34d552f93222bfcf4d757001629b7984d4b2","ssdeep":"1536:4RyqxNuIwnCesR2lgcGrlbfmSXDhKyY+wLitQhJx3981:4Ryq3uxnMR6/GroSNJY+wLEQhJd981","tlshash":"d9334ab636597929033941a520ff2548b2ac48c1348f8578f65ce8663be7e3191f7fb8","first_seen":"2026-03-07T20:53:28.530072Z","last_seen":"2026-03-07T20:53:28.530072Z","times_seen":1,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fedoq.com/500/10572062?excludes=\u0026oaid=0802f238b7974b38fb278d2c6d239978\u0026tgp=\u0026of=true\u0026sw_version=v1.796.0-s\u0026dmn=dd133.com\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=837\u0026wiw=837\u0026wih=471\u0026wfc=1\u0026pl=https%3A%2F%2Fvidara.so%2Fe%2FEgsKrsytgYHFX\u0026drf=https%3A%2F%2Fvidara.so%2Fv%2FEgsKrsytgYHFX\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=1\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1","fqdn":"fedoq.com","domain":"fedoq.com","tld":"com"},"ip":{"addr":"139.45.197.116","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:54.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fedoq.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Dec 2025 05:17:35 GMT","end":"Fri, 27 Mar 2026 05:17:34 GMT"},"fingerprint":{"sha1":"E7:2E:F6:2B:68:23:78:D9:1C:D1:5A:3D:D6:94:68:EF:FA:F7:FB:7C","sha256":"36:9D:A2:7D:77:45:6A:F3:90:EB:CD:3D:D2:2B:B7:6D:5B:03:B8:E3:DC:58:30:79:A9:C6:53:08:B7:E4:93:9C"}}},"request":{"raw":"OPTIONS /500/10572062?excludes=\u0026oaid=0802f238b7974b38fb278d2c6d239978\u0026tgp=\u0026of=true\u0026sw_version=v1.796.0-s\u0026dmn=dd133.com\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=837\u0026wiw=837\u0026wih=471\u0026wfc=1\u0026pl=https%3A%2F%2Fvidara.so%2Fe%2FEgsKrsytgYHFX\u0026drf=https%3A%2F%2Fvidara.so%2Fv%2FEgsKrsytgYHFX\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=1\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1 HTTP/1.1\r\nHost: fedoq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://vidara.so/\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 07 Mar 2026 20:52:54 GMT\r\ncontent-length: 0\r\nallow: GET, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://vidara.so\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 600\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T09:11:47.12615Z","times_seen":13415969,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":61,"dns":0,"connect":26,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=b38dac99-d32f-4f9a-8516-b53215c73d56","fqdn":"fleraprt.com","domain":"fleraprt.com","tld":"com"},"ip":{"addr":"139.45.195.252","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:55.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fleraprt.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 11 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"EB:E7:45:0B:C5:08:D8:7F:87:47:B3:6F:7B:0C:95:B3:ED:B5:92:AC","sha256":"37:B2:1A:19:FC:C4:69:69:2F:A0:6E:DA:D4:97:23:4A:C3:A5:FC:C4:C2:EE:FE:8C:AA:FD:3A:C0:4B:AD:40:B2"}}},"request":{"raw":"POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=b38dac99-d32f-4f9a-8516-b53215c73d56 HTTP/1.1\r\nHost: fleraprt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1438\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1438,"data":"L\u001bRR\u001f\u001c\u0026\u001c\u0014\u0005g\u001f\u001cK\u0012\u0003\u0001\u0005P\u000eL_\u0003\u000e\u0011\u001aX\u0016\u0010JO@T\u0005\u000fT\u0011\u0003\u001e\u000eP\u0018L\u001fA\u001b\t\u00147\u0001\n\tWN\u001a\u001b\tICPVGP@\u0014\u0002\u0015\u0003\u0003\u001aX\u0013\u000eJOS\nQI\u0015C\u001d\u0006IH\u0005^_\u0003\u0015\u0011A\u0013\u0013[RMQ\u000fE[N\b\u0002LQF\u0003_A\u0015NK\u0014@TUJ\u0002\u001b\u001aSI\u0015C\u0003\u0016IH\u0005BO@_P\u0014@UUJ\u0006\u0003PKC\bQXZGPG\u0006O\r\b\u0003\u0004NH[\u001b\u0002@\u0002XK\u0001QFL\u0018\u0013CLW\u0006\u000b\u000b\u0006VF\r\u001b*\u0006]\u001d\u001cZ\u0015\u000f\nIH\u0004BO]JFWX^[%\u001a\u0018Q\u0005\u0015XN_@[R\u001c9\u0004Y]\\A\tD7\u003cUS\bGI\u0002A=\u0007\u0005D\u0000UMO\u000f\u0007\rZ\u0016\u000fRDQ\fGI\u0010A-\u000b\b\u0019[A_\u0007\b\u0003\u0006KTHH3\u000bJ\f\u001fV\u0019E_XF\u001a^O\u001b\u001b]FX^HDW\u0012\\KC\u001b\b\u0004\u001a\u000e\u0000Z\u000f\u0001\u001aIWPW\u0012\u0010\r\u0002\u0007JS\u0010J1#U\u0002\u001c@\u000b\u001fYX_\u001b\n\u0000\u001fE\u0003\u000b]\u001e\u001cK[\u0003\u001d;;\u000f\u0007\u0003C\\AX\u001b\bT\u0018\u0011\u0004\u0015\u001f\u0010\\\u0016\u000f\u001cQ\u001bG\u003e$\fP]B\u001f\u0016\u0017\t\u0019OH\r\u001f\u0014\u0017\u0003\u000b\u001c\u0017FT\u0004Diz\r\u0013\n\r\r\u0007\fY\u0005TI\u0005\fC\u001d\u001bQ\u0019\bE\u0003ZE*-BJY@M\u0000\u001d\u001b[\u0004\u001b\u0007\u001e\u0018L\tE_\u0011\fX\f\r\u001c\u0005\u0011\u0002FVO\b\u000e\u000f\u0019\u0013\u001a\u001d\u0002\u0018O\u001cs\u001d\u00172\u001a\u0006\u001bL\u000e q'2LGPD\u0002O\r\u001b[B\u000e\u0014\nRZMN\u0000\u001dX\u0013\u000b@\u0018\u001d\u001b\u000bBr^@}\b\u0017\u0000\u001c\u0012;p/!\u001bMH\u0000\fP\u000e^A\u0015MI\u0014@F,\u003c6@\u0014K\u0017[CP_GPZ\u000f\u001d\u0015\u0003\u0011a\u0013\nJZWN\u001a\u0019\r\u001b[ZBI\u0017B\u000f\u0001\u0015\u0003\u0000\u0001VF\u0011\u000bWX\fQU\u001b\u0005\u0007LQ_\u0005BOEMG\u0014@IHDW\u0001P6\u0016[\u000bHT[^\u0016\u0000\u001a\u0015\u0003\u0002\u001aX\u0013\u001dJO\u0004Y\u0005\n\\MH\u0001\u0018\u0011D\u001bO\r\u001b_\u0014\u0011\u0001H\rZ\u000e6O\rCFL\u0003\u001bP\n\bY\u001b\tP\u001b\b\n\rY@[\u0001\u0026V\u0003\u00001\u0002\u001cP\u000b\u0015\u0015\u0003\u001e\u0007VF\u000e\u0001\u001b=S\f\u0000J\u003e\u0006\u000b\u0005\u0015@\u0006O\r\n\u0002\u0005VF\u001a\u0007\u0019\rJ6\u001d\\\u0011\u001e\u0006IH\u0006ZA\u0015OVX\u001e\u000b\u000bJO@\u001aE[^\u0000\u0007\u000b\u001b\u0013P\u001dO\r\t\u001f\u0014\u0014\b[RW\u0007VD,jCFL\u0005\u001eGLW\u0015\\]\u001b/7U\r\u001b@\u0014K\u001aV\r\u0005\u001c4\u0015U\u0003\u0018C\u001b\t\u0014\t\u0016\u001e\nWN\u001a\u0019\u001fUCPLI^\u0016\r\u0001C\u001b\tM\u0007H[\u0018\u0019\u0003L\u000f\u0016K\f5\n\u000e\u0006Q\r\u0019XK\u0011\f\u0001F\u0010\u001b*\u0003V\r\u000bV\b\u000eLQ\u0014U\u0002\u001eR\u0015\u0011_\t;\r\u001a\u001c\u0006]\u0007\r\u001b[\f\u000f\u0007\u0001QBO^JlU\u0012\u0016\u0016\u0005\u001c\u0017U6A\u000f\u003e\u0005\u001c4\u001cQ\u0019\bE\u001b\tP\u001b\b\n\rY@Q\u001a\u0026Z\t\u0018\u0001\u0006\u001bA\u0003O\r_RZ\t\u0001UJ\u001c\u0011g\f\u001d^\u0004HT\r\u0013X\u001d\b\u001b\u001bZE%\u0003\u001c\u000b\u001e\r\u001aS\rK\u0014\u000fBI\u001bG1\u001aR[l]\u0013\u0010[R\u0013\u0003T\u001a\u001c\u0015C\u0003\u001d4\u0005Q\f2\\PGiLTO7\u001a\u0010g\u0007\u001cN\u0004\u0018LQ\u0014U\u0002\u001eR\u0015\u0011_\t;\u001d\r\u0006\tL\u0006\tf\u0012\u000b\b\n\u0000]LWQX_E\u001fH[\u0001\u0006=[\u0001\u000bV\f\u0003\u001b\u0006-[\u001e\bEX\u0011\f\u001c\u0005\u0015\u001b\u0010\u001f\u0014K\u0017\\\u0012HTI@\u0000WY\u0005\u000f\u0007\u0005IU[DW\u0001T\u0000\u001cW\u00155\u0007\u000fP\u000eL\\S[\n\u0007L]\u001fELR^]T\r\u0003X\nF\u0010\u0001_Z\u001a[P\u0002M\u0005\u0018\nD[[X\u001f\u001bMH\u000f\r\u0014]\u0002\u0004VMVi\u0013\u0000[RW@\u0014K\rK\u0000\f\b\u0002\u0011k\u001d\u0002BKPS%\r\u001dJO@\tYL\u000eSZXYP\u0018L\fSOVD\u000e\r\n\r\u0007=Q\r[\u0003CHBI\u0011U\u0003\u001dVPTX%\r\u001dJO@\u001aE[Z\u0014\u0019\u001a\u0004\u001fk\u0007\th\b\u0011\fX\u0014\f\u001b\u001d\tQ\u0007[\u0015C\t\u001b\u0018\u0006[\u00032^]l\u0004X^[JY@[\u0005\u0010Z\n5\u0007\u000fP\u000eL\u0003FIU\u0006CI\f\u000b\u001d\rHQL_\u0004\u0012LGPW\u0001\u001eC\u001b\t\u0014XH[\u0005\u0010\u0016P\u0006\u001d\u001b[H\r\n\u0011\\\u000b@]J\u001eB\u001b\u0003[DW\u0010g\u001c\u0010]CPL\tA\f\n\fT\u0000\n\u001b\u001eWK\u000eXV^P\u0018\u0014Y__]_V[^\u0005\b\u0006UMW\u001d]C@\u0014K\u0016X\u003e\u0003\nIH\u0016^U\u0007\u000bU\u0004I\\\u001b_LU\f\u000bJ\u0001\u0007\b\\\\JP\\\u000e\u0001]\u0001\u0005C]NPWN\u001a\b\u001d]\b\u001e\u0007\u0004\u001cU\u00022^]@\u0014@?$\u0015"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.25.5\r\nDate: Sat, 07 Mar 2026 20:52:55 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 12\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://vidara.so\r\nAccess-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE\r\nAccess-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"adb4650bfc9d2a73d4dd69583b0ceb14","sha1":"1ce399d6e936232aaf2192cd7903a279c5015f22","sha256":"21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed","sha512":"3fbce22572bbed1aada0f7c6706f16a97e7c0ea132dfee1a7eb80f5e68da1cc63c891a5bc3ea8e87f0c97be3002212a0efbb2af9553acb45e0d447a685cd805b","ssdeep":"","tlshash":"436000000c3000000cc00c0000c00030ff300f00000f00c0000c00f003030c0c00c000","first_seen":"2023-04-05T07:30:31Z","last_seen":"2026-04-06T08:14:17.079202Z","times_seen":56046,"resource_available":false,"data":null}},"time_used":487,"timings":{"blocked":230,"dns":27,"connect":35,"send":0,"wait":27,"receive":0,"ssl":163},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/api/stream?filecode=EgsKrsytgYHFX","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:51.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidara.so","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 11:08:37 GMT","end":"Tue, 05 May 2026 12:07:22 GMT"},"fingerprint":{"sha1":"A6:7B:1F:15:8E:93:40:C2:D5:ED:5D:0E:F1:41:D9:F4:BC:D1:C7:F0","sha256":"0F:4A:DE:A1:CD:61:73:8E:21:8A:AD:69:22:87:25:83:3A:5C:44:F1:33:DB:B1:48:E3:94:87:BA:16:59:80:31"}}},"request":{"raw":"GET /api/stream?filecode=EgsKrsytgYHFX HTTP/1.1\r\nHost: vidara.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://vidara.so/e/EgsKrsytgYHFX\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Mar 2026 20:52:51 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ajTqZIjnSUWz3VuiuZInTIbjtDopxK%2BxcNvjaCV64W6YWsZbxKuDXpBOq3tLJ8obnZtBdSrfc0no7uHBUTvLXc77MFrfSWuZYg%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d8c7c7ffdbb481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":407,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d49cc89c040840f33221fdf5e4bf77b0","sha1":"ae6da254197b0a4137d5178cea61a1ee3f0a1e94","sha256":"6f97033009cc1ba4bacf636c960391728d80416a2b026b0d70d58819054b4c1d","sha512":"fbded9b3935a9c5b9c11b656f74d379454737644dda948f9b76b713db7aac3e0538fefffe2132f0e79527411877bcf58b76534d82143d83e2ffe0797dc554d4c","ssdeep":"","tlshash":"b6e0f1729a400c23ae5698aea4c032fcc38f0b8b0c805b7e60c06f4941213fee401940","first_seen":"2026-03-07T20:53:28.53157Z","last_seen":"2026-03-07T20:53:28.53157Z","times_seen":1,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vidara.so/assets/images/favicon/apple-touch-icon.png","fqdn":"vidara.so","domain":"vidara.so","tld":"so"},"ip":{"addr":"104.21.24.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vidara.so/v/EgsKrsytgYHFX","date":"2026-03-07T20:52:51.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vidara.so","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 11:08:37 GMT","end":"Tue, 05 May 2026 12:07:22 GMT"},"fingerprint":{"sha1":"A6:7B:1F:15:8E:93:40:C2:D5:ED:5D:0E:F1:41:D9:F4:BC:D1:C7:F0","sha256":"0F:4A:DE:A1:CD:61:73:8E:21:8A:AD:69:22:87:25:83:3A:5C:44:F1:33:DB:B1:48:E3:94:87:BA:16:59:80:31"}}},"request":{"raw":"GET /assets/images/favicon/apple-touch-icon.png HTTP/1.1\r\nHost: vidara.so\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/v/EgsKrsytgYHFX\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Mar 2026 20:52:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 29 Dec 2025 14:51:40 GMT\r\nvary: Accept-Encoding\r\netag: \"6952957c-2d6d\"\r\nexpires: Sun, 05 Apr 2026 12:55:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 115068\r\npriority: u=6,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cLJTf5zjdTGwTBlx6dGszyKoVoJt5bRWQjKhmxfrRAXqMoW%2BIOIruu0a2W1plLXwWmAeMGOXSkTdn6TwwYN8S%2BAeN%2FQuQD1Jmg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8c7c7d9d40481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11629,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"383bd64096d4f593408382a7249ad18e","sha1":"29e72edf4815854fbae556a565117727fa03231f","sha256":"a88d1e067ab48daf7e0ad9966d3eaaa51930c87a65c27b5fd80af2fc9297b1f0","sha512":"5944ce98c4ba76962928a79b3e3b1858c740345690a03f8cf02974248bf8b67ee47b4ab2869697d8a0de9ee0f18ac37a8f169d73c055db9de91f4b087ae2ff02","ssdeep":"192:gmvsCbxm4J/7sY6YIbdOSw7E3vpUc9RAL+xrgB2vtE1UeHLBtTo/4xzDXV:gm5bxmkofVdOICyRE+xrgBGaieXw0DF","tlshash":"2332d0dfbedb27642347a52a9aad894dccbc21b8473504317632549e0798b3c80a1fad","first_seen":"2026-01-21T08:59:35.611002Z","last_seen":"2026-04-05T11:28:19.177401Z","times_seen":88,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.p.jwpcdn.com/player/v/8.36.2/jwplayer.js","fqdn":"ssl.p.jwpcdn.com","domain":"jwpcdn.com","tld":"com"},"ip":{"addr":"151.101.2.114","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:51.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwplayer.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 May 2025 18:19:12 GMT","end":"Sat, 06 Jun 2026 18:19:11 GMT"},"fingerprint":{"sha1":"F1:90:E6:09:04:E3:35:FC:0D:3C:D3:A8:A5:9C:2D:F8:BA:F6:B7:98","sha256":"F1:76:6A:8D:CB:F1:B8:39:85:28:98:4C:E9:01:C8:1C:86:9C:37:93:39:C9:93:42:89:33:29:8A:C1:56:7D:1C"}}},"request":{"raw":"GET /player/v/8.36.2/jwplayer.js HTTP/1.1\r\nHost: ssl.p.jwpcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, immutable\r\nlast-modified: Thu, 12 Sep 2024 17:51:59 GMT\r\netag: \"5454f51ab2c9ba10955938c3458ef45d\"\r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nfastly-restarts: 1\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 07 Mar 2026 20:52:51 GMT\r\nage: 2703660\r\nx-served-by: cache-lga21958-LGA, cache-hel1410026-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 3, 2580\r\nx-timer: S1772916772.633416,VS0,VE0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-length: 50436\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":148627,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65144)","md5":"5454f51ab2c9ba10955938c3458ef45d","sha1":"207795d527b8205d07fecb668a2d3a150db56f9f","sha256":"ee28fb495ac5b28ae38033e36a640d41dfeb2528c5124ff0203b09b06c05a36d","sha512":"4b4e4358522d6cec1e32343e5c219658535fdf01ab5805d6d9f7a0d98e94eaba4a69c0c5862ca7bf0985367b48287e071617b81f62c43c35b97f4a3ee1cb4124","ssdeep":"1536:VCLyl/ByE1iqx9JaGB2lAqU6ePRtwoIWz0Bk+5VH3wen+LhUi3LhflsqKkcRPUeV:VVbpk+Ui3LhddhHwSy","tlshash":"a3e33aa631c2f4a617e264c7e47a4101f1790988744de864faacecda3916947b1b3ffc","first_seen":"2024-09-28T01:51:51Z","last_seen":"2026-04-05T19:01:43.338605Z","times_seen":558,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":112,"dns":52,"connect":26,"send":0,"wait":27,"receive":29,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mbdippex.com/keywords","fqdn":"mbdippex.com","domain":"mbdippex.com","tld":"com"},"ip":{"addr":"116.202.204.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:53.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 02:01:43 GMT","end":"Sun, 24 May 2026 02:01:42 GMT"},"fingerprint":{"sha1":"5A:69:12:00:47:60:61:04:6A:B6:3A:EA:C9:F3:9A:C9:67:83:61:91","sha256":"DD:DF:84:09:0C:5F:8C:36:B4:6D:81:49:72:9E:9C:CF:95:7F:D2:13:5D:58:B8:1B:58:5D:15:AA:4A:6B:6A:EE"}}},"request":{"raw":"POST /keywords HTTP/1.1\r\nHost: mbdippex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 126\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":126,"data":"{\"ad_tags\":\"Lolita_serveuse_dans_un_restaurant_du_10eme_arrondissement_de_Paris\",\"page\":\"https%3A//vidara.so/e/EgsKrsytgYHFX\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Sat, 07 Mar 2026 20:52:53 GMT\r\ncontent-type: application/json\r\ncontent-length: 15\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"32323194b8b07fd0aa9b6f7fc79a7b30","sha1":"ea248c45722bff267b55a453dc794bc42171cef6","sha256":"080040b4937f3f423f32cd7f19b2a79ba1e1e213f1d9f4f4db4f609d4ad778d8","sha512":"e6b7cefe758be1e47a28ed8fc319cd61814e942838f0f65a26e629f0af39fae2547bece75c020c0cad5294b741a20911757b43b493dea2d3b109e4cf3ae3e9a3","ssdeep":"","tlshash":"9d600008200a08020880a000a20082002000a002002008282880008083002000888800","first_seen":"2023-09-22T06:12:14Z","last_seen":"2026-04-06T00:58:10.159895Z","times_seen":2260,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=341049","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://vidara.so/e/EgsKrsytgYHFX","date":"2026-03-07T20:52:53.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 06:40:03 GMT","end":"Fri, 10 Apr 2026 06:40:02 GMT"},"fingerprint":{"sha1":"C7:51:D1:DF:5F:55:DC:AC:0B:B9:06:76:58:C5:A6:A5:E9:44:79:92","sha256":"D7:5F:06:4C:F7:01:BD:E8:0F:06:86:35:A2:D0:28:46:5D:B2:24:EE:0A:61:8D:C9:61:CA:AA:C4:5A:47:E6:CA"}}},"request":{"raw":"POST /fp?tag_id=341049 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 1972\r\nOrigin: https://vidara.so\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vidara.so/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1972,"data":"{\"timezoneOlson\":\"UTC\",\"incognito\":true,\"fonts\":{\"value\":[\"Bitstream Vera Sans Mono\",\"Century\"],\"duration\":1081},\"fontPreferences\":{\"value\":{\"default\":173.11666870117188,\"apple\":173.11666870117188,\"serif\":173.11666870117188,\"sans\":162.01666259765625,\"mono\":122.68333435058594,\"min\":10.800003051757812,\"system\":162.01666259765625},\"duration\":930},\"languages\":{\"value\":[[\"en-US\"],[\"en-US\",\"en\"]],\"duration\":1},\"colorDepth\":{\"value\":24,\"duration\":0},\"deviceMemory\":{\"duration\":0},\"screenResolution\":{\"value\":[1280,1024],\"duration\":0},\"hardwareConcurrency\":{\"value\":48,\"duration\":0},\"timezone\":{\"value\":\"UTC\",\"duration\":1},\"sessionStorage\":{\"value\":true,\"duration\":0},\"localStorage\":{\"value\":true,\"duration\":0},\"indexedDB\":{\"value\":true,\"duration\":0},\"platform\":{\"value\":\"Win32\",\"duration\":0},\"plugins\":{\"value\":[{\"name\":\"PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chrome PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chromium PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Microsoft Edge PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"WebKit built-in PDF\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]}],\"duration\":0},\"vendor\":{\"value\":\"\",\"duration\":0},\"cookiesEnabled\":{\"value\":true,\"duration\":0},\"colorGamut\":{\"value\":\"srgb\",\"duration\":0},\"rendererUnmasked\":{\"value\":\"\",\"duration\":33},\"brand\":\"\",\"device\":\"\",\"os_type\":\"desktop\",\"os_family\":\"Windows\",\"front_browser_family\":\"Firefox\",\"front_browser_name\":\"Firefox 134\",\"pixel_ratio\":1}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Sat, 07 Mar 2026 20:52:53 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nContent-Length: 58\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://vidara.so\r\nSet-Cookie: id=16876775418878372851; Expires=Sun, 07 Mar 2027 20:52:53 GMT; Secure; SameSite=None\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c4efc1d6d16235d9433cd2565d887460","sha1":"22d069a5f536640e46122475c79db933e82d7f2e","sha256":"f0a6b8c736b7d8c5d3304a9ccd10d2114a0f25f2ba946cce62204df3384a131f","sha512":"af1cfe529f3173efdc7f4aff67355529095e775d8edb38d8a7c9565e09807aff470a465ffdf89ef6555f06cc88efa675823becc942896c63fa64a3140858f539","ssdeep":"","tlshash":"5ba00294c5c00e3c80200c3a73cf901628e4d304120217880ca66b5108822abe333c91","first_seen":"2025-07-26T17:44:43.174102Z","last_seen":"2026-04-06T08:09:40.667594Z","times_seen":6024,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":1,"connect":36,"send":0,"wait":37,"receive":0,"ssl":82},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}